last executing test programs: 2.63065268s ago: executing program 1 (id=2011): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept$inet6(r0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4004090, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="f4", 0x1, 0x583f8544406a6d3e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)='^', 0x34000}], 0x1c) 2.579229008s ago: executing program 1 (id=2012): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00', 0x2) 2.252051059s ago: executing program 1 (id=2016): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x40010024, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x10000001) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10000) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 1.728355898s ago: executing program 2 (id=2022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xce}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010000000000000000000700", @ANYRES32], 0x3c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0xfffffffc, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[], 0x1000f) 1.583360252s ago: executing program 4 (id=2024): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900050073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000081) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x7c}}, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.491174163s ago: executing program 4 (id=2026): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) write(r0, &(0x7f0000000000)='$\x00', 0x2) 1.370178534s ago: executing program 4 (id=2029): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x44084) r3 = socket$netlink(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bind$netlink(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.258623067s ago: executing program 3 (id=2030): sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00000109006e"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="01002cbd70000400000005000000080018000a01010106001c"], 0x2c}, 0x1, 0x0, 0x0, 0xc100}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.206949224s ago: executing program 4 (id=2031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x21, @empty}}, 0xfffffc7a, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) 1.206496062s ago: executing program 0 (id=2032): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 1.192991846s ago: executing program 1 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800800001800128008000100767469000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) 1.006651738s ago: executing program 0 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000500000000dcdf251b00000008000300", @ANYRES32=r5, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) 962.215048ms ago: executing program 4 (id=2035): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x0) r5 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 954.757559ms ago: executing program 3 (id=2036): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900050073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000081) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x7c}}, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket$inet6_tcp(0xa, 0x1, 0x0) 819.487667ms ago: executing program 1 (id=2037): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003f4ffffff3d2e69000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xa1a2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000001680)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x9}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xffffff83, @loopback, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00'}) 810.50878ms ago: executing program 3 (id=2038): socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 807.59338ms ago: executing program 0 (id=2039): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffe, @empty}, 0x1c) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x8) shutdown(r4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x800) 718.579038ms ago: executing program 2 (id=2040): pipe(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0xffff, 0x5}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x200088d5) 556.454478ms ago: executing program 2 (id=2041): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x44084) r3 = socket$netlink(0x10, 0x3, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bind$netlink(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 541.88049ms ago: executing program 0 (id=2042): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 422.666329ms ago: executing program 3 (id=2043): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) ioctl$TUNSETLINK(r0, 0x400454cd, 0x33a) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'ip6erspan0\x00', @broadcast}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a05000000000000000000020073797a3000000000080002400000000130000000140a03000000000000000000020000081b000800b6a00a367223050000000000004649aa8003556e0fd24f00140000001100010000000000000000000000000a000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) 405.121556ms ago: executing program 1 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 321.643011ms ago: executing program 2 (id=2045): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80088c4}, 0x40004010) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f000000f780)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x44040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x54) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 250.437307ms ago: executing program 0 (id=2046): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)}, 0xcd1e}], 0x1, 0x80000001, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001b40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000003f00)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={&(0x7f0000000280)=@caif=@util={0x25, "edc1353cb8a4b0880b570185d410b3d1"}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[{0x78, 0x0, 0x4, "39d8ccbeb0d17a346ece1df2e33c60e1cfc53903fb8be750164bb71eb14ce0c8748634a6e748f6ae684487ac0762001fa6f0f3aa04f9a2207b999168994f0c2624cad08e3b55848560d34950470039cfb8ed29e54fe1b0f825204a744c07365e32842771aaaf9f"}, {0x10, 0x10b, 0x1}], 0x88}, 0x4000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'lo\x00', &(0x7f0000000480)=@ethtool_eee={0x44, 0x7, 0x2f97885b, 0xfff, 0x0, 0x8, 0x2, 0x3ff, [0x81, 0x9]}}) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) 235.353495ms ago: executing program 2 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x4, 0xff}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 191.999962ms ago: executing program 3 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900050073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000081) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x7c}}, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket$inet6_tcp(0xa, 0x1, 0x0) 128.190808ms ago: executing program 2 (id=2049): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 74.5329ms ago: executing program 0 (id=2050): r0 = socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r2], 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10.511674ms ago: executing program 3 (id=2051): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 0s ago: executing program 4 (id=2052): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 75.145475][ T5820] cgroup: Unknown subsys name 'net' [ 75.269133][ T5820] cgroup: Unknown subsys name 'cpuset' [ 75.277650][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.868244][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.137710][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.147109][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.155877][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.177038][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.186718][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.194205][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.299069][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.308804][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.317829][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.331394][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.341135][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.353170][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.365051][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.374358][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.386535][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.395888][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.399627][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.412084][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.420636][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.428827][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.436445][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.445095][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.454329][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.463704][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.515301][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.524160][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.533426][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.575278][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.583670][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.592132][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.688286][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.879271][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.889796][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.901096][ T5830] bridge_slave_0: entered allmulticast mode [ 79.908764][ T5830] bridge_slave_0: entered promiscuous mode [ 79.921694][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.929134][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.937421][ T5830] bridge_slave_1: entered allmulticast mode [ 79.944509][ T5830] bridge_slave_1: entered promiscuous mode [ 80.003959][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.054059][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.130528][ T5830] team0: Port device team_slave_0 added [ 80.142867][ T5830] team0: Port device team_slave_1 added [ 80.159293][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 80.192777][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 80.223164][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.231190][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.260682][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.276380][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.283465][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.311719][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.482917][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.497253][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 80.517850][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.525176][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.534162][ T5836] bridge_slave_0: entered allmulticast mode [ 80.542544][ T5836] bridge_slave_0: entered promiscuous mode [ 80.559718][ T5830] hsr_slave_0: entered promiscuous mode [ 80.567101][ T5830] hsr_slave_1: entered promiscuous mode [ 80.598960][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.607650][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.615357][ T5836] bridge_slave_1: entered allmulticast mode [ 80.624681][ T5836] bridge_slave_1: entered promiscuous mode [ 80.724105][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.732619][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.740484][ T5835] bridge_slave_0: entered allmulticast mode [ 80.747604][ T5835] bridge_slave_0: entered promiscuous mode [ 80.759822][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.768595][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.776018][ T5835] bridge_slave_1: entered allmulticast mode [ 80.782835][ T5835] bridge_slave_1: entered promiscuous mode [ 80.801514][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.848118][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.883832][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.922525][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.960323][ T5836] team0: Port device team_slave_0 added [ 80.969376][ T5836] team0: Port device team_slave_1 added [ 80.988649][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.996760][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.004027][ T5837] bridge_slave_0: entered allmulticast mode [ 81.011043][ T5837] bridge_slave_0: entered promiscuous mode [ 81.019205][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.026600][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.033863][ T5837] bridge_slave_1: entered allmulticast mode [ 81.041503][ T5837] bridge_slave_1: entered promiscuous mode [ 81.057860][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.065212][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.072431][ T5848] bridge_slave_0: entered allmulticast mode [ 81.079625][ T5848] bridge_slave_0: entered promiscuous mode [ 81.110632][ T5835] team0: Port device team_slave_0 added [ 81.138816][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.146281][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.153519][ T5848] bridge_slave_1: entered allmulticast mode [ 81.160720][ T5848] bridge_slave_1: entered promiscuous mode [ 81.168332][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.175593][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.202140][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.214417][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.221570][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.247747][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.261260][ T5835] team0: Port device team_slave_1 added [ 81.286218][ T5834] Bluetooth: hci0: command tx timeout [ 81.286310][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.303882][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.339993][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.347095][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.374141][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.418718][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.429934][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.437061][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.463992][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.497450][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.515213][ T53] Bluetooth: hci1: command tx timeout [ 81.515252][ T5839] Bluetooth: hci2: command tx timeout [ 81.521794][ T5834] Bluetooth: hci3: command tx timeout [ 81.552148][ T5837] team0: Port device team_slave_0 added [ 81.561483][ T5837] team0: Port device team_slave_1 added [ 81.587891][ T5836] hsr_slave_0: entered promiscuous mode [ 81.594216][ T5836] hsr_slave_1: entered promiscuous mode [ 81.600639][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.608742][ T5836] Cannot create hsr debugfs directory [ 81.629876][ T5848] team0: Port device team_slave_0 added [ 81.666100][ T5848] team0: Port device team_slave_1 added [ 81.675248][ T5834] Bluetooth: hci4: command tx timeout [ 81.687532][ T5835] hsr_slave_0: entered promiscuous mode [ 81.693975][ T5835] hsr_slave_1: entered promiscuous mode [ 81.700354][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.708044][ T5835] Cannot create hsr debugfs directory [ 81.715109][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.722086][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.749161][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.810723][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.819336][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.851529][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.873960][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.881268][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.909402][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.941849][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.949686][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.975831][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.086527][ T5837] hsr_slave_0: entered promiscuous mode [ 82.092967][ T5837] hsr_slave_1: entered promiscuous mode [ 82.101046][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.108780][ T5837] Cannot create hsr debugfs directory [ 82.114650][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.126804][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.176238][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.189759][ T5848] hsr_slave_0: entered promiscuous mode [ 82.197843][ T5848] hsr_slave_1: entered promiscuous mode [ 82.204061][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.211888][ T5848] Cannot create hsr debugfs directory [ 82.243844][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.464267][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.478539][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.511211][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.526889][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.624098][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.636994][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.647647][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.658997][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.726731][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.744413][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.769161][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.782151][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.868115][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.910382][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.922076][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.934241][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.990607][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.045655][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.072638][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.112793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.120241][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.157403][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.164604][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.186024][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.202458][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.239482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.246673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.256663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.263786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.286018][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.306784][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.324379][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.331622][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.366480][ T5834] Bluetooth: hci0: command tx timeout [ 83.377396][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.384531][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.461292][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.473240][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.480456][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.498326][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.532703][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.539896][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.599868][ T5834] Bluetooth: hci3: command tx timeout [ 83.600064][ T5839] Bluetooth: hci2: command tx timeout [ 83.605599][ T5834] Bluetooth: hci1: command tx timeout [ 83.630558][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.722142][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.729372][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.761858][ T5834] Bluetooth: hci4: command tx timeout [ 83.773202][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.780433][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.041828][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.096571][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.129936][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.182101][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.270096][ T5830] veth0_vlan: entered promiscuous mode [ 84.296093][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.324795][ T5835] veth0_vlan: entered promiscuous mode [ 84.342737][ T5836] veth0_vlan: entered promiscuous mode [ 84.369776][ T5835] veth1_vlan: entered promiscuous mode [ 84.392414][ T5830] veth1_vlan: entered promiscuous mode [ 84.412539][ T5836] veth1_vlan: entered promiscuous mode [ 84.421599][ T5837] veth0_vlan: entered promiscuous mode [ 84.459806][ T5837] veth1_vlan: entered promiscuous mode [ 84.492704][ T5830] veth0_macvtap: entered promiscuous mode [ 84.517784][ T5835] veth0_macvtap: entered promiscuous mode [ 84.531068][ T5830] veth1_macvtap: entered promiscuous mode [ 84.540555][ T5836] veth0_macvtap: entered promiscuous mode [ 84.551127][ T5835] veth1_macvtap: entered promiscuous mode [ 84.579601][ T5836] veth1_macvtap: entered promiscuous mode [ 84.588824][ T5837] veth0_macvtap: entered promiscuous mode [ 84.606661][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.626986][ T5837] veth1_macvtap: entered promiscuous mode [ 84.647086][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.662126][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.674103][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.689539][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.706167][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.718286][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.730012][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.743998][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.755291][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.765720][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.776373][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.787477][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.801854][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.810998][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.821096][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.830984][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.849641][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.860364][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.871409][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.883219][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.894624][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.903898][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.916228][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.925256][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.936268][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.954774][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.966991][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.979208][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.990214][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.003549][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.015389][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.029877][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.056573][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.071009][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.083341][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.095634][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.108068][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.123637][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.135113][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.144486][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155047][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164308][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.174396][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209504][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.221405][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.232254][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.244063][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.282074][ T5848] veth0_vlan: entered promiscuous mode [ 85.326056][ T5848] veth1_vlan: entered promiscuous mode [ 85.435797][ T5834] Bluetooth: hci0: command tx timeout [ 85.485675][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.505758][ T5848] veth0_macvtap: entered promiscuous mode [ 85.518505][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.583475][ T5848] veth1_macvtap: entered promiscuous mode [ 85.596578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.610248][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.612621][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.639299][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.655070][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.665570][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.676133][ T5839] Bluetooth: hci2: command tx timeout [ 85.682487][ T53] Bluetooth: hci3: command tx timeout [ 85.690803][ T5834] Bluetooth: hci1: command tx timeout [ 85.750685][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.767343][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.783554][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.796789][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.810763][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.822559][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.833645][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.845753][ T5834] Bluetooth: hci4: command tx timeout [ 85.849866][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.872678][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.888873][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.907402][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.911023][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.957932][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.970719][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.981630][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.004675][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.018058][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.035541][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.048304][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.061771][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.083208][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.168777][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.174319][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.199777][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.217911][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.240668][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.252179][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.321812][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.347842][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.430713][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.458462][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.596872][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.618931][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.782681][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.835932][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.864535][ T5924] TCP: TCP_TX_DELAY enabled [ 86.920880][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 86.975893][ T5928] netlink: 'syz.0.6': attribute type 7 has an invalid length. [ 87.015186][ T5928] netlink: 'syz.0.6': attribute type 8 has an invalid length. [ 87.069368][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 87.130801][ T5928] syz_tun: entered promiscuous mode [ 87.152142][ T5928] erspan0: entered promiscuous mode [ 87.173945][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 87.186570][ T5928] gretap0: entered promiscuous mode [ 87.330228][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 87.521642][ T5834] Bluetooth: hci0: command tx timeout [ 87.756301][ T5834] Bluetooth: hci1: command tx timeout [ 87.756501][ T5947] Zero length message leads to an empty skb [ 87.762563][ T5834] Bluetooth: hci2: command tx timeout [ 87.768312][ T5839] Bluetooth: hci3: command tx timeout [ 87.915870][ T5839] Bluetooth: hci4: command tx timeout [ 88.530168][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.742921][ T5988] team0: Device xfrm0 is of different type [ 88.924086][ T5995] syzkaller0: create flow: hash 3658664690 index 2 [ 89.065459][ T962] syzkaller0: tun_net_xmit 76 [ 89.088054][ T962] syzkaller0: tun_net_xmit 48 [ 89.096848][ T57] syzkaller0: tun_net_xmit 76 [ 89.134445][ T6005] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 89.262287][ T5992] syzkaller0: delete flow: hash 3658664690 index 2 [ 89.272781][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 89.285077][ T9] syzkaller0: tun_net_xmit 76 [ 89.957772][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 89.969980][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 89.980759][ T6032] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 89.989055][ T6032] netlink: 10 bytes leftover after parsing attributes in process `syz.4.29'. [ 92.015677][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 92.331311][ T3076] cfg80211: failed to load regulatory.db [ 92.960926][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 93.001810][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 93.008818][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.116018][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.46'. [ 93.264639][ T6120] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 93.360615][ T6114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.383860][ T6114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.397706][ T6114] bond0 (unregistering): Released all slaves [ 93.709842][ T6128] bridge_slave_0: left allmulticast mode [ 93.720702][ T6128] bridge_slave_0: left promiscuous mode [ 93.735421][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.809182][ T6128] bridge_slave_1: left allmulticast mode [ 93.815665][ T6128] bridge_slave_1: left promiscuous mode [ 93.849904][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.871001][ T6128] bond0: (slave bond_slave_0): Releasing backup interface [ 93.890834][ T6128] bond0: (slave bond_slave_1): Releasing backup interface [ 93.899820][ T6133] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 93.936240][ T6128] team0: Failed to send options change via netlink (err -105) [ 93.944580][ T6128] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 93.962847][ T6128] team0: Port device team_slave_0 removed [ 93.992305][ T6128] team0: Failed to send options change via netlink (err -105) [ 94.000976][ T6128] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 94.075462][ T6128] team0: Port device team_slave_1 removed [ 94.084314][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.092586][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.103961][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.123338][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.208588][ T6129] team0: Failed to send options change via netlink (err -105) [ 94.296142][ T6129] team0: Mode changed to "loadbalance" [ 96.291005][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 96.324321][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.333330][ T6199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 96.428784][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.510382][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 96.772923][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 96.816725][ C0] vcan0: j1939_session_tx_dat: 0xffff88806047bc00: queue data error: -100 [ 97.252135][ T57] IPVS: starting estimator thread 0... [ 97.265736][ T6228] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 97.365072][ T6232] IPVS: using max 24 ests per chain, 57600 per kthread [ 98.206997][ T6267] bridge_slave_0: left allmulticast mode [ 98.212941][ T6267] bridge_slave_0: left promiscuous mode [ 98.220115][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.340427][ T6267] bridge_slave_1: left allmulticast mode [ 98.385375][ T6267] bridge_slave_1: left promiscuous mode [ 98.414086][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.457021][ T6267] bond0: (slave bond_slave_0): Releasing backup interface [ 98.498868][ T6267] bond0: (slave bond_slave_1): Releasing backup interface [ 98.636662][ T6267] team0: Port device team_slave_0 removed [ 98.678255][ T6267] team0: Port device team_slave_1 removed [ 98.698392][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.720700][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.758639][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.786717][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.156071][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 99.257722][ T6299] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 99.278180][ T6307] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 99.336536][ T6310] netlink: 'syz.2.114': attribute type 39 has an invalid length. [ 99.509365][ T6307] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 99.533264][ T6307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.553414][ T6298] delete_channel: no stack [ 99.559519][ T6310] veth0_macvtap: left promiscuous mode [ 99.672733][ T6312] bridge_slave_0: left allmulticast mode [ 99.680612][ T6312] bridge_slave_0: left promiscuous mode [ 99.696476][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.710903][ T6312] bridge_slave_1: left allmulticast mode [ 99.722187][ T6312] bridge_slave_1: left promiscuous mode [ 99.728740][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.763014][ T6312] bond0: (slave bond_slave_0): Releasing backup interface [ 99.794316][ T6312] bond0: (slave bond_slave_1): Releasing backup interface [ 99.833600][ T6312] team0: Port device team_slave_0 removed [ 99.852626][ T6312] team0: Port device team_slave_1 removed [ 99.863698][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.880199][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.898509][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.915106][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.297833][ T6314] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.307444][ T6314] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.317721][ T6314] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.327080][ T6314] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.387371][ T6315] vlan2: entered allmulticast mode [ 100.401352][ T6315] macsec0: entered allmulticast mode [ 100.409285][ T6315] veth1_macvtap: entered allmulticast mode [ 100.424158][ T6315] bridge0: port 1(vlan2) entered blocking state [ 100.432588][ T6314] syz.1.115 (6314) used greatest stack depth: 18744 bytes left [ 100.448826][ T6315] bridge0: port 1(vlan2) entered disabled state [ 100.467642][ T6315] vlan2: entered promiscuous mode [ 100.482154][ T6315] macsec0: entered promiscuous mode [ 100.500888][ T6315] bridge0: port 1(vlan2) entered blocking state [ 100.508081][ T6315] bridge0: port 1(vlan2) entered forwarding state [ 100.540898][ T6329] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 100.559906][ T6329] netlink: 224 bytes leftover after parsing attributes in process `syz.2.119'. [ 100.758650][ T6335] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 100.771372][ T6335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.120'. [ 100.860497][ T6346] netlink: 512 bytes leftover after parsing attributes in process `syz.1.121'. [ 101.636078][ T6381] wg2: entered promiscuous mode [ 101.641035][ T6381] wg2: entered allmulticast mode [ 101.823748][ T6385] bridge_slave_0: left allmulticast mode [ 101.867397][ T6385] bridge_slave_0: left promiscuous mode [ 101.873213][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.954053][ T6385] bridge_slave_1: left allmulticast mode [ 101.967730][ T6395] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 101.995972][ T6385] bridge_slave_1: left promiscuous mode [ 102.001804][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.102598][ T6385] team0: Port device team_slave_0 removed [ 102.163937][ T6385] team0: Port device team_slave_1 removed [ 102.180192][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.191022][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.245438][ T6394] vlan2: entered allmulticast mode [ 102.250649][ T6394] macsec0: entered allmulticast mode [ 102.274502][ T6394] veth1_macvtap: entered allmulticast mode [ 102.294736][ T6394] bridge0: port 1(vlan2) entered blocking state [ 102.331424][ T6394] bridge0: port 1(vlan2) entered disabled state [ 102.343704][ T6394] vlan2: entered promiscuous mode [ 102.353674][ T6394] macsec0: entered promiscuous mode [ 102.368929][ T6394] bridge0: port 1(vlan2) entered blocking state [ 102.376377][ T6394] bridge0: port 1(vlan2) entered forwarding state [ 102.511785][ T6404] vlan2: left promiscuous mode [ 102.545387][ T6404] macsec0: left promiscuous mode [ 102.558325][ T6404] bridge0: port 1(vlan2) entered disabled state [ 103.057275][ T6428] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.409770][ T6442] bridge_slave_0: left allmulticast mode [ 103.431806][ T6442] bridge_slave_0: left promiscuous mode [ 103.450196][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.487283][ T6442] bridge_slave_1: left allmulticast mode [ 103.493095][ T6442] bridge_slave_1: left promiscuous mode [ 103.509229][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.567578][ T6442] bond0: (slave bond_slave_0): Releasing backup interface [ 103.599379][ T6442] bond0: (slave bond_slave_1): Releasing backup interface [ 103.658335][ T6442] team0: Port device team_slave_0 removed [ 103.714617][ T6442] team0: Port device team_slave_1 removed [ 103.748218][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.763061][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.791784][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.804633][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.860946][ T6447] vlan2: entered allmulticast mode [ 103.866742][ T6447] macsec0: entered allmulticast mode [ 103.872092][ T6447] veth1_macvtap: entered allmulticast mode [ 103.888086][ T6447] bridge0: port 1(vlan2) entered blocking state [ 103.925623][ T6447] bridge0: port 1(vlan2) entered disabled state [ 103.964757][ T6447] vlan2: entered promiscuous mode [ 103.983295][ T6447] macsec0: entered promiscuous mode [ 103.990297][ T6447] bridge0: port 1(vlan2) entered blocking state [ 103.996817][ T6447] bridge0: port 1(vlan2) entered forwarding state [ 104.159350][ T6456] bond0: (slave wlan1): Releasing backup interface [ 105.057368][ T6491] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 105.089812][ T6491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.174'. [ 105.731951][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 106.630750][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 107.157401][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 107.563818][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 107.565910][ T6587] team0: Port device xfrm0 added [ 108.078290][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 109.638913][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 110.273538][ T6695] vlan2: left promiscuous mode [ 110.280707][ T6695] macsec0: left promiscuous mode [ 110.293670][ T6695] bridge0: port 1(vlan2) entered disabled state [ 110.390122][ T6699] can: request_module (can-proto-0) failed. [ 110.408733][ T6698] team0: Port device xfrm0 removed [ 110.538398][ T6704] team0: Failed to send options change via netlink (err -105) [ 110.579331][ T6704] team0: Mode changed to "loadbalance" [ 111.174216][ T6729] syzkaller0: entered promiscuous mode [ 111.201950][ T6729] syzkaller0: entered allmulticast mode [ 111.710360][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 111.840493][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 111.890601][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 112.112471][ T6752] pim6reg1: entered promiscuous mode [ 112.134930][ T6752] pim6reg1: entered allmulticast mode [ 112.264670][ T6758] batman_adv: batadv0: Adding interface: dummy0 [ 112.275135][ T6758] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.302725][ T6758] batman_adv: batadv0: Interface activated: dummy0 [ 112.315799][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 112.336067][ T6759] team0: Failed to send options change via netlink (err -105) [ 112.352242][ T6759] team0: Mode changed to "loadbalance" [ 112.387856][ T6762] batadv0: mtu less than device minimum [ 112.395874][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.408869][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.421600][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.434307][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.447232][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.459963][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.472780][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.485761][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.498480][ T6762] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.760233][ T6774] syzkaller0: entered promiscuous mode [ 112.773535][ T6774] syzkaller0: entered allmulticast mode [ 113.561478][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 114.861746][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 115.071063][ T6870] netlink: 'syz.2.309': attribute type 27 has an invalid length. [ 115.152147][ T6873] syz.1.310: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.203738][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.1.310 Not tainted 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 [ 115.203772][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.203791][ T6873] Call Trace: [ 115.203798][ T6873] [ 115.203808][ T6873] dump_stack_lvl+0x241/0x360 [ 115.203849][ T6873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.203873][ T6873] ? __pfx__printk+0x10/0x10 [ 115.203899][ T6873] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 115.203927][ T6873] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 115.203959][ T6873] warn_alloc+0x278/0x410 [ 115.203983][ T6873] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 115.204027][ T6873] ? __pfx_warn_alloc+0x10/0x10 [ 115.204051][ T6873] ? kasan_save_track+0x3f/0x80 [ 115.204073][ T6873] ? __kasan_kmalloc+0x98/0xb0 [ 115.204098][ T6873] ? xsk_setsockopt+0x4aa/0x810 [ 115.204118][ T6873] ? do_sock_setsockopt+0x3af/0x720 [ 115.204150][ T6873] ? __x64_sys_setsockopt+0x1ee/0x280 [ 115.204181][ T6873] ? do_syscall_64+0xf3/0x230 [ 115.204210][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.204251][ T6873] __vmalloc_node_range_noprof+0x126/0x1380 [ 115.204317][ T6873] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.204357][ T6873] ? __kasan_kmalloc+0x98/0xb0 [ 115.204387][ T6873] vmalloc_user_noprof+0x74/0x80 [ 115.204408][ T6873] ? xskq_create+0xb6/0x170 [ 115.204429][ T6873] xskq_create+0xb6/0x170 [ 115.204454][ T6873] xsk_init_queue+0xa1/0x100 [ 115.204480][ T6873] xsk_setsockopt+0x4aa/0x810 [ 115.204503][ T6873] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.204523][ T6873] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.204557][ T6873] ? aa_sock_opt_perm+0x79/0x120 [ 115.204595][ T6873] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.204615][ T6873] do_sock_setsockopt+0x3af/0x720 [ 115.204655][ T6873] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 115.204694][ T6873] ? __fget_files+0x395/0x410 [ 115.204723][ T6873] ? __fget_files+0x2a/0x410 [ 115.204762][ T6873] __x64_sys_setsockopt+0x1ee/0x280 [ 115.204803][ T6873] do_syscall_64+0xf3/0x230 [ 115.204838][ T6873] ? clear_bhb_loop+0x35/0x90 [ 115.204871][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.204907][ T6873] RIP: 0033:0x7f5b52f8d169 [ 115.204931][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.204949][ T6873] RSP: 002b:00007f5b53e39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.204972][ T6873] RAX: ffffffffffffffda RBX: 00007f5b531a5fa0 RCX: 00007f5b52f8d169 [ 115.204987][ T6873] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 115.205000][ T6873] RBP: 00007f5b5300e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 115.205013][ T6873] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.205033][ T6873] R13: 0000000000000000 R14: 00007f5b531a5fa0 R15: 00007ffe35c25a48 [ 115.205066][ T6873] [ 115.561738][ T6873] Mem-Info: [ 115.575036][ T6873] active_anon:4869 inactive_anon:0 isolated_anon:0 [ 115.575036][ T6873] active_file:1210 inactive_file:38306 isolated_file:0 [ 115.575036][ T6873] unevictable:768 dirty:144 writeback:0 [ 115.575036][ T6873] slab_reclaimable:9840 slab_unreclaimable:97668 [ 115.575036][ T6873] mapped:28738 shmem:1430 pagetables:926 [ 115.575036][ T6873] sec_pagetables:0 bounce:0 [ 115.575036][ T6873] kernel_misc_reclaimable:0 [ 115.575036][ T6873] free:1347045 free_pcp:550 free_cma:0 [ 115.701486][ T6873] Node 0 active_anon:19296kB inactive_anon:0kB active_file:4840kB inactive_file:153148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114824kB dirty:588kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10816kB pagetables:3736kB sec_pagetables:0kB all_unreclaimable? no [ 115.755036][ T6873] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 115.834383][ T6873] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.867268][ T6873] lowmem_reserve[]: 0 2490 2490 0 0 [ 115.872626][ T6873] Node 0 DMA32 free:1468064kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19156kB inactive_anon:0kB active_file:4840kB inactive_file:152844kB unevictable:1536kB writepending:588kB present:3129332kB managed:2549852kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:812kB free_cma:0kB [ 115.903210][ T6873] lowmem_reserve[]: 0 0 0 0 0 [ 115.908103][ T6873] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 116.017039][ T6873] lowmem_reserve[]: 0 0 0 0 0 [ 116.026212][ T6873] Node 1 Normal free:3911476kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.186086][ T6873] lowmem_reserve[]: 0 0 0 0 0 [ 116.191813][ T6873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.247499][ T6873] Node 0 DMA32: 422*4kB (UME) 47*8kB (UME) 372*16kB (UME) 106*32kB (UME) 54*64kB (UME) 17*128kB (UME) 8*256kB (UME) 10*512kB (UME) 6*1024kB (M) 2*2048kB (UM) 350*4096kB (M) = 1468048kB [ 116.306431][ T6873] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 116.365306][ T6873] Node 1 Normal: 225*4kB (UME) 66*8kB (UME) 50*16kB (UME) 212*32kB (UME) 86*64kB (UME) 27*128kB (UME) 15*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (UM) = 3911476kB [ 116.393091][ T6873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.403911][ T6873] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.419902][ T6873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.431163][ T6873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.448125][ T6873] 40950 total pagecache pages [ 116.453031][ T6873] 0 pages in swap cache [ 116.462022][ T6873] Free swap = 124996kB [ 116.472258][ T6873] Total swap = 124996kB [ 116.479760][ T6873] 2097051 pages RAM [ 116.497572][ T6873] 0 pages HighMem/MovableOnly [ 116.513285][ T6873] 427866 pages reserved [ 116.532332][ T6873] 0 pages cma reserved [ 116.661549][ T6870] veth1_macvtap: left allmulticast mode [ 116.721991][ T6870] macsec0: left allmulticast mode [ 116.764482][ T6870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.780006][ T6870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.811208][ T6870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.839504][ T6870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.929240][ T6870] vlan2: left allmulticast mode [ 116.968280][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.977525][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.119849][ T6872] syz.2.309 (6872) used greatest stack depth: 18352 bytes left [ 117.341202][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.566173][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 117.849208][ T6944] tipc: Started in network mode [ 117.875691][ T6944] tipc: Node identity 8a01a6052cbc, cluster identity 4711 [ 117.902925][ T6944] tipc: Enabled bearer , priority 0 [ 117.918597][ T6938] tipc: Resetting bearer [ 118.062024][ T6945] syzkaller0: entered promiscuous mode [ 118.074734][ T6945] syzkaller0: entered allmulticast mode [ 118.099711][ T6934] tipc: Resetting bearer [ 118.107736][ T6951] netlink: 'syz.1.331': attribute type 27 has an invalid length. [ 118.134788][ T6934] tipc: Disabling bearer [ 118.263347][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.272921][ T6954] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.288570][ T6954] net_ratelimit: 11 callbacks suppressed [ 118.288583][ T6954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.788288][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 119.390052][ T6994] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.483406][ T7000] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 119.494272][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.349'. [ 119.695609][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 119.855356][ T6980] dccp_close: ABORT with 296 bytes unread [ 120.413216][ T7036] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 120.423949][ T7036] netlink: 224 bytes leftover after parsing attributes in process `syz.2.364'. [ 120.714565][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 121.470202][ T7077] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 121.478065][ T7077] netlink: 224 bytes leftover after parsing attributes in process `syz.1.378'. [ 121.625542][ T7048] dccp_close: ABORT with 148 bytes unread [ 121.734884][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 122.636883][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 123.136156][ T7140] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 123.143967][ T7140] netlink: 224 bytes leftover after parsing attributes in process `syz.2.404'. [ 123.636251][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 124.288395][ T7187] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 124.318571][ T7187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.425'. [ 124.613975][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 125.081734][ T7219] netlink: 512 bytes leftover after parsing attributes in process `syz.2.437'. [ 125.345831][ T7229] ip6erspan0: entered promiscuous mode [ 125.677768][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 125.790848][ T7241] batman_adv: batadv0: Interface deactivated: dummy0 [ 125.803398][ T7241] batman_adv: batadv0: Removing interface: dummy0 [ 125.874200][ T7241] vlan2: left promiscuous mode [ 125.921629][ T7241] macsec0: left promiscuous mode [ 125.927713][ T7241] bridge0: port 1(vlan2) entered disabled state [ 126.305717][ T7259] netlink: 'syz.0.454': attribute type 29 has an invalid length. [ 126.363727][ T7263] netlink: 'syz.0.454': attribute type 29 has an invalid length. [ 126.363770][ T7264] netlink: 508 bytes leftover after parsing attributes in process `syz.0.454'. [ 126.397706][ T7268] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 126.624555][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 126.694047][ T7279] netlink: 23 bytes leftover after parsing attributes in process `syz.3.462'. [ 127.266075][ T7299] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 127.659717][ T7312] __nla_validate_parse: 2 callbacks suppressed [ 127.659738][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 128.380264][ T7336] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 128.388416][ T7336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.485'. [ 128.656112][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 129.175513][ T7369] netlink: 512 bytes leftover after parsing attributes in process `syz.3.494'. [ 129.869164][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 130.241590][ T7405] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 130.277789][ T7405] netlink: 224 bytes leftover after parsing attributes in process `syz.0.514'. [ 130.813320][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 131.423063][ T7458] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 131.446179][ T7458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.535'. [ 131.730995][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 132.260889][ T5839] Bluetooth: hci4: link tx timeout [ 132.267073][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.581658][ T7506] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 132.599841][ T7506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.555'. [ 133.284492][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.606107][ T7547] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 134.315118][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 134.677669][ T7591] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 134.691527][ T5911] IPVS: starting estimator thread 0... [ 134.800720][ T7597] IPVS: using max 20 ests per chain, 48000 per kthread [ 134.967378][ T7608] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 134.982497][ T7608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.593'. [ 135.924779][ T7652] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 135.955359][ T7652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.609'. [ 136.079827][ T7658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 136.285421][ T7668] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 136.309060][ T7668] netlink: 224 bytes leftover after parsing attributes in process `syz.4.614'. [ 136.420437][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 136.988813][ T7697] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 137.055887][ T7697] netlink: 224 bytes leftover after parsing attributes in process `syz.2.627'. [ 137.304262][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 137.925247][ T7735] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 138.159187][ T7747] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 138.167058][ T7747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.647'. [ 138.340068][ T7756] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 138.361756][ T7756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.649'. [ 139.228492][ T7790] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 139.243873][ T7790] netlink: 224 bytes leftover after parsing attributes in process `syz.1.664'. [ 139.376938][ T7801] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 139.742474][ T7816] ieee802154 phy1 wpan1: encryption failed: -90 [ 139.995472][ T5839] Bluetooth: hci0: command tx timeout [ 140.145171][ T7834] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 140.152901][ T7834] __nla_validate_parse: 2 callbacks suppressed [ 140.152919][ T7834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.680'. [ 140.524063][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 141.091596][ T7867] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.361575][ T7881] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 141.415864][ T7881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.700'. [ 141.957352][ T7903] netlink: 204 bytes leftover after parsing attributes in process `syz.2.711'. [ 142.218073][ T7920] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 142.236365][ T7920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.717'. [ 142.559895][ T7934] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 142.577729][ T7934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.722'. [ 142.881541][ T7951] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.621879][ T7980] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 144.593226][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 145.684447][ T8060] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 145.712561][ T8060] netlink: 224 bytes leftover after parsing attributes in process `syz.0.774'. [ 145.928974][ T8070] netlink: 'syz.3.780': attribute type 29 has an invalid length. [ 145.939761][ T8070] netlink: 'syz.3.780': attribute type 29 has an invalid length. [ 146.237307][ T8084] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 146.263466][ T8084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.782'. [ 146.582884][ T8096] tipc: Enabling not permitted [ 146.593976][ T8096] tipc: Enabling of bearer rejected, failed to enable media [ 147.217144][ T8122] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 147.225107][ T8122] netlink: 224 bytes leftover after parsing attributes in process `syz.0.800'. [ 147.953330][ T8147] bridge1: entered promiscuous mode [ 147.977579][ T8147] bridge1: entered allmulticast mode [ 148.019389][ T8147] team0: Port device bridge1 added [ 148.292131][ T8164] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 148.300340][ T8164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.818'. [ 148.626409][ T8173] netlink: 'syz.0.826': attribute type 6 has an invalid length. [ 149.504001][ T8208] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 149.536002][ T8208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.836'. [ 149.928420][ T8222] Bluetooth: MGMT ver 1.23 [ 150.538393][ T8240] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 150.586985][ T8240] netlink: 224 bytes leftover after parsing attributes in process `syz.3.851'. [ 150.730319][ T8252] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.854'. [ 150.796823][ T8249] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.854'. [ 151.667005][ T8290] tipc: Started in network mode [ 151.671954][ T8290] tipc: Node identity , cluster identity 4711 [ 151.695800][ T8290] tipc: Failed to set node id, please configure manually [ 151.703115][ T8290] tipc: Enabling of bearer rejected, failed to enable media [ 151.723498][ T8292] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 151.805025][ T8289] syz.0.871 (8289) used greatest stack depth: 17584 bytes left [ 152.360356][ T8320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.884'. [ 152.440331][ T8324] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 152.505080][ T8327] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.535415][ T8328] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 152.543149][ T8328] netlink: 224 bytes leftover after parsing attributes in process `syz.3.887'. [ 152.606306][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 152.615596][ T8330] netlink: 'syz.2.889': attribute type 3 has an invalid length. [ 152.638825][ T8330] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.649421][ T8330] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.658578][ T8330] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.667599][ T8330] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.794157][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 152.915072][ T8341] warning: `syz.1.894' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.068101][ T8350] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 153.068539][ T8345] IPVS: stopping backup sync thread 8350 ... [ 153.325673][ T8359] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.491973][ T8366] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 153.515253][ T8366] netlink: 'syz.0.905': attribute type 2 has an invalid length. [ 153.646678][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 153.726101][ T8374] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 153.761900][ T8374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.909'. [ 154.105208][ T8392] netlink: 'syz.3.918': attribute type 5 has an invalid length. [ 154.328958][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 154.454531][ T8407] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 154.495494][ T8407] netlink: 224 bytes leftover after parsing attributes in process `syz.3.924'. [ 154.903982][ T8431] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 154.944476][ T8431] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 155.182061][ T8441] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 156.119862][ T8477] __nla_validate_parse: 3 callbacks suppressed [ 156.119884][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 156.438409][ T8483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.671689][ T8491] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 156.681254][ T5879] IPVS: starting estimator thread 0... [ 156.692837][ T8483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.805046][ T8497] IPVS: using max 19 ests per chain, 45600 per kthread [ 156.903732][ T8483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.966659][ T8503] netlink: 'syz.0.964': attribute type 14 has an invalid length. [ 157.148613][ T8483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.254708][ T8512] netlink: 188 bytes leftover after parsing attributes in process `syz.2.968'. [ 157.325013][ T8512] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 157.442750][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 157.446849][ T8483] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.538212][ T8483] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.599455][ T8483] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.668429][ T8483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.672770][ T8525] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.098120][ T8539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.982'. [ 158.271295][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 158.374690][ T8552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.986'. [ 158.584364][ T8561] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.997182][ T8573] validate_nla: 2 callbacks suppressed [ 158.997205][ T8573] netlink: 'syz.2.996': attribute type 1 has an invalid length. [ 159.056051][ T8573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.996'. [ 159.097379][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 159.109478][ T8580] netlink: 'syz.4.999': attribute type 1 has an invalid length. [ 159.127720][ T8580] netlink: 224 bytes leftover after parsing attributes in process `syz.4.999'. [ 159.857051][ T8610] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 159.877663][ T8610] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1013'. [ 160.001305][ T8613] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 160.719882][ T8648] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 160.820601][ T8654] netlink: 'syz.0.1028': attribute type 1 has an invalid length. [ 161.077691][ T8661] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 161.820494][ T8694] netlink: 'syz.1.1047': attribute type 9 has an invalid length. [ 161.912582][ T8698] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 161.927068][ T8698] __nla_validate_parse: 3 callbacks suppressed [ 161.927093][ T8698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1048'. [ 162.266500][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 163.048947][ T8731] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 163.082823][ T8731] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1062'. [ 163.389692][ T8740] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 163.411868][ T8740] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1066'. [ 163.483457][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1068'. [ 163.505022][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1068'. [ 163.522656][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1068'. [ 163.532077][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1068'. [ 163.816588][ T5879] IPVS: starting estimator thread 0... [ 163.935297][ T8753] IPVS: using max 20 ests per chain, 48000 per kthread [ 164.057504][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 164.770919][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 164.800603][ T8789] tipc: Started in network mode [ 164.832033][ T8789] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 164.887071][ T8789] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 164.945779][ T8789] tipc: Enabled bearer , priority 10 [ 166.066151][ T5879] tipc: Node number set to 1 [ 166.635116][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 167.008431][ T6913] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 167.048668][ T6913] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 167.405689][ T8864] __nla_validate_parse: 2 callbacks suppressed [ 167.405712][ T8864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1118'. [ 167.685371][ T8874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1121'. [ 168.071355][ T8887] validate_nla: 2 callbacks suppressed [ 168.071375][ T8887] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 168.100813][ T8887] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1127'. [ 168.140340][ T8712] Set syz1 is full, maxelem 65536 reached [ 169.035362][ T8916] batadv_slave_1: entered promiscuous mode [ 169.157266][ T8918] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 169.207440][ T8918] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1143'. [ 169.713771][ T8941] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 169.724605][ T8941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1154'. [ 170.075875][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 170.096178][ T8949] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 170.104351][ T8949] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1158'. [ 170.155108][ T8951] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 170.180342][ T8951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1159'. [ 170.188646][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 170.501252][ T25] IPVS: starting estimator thread 0... [ 170.637095][ T8969] IPVS: using max 19 ests per chain, 45600 per kthread [ 170.692909][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 171.313919][ T8994] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 171.329842][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1176'. [ 173.402824][ T9066] __nla_validate_parse: 1 callbacks suppressed [ 173.402845][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 173.996293][ T9085] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.766230][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1250'. [ 176.256418][ T9168] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 176.263678][ T9172] veth1: entered promiscuous mode [ 176.277268][ T9168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1257'. [ 176.325455][ T9172] veth1: left promiscuous mode [ 176.618219][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 177.564990][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 177.671736][ T9218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 178.373627][ T9238] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.451540][ T9281] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 179.460609][ T9281] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1305'. [ 180.209128][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 180.356753][ T9313] netlink: 'syz.0.1321': attribute type 1 has an invalid length. [ 180.366806][ T9313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1321'. [ 180.975454][ T9334] netlink: 'syz.0.1330': attribute type 1 has an invalid length. [ 180.985365][ T9334] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1330'. [ 182.701753][ T9398] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 182.710287][ T9398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1355'. [ 182.992396][ T9408] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.385475][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 183.723418][ T9441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1371'. [ 184.321810][ T9463] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 184.374694][ T9463] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1380'. [ 184.607349][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 185.204135][ T9493] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.861030][ T9514] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.113005][ T9549] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 187.185740][ T9549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1406'. [ 187.334362][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 187.405465][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 187.414923][ T9559] netlink: 'syz.4.1409': attribute type 30 has an invalid length. [ 187.476066][ T9562] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 187.491252][ T9559] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.502736][ T9559] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.515689][ T9559] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.526319][ T9559] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.536423][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 187.546160][ T9562] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1410'. [ 187.578157][ T9564] netlink: 'syz.4.1409': attribute type 30 has an invalid length. [ 188.149193][ T9589] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 188.175696][ T9589] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1418'. [ 188.200823][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 188.994491][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 189.497132][ T9629] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 189.506572][ T9629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1432'. [ 190.426622][ T9652] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 190.458442][ T9652] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1441'. [ 190.489810][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 190.516509][ T9654] netlink: 'syz.0.1443': attribute type 6 has an invalid length. [ 190.548085][ T9654] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1443'. [ 190.692362][ T9454] Set syz1 is full, maxelem 65536 reached [ 190.943436][ T9664] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 190.952037][ T9664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1446'. [ 190.980247][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 191.353117][ T9686] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 191.382586][ T9686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1454'. [ 191.923998][ T9702] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 191.932738][ T9702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1463'. [ 192.732790][ T9730] netlink: 'syz.0.1475': attribute type 1 has an invalid length. [ 192.950582][ T9731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.980682][ T9731] bond0: (slave bond1): making interface the new active one [ 192.992052][ T9731] bond0: (slave bond1): Enslaving as an active interface with an up link [ 193.039179][ T9737] netlink: 'syz.3.1476': attribute type 1 has an invalid length. [ 193.058726][ T9737] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1476'. [ 193.677484][ T9766] syzkaller1: entered promiscuous mode [ 193.710975][ T9766] syzkaller1: entered allmulticast mode [ 194.205131][ T9779] netlink: 'syz.2.1489': attribute type 11 has an invalid length. [ 194.719035][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.508361][ T9832] netlink: 'syz.4.1512': attribute type 4 has an invalid length. [ 195.568548][ T9834] syz_tun: entered allmulticast mode [ 195.611512][ T9833] syz_tun: left allmulticast mode [ 196.463391][ T9878] netlink: 'syz.4.1529': attribute type 4 has an invalid length. [ 198.150640][ T9880] netlink: 'syz.2.1528': attribute type 1 has an invalid length. [ 198.191670][ T9880] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1528'. [ 198.789887][ T9912] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 198.815008][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1542'. [ 198.934045][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1546'. [ 199.955004][ T9956] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 199.968621][ T9956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1557'. [ 200.140127][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 200.230209][ T9961] erspan0: entered promiscuous mode [ 200.249735][ T9961] macvtap0: entered promiscuous mode [ 200.272571][ T9961] macvtap0: entered allmulticast mode [ 200.294994][ T9961] erspan0: entered allmulticast mode [ 200.337353][ T9967] erspan0: left allmulticast mode [ 200.355026][ T9967] erspan0: left promiscuous mode [ 200.714582][ T9990] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 200.755122][ T9990] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1567'. [ 200.923307][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 200.966677][T10000] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 200.998142][T10000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1570'. [ 201.189962][T10012] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 201.240773][T10012] bond2: entered promiscuous mode [ 201.282861][T10012] bond2: entered allmulticast mode [ 201.302377][T10019] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1576'. [ 201.339015][T10020] bond2: (slave geneve2): making interface the new active one [ 201.369030][T10020] geneve2: entered promiscuous mode [ 201.376272][T10020] geneve2: entered allmulticast mode [ 201.384684][T10020] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 201.591157][T10033] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 201.607593][T10033] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1581'. [ 201.918747][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 201.919673][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 201.925152][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 201.985326][T10045] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 202.109283][T10054] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 202.331442][T10063] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 202.607929][T10079] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 202.644486][T10075] netlink: 'syz.1.1599': attribute type 4 has an invalid length. [ 204.523752][T10093] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 204.548333][T10093] __nla_validate_parse: 3 callbacks suppressed [ 204.548354][T10093] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1604'. [ 204.605424][T10103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1606'. [ 204.720510][T10108] syzkaller1: entered promiscuous mode [ 204.735041][T10108] syzkaller1: entered allmulticast mode [ 205.171574][T10127] syz_tun: entered allmulticast mode [ 205.195921][T10127] syz_tun: left allmulticast mode [ 205.329383][T10135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 205.580321][T10145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1622'. [ 205.759870][ C0] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 205.901903][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.932088][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.674427][T10170] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.683586][T10170] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.692492][T10170] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.701336][T10170] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.734031][T10170] vxlan1: entered promiscuous mode [ 207.755419][T10170] vxlan1: entered allmulticast mode [ 207.873661][T10176] validate_nla: 2 callbacks suppressed [ 207.873687][T10176] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 207.888718][T10176] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1630'. [ 208.029102][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1632'. [ 208.057668][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 208.243619][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 208.268900][T10193] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 208.305521][T10193] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1636'. [ 208.739484][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 209.086044][T10215] netlink: 'syz.4.1645': attribute type 13 has an invalid length. [ 209.136318][T10214] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 209.370587][T10227] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 209.392677][T10227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.400534][T10227] IPv6: NLM_F_CREATE should be set when creating new route [ 209.417071][T10227] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 209.431899][T10227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.878435][T10247] netlink: 'syz.4.1660': attribute type 1 has an invalid length. [ 209.887758][T10247] __nla_validate_parse: 3 callbacks suppressed [ 209.887777][T10247] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1660'. [ 210.724347][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 210.909050][ T25] hid-generic 0005:0B57:0001.0002: item fetching failed at offset 0/1 [ 210.951966][ T25] hid-generic 0005:0B57:0001.0002: probe with driver hid-generic failed with error -22 [ 213.192819][T10287] netlink: 'syz.2.1671': attribute type 1 has an invalid length. [ 213.200982][T10287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1671'. [ 213.435034][T10296] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 213.761575][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 215.645910][T10313] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 215.667264][T10313] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1682'. [ 215.876888][T10322] syzkaller1: entered promiscuous mode [ 215.902054][T10322] syzkaller1: entered allmulticast mode [ 215.943368][T10324] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 215.962562][T10324] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1686'. [ 216.378964][T10343] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 216.422382][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 216.468209][T10343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.646545][T10349] gretap1: entered promiscuous mode [ 216.669105][T10349] bond3: (slave gretap1): making interface the new active one [ 216.698122][T10349] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 216.940977][T10359] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 216.949182][T10359] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1699'. [ 216.963921][T10358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.073364][T10358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.155513][T10366] netlink: 'syz.2.1701': attribute type 1 has an invalid length. [ 217.172104][T10358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.257767][T10370] veth3: entered promiscuous mode [ 217.269276][T10370] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 217.326157][T10372] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 217.333972][T10372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1703'. [ 217.913701][T10393] netlink: 'syz.3.1711': attribute type 1 has an invalid length. [ 217.923222][T10393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1711'. [ 217.980401][T10395] bond0: (slave bond1): Releasing backup interface [ 218.022882][T10395] bond2: (slave geneve2): Releasing active interface [ 218.055243][T10395] geneve2: left promiscuous mode [ 218.068102][T10395] geneve2: left allmulticast mode [ 218.102579][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 218.122315][T10395] bond3: (slave gretap1): Releasing active interface [ 218.369861][T10406] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 218.378249][T10406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1717'. [ 218.406993][T10407] netlink: 'syz.1.1715': attribute type 7 has an invalid length. [ 218.435090][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 218.594357][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 218.757913][T10410] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.802842][T10417] nbd: nbd64 already in use [ 218.808272][ T5831] block nbd64: NBD_DISCONNECT [ 219.319822][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029fc5800: rx timeout, send abort [ 219.676555][T10441] trusted_key: syz.2.1727 sent an empty control message without MSG_MORE. [ 219.789462][T10443] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 219.819901][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029fc5400: rx timeout, send abort [ 219.829451][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029fc5800: abort rx timeout. Force session deactivation [ 220.274599][T10461] macvtap1: entered promiscuous mode [ 220.287275][T10461] bond0: entered promiscuous mode [ 220.300673][T10461] macvtap1: entered allmulticast mode [ 220.310011][T10461] bond0: entered allmulticast mode [ 220.328212][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029fc5400: abort rx timeout. Force session deactivation [ 220.345332][T10461] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.453376][T10464] geneve0: entered promiscuous mode [ 220.485495][T10464] geneve0: entered allmulticast mode [ 221.162871][T10485] __nla_validate_parse: 5 callbacks suppressed [ 221.162893][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1741'. [ 221.225175][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1741'. [ 221.306785][T10488] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 221.320992][T10488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1743'. [ 221.411613][T10485] erspan0: entered promiscuous mode [ 221.421076][T10485] batadv_slave_1: entered promiscuous mode [ 221.475561][T10485] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 221.483190][T10485] Cannot create hsr debugfs directory [ 223.431127][T10511] Bluetooth: MGMT ver 1.23 [ 223.672185][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.727386][T10521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.156006][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 224.165234][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 224.174145][T10543] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 224.226099][T10543] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1758'. [ 224.235554][T10543] block nbd0: Unsupported socket: shutdown callout must be supported. [ 224.412990][T10549] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1760'. [ 224.506385][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'. [ 224.527986][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'. [ 224.664463][T10561] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1766'. [ 227.258293][T10610] __nla_validate_parse: 1 callbacks suppressed [ 227.258317][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 227.926189][ T53] Bluetooth: hci4: link tx timeout [ 227.931395][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 228.625050][T10659] tipc: Enabling of bearer rejected, failed to enable media [ 229.045778][T10671] tipc: Started in network mode [ 229.064462][T10671] tipc: Node identity 4, cluster identity 4711 [ 229.086392][T10671] tipc: Node number set to 4 [ 229.123374][T10676] netlink: 'syz.4.1807': attribute type 10 has an invalid length. [ 229.186593][T10676] bridge0: entered promiscuous mode [ 229.225227][T10676] bridge0: entered allmulticast mode [ 229.256239][T10676] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.994961][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 230.557202][T10724] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.983560][T10744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1827'. [ 231.060640][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 231.231966][T10752] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 231.240138][T10752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1830'. [ 232.323692][T10795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.332674][T10795] bond0: (slave bond1): Enslaving as an active interface with an up link [ 232.819430][T10818] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 232.827384][T10818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1844'. [ 233.674545][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'. [ 234.083250][T10872] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 234.109327][T10872] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1859'. [ 234.571393][T10894] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 234.591524][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 235.465584][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 235.749950][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.833442][T10959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.973438][T10964] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.329705][T10980] tipc: Started in network mode [ 236.340566][T10980] tipc: Node identity 4, cluster identity 4711 [ 236.348793][T10980] tipc: Node number set to 4 [ 236.755290][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 237.216603][T11014] netlink: 'syz.2.1902': attribute type 1 has an invalid length. [ 237.250577][T11014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1902'. [ 237.376314][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 237.815682][T11039] syzkaller1: entered promiscuous mode [ 237.821245][T11039] syzkaller1: entered allmulticast mode [ 237.897466][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'. [ 239.142908][T11089] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 239.172249][T11089] netlink: 208292 bytes leftover after parsing attributes in process `syz.4.1923'. [ 239.191639][T11089] netlink: 'syz.4.1923': attribute type 2 has an invalid length. [ 239.204533][T11089] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 239.250926][T11097] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 239.294150][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 239.295345][T11097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1924'. [ 239.763163][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1932'. [ 240.322127][T11149] ax25_connect(): syz.0.1938 uses autobind, please contact jreuter@yaina.de [ 240.347355][ T5208] udevd[5208]: worker [5831] terminated by signal 33 (Unknown signal 33) [ 240.406331][T11153] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 240.420531][T11153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1939'. [ 240.673705][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1944'. [ 240.875366][T11178] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.231624][T11196] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 241.239985][T11196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1954'. [ 241.588049][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 241.974395][T11231] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 241.995213][T11231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1967'. [ 242.058962][T11234] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 242.073135][T11239] xt_hashlimit: size too large, truncated to 1048576 [ 242.197036][T11242] xt_hashlimit: size too large, truncated to 1048576 [ 242.753637][T11266] netlink: 'syz.3.1980': attribute type 10 has an invalid length. [ 242.786033][T11266] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 242.841070][T11270] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 242.921037][T11272] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 242.929044][T11272] __nla_validate_parse: 3 callbacks suppressed [ 242.929062][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1983'. [ 243.050017][T11281] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.224033][T11288] netlink: 'syz.0.1989': attribute type 10 has an invalid length. [ 243.237230][T11288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1989'. [ 243.291786][T11288] team0: Port device geneve0 added [ 243.340344][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 243.531254][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 243.553483][T11301] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 243.561702][T11301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1994'. [ 243.581791][T11303] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1996'. [ 243.696237][T11306] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 243.704204][T11306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1997'. [ 243.767000][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 243.781412][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 243.904235][T11315] syzkaller1: entered promiscuous mode [ 243.910656][T11315] syzkaller1: entered allmulticast mode [ 243.991779][T11317] gtp0: entered promiscuous mode [ 244.509991][T11327] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 244.540849][T11327] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2007'. [ 244.720128][T11333] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.777527][T11335] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 244.866326][T11339] veth5: entered promiscuous mode [ 244.915946][T11339] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 245.281402][T11350] xt_hashlimit: size too large, truncated to 1048576 [ 245.629045][T11363] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 246.279791][T11390] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 246.355663][T11393] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 246.367173][T11393] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 246.400749][T11393] bond2: (slave vti0): making interface the new active one [ 246.426934][T11393] bond2: (slave vti0): Enslaving as an active interface with an up link [ 246.456764][T11390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.675320][T11406] erspan0: entered promiscuous mode [ 246.682663][T11406] batadv_slave_1: entered promiscuous mode [ 246.689842][T11406] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 246.699360][T11406] Cannot create hsr debugfs directory [ 246.710126][T11406] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.486022][T11440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.513597][T11441] [ 247.516009][T11441] ====================================================== [ 247.523041][T11441] WARNING: possible circular locking dependency detected [ 247.530085][T11441] 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 Not tainted [ 247.537203][T11441] ------------------------------------------------------ [ 247.544225][T11441] syz.3.2051/11441 is trying to acquire lock: [ 247.550332][T11441] ffffffff9002bcd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 247.559715][T11441] [ 247.559715][T11441] but task is already holding lock: [ 247.567086][T11441] ffff88803375c170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1021/0x2360 [ 247.576512][T11441] [ 247.576512][T11441] which lock already depends on the new lock. [ 247.576512][T11441] [ 247.586921][T11441] [ 247.586921][T11441] the existing dependency chain (in reverse order) is: [ 247.595946][T11441] [ 247.595946][T11441] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 247.603964][T11441] lock_acquire+0x1ed/0x550 [ 247.609018][T11441] _raw_spin_lock_bh+0x35/0x50 [ 247.614339][T11441] nr_rt_device_down+0x159/0x7b0 [ 247.619815][T11441] nr_device_event+0x134/0x150 [ 247.625113][T11441] notifier_call_chain+0x1a5/0x3f0 [ 247.630762][T11441] __dev_notify_flags+0x207/0x400 [ 247.636329][T11441] dev_change_flags+0xf0/0x1a0 [ 247.641637][T11441] dev_ifsioc+0x7c2/0xe70 [ 247.646504][T11441] dev_ioctl+0x719/0x1340 [ 247.651370][T11441] sock_do_ioctl+0x240/0x460 [ 247.656498][T11441] sock_ioctl+0x626/0x8e0 [ 247.661362][T11441] __se_sys_ioctl+0xf5/0x170 [ 247.666485][T11441] do_syscall_64+0xf3/0x230 [ 247.671531][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.677964][T11441] [ 247.677964][T11441] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 247.685811][T11441] lock_acquire+0x1ed/0x550 [ 247.690866][T11441] _raw_spin_lock_bh+0x35/0x50 [ 247.696176][T11441] nr_rt_device_down+0xb5/0x7b0 [ 247.701567][T11441] nr_device_event+0x134/0x150 [ 247.706863][T11441] notifier_call_chain+0x1a5/0x3f0 [ 247.712541][T11441] __dev_notify_flags+0x207/0x400 [ 247.718135][T11441] dev_change_flags+0xf0/0x1a0 [ 247.723445][T11441] dev_ifsioc+0x7c2/0xe70 [ 247.728317][T11441] dev_ioctl+0x719/0x1340 [ 247.733181][T11441] sock_do_ioctl+0x240/0x460 [ 247.738304][T11441] sock_ioctl+0x626/0x8e0 [ 247.743174][T11441] __se_sys_ioctl+0xf5/0x170 [ 247.748307][T11441] do_syscall_64+0xf3/0x230 [ 247.753351][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.759788][T11441] [ 247.759788][T11441] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 247.767721][T11441] validate_chain+0x18ef/0x5920 [ 247.773110][T11441] __lock_acquire+0x1397/0x2100 [ 247.778503][T11441] lock_acquire+0x1ed/0x550 [ 247.783550][T11441] _raw_spin_lock_bh+0x35/0x50 [ 247.788853][T11441] nr_remove_neigh+0x25/0xe0 [ 247.794069][T11441] nr_add_node+0x1be2/0x2360 [ 247.799194][T11441] nr_rt_ioctl+0xd5c/0xff0 [ 247.804147][T11441] sock_do_ioctl+0x158/0x460 [ 247.809288][T11441] sock_ioctl+0x626/0x8e0 [ 247.814159][T11441] __se_sys_ioctl+0xf5/0x170 [ 247.819287][T11441] do_syscall_64+0xf3/0x230 [ 247.824333][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.830771][T11441] [ 247.830771][T11441] other info that might help us debug this: [ 247.830771][T11441] [ 247.841021][T11441] Chain exists of: [ 247.841021][T11441] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 247.841021][T11441] [ 247.854912][T11441] Possible unsafe locking scenario: [ 247.854912][T11441] [ 247.862375][T11441] CPU0 CPU1 [ 247.867750][T11441] ---- ---- [ 247.873120][T11441] lock(&nr_node->node_lock); [ 247.877901][T11441] lock(nr_node_list_lock); [ 247.885033][T11441] lock(&nr_node->node_lock); [ 247.892335][T11441] lock(nr_neigh_list_lock); [ 247.897039][T11441] [ 247.897039][T11441] *** DEADLOCK *** [ 247.897039][T11441] [ 247.905190][T11441] 1 lock held by syz.3.2051/11441: [ 247.910305][T11441] #0: ffff88803375c170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1021/0x2360 [ 247.920178][T11441] [ 247.920178][T11441] stack backtrace: [ 247.926089][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.3.2051 Not tainted 6.14.0-rc5-syzkaller-00149-gd2b9d97e89c7 #0 [ 247.926112][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.926124][T11441] Call Trace: [ 247.926131][T11441] [ 247.926141][T11441] dump_stack_lvl+0x241/0x360 [ 247.926168][T11441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.926187][T11441] ? __pfx__printk+0x10/0x10 [ 247.926208][T11441] print_circular_bug+0x13a/0x1b0 [ 247.926230][T11441] check_noncircular+0x36a/0x4a0 [ 247.926255][T11441] ? __pfx_check_noncircular+0x10/0x10 [ 247.926277][T11441] ? lockdep_lock+0x123/0x2b0 [ 247.926307][T11441] ? lockdep_hardirqs_on+0x99/0x150 [ 247.926341][T11441] validate_chain+0x18ef/0x5920 [ 247.926366][T11441] ? validate_chain+0x11e/0x5920 [ 247.926388][T11441] ? __pfx_validate_chain+0x10/0x10 [ 247.926412][T11441] ? __pfx_validate_chain+0x10/0x10 [ 247.926430][T11441] ? validate_chain+0x11e/0x5920 [ 247.926459][T11441] ? __pfx_validate_chain+0x10/0x10 [ 247.926477][T11441] ? __pfx_validate_chain+0x10/0x10 [ 247.926498][T11441] ? mark_lock+0x9a/0x360 [ 247.926515][T11441] __lock_acquire+0x1397/0x2100 [ 247.926549][T11441] lock_acquire+0x1ed/0x550 [ 247.926574][T11441] ? nr_remove_neigh+0x25/0xe0 [ 247.926600][T11441] ? __pfx_lock_acquire+0x10/0x10 [ 247.926626][T11441] ? __pfx_lock_acquire+0x10/0x10 [ 247.926652][T11441] ? nr_remove_neigh+0x25/0xe0 [ 247.926673][T11441] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 247.926694][T11441] ? do_raw_spin_lock+0x14f/0x370 [ 247.926716][T11441] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 247.926737][T11441] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.926759][T11441] ? nr_remove_neigh+0x25/0xe0 [ 247.926781][T11441] _raw_spin_lock_bh+0x35/0x50 [ 247.926801][T11441] ? nr_remove_neigh+0x25/0xe0 [ 247.926822][T11441] nr_remove_neigh+0x25/0xe0 [ 247.926844][T11441] nr_add_node+0x1be2/0x2360 [ 247.926868][T11441] ? __pfx_nr_add_node+0x10/0x10 [ 247.926889][T11441] ? nr_call_to_digi+0x7a/0x1b0 [ 247.926908][T11441] ? __asan_memcpy+0x40/0x70 [ 247.926925][T11441] ? nr_call_to_digi+0x121/0x1b0 [ 247.926946][T11441] nr_rt_ioctl+0xd5c/0xff0 [ 247.926968][T11441] ? aa_get_newest_label+0xff/0x6f0 [ 247.926995][T11441] ? tomoyo_path_number_perm+0x209/0x770 [ 247.927019][T11441] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 247.927046][T11441] ? security_inode_mkdir+0x114/0x340 [ 247.927071][T11441] sock_do_ioctl+0x158/0x460 [ 247.927095][T11441] ? __pfx_sock_do_ioctl+0x10/0x10 [ 247.927124][T11441] sock_ioctl+0x626/0x8e0 [ 247.927144][T11441] ? __pfx_sock_ioctl+0x10/0x10 [ 247.927166][T11441] ? __fget_files+0x2a/0x410 [ 247.927192][T11441] ? __fget_files+0x2a/0x410 [ 247.927218][T11441] ? __pfx_sock_ioctl+0x10/0x10 [ 247.927238][T11441] __se_sys_ioctl+0xf5/0x170 [ 247.927257][T11441] do_syscall_64+0xf3/0x230 [ 247.927282][T11441] ? clear_bhb_loop+0x35/0x90 [ 247.927309][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.927335][T11441] RIP: 0033:0x7f6b78f8d169 [ 247.927356][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.927371][T11441] RSP: 002b:00007f6b79d4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.927390][T11441] RAX: ffffffffffffffda RBX: 00007f6b791a5fa0 RCX: 00007f6b78f8d169 [ 247.927410][T11441] RDX: 0000400000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 247.927421][T11441] RBP: 00007f6b7900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.927432][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.927442][T11441] R13: 0000000000000000 R14: 00007f6b791a5fa0 R15: 00007ffff105d568 [ 247.927461][T11441] [ 247.951127][T11440] gretap1: entered promiscuous mode [ 248.294650][T11440] bond1: (slave gretap1): making interface the new active one [ 248.302971][T11440] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 256.156669][ T1296] ieee802154 phy1 wpan1: encryption failed: -22