last executing test programs: 4.969653133s ago: executing program 4 (id=1417): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffc92, 0x2, {{0x4, 0x10, 0x6, 0xb, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x3, 0x6, @remote}, 0x14) close(0xffffffffffffffff) 4.319527064s ago: executing program 3 (id=1423): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) 4.057567268s ago: executing program 3 (id=1426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000000)="3f000000010000", 0x7) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 3.825070707s ago: executing program 0 (id=1428): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0000000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.396938821s ago: executing program 2 (id=1431): socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000f705000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c00018008000140fffffffebb1d0e96c0439f89be57fd62442ac8fa45a8151d571394b051bb385d74441d110ad6738c8d44ed2e8f1427b5c84880465cd495742ae40672dc7c60f223870246fdd31329c946649717adea151b3de676eed77586c85ae38d95df92013404ad50b8cd8f803e1cfdaa2edd3a6fb9"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETNOCSUM(r9, 0xff0a, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x9, 0xffff}, {0xffef, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xdc}, 0x8801) 2.215180072s ago: executing program 2 (id=1432): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.734928684s ago: executing program 0 (id=1433): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=ANY=[@ANYBLOB="80010000100013070000000000000000fe880000000000000000000000000001fe8000000000000000000000000000414e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x602, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)="93d90400000300", 0x7}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r3, 0xe8e76000) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 1.685573765s ago: executing program 3 (id=1434): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22148, 0x3f08}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 1.685288395s ago: executing program 4 (id=1435): r0 = socket$netlink(0x10, 0x3, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x9, 0x83d}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x9, 0x83d}]}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1686dd6a01000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e2000649078020000000400008004000000f7b3a4f4902dd70b64812cd6ddd344fe74c3b52b2785b2e0414805e5d9fda914ad23ac4cfe1601000000a6a14966fb6ed9972e4593020000003e5b2daf360000df87836acb9b57babd62f264731e1a6f82fe884d8f84631490ae852a6e3bf602e4d99c0d00c0c6cc5a6950384ce726381a"], 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x156}, {r2, 0x20}, {r3, 0x2000}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)={[0x3]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320300000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000640000000070900010073797a30"], 0x108}}, 0x0) 1.666798343s ago: executing program 1 (id=1436): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x50}}, 0x0) 1.639806829s ago: executing program 2 (id=1437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r2, 0x29, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x3, [0xd, 0x4, 0x28d]}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff}}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) 1.380763264s ago: executing program 4 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x8, 0x10}, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x20, '\x00', r6, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r10, 0x400, 0x70bd28, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.378521961s ago: executing program 1 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) r3 = socket(0x22, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x400, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010728bd7000fcdbdf25190000000c00060001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4010084) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700004ddfffb040000000800090002"], 0x3c}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="ab47bfb66e50df3abbb1c3b68c104796dc21575fb8f90e000019226f4f8539b8196b09f7b63f1a2a209f004c9bf1be6143ed1a9da15ae97f2e9d8bf89cb6a70a4e7e5b9c5502c2f31272f46d35e9f7e1e999407f6241eaea3cbe5f11098d0a6e4f0f589215ecb75882899f7bf2d245f70aae3314d95753e63dc3b8a28afd0186ae646dbf2821aa0daef67ace9b336de3227edc510e23311d7b817e3bb401552f04c45d3814bb79b17efa1f0ef6c8467af80d00f702f594c499535ced2d2b2fb0", 0xc0}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r12, @ANYRES32=r12, @ANYRES16=r3], 0x18}, 0x20040001) close(0x3) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r13 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r13, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) (async) setsockopt$inet6_buf(r13, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x78, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa06d}, @CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xbb}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x78, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa06d}, @CTA_SEQ_ADJ_ORIG={0x0, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xbb}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.271732195s ago: executing program 0 (id=1440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3}}, 0x0, 0x0, 0x6, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000080", @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x844) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getsa={0x28, 0x12, 0xa03, 0x70bd2d, 0x25dfdbfc, {@in6=@mcast1, 0x4d5, 0xa, 0x19}}, 0x28}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc8, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}}, {0x4e20, 0x4e23, 0xfb4, 0x0, @wg=@data={0x4, 0x697, 0x8, "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"}}}}, 0xfd6) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002900)={'ip6tnl0\x00', &(0x7f0000002880)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @mcast2, @local, 0x8036, 0x8, 0x6, 0x22d6}}) sendmsg$inet(r2, &(0x7f0000002a40)={&(0x7f0000000100)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000002840)=[{&(0x7f0000001740)="fda4c0221ae0efdc39f5d7ec63ca2e869e90d9b2ab6d565d777e1607d2bae08f697139cce9c523296d3a838e2935969fe3c74a22929eacf7a9a48949a975344518837d008050a1319540f908a6eed97318f1413f5ef93c3d48506ce8f1804de449fe9a3c73dc6962e33e239f2114fa12ab9bbbc9c88c792d516bd9545935ab0c86b8accebd298934e14a4f1f5b6cc348b54f80ceb54ce5b1173cd17a0dd2789e938e0d0136b87094e655b1cc256f6f10c3355fa0fae9e6161b1255d62f2915d35a8de4b6", 0xc4}, {&(0x7f0000001840)="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", 0x1000}], 0x2, &(0x7f0000002940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0xc8}, 0x51) (async) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.164685363s ago: executing program 4 (id=1441): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000140007800800114000000000050015000c0000000900020073797a31000000000500050002000000050004000000000005000100070000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4180}, 0x0) 988.907686ms ago: executing program 3 (id=1442): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xffffff22, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x39, &(0x7f00000006c0)}, 0x2c) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000700), &(0x7f0000000740)=0xc) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x30, r10, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x405, 0x400000, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 928.90392ms ago: executing program 4 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x30}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x9}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 896.267483ms ago: executing program 1 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918", @ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20044010) 772.86176ms ago: executing program 0 (id=1445): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080072039be1d165e5313d05af01000000000008000200000000002c00018014000300ff01000000008d77457a39775629b2d38445610000000000000000000114000400090200000000000000000000000000010c00028005000100000000"], 0xe4}}, 0x20008880) 707.011399ms ago: executing program 1 (id=1446): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x200, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x37}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x4000) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x302, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048004}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x5, 0x0, &(0x7f00000002c0)) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}}, 0x0) 634.270468ms ago: executing program 4 (id=1447): syz_emit_ethernet(0x87, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @random="1a6a953e4f16", @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x3, 0x1}}, {@llc={0x4, {@llc={0x0, 0x7e, 'c', "3fdfdf6e04482486263cd26c41d843105ed8f5990c10ca40cb2029495ff7b5fde61aa8bafd312e5b73110954d3fcbeac0afef886220215140d6b2db077d964029563910ad0cb825b9463ee5a3023ca97b789da7e4ea79cb6fbdf4c05244c9aa3d7977f5df1591fac79ce9ad891f2"}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x66d, 0x1db, 0x2e8, 0x514]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) unshare(0x46000480) 469.626982ms ago: executing program 3 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ip6erspan0\x00', {}, 0x200}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xe, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xae, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0xc, 0x1}, {0xc47f68ee886a8227, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100001002cbd7000ffffffffffffdd27", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000014001680100001800c0004000900000000100000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 469.155652ms ago: executing program 0 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x3}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000180)) bind$inet(r3, &(0x7f0000000240)={0x2, 0xfffa, @loopback}, 0x10) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000001080)={0x2, &(0x7f0000001400)=[{@fixed}, {@none}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="018c8fdc6d8e0025bd7000000000003f00003fc24d29d6980272aedcc94d20d6d5757fc43bd6cb33c15e070a8e0603018c946a169c8ad29f4000000046479b1e227c5d01", @ANYRES32=r1, @ANYBLOB="14005e8008000100fbffffff0800020010800000"], 0x30}, 0x1, 0x0, 0x0, 0x411}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg$unix(r6, &(0x7f0000001100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/62, 0x3e}], 0x1}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/9, 0x9}], 0x3, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/175, 0xaf}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000c80)=""/108, 0x6c}], 0x6, &(0x7f0000000d80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e40)=""/50, 0x32}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/56, 0x38}], 0x4, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x4, 0x40002142, &(0x7f0000001200)={0x77359400}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r10, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x90) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000001440)={{r9, &(0x7f0000001240)='wlan1\x00', 0x0, &(0x7f0000001280)={@_ha_fsid={[0x5, 0x800]}, {0x90, 0x1000, 0x5, 0x7ff}}, 0x7, &(0x7f0000001340), &(0x7f0000001380)=0x7}, {[0x10, 0xf, 0xfffffffc, 0x9e86]}, 0x8, 0x4c, &(0x7f00000013c0)=""/76}) 468.905148ms ago: executing program 2 (id=1450): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x8, 0x6, 0x0, 0x13, 0x7, 0x10001, 0x6}, &(0x7f00000003c0)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r2, 0x8}, 0x8) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r3, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 410.144212ms ago: executing program 1 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x48, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "d0e58a3f1d6e7abd10c0a67de1fefd8c90b0108024fbe12d5b9b587861fdc997da5e6ef5b384493f6c6380fede5e3643380e"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xea}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048011}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000840)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 311.101297ms ago: executing program 2 (id=1452): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const]}}, 0x0, 0x3e}, 0x28) 97.674896ms ago: executing program 1 (id=1453): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3, 0x1}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) 97.51807ms ago: executing program 2 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x8c540bc1e604fc58, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 53.273464ms ago: executing program 3 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000002700090025bd7000fddbc32511000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 0s ago: executing program 0 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "f9f5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 80.897169][ T5612] cgroup: Unknown subsys name 'net' [ 81.008375][ T5612] cgroup: Unknown subsys name 'cpuset' [ 81.019046][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.725345][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.582728][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.591923][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.604157][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.614669][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.622515][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.633620][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.638670][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.642670][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.657249][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.661647][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.668708][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.678810][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.679613][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.691082][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.698620][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.704398][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.710883][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.717145][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.728762][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.748368][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.759363][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.762511][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.769888][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.781079][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.799694][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.335625][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.343454][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.351187][ T5624] bridge_slave_0: entered allmulticast mode [ 88.359129][ T5624] bridge_slave_0: entered promiscuous mode [ 88.407300][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.415174][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.422649][ T5624] bridge_slave_1: entered allmulticast mode [ 88.430276][ T5624] bridge_slave_1: entered promiscuous mode [ 88.485586][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.512320][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.647255][ T5624] team0: Port device team_slave_0 added [ 88.656512][ T5624] team0: Port device team_slave_1 added [ 88.764126][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.771181][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.797518][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.848800][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.855905][ T5643] Bluetooth: hci1: command tx timeout [ 88.855924][ T5634] Bluetooth: hci4: command tx timeout [ 88.856314][ T5634] Bluetooth: hci3: command tx timeout [ 88.862117][ T5629] Bluetooth: hci2: command tx timeout [ 88.868298][ T5640] Bluetooth: hci0: command tx timeout [ 88.886330][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.912433][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.118851][ T5624] hsr_slave_0: entered promiscuous mode [ 89.125659][ T5624] hsr_slave_1: entered promiscuous mode [ 89.247945][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.260576][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.267985][ T5628] bridge_slave_0: entered allmulticast mode [ 89.276303][ T5628] bridge_slave_0: entered promiscuous mode [ 89.317736][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.325043][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.333066][ T5628] bridge_slave_1: entered allmulticast mode [ 89.340720][ T5628] bridge_slave_1: entered promiscuous mode [ 89.372216][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.379403][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.386779][ T5625] bridge_slave_0: entered allmulticast mode [ 89.394389][ T5625] bridge_slave_0: entered promiscuous mode [ 89.444155][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.451390][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.458878][ T5625] bridge_slave_1: entered allmulticast mode [ 89.466578][ T5625] bridge_slave_1: entered promiscuous mode [ 89.492066][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.499253][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.506737][ T5626] bridge_slave_0: entered allmulticast mode [ 89.514140][ T5626] bridge_slave_0: entered promiscuous mode [ 89.545214][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.561127][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.568755][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.576112][ T5626] bridge_slave_1: entered allmulticast mode [ 89.583742][ T5626] bridge_slave_1: entered promiscuous mode [ 89.614561][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.642533][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.649861][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.658907][ T5627] bridge_slave_0: entered allmulticast mode [ 89.666485][ T5627] bridge_slave_0: entered promiscuous mode [ 89.675652][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.682982][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.690271][ T5627] bridge_slave_1: entered allmulticast mode [ 89.699711][ T5627] bridge_slave_1: entered promiscuous mode [ 89.712007][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.764148][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.793800][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.829118][ T5628] team0: Port device team_slave_0 added [ 89.843973][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.855899][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.878686][ T5628] team0: Port device team_slave_1 added [ 89.909722][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.931716][ T5625] team0: Port device team_slave_0 added [ 89.990780][ T5625] team0: Port device team_slave_1 added [ 90.019475][ T5626] team0: Port device team_slave_0 added [ 90.027775][ T5627] team0: Port device team_slave_0 added [ 90.045665][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.053174][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.079261][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.099027][ T5626] team0: Port device team_slave_1 added [ 90.106591][ T5627] team0: Port device team_slave_1 added [ 90.143829][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.150800][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.177125][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.222476][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.229602][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.255898][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.269880][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.276884][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.303234][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.338044][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.345273][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.371315][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.402251][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.409370][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.435464][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.447405][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.454588][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.480909][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.524828][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.532632][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.558700][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.585970][ T5628] hsr_slave_0: entered promiscuous mode [ 90.593487][ T5628] hsr_slave_1: entered promiscuous mode [ 90.599750][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 90.605686][ T5628] Cannot create hsr debugfs directory [ 90.700940][ T5626] hsr_slave_0: entered promiscuous mode [ 90.707527][ T5626] hsr_slave_1: entered promiscuous mode [ 90.714176][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 90.720525][ T5626] Cannot create hsr debugfs directory [ 90.734212][ T5627] hsr_slave_0: entered promiscuous mode [ 90.740666][ T5627] hsr_slave_1: entered promiscuous mode [ 90.747155][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 90.753144][ T5627] Cannot create hsr debugfs directory [ 90.775952][ T5625] hsr_slave_0: entered promiscuous mode [ 90.782634][ T5625] hsr_slave_1: entered promiscuous mode [ 90.788881][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 90.794825][ T5625] Cannot create hsr debugfs directory [ 90.923752][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.933177][ T5634] Bluetooth: hci3: command tx timeout [ 90.933278][ T5629] Bluetooth: hci4: command tx timeout [ 90.938769][ T5640] Bluetooth: hci0: command tx timeout [ 90.944662][ T5634] Bluetooth: hci1: command tx timeout [ 90.955689][ T5640] Bluetooth: hci2: command tx timeout [ 90.965475][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.009052][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.021680][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.029683][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.039718][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.080540][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.092877][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.453909][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.470610][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.479438][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.490799][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.499189][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.510257][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.519135][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.529900][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.629732][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.646605][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.656047][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.666581][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.675645][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.686887][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.694884][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.706692][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.815727][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.826480][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.835698][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.847496][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.866442][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.877523][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.905717][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.916769][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.936294][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.977504][ T48] cfg80211: failed to load regulatory.db [ 92.047853][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.058773][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.067268][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.077221][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.095743][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.105950][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.116223][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.127027][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.142566][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.162729][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.186349][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.193863][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.226508][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.233759][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.297977][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.334773][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.342021][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.376240][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.383464][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.415614][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.548368][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.590063][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.597834][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.623134][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.646945][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.654113][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.727619][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.747325][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.775105][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.782340][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.807006][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.814246][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.882298][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.939817][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.947049][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.979759][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.987087][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.012102][ T5634] Bluetooth: hci1: command tx timeout [ 93.017573][ T5629] Bluetooth: hci0: command tx timeout [ 93.017605][ T5629] Bluetooth: hci3: command tx timeout [ 93.017625][ T5629] Bluetooth: hci4: command tx timeout [ 93.032800][ T5640] Bluetooth: hci2: command tx timeout [ 93.494989][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.098777][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.148718][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.377112][ T5628] veth0_vlan: entered promiscuous mode [ 94.407722][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.427668][ T5626] veth0_vlan: entered promiscuous mode [ 94.438768][ T5628] veth1_vlan: entered promiscuous mode [ 94.453025][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.494437][ T5626] veth1_vlan: entered promiscuous mode [ 94.504107][ T5624] veth0_vlan: entered promiscuous mode [ 94.545202][ T5624] veth1_vlan: entered promiscuous mode [ 94.599572][ T5628] veth0_macvtap: entered promiscuous mode [ 94.628137][ T5628] veth1_macvtap: entered promiscuous mode [ 94.647283][ T5627] veth0_vlan: entered promiscuous mode [ 94.669576][ T5626] veth0_macvtap: entered promiscuous mode [ 94.685159][ T5625] veth0_vlan: entered promiscuous mode [ 94.697317][ T5626] veth1_macvtap: entered promiscuous mode [ 94.713931][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.737164][ T5627] veth1_vlan: entered promiscuous mode [ 94.747910][ T5625] veth1_vlan: entered promiscuous mode [ 94.756417][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.790856][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.806146][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817145][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836751][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.850063][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.859530][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.879037][ T5624] veth0_macvtap: entered promiscuous mode [ 94.904589][ T5624] veth1_macvtap: entered promiscuous mode [ 94.927601][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.937995][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947453][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.960934][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.985125][ T5627] veth0_macvtap: entered promiscuous mode [ 95.035085][ T5627] veth1_macvtap: entered promiscuous mode [ 95.045650][ T5625] veth0_macvtap: entered promiscuous mode [ 95.069562][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.092720][ T5640] Bluetooth: hci2: command tx timeout [ 95.098219][ T5640] Bluetooth: hci4: command tx timeout [ 95.099963][ T5634] Bluetooth: hci3: command tx timeout [ 95.103919][ T5643] Bluetooth: hci0: command tx timeout [ 95.109247][ T5634] Bluetooth: hci1: command tx timeout [ 95.138577][ T5625] veth1_macvtap: entered promiscuous mode [ 95.158212][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.208804][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.221662][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.229611][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.239041][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.255373][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.267335][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.306561][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.314005][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.323819][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.356609][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.366084][ T3333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.375846][ T3333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410998][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.422465][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.423513][ T3333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440228][ T3333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.450689][ T3333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.476977][ T3333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.488853][ T3333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.514617][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.522763][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.539849][ T3333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.627094][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.645126][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.687256][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.704036][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.745948][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.783703][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.807658][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.923018][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.954910][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.990184][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.020904][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.051338][ T5827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.089583][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.113418][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.284608][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.323157][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.340627][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.596023][ T5830] syzkaller0: entered promiscuous mode [ 96.601599][ T5830] syzkaller0: entered allmulticast mode [ 98.626205][ T5881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.789761][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 98.925105][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 98.978620][ T5892] netlink: 164 bytes leftover after parsing attributes in process `syz.2.22'. [ 98.996050][ T5897] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 99.475852][ T5918] xt_hashlimit: size too large, truncated to 1048576 [ 99.544726][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.554678][ T5925] netlink: 256 bytes leftover after parsing attributes in process `syz.4.34'. [ 99.676283][ T5919] bridge_slave_0 (unregistering): left allmulticast mode [ 99.721569][ T5919] bridge_slave_0 (unregistering): left promiscuous mode [ 99.754976][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.082083][ T5953] Zero length message leads to an empty skb [ 100.503401][ T5957] bond0: Error: Cannot enslave bond to itself. [ 100.525182][ T5966] netlink: 'syz.4.44': attribute type 7 has an invalid length. [ 100.576954][ T1010] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.586846][ T5966] netlink: 'syz.4.44': attribute type 7 has an invalid length. [ 100.626857][ T1010] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.694902][ T1010] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.740056][ T1010] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.087691][ T5999] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.142921][ T5998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.150901][ T5998] IPv6: NLM_F_CREATE should be set when creating new route [ 101.158364][ T5998] IPv6: NLM_F_CREATE should be set when creating new route [ 101.372586][ T6014] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 101.433068][ T6010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.56'. [ 101.918901][ T6042] dvmrp0: entered allmulticast mode [ 102.153122][ T6049] pimreg: entered allmulticast mode [ 102.301317][ T6064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73'. [ 102.432091][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 102.730453][ T6082] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 102.853508][ T6082] ipvlan2: entered promiscuous mode [ 102.908190][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 103.402360][ T6112] syz_tun: entered allmulticast mode [ 103.462461][ T6112] dvmrp8: entered allmulticast mode [ 103.520655][ T6111] syz_tun: left allmulticast mode [ 103.725555][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 104.120615][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.130076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.153235][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.161650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.170216][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.178674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.187368][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.195830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.205675][ T6145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.216274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.471286][ T6158] syzkaller1: entered promiscuous mode [ 104.477595][ T6158] syzkaller1: entered allmulticast mode [ 104.986085][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 104.999576][ T6182] : renamed from gre0 (while UP) [ 105.032424][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.197878][ T6186] macvlan2: entered promiscuous mode [ 105.211626][ T6186] macvlan2: entered allmulticast mode [ 105.442748][ T6202] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 105.551427][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.119'. [ 105.570319][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.930795][ T6223] vlan0: entered promiscuous mode [ 106.171622][ T6228] syz.4.125 uses obsolete (PF_INET,SOCK_PACKET) [ 106.392851][ T6241] xt_hashlimit: size too large, truncated to 1048576 [ 106.654076][ T6258] netlink: 'syz.1.131': attribute type 8 has an invalid length. [ 106.760764][ T6258] tipc: Started in network mode [ 106.778435][ T6258] tipc: Node identity 5ad5d06d5559, cluster identity 4711 [ 106.794395][ T6264] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 106.799834][ T6258] tipc: Enabled bearer , priority 0 [ 106.827818][ T6263] syzkaller0: entered promiscuous mode [ 106.850869][ T6263] syzkaller0: entered allmulticast mode [ 107.077848][ T6260] bond1: (slave veth0_to_bond): making interface the new active one [ 107.103207][ T6260] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 107.116597][ T6274] tipc: Resetting bearer [ 107.301872][ T6277] syzkaller0: entered promiscuous mode [ 107.307852][ T6277] syzkaller0: entered allmulticast mode [ 107.638503][ T6251] tipc: Resetting bearer [ 107.666716][ T6251] tipc: Disabling bearer [ 109.256350][ T5820] net_ratelimit: 222 callbacks suppressed [ 109.256368][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.478332][ T6339] netlink: 'syz.4.153': attribute type 21 has an invalid length. [ 109.503894][ T6339] netlink: 128 bytes leftover after parsing attributes in process `syz.4.153'. [ 109.590238][ T6339] netlink: 3 bytes leftover after parsing attributes in process `syz.4.153'. [ 109.614010][ T6338] tipc: Started in network mode [ 109.639769][ T6338] tipc: Node identity ba040f32acf9, cluster identity 4711 [ 109.665247][ T6338] tipc: Enabled bearer , priority 0 [ 109.687564][ T6338] syzkaller0: entered promiscuous mode [ 109.701875][ T6338] syzkaller0: entered allmulticast mode [ 109.749215][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'. [ 109.771240][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 109.820819][ T6338] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 109.841398][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 109.861897][ T6338] tipc: Resetting bearer [ 109.890480][ T6336] tipc: Resetting bearer [ 109.913341][ T6336] tipc: Disabling bearer [ 110.065938][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.078201][ T6358] netlink: 'syz.1.159': attribute type 32 has an invalid length. [ 110.105096][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 110.238405][ T6358] bond1: option coupled_control: invalid value (3) [ 110.267564][ T6358] bond1 (unregistering): Released all slaves [ 110.535826][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.665392][ T6406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.167'. [ 110.796651][ T6417] syzkaller1: entered promiscuous mode [ 110.802545][ T6417] syzkaller1: entered allmulticast mode [ 110.997492][ T6421] bond1 (unregistering): Released all slaves [ 111.096684][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.140346][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.292529][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.824835][ T6357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.910801][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 113.192886][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.504396][ T6455] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 113.534763][ T6455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.184'. [ 113.550650][ T6457] netlink: 124 bytes leftover after parsing attributes in process `syz.2.185'. [ 113.732131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.872506][ T6475] team0: No ports can be present during mode change [ 113.926716][ T6477] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 113.940046][ T6477] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.222103][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.256235][ T6493] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 114.275718][ T6493] bond2 (unregistering): Released all slaves [ 114.769693][ T35] bond0: (slave bond_slave_0): interface is now down [ 114.810628][ T35] bond0: (slave bond_slave_1): interface is now down [ 114.879904][ T35] bond0: now running without any active interface! [ 115.107671][ T6543] __nla_validate_parse: 4 callbacks suppressed [ 115.107690][ T6543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.209'. [ 115.139516][ T6535] bond2 (unregistering): Released all slaves [ 115.159859][ T6545] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.205'. [ 115.229856][ T6550] xt_nfacct: accounting object `syz1' does not exist [ 115.241321][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 115.264447][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.282072][ T6553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.206'. [ 115.308827][ T6530] syzkaller0: entered promiscuous mode [ 115.315357][ T6530] syzkaller0: entered allmulticast mode [ 115.336176][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.402481][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.410399][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.418100][ T6557] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 115.429224][ T6557] netlink: 'syz.0.211': attribute type 11 has an invalid length. [ 115.437837][ T6557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.211'. [ 115.447609][ T6557] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 115.455813][ T6557] netlink: 'syz.0.211': attribute type 11 has an invalid length. [ 115.467089][ T6557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.211'. [ 115.526180][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.539924][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.656969][ T6546] vxcan1: entered allmulticast mode [ 115.668530][ T6534] syzkaller0: entered promiscuous mode [ 115.674633][ T6534] syzkaller0: entered allmulticast mode [ 115.794785][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.804044][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.826211][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.912813][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.329516][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.900084][ T6609] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 117.341440][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.085091][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 118.103998][ T6619] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 118.115507][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 118.211056][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 118.335368][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 118.372916][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.401871][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.676496][ T6647] netlink: 'syz.1.235': attribute type 13 has an invalid length. [ 118.748578][ T6662] netlink: 'syz.2.239': attribute type 2 has an invalid length. [ 118.821349][ T6650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.102308][ T6672] syzkaller0: entered promiscuous mode [ 119.133695][ T6672] syzkaller0: entered allmulticast mode [ 119.357796][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.366444][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.452335][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.502885][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.722301][ T6709] netlink: 'syz.0.252': attribute type 9 has an invalid length. [ 119.747628][ T6710] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 119.775734][ T6713] netlink: 'syz.2.251': attribute type 6 has an invalid length. [ 120.137289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.352249][ T6744] __nla_validate_parse: 8 callbacks suppressed [ 120.352269][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 120.532693][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.745456][ T6751] veth3: entered allmulticast mode [ 120.775128][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.855860][ T6761] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 120.961494][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.266'. [ 121.022814][ T6767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.237524][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 121.301104][ T6779] syzkaller1: entered promiscuous mode [ 121.311816][ T6779] syzkaller1: entered allmulticast mode [ 121.327657][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 121.337479][ T6779] netlink: 176 bytes leftover after parsing attributes in process `syz.3.272'. [ 121.346995][ T6779] netlink: 'syz.3.272': attribute type 5 has an invalid length. [ 121.355564][ T6783] trusted_key: syz.2.273 sent an empty control message without MSG_MORE. [ 121.359640][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031aeb000: rx timeout, send abort [ 121.374534][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031aeb000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 121.390218][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031aea400: rx timeout, send abort [ 121.399070][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031aea400: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 121.425883][ T5358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.574029][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.587950][ T6792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.275'. [ 121.855367][ T6806] lo speed is unknown, defaulting to 1000 [ 121.878316][ T6806] lo speed is unknown, defaulting to 1000 [ 121.904878][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 121.957094][ T6806] lo speed is unknown, defaulting to 1000 [ 121.995650][ T6806] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 122.067984][ T6806] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 122.086508][ T6819] netlink: 5 bytes leftover after parsing attributes in process `syz.1.280'. [ 122.121582][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 122.160739][ T6806] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 122.319984][ T6806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.533526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.585859][ T6806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.649479][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.819202][ T6845] netlink: 'syz.1.287': attribute type 21 has an invalid length. [ 122.842475][ T6845] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.903183][ T6845] Cannot find add_set index 0 as target [ 122.944745][ T6806] lo speed is unknown, defaulting to 1000 [ 122.984248][ T6806] lo speed is unknown, defaulting to 1000 [ 123.032588][ T6806] lo speed is unknown, defaulting to 1000 [ 123.070885][ T6860] x_tables: unsorted underflow at hook 2 [ 123.092709][ T6806] lo speed is unknown, defaulting to 1000 [ 123.120948][ T6806] lo speed is unknown, defaulting to 1000 [ 123.129275][ T6858] syzkaller0: entered promiscuous mode [ 123.151255][ T6858] syzkaller0: entered allmulticast mode [ 123.280005][ T6872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.294'. [ 123.380151][ T6872] unsupported nlmsg_type 40 [ 123.663538][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.288927][ T6917] ip6gre1: entered allmulticast mode [ 124.807450][ T6956] openvswitch: netlink: IPv6 tunnel dst address is zero [ 124.902991][ T6959] IPv6: sit1: Disabled Multicast RS [ 125.001439][ T6960] netlink: 'syz.3.315': attribute type 25 has an invalid length. [ 125.354830][ T6991] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 125.543569][ T6991] : entered promiscuous mode [ 125.815145][ T7010] netlink: 'syz.4.328': attribute type 19 has an invalid length. [ 125.849039][ T7011] __nla_validate_parse: 2 callbacks suppressed [ 125.849069][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 125.886474][ T7013] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 125.926286][ T7014] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 125.968200][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.331'. [ 126.002085][ T7020] tunl0: entered promiscuous mode [ 126.008724][ T7017] nbd: must specify a device to reconfigure [ 126.062033][ T7020] netlink: 'syz.2.331': attribute type 3 has an invalid length. [ 126.090478][ T7020] netlink: 9 bytes leftover after parsing attributes in process `syz.2.331'. [ 126.129052][ T7025] netlink: 'syz.2.331': attribute type 3 has an invalid length. [ 126.159716][ T7025] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 126.173992][ T7024] syzkaller1: entered promiscuous mode [ 126.180356][ T7024] syzkaller1: entered allmulticast mode [ 126.186862][ T7025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.331'. [ 126.227169][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 126.267994][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 126.721937][ T7051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.341'. [ 127.125960][ T7071] xt_hashlimit: size too large, truncated to 1048576 [ 127.256913][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'. [ 127.278785][ T7082] xt_hashlimit: size too large, truncated to 1048576 [ 127.308644][ T7080] 8021q: VLANs not supported on sit0 [ 127.329106][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'. [ 127.356444][ T7080] syzkaller1: entered promiscuous mode [ 127.372335][ T7080] syzkaller1: entered allmulticast mode [ 127.416803][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.714596][ T7096] netlink: 244 bytes leftover after parsing attributes in process `syz.2.353'. [ 128.699136][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.707744][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.784663][ T7149] tc_dump_action: action bad kind [ 128.790889][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.798207][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.805821][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.813148][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.853957][ T7143] bridge0: entered promiscuous mode [ 128.876983][ T7143] bridge0: entered allmulticast mode [ 129.072693][ T7163] netlink: 'syz.4.372': attribute type 10 has an invalid length. [ 129.151360][ T7169] x_tables: ip_tables: ah match: only valid for protocol 51 [ 129.166203][ T7163] team0: Port device geneve1 added [ 129.179457][ T7169] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 129.218845][ T7169] bond2: entered promiscuous mode [ 129.224627][ T7169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.686700][ T7195] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.825008][ T7203] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 130.244309][ T7230] netlink: 'syz.1.391': attribute type 4 has an invalid length. [ 130.269438][ T7230] netlink: 'syz.1.391': attribute type 4 has an invalid length. [ 130.940163][ T7270] SET target dimension over the limit! [ 131.107782][ T7276] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.163017][ T7283] __nla_validate_parse: 12 callbacks suppressed [ 131.163039][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 132.674631][ T5640] Bluetooth: hci4: link tx timeout [ 132.682768][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.935134][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194133][ T5643] Bluetooth: hci4: link tx timeout [ 133.199437][ T5643] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.044097][ T7276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.514711][ T7339] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 134.570729][ T7349] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 134.599334][ T5643] Bluetooth: hci4: link tx timeout [ 134.604944][ T5643] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.662358][ T7339] team0: Port device dummy0 added [ 134.691904][ T5643] Bluetooth: hci4: command 0x0405 tx timeout [ 134.728625][ T7349] team0: Port device dummy0 removed [ 134.997414][ T7361] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 135.064890][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.744697][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 135.907443][ T7408] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.935456][ T7408] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 135.971432][ T7408] netlink: 666 bytes leftover after parsing attributes in process `syz.4.447'. [ 136.231952][ T7427] syzkaller0: entered promiscuous mode [ 136.237699][ T7427] syzkaller0: entered allmulticast mode [ 136.505501][ T7445] netlink: 'syz.0.456': attribute type 1 has an invalid length. [ 136.608309][ T7449] netlink: 'syz.3.457': attribute type 8 has an invalid length. [ 136.630273][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 136.696993][ T7450] bond1: (slave veth0_to_bond): making interface the new active one [ 136.713699][ T7450] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.753035][ T7456] netlink: 232 bytes leftover after parsing attributes in process `syz.4.459'. [ 136.781048][ T7451] macvlan2: entered promiscuous mode [ 136.805327][ T7451] macvlan2: entered allmulticast mode [ 136.826895][ T7451] bond1: entered promiscuous mode [ 136.832418][ T7451] veth0_to_bond: entered promiscuous mode [ 136.840801][ T7451] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.849994][ T7451] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.870940][ T7451] bond1: left promiscuous mode [ 136.878981][ T7451] veth0_to_bond: left promiscuous mode [ 137.099274][ T7469] netlink: 'syz.3.463': attribute type 12 has an invalid length. [ 137.426432][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 137.825744][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 138.309614][ T7535] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 138.824513][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 138.986528][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 139.493709][ T7584] syzkaller0: entered promiscuous mode [ 139.499292][ T7584] syzkaller0: entered allmulticast mode [ 139.746524][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 141.727633][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 141.762608][ T7651] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 141.800192][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 141.813452][ T7661] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 141.895388][ T7661] bond2: entered promiscuous mode [ 141.919215][ T7661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.003179][ T7665] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.015922][ T7665] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 142.027309][ T7665] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 142.179424][ T7677] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 142.340143][ T7675] macvlan2: entered promiscuous mode [ 142.375576][ T7675] macvlan2: entered allmulticast mode [ 142.413093][ T7675] bond1: entered promiscuous mode [ 142.426612][ T7675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.516489][ T7675] bond1: left promiscuous mode [ 142.605581][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.614100][ T7692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.629786][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.648010][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 142.652557][ T7692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.785586][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 142.808165][ T7705] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.832346][ T7705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.515'. [ 142.925170][ T7710] lo: Caught tx_queue_len zero misconfig [ 142.944828][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 143.208441][ T7720] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 143.349635][ T7733] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 143.360080][ T7733] syzkaller1: group set to 0 [ 143.376886][ T7733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.400484][ T7733] IPv4: Oversized IP packet from 127.202.26.0 [ 143.635644][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.655159][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.670448][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.682211][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 143.697747][ T7755] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 143.705473][ T7751] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 143.705543][ T7751] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 143.834762][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.842666][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.116576][ T7767] bridge_slave_1: left allmulticast mode [ 144.136872][ T7767] bridge_slave_1: left promiscuous mode [ 144.149396][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.183356][ T7767] bond1: (slave veth0_to_bond): Releasing active interface [ 144.210611][ T7767] bond0: (slave bond_slave_0): Releasing backup interface [ 144.241652][ T7767] bond0: (slave bond_slave_1): Releasing backup interface [ 144.280064][ T7767] team0: Port device team_slave_0 removed [ 144.305736][ T7767] team0: Port device team_slave_1 removed [ 144.320617][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.329974][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.343276][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.350966][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.373920][ T7767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.502959][ T7784] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.116847][ T7815] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 145.147542][ T7815] netlink: 'syz.2.546': attribute type 7 has an invalid length. [ 145.165859][ T7815] netlink: 'syz.2.546': attribute type 8 has an invalid length. [ 145.195296][ T7815] NCSI netlink: No device for ifindex 65584 [ 145.322418][ T7812] syzkaller0: entered promiscuous mode [ 145.331937][ T7812] syzkaller0: entered allmulticast mode [ 145.621110][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.628448][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 145.635809][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 145.643126][ T7838] IPv6: NLM_F_CREATE should be set when creating new route [ 145.663028][ T7838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.320120][ T7857] __nla_validate_parse: 66 callbacks suppressed [ 147.320142][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 147.460228][ T7860] netlink: 'syz.0.559': attribute type 1 has an invalid length. [ 147.468960][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.230832][ T7910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.574'. [ 148.459454][ T7919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.547542][ T7917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.576'. [ 148.580071][ T7917] netlink: 52 bytes leftover after parsing attributes in process `syz.0.576'. [ 148.773895][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 148.803168][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 148.839823][ T7927] : renamed from gre0 [ 149.067698][ T7935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.102740][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 149.136287][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.203516][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.261235][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.281114][ T24] lo speed is unknown, defaulting to 1000 [ 149.383941][ T7957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.397746][ T7942] macvlan0: entered promiscuous mode [ 149.417625][ T7920] netlink: 'syz.2.575': attribute type 1 has an invalid length. [ 149.624685][ T7962] bond2: option all_slaves_active: invalid value (222) [ 149.657078][ T7962] bond2 (unregistering): Released all slaves [ 150.634509][ T8034] netlink: 'syz.3.607': attribute type 5 has an invalid length. [ 150.880110][ T8038] can: request_module (can-proto-0) failed. [ 151.430564][ T8077] syzkaller0: entered promiscuous mode [ 151.456570][ T8077] syzkaller0: entered allmulticast mode [ 151.685926][ T8077] bond2: invalid ARP target 0.0.0.0 specified for addition [ 151.701552][ T8077] bond2: option arp_ip_target: invalid value (0) [ 151.725432][ T8077] bond2 (unregistering): Released all slaves [ 151.734813][ T8089] netlink: 'syz.3.621': attribute type 2 has an invalid length. [ 151.757811][ T8089] netlink: 'syz.3.621': attribute type 2 has an invalid length. [ 152.255224][ T8110] netlink: 'syz.0.624': attribute type 24 has an invalid length. [ 152.420140][ T8098] macvlan0: left promiscuous mode [ 152.505291][ T8098] veth3: left allmulticast mode [ 152.514215][ T5820] lo speed is unknown, defaulting to 1000 [ 152.527058][ T8100] geneve3: entered promiscuous mode [ 152.529647][ T5820] syz2: Port: 1 Link DOWN [ 152.533260][ T8100] geneve3: entered allmulticast mode [ 152.548499][ T8103] tipc: Enabling of bearer rejected, failed to enable media [ 152.562501][ T8107] netlink: 'syz.4.628': attribute type 23 has an invalid length. [ 152.598850][ T1020] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.623836][ T1020] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.645650][ T1020] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.674479][ T1020] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.698718][ T8122] netlink: 'syz.1.631': attribute type 12 has an invalid length. [ 152.705255][ T1020] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.747730][ T1020] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 152.778914][ T1020] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.811837][ T1020] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 153.128580][ T8147] __nla_validate_parse: 8 callbacks suppressed [ 153.128599][ T8147] netlink: 88 bytes leftover after parsing attributes in process `syz.2.638'. [ 153.206829][ T8145] netlink: 88 bytes leftover after parsing attributes in process `syz.2.638'. [ 153.523544][ T8148] syzkaller0: entered promiscuous mode [ 153.529303][ T8148] syzkaller0: entered allmulticast mode [ 153.701832][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 153.791509][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 154.115723][ T8187] netlink: 124 bytes leftover after parsing attributes in process `syz.0.649'. [ 155.451544][ T8193] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.579924][ T8195] syzkaller0: entered promiscuous mode [ 155.602859][ T8195] syzkaller0: entered allmulticast mode [ 155.766419][ T8209] ip6t_rpfilter: unknown options [ 156.122167][ T8219] bond4: entered promiscuous mode [ 156.134002][ T8219] bond4: entered allmulticast mode [ 156.148973][ T8219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.240973][ T8229] netlink: 'syz.4.664': attribute type 29 has an invalid length. [ 156.283336][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 156.390610][ T8244] netlink: 52 bytes leftover after parsing attributes in process `syz.2.667'. [ 156.674927][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.670'. [ 156.698385][ T8260] tipc: Enabling of bearer rejected, failed to enable media [ 156.762887][ T8262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.268976][ T8279] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 157.292340][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 157.364416][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.380110][ T8279] netlink: 'syz.2.675': attribute type 15 has an invalid length. [ 157.394049][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.404120][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 157.417397][ T8281] syzkaller0: entered promiscuous mode [ 157.424730][ T8281] syzkaller0: entered allmulticast mode [ 157.433056][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.448990][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.460990][ T8289] sctp: [Deprecated]: syz.3.678 (pid 8289) Use of int in max_burst socket option. [ 157.460990][ T8289] Use struct sctp_assoc_value instead [ 157.563586][ T8288] team0 (unregistering): Port device team_slave_0 removed [ 157.589395][ T8293] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 157.605588][ T8288] team0 (unregistering): Port device team_slave_1 removed [ 157.659176][ T8293] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 157.907147][ T8307] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 158.146963][ T8324] __nla_validate_parse: 4 callbacks suppressed [ 158.146984][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 158.284354][ T8328] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 158.319007][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'. [ 158.479714][ T8339] netlink: 68 bytes leftover after parsing attributes in process `syz.1.693'. [ 158.589109][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 158.784852][ T8356] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 158.796427][ T8356] : renamed from dummy0 (while UP) [ 158.857342][ T8362] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 160.954573][ T8309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.188599][ T8373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.303120][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.357320][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.380240][ T8390] netlink: 'syz.4.702': attribute type 10 has an invalid length. [ 161.410472][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 161.595889][ T8397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 161.597477][ T8390] geneve3: entered promiscuous mode [ 161.624095][ T8390] geneve3: entered allmulticast mode [ 161.699270][ T8401] geneve2: entered promiscuous mode [ 161.704758][ T8401] geneve2: entered allmulticast mode [ 161.759984][ T35] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.788015][ T35] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.816901][ T35] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.837622][ T35] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 161.874521][ T8403] netlink: 112 bytes leftover after parsing attributes in process `syz.0.711'. [ 161.979847][ T8406] tc_dump_action: action bad kind [ 162.334955][ T8421] Bluetooth: MGMT ver 1.23 [ 162.612248][ T8431] bridge3: entered promiscuous mode [ 162.619757][ T8431] bridge3: entered allmulticast mode [ 162.674299][ T8433] gtp0: entered promiscuous mode [ 162.685173][ T8433] gtp0: entered allmulticast mode [ 162.710478][ T8435] tun0: tun_chr_ioctl cmd 1074025675 [ 162.725158][ T8435] tun0: persist enabled [ 162.737886][ T8435] tun0: tun_chr_ioctl cmd 1074025677 [ 162.757232][ T8435] tun0: linktype set to 824 [ 162.888211][ T8445] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 163.339552][ T8473] syz_tun: refused to change device tx_queue_len [ 163.437762][ T8483] __nla_validate_parse: 12 callbacks suppressed [ 163.437782][ T8483] netlink: 148 bytes leftover after parsing attributes in process `syz.1.734'. [ 163.820474][ T8499] netlink: 'syz.1.740': attribute type 21 has an invalid length. [ 163.846072][ T8499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.740'. [ 163.970688][ T8508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.000233][ T8511] xt_l2tp: v2 doesn't support IP mode [ 164.029188][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.112610][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.323838][ T8524] sctp: [Deprecated]: syz.3.747 (pid 8524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.323838][ T8524] Use struct sctp_sack_info instead [ 164.350890][ T8517] syzkaller0: entered promiscuous mode [ 164.357316][ T8517] syzkaller0: entered allmulticast mode [ 165.166575][ T8524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 166.277631][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 166.326594][ T8556] syzkaller0: entered promiscuous mode [ 166.344546][ T8556] syzkaller0: entered allmulticast mode [ 166.402166][ T8558] syzkaller0: entered promiscuous mode [ 166.418970][ T8558] syzkaller0: entered allmulticast mode [ 166.909486][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 167.453606][ T8617] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 167.498871][ T8617] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 167.559190][ T8617] bond2 (unregistering): Released all slaves [ 167.736977][ T8629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'. [ 167.795600][ T8632] tipc: Started in network mode [ 167.810860][ T8632] tipc: Node identity 5efd7990f95d, cluster identity 4711 [ 167.826208][ T8632] tipc: Enabled bearer , priority 0 [ 167.842412][ T8632] syzkaller0: entered promiscuous mode [ 167.858211][ T8632] syzkaller0: entered allmulticast mode [ 167.930369][ T8632] tipc: Resetting bearer [ 168.023584][ T8631] tipc: Resetting bearer [ 168.048457][ T8640] netlink: 256 bytes leftover after parsing attributes in process `syz.4.784'. [ 168.083108][ T8631] tipc: Disabling bearer [ 168.159530][ T8640] syzkaller0: entered promiscuous mode [ 168.184145][ T8640] syzkaller0: entered allmulticast mode [ 168.252610][ T35] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 168.413876][ T8651] netlink: 'syz.1.787': attribute type 32 has an invalid length. [ 168.430068][ T8652] netlink: 56 bytes leftover after parsing attributes in process `syz.2.786'. [ 168.449114][ T8651] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 168.638176][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 168.673057][ T8657] netlink: 'syz.2.788': attribute type 19 has an invalid length. [ 168.705215][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 168.736719][ T8657] netlink: 'syz.2.788': attribute type 19 has an invalid length. [ 168.775474][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'. [ 168.831431][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 168.852270][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 169.177115][ T8682] team_slave_1: Caught tx_queue_len zero misconfig [ 169.364213][ T8694] syzkaller0: entered promiscuous mode [ 169.380009][ T8694] syzkaller0: entered allmulticast mode [ 169.400734][ T8697] syz_tun: refused to change device tx_queue_len [ 169.523051][ T8705] nbd: must specify a size in bytes for the device [ 169.717823][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 169.737528][ T8708] bond0: Caught tx_queue_len zero misconfig [ 170.261159][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 170.435542][ T8754] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 170.462279][ T8754] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 170.477299][ T8754] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 170.496323][ T8754] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 170.504457][ T8754] netlink: 192 bytes leftover after parsing attributes in process `syz.2.818'. [ 170.546294][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.821'. [ 170.903899][ T8774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.825'. [ 171.309249][ T8794] tunl0: entered promiscuous mode [ 171.327789][ T8794] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 171.392959][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.407201][ T8797] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 171.537718][ T8807] xt_l2tp: invalid flags combination: 0 [ 171.691699][ T8813] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 171.721252][ T8813] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 171.785364][ T8821] x_tables: duplicate entry at hook 1 [ 171.803884][ T8821] x_tables: duplicate entry at hook 1 [ 172.758998][ T8871] syzkaller0: entered promiscuous mode [ 172.766953][ T8871] syzkaller0: entered allmulticast mode [ 172.932664][ T8904] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 172.946294][ T8904] openvswitch: netlink: Message has 512 unknown bytes. [ 172.946360][ T8886] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 173.018652][ T8899] bond2: entered promiscuous mode [ 173.042444][ T8899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.071195][ T8913] sctp: [Deprecated]: syz.2.863 (pid 8913) Use of int in maxseg socket option. [ 173.071195][ T8913] Use struct sctp_assoc_value instead [ 173.135480][ T8907] bond2: (slave bridge2): making interface the new active one [ 173.146912][ T8907] bridge2: entered promiscuous mode [ 173.155568][ T8907] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 173.841118][ T8938] __nla_validate_parse: 9 callbacks suppressed [ 173.841139][ T8938] netlink: 64 bytes leftover after parsing attributes in process `syz.0.868'. [ 175.150362][ T8928] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.184273][ T8939] syzkaller1: entered promiscuous mode [ 175.190793][ T8939] syzkaller1: entered allmulticast mode [ 175.207002][ T8960] Bluetooth: MGMT ver 1.23 [ 175.510045][ T8969] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.524464][ T8946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.534204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.719234][ T8976] netlink: 240 bytes leftover after parsing attributes in process `syz.0.878'. [ 175.964178][ T8985] validate_nla: 4 callbacks suppressed [ 175.964196][ T8985] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 176.007497][ T8990] netlink: 'syz.0.882': attribute type 7 has an invalid length. [ 176.075390][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.884'. [ 176.110521][ T8995] netlink: 'syz.4.884': attribute type 11 has an invalid length. [ 176.135070][ T8995] netlink: 'syz.4.884': attribute type 4 has an invalid length. [ 176.177638][ T8995] netlink: 224 bytes leftover after parsing attributes in process `syz.4.884'. [ 176.313039][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 176.445975][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 176.476103][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 176.636996][ T9024] 8021q: VLANs not supported on ipvlan0 [ 176.737062][ T9026] syzkaller0: entered promiscuous mode [ 176.745994][ T9026] syzkaller0: entered allmulticast mode [ 177.146565][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.903'. [ 177.384061][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 177.495621][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 177.666047][ T9065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.720733][ T9072] bond3: (slave batadv2): Opening slave failed [ 177.800237][ T9080] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 177.850856][ T9080] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.877249][ T9080] gretap1: entered promiscuous mode [ 177.886666][ T9080] gretap1: entered allmulticast mode [ 177.896759][ T9082] veth1_to_bond: entered allmulticast mode [ 177.903564][ T9084] veth1_to_bond: left allmulticast mode [ 178.465145][ T9122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.840384][ T9135] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.904783][ T9145] __nla_validate_parse: 6 callbacks suppressed [ 178.904804][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 178.951125][ T9149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 178.993896][ T9148] netlink: 144 bytes leftover after parsing attributes in process `syz.3.934'. [ 179.176115][ T9140] syzkaller0: entered promiscuous mode [ 179.205177][ T9140] syzkaller0: entered allmulticast mode [ 179.981256][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 181.128152][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 181.320238][ T9201] netlink: 72 bytes leftover after parsing attributes in process `syz.4.948'. [ 181.380564][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 181.507890][ T9210] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 181.531162][ T9213] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 181.552532][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 181.563950][ T9214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.950'. [ 181.623908][ T9213] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 181.759019][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.954'. [ 181.848782][ T9229] netlink: 'syz.0.957': attribute type 7 has an invalid length. [ 182.191976][ T9244] ip6tnl0: Caught tx_queue_len zero misconfig [ 182.217998][ T9241] syzkaller1: entered promiscuous mode [ 182.251425][ T9241] syzkaller1: entered allmulticast mode [ 182.626617][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.215351][ T9324] syzkaller0: entered promiscuous mode [ 183.220969][ T9324] syzkaller0: entered allmulticast mode [ 183.238739][ T9326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.433418][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.440774][ T9338] bridge0: port 2(bridge_slave_1) entered listening state [ 183.448301][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.455567][ T9338] bridge0: port 1(bridge_slave_0) entered listening state [ 183.555834][ T9338] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 183.617350][ T9345] syzkaller0: entered promiscuous mode [ 183.632090][ T9345] syzkaller0: entered allmulticast mode [ 183.709130][ T9352] IPVS: ip_vs_add_dest(): server weight less than zero [ 183.720975][ T5736] IPVS: starting estimator thread 0... [ 183.766153][ T9359] netlink: 'syz.4.985': attribute type 1 has an invalid length. [ 183.774769][ T9358] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 183.818989][ T9358] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 183.828721][ T9353] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.900102][ T9358] bond2: entered promiscuous mode [ 183.917785][ T9358] bond2: entered allmulticast mode [ 184.103423][ T9372] __nla_validate_parse: 5 callbacks suppressed [ 184.103439][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 184.167976][ T9377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.989'. [ 184.266600][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 184.923830][ T9366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.938223][ T9397] netlink: 'syz.4.994': attribute type 11 has an invalid length. [ 184.960942][ T9397] netlink: 'syz.4.994': attribute type 11 has an invalid length. [ 184.992155][ T9397] netlink: 228 bytes leftover after parsing attributes in process `syz.4.994'. [ 185.281565][ T9416] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 185.393906][ T9425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'. [ 185.475505][ T9428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1002'. [ 185.515378][ T9435] netlink: 'syz.3.1004': attribute type 4 has an invalid length. [ 185.532107][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 185.620318][ T9425] syzkaller0: entered promiscuous mode [ 185.633355][ T9425] syzkaller0: entered allmulticast mode [ 185.653221][ T9424] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 185.725330][ T5358] lo speed is unknown, defaulting to 1000 [ 185.762307][ T5358] syz2: Port: 1 Link ACTIVE [ 185.907269][ T9445] "syz.3.1004" (9445) uses obsolete ecb(arc4) skcipher [ 185.917834][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 185.955076][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'. [ 186.164915][ T9473] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1009'. [ 187.527141][ T5640] Bluetooth: hci4: link tx timeout [ 187.532368][ T5640] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.064813][ T9510] openvswitch: netlink: IP tunnel dst address not specified [ 188.102022][ T9510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.530407][ T9531] netlink: 'syz.4.1023': attribute type 3 has an invalid length. [ 188.553390][ T9528] netlink: 'syz.4.1023': attribute type 3 has an invalid length. [ 188.791489][ T9542] vti0: entered allmulticast mode [ 189.366797][ T9567] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 189.426212][ T9567] bond3 (unregistering): Released all slaves [ 189.572723][ T5643] Bluetooth: hci4: command 0x0405 tx timeout [ 189.884812][ T9607] __nla_validate_parse: 3 callbacks suppressed [ 189.884831][ T9607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1043'. [ 189.966903][ T9611] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.007686][ T9612] netlink: 'syz.2.1044': attribute type 4 has an invalid length. [ 190.018159][ T9611] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.068526][ T9614] netlink: 'syz.2.1044': attribute type 4 has an invalid length. [ 190.109420][ T9611] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.208424][ T9618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.253833][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 190.275044][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 190.302027][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 190.325785][ T9625] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 190.358910][ T9624] team0: Port device xfrm0 added [ 190.376745][ T9618] tipc: Enabled bearer , priority 0 [ 190.538922][ T9635] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1048'. [ 191.208667][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1056'. [ 191.380029][ T5763] tipc: Node number set to 385683250 [ 191.588283][ T9680] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 191.989018][ T9698] ipt_ECN: cannot use operation on non-tcp rule [ 192.473717][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 192.868797][ T9749] veth0_to_bridge: entered promiscuous mode [ 193.014476][ T9748] veth0_to_bridge: left promiscuous mode [ 193.055361][ T29] audit: type=1804 audit(1784533104.258:2): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1080" name="/newroot/213/cgroup.controllers" dev="tmpfs" ino=1104 res=1 errno=0 [ 193.196043][ T29] audit: type=1800 audit(1784533104.298:3): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1080" name="cgroup.controllers" dev="tmpfs" ino=1104 res=0 errno=0 [ 193.627540][ T9781] xt_TCPMSS: Only works on TCP SYN packets [ 193.746771][ T9780] block nbd0: server does not support multiple connections per device. [ 193.800823][ T9780] block nbd0: shutting down sockets [ 194.106432][ T9799] tipc: Started in network mode [ 194.126398][ T9799] tipc: Node identity 46ce09dd63a1, cluster identity 4711 [ 194.135727][ T9799] tipc: Enabled bearer , priority 0 [ 194.375659][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446678][ T9804] syzkaller0: entered promiscuous mode [ 194.456075][ T9804] syzkaller0: entered allmulticast mode [ 194.462822][ T9804] tipc: Resetting bearer [ 194.704557][ T9315] tipc: Resetting bearer [ 194.715800][ T9789] tipc: Resetting bearer [ 194.763482][ T9830] x_tables: unsorted underflow at hook 3 [ 195.075218][ T9844] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.086758][ T9844] __nla_validate_parse: 7 callbacks suppressed [ 195.086776][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 195.383025][ T9857] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 196.569461][ T9789] tipc: Disabling bearer [ 196.634614][ T5763] tipc: Node number set to 628034013 [ 196.733410][ T9854] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 197.558049][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1112'. [ 197.573967][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 197.628183][ T9919] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 197.669091][ T9919] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 197.706993][ T9919] netlink: 'syz.4.1112': attribute type 2 has an invalid length. [ 197.716635][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 197.738507][ T9919] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1112'. [ 197.964096][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 198.739180][ T9975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 198.759165][ T9976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 198.819191][ T9983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1119'. [ 198.853529][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 198.862177][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 198.881622][ T9986] openvswitch: netlink: ERSPAN option length err (len 9268, max 255). [ 198.899007][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 198.941976][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.792135][T10033] sctp: [Deprecated]: syz.4.1133 (pid 10033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.792135][T10033] Use struct sctp_sack_info instead [ 200.173647][T10059] __nla_validate_parse: 4 callbacks suppressed [ 200.173668][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 200.254637][ T9316] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 200.255022][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 200.305658][ T9316] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 200.354071][ T9316] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 200.394244][ T9316] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 201.501434][T10120] geneve2: entered promiscuous mode [ 202.064716][ T9299] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 202.276294][T10170] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1166'. [ 202.308806][T10162] netlink: 'syz.1.1163': attribute type 11 has an invalid length. [ 202.354922][T10170] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1166'. [ 202.434059][T10167] macvlan0: entered promiscuous mode [ 202.770738][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'. [ 202.865449][T10205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1172'. [ 202.961074][T10208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1173'. [ 203.012424][T10208] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1173'. [ 203.150943][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 203.165860][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 204.053411][T10270] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 204.068421][T10270] bond5 (unregistering): Released all slaves [ 204.479715][T10292] sctp: [Deprecated]: syz.4.1198 (pid 10292) Use of int in max_burst socket option deprecated. [ 204.479715][T10292] Use struct sctp_assoc_value instead [ 204.526369][T10294] openvswitch: netlink: IP tunnel dst address not specified [ 204.848390][T10305] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 204.887105][T10305] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 205.011569][T10313] syzkaller0: entered promiscuous mode [ 205.034548][T10313] syzkaller0: entered allmulticast mode [ 205.127590][T10329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 205.245297][T10336] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 205.568063][T10348] __nla_validate_parse: 5 callbacks suppressed [ 205.568077][T10348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1216'. [ 205.687902][T10351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1218'. [ 205.809740][T10354] x_tables: duplicate underflow at hook 2 [ 205.898763][T10363] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 205.915856][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 205.928230][T10363] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1222'. [ 205.960599][T10360] openvswitch: netlink: IP tunnel dst address not specified [ 206.000014][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 206.056394][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 206.099346][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1225'. [ 206.114932][T10367] vlan2: entered allmulticast mode [ 206.226877][T10368] vlan2: entered allmulticast mode [ 206.599836][T10398] tipc: Enabling of bearer rejected, failed to enable media [ 206.701279][T10405] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1232'. [ 206.970493][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 207.018859][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 207.406077][T10449] syzkaller0: entered promiscuous mode [ 207.429270][T10449] syzkaller0: entered allmulticast mode [ 207.860527][T10468] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 207.899186][T10464] netlink: 'syz.1.1244': attribute type 3 has an invalid length. [ 207.911336][T10464] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 208.307251][T10499] netlink: 'syz.2.1255': attribute type 2 has an invalid length. [ 208.379818][T10504] netlink: 'syz.2.1255': attribute type 2 has an invalid length. [ 208.647739][T10513] netlink: 'syz.2.1260': attribute type 28 has an invalid length. [ 208.656391][T10513] netlink: 'syz.2.1260': attribute type 3 has an invalid length. [ 209.268591][T10541] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 209.350630][T10541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.446333][T10541] bond3: (slave geneve4): making interface the new active one [ 209.461423][T10541] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 209.480925][ T9301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.490838][ T9301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.504530][ T9301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.514158][ T9301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.665211][T10562] syzkaller0: entered promiscuous mode [ 209.670931][T10562] syzkaller0: entered allmulticast mode [ 210.154541][T10547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.797590][T10613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.825640][T10622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.857030][T10630] __nla_validate_parse: 23 callbacks suppressed [ 210.857049][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 211.249990][T10637] IPVS: persistence engine module ip_vs_pe_À not found [ 211.261233][T10646] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1292'. [ 211.327872][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 211.384926][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 211.409053][T10646] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 211.441181][T10646] netlink: 'syz.3.1292': attribute type 2 has an invalid length. [ 211.454865][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 211.554488][T10662] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1296'. [ 211.573310][T10668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.598885][T10663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1296'. [ 211.824076][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.824131][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 211.830338][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 211.949663][T10680] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.975361][T10680] xt_SECMARK: invalid mode: 9 [ 212.030723][T10683] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1300'. [ 212.099490][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 212.178400][T10683] openvswitch: netlink: IP tunnel dst address not specified [ 212.488461][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 212.568963][T10713] netlink: 'syz.2.1308': attribute type 23 has an invalid length. [ 212.755145][T10725] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.243844][T10747] openvswitch: netlink: Flow key attr not present in new flow. [ 213.369180][T10753] syzkaller0: entered promiscuous mode [ 213.385588][T10753] syzkaller0: entered allmulticast mode [ 213.546134][T10763] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 213.740184][ T24] IPVS: starting estimator thread 0... [ 213.843007][T10775] IPVS: using max 26 ests per chain, 62400 per kthread [ 214.062421][ T5640] Bluetooth: hci4: command 0x0405 tx timeout [ 214.220970][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.228329][ C1] bridge0: topology change detected, propagating [ 214.235312][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.242590][ C1] bridge0: topology change detected, propagating [ 216.413005][T10800] __nla_validate_parse: 7 callbacks suppressed [ 216.413023][T10800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1334'. [ 216.555906][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 217.003203][T10844] xt_l2tp: wrong L2TP version: 0 [ 217.231408][T10855] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 217.326406][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 217.598478][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.604795][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.612917][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.620573][T10880] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 217.637720][T10880] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 217.656942][T10880] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 217.699950][T10880] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.787615][T10885] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 217.807563][T10884] syzkaller0: entered promiscuous mode [ 217.814263][T10884] syzkaller0: entered allmulticast mode [ 217.822739][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.857338][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.871434][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.881671][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.894490][T10880] wlan1 speed is unknown, defaulting to 1000 [ 217.948165][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 218.326948][T10901] netlink: 'syz.0.1361': attribute type 7 has an invalid length. [ 218.791586][T10925] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 218.819213][T10928] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 218.937044][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.987697][T10932] bond1: (slave veth0_to_bond): Releasing active interface [ 219.092931][T10932] bond6: (slave veth0_to_bond): making interface the new active one [ 219.116372][T10932] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 219.215074][T10936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.227736][T10936] bond6: (slave bond7): Enslaving as an active interface with a down link [ 219.366669][T10925] syzkaller0: entered promiscuous mode [ 219.380157][T10925] syzkaller0: entered allmulticast mode [ 219.398657][T10951] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 219.456156][T10955] netlink: 'syz.0.1372': attribute type 2 has an invalid length. [ 219.517572][T10959] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 219.810609][T10972] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1377'. [ 219.870937][T10972] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1377'. [ 220.027995][T10983] netlink: 'syz.4.1380': attribute type 12 has an invalid length. [ 220.054606][T10984] netlink: 'syz.4.1380': attribute type 12 has an invalid length. [ 220.113292][T10983] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 220.352421][T11000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.373800][T11000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.398135][T11000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.429352][T11000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.497388][T11007] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1384'. [ 220.526419][T11009] netlink: 'syz.1.1388': attribute type 2 has an invalid length. [ 220.565575][T10997] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1384'. [ 220.592638][T11009] : entered promiscuous mode [ 220.625616][T11006] 0: reclassify loop, rule prio 0, protocol 700 [ 221.274482][T11043] tipc: Enabling of bearer rejected, failed to enable media [ 221.369245][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 221.559200][T11057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1401'. [ 221.604508][T11057] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1401'. [ 221.645749][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1401'. [ 221.798328][T11067] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1406'. [ 221.928712][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 222.003468][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 222.015600][T11078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.116524][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 222.184419][T11081] macvtap1: entered allmulticast mode [ 222.231592][T11074] bond6: (slave vti0): refused to change device type [ 222.289454][T11095] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 222.521315][T11097] bond9: (slave bridge6): Enslaving as a backup interface with an up link [ 222.544890][T11108] xt_cgroup: path and classid specified [ 222.599671][T11095] macvlan2: entered promiscuous mode [ 222.618633][T11095] macvlan2: entered allmulticast mode [ 222.638100][T11095] bond9: entered promiscuous mode [ 222.653230][T11095] bridge6: entered promiscuous mode [ 222.670021][T11095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.694149][T11095] bond9: left promiscuous mode [ 222.711192][T11095] bridge6: left promiscuous mode [ 222.776485][T11110] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1417'. [ 223.021465][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'. [ 223.030477][T11130] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 223.051005][T11110] syzkaller0: entered promiscuous mode [ 223.062191][T11110] syzkaller0: entered allmulticast mode [ 223.083914][T11128] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1421'. [ 223.627488][T11151] openvswitch: netlink: IP tunnel dst address not specified [ 225.083120][T11166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.819790][T11176] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 225.849333][T11178] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 226.090132][T11186] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 226.137318][T11186] bond5 (unregistering): Released all slaves [ 226.330708][T11201] syzkaller1: entered promiscuous mode [ 226.356264][T11201] syzkaller1: entered allmulticast mode [ 226.624234][T11208] __nla_validate_parse: 4 callbacks suppressed [ 226.624255][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 226.737800][T11217] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1445'. [ 226.782782][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 227.073830][T11221] lo speed is unknown, defaulting to 1000 [ 227.159040][T11233] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 227.203611][T11221] wlan1 speed is unknown, defaulting to 1000 [ 227.444767][T11245] INFO: trying to register non-static key. [ 227.450655][T11245] The code is fine but needs lockdep annotation, or maybe [ 227.457797][T11245] you didn't initialize this object before use? [ 227.464080][T11245] turning off the locking correctness validator. [ 227.470460][T11245] CPU: 1 UID: 0 PID: 11245 Comm: syz.3.1455 Not tainted syzkaller #0 PREEMPT(full) [ 227.470487][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 227.470511][T11245] Call Trace: [ 227.470519][T11245] [ 227.470528][T11245] dump_stack_lvl+0xe8/0x150 [ 227.470565][T11245] assign_lock_key+0x133/0x150 [ 227.470599][T11245] register_lock_class+0xcc/0x2e0 [ 227.470631][T11245] __lock_acquire+0xab/0x2cf0 [ 227.470666][T11245] ? kmem_cache_free+0x182/0x650 [ 227.470692][T11245] ? kern_path+0xd1/0x150 [ 227.470716][T11245] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 227.470736][T11245] ? genl_family_rcv_msg_doit+0x233/0x340 [ 227.470762][T11245] ? genl_rcv_msg+0x614/0x7a0 [ 227.470787][T11245] ? netlink_rcv_skb+0x226/0x4a0 [ 227.470817][T11245] ? genl_rcv+0x28/0x40 [ 227.470838][T11245] ? netlink_unicast+0x7bb/0x940 [ 227.470865][T11245] ? netlink_sendmsg+0x813/0xb40 [ 227.470883][T11245] ? sock_sendmsg_nosec+0x13a/0x180 [ 227.470906][T11245] ? ____sys_sendmsg+0x54e/0x850 [ 227.470935][T11245] ? ___sys_sendmsg+0x2a5/0x360 [ 227.470965][T11245] ? __x64_sys_sendmsg+0x1b1/0x290 [ 227.470995][T11245] ? do_syscall_64+0x174/0x580 [ 227.471024][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.471048][T11245] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 227.471074][T11245] lock_acquire+0x106/0x350 [ 227.471102][T11245] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 227.471131][T11245] ? net_generic+0x1e/0x240 [ 227.471156][T11245] ? net_generic+0x1e/0x240 [ 227.471180][T11245] ? net_generic+0x1e/0x240 [ 227.471207][T11245] _raw_spin_lock+0x2e/0x40 [ 227.471233][T11245] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 227.471260][T11245] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 227.471286][T11245] ? kasan_quarantine_put+0xbb/0x1f0 [ 227.471312][T11245] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.471347][T11245] ? kern_path+0xd1/0x150 [ 227.471372][T11245] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 227.471401][T11245] ? kern_path+0xd1/0x150 [ 227.471428][T11245] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 227.471452][T11245] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 227.471474][T11245] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 227.471500][T11245] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 227.471533][T11245] genl_family_rcv_msg_doit+0x233/0x340 [ 227.471563][T11245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.471604][T11245] ? bpf_lsm_capable+0x9/0x20 [ 227.471630][T11245] ? security_capable+0x7e/0x2c0 [ 227.471674][T11245] genl_rcv_msg+0x614/0x7a0 [ 227.471701][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.471725][T11245] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 227.471753][T11245] netlink_rcv_skb+0x226/0x4a0 [ 227.471784][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.471809][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.471847][T11245] ? down_read+0x2be/0x330 [ 227.471869][T11245] genl_rcv+0x28/0x40 [ 227.471893][T11245] netlink_unicast+0x7bb/0x940 [ 227.471929][T11245] netlink_sendmsg+0x813/0xb40 [ 227.471953][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.471974][T11245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.471995][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.472013][T11245] sock_sendmsg_nosec+0x13a/0x180 [ 227.472038][T11245] ____sys_sendmsg+0x54e/0x850 [ 227.472073][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.472108][T11245] ? import_iovec+0x73/0xa0 [ 227.472139][T11245] ___sys_sendmsg+0x2a5/0x360 [ 227.472169][T11245] ? __lock_acquire+0x683/0x2cf0 [ 227.472200][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.472234][T11245] ? futex_wait+0x2a2/0x390 [ 227.472272][T11245] ? __fget_files+0x2a/0x420 [ 227.472299][T11245] ? __fget_files+0x3a2/0x420 [ 227.472331][T11245] __x64_sys_sendmsg+0x1b1/0x290 [ 227.472364][T11245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.472405][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.472427][T11245] do_syscall_64+0x174/0x580 [ 227.472457][T11245] ? trace_irq_disable+0x3b/0x140 [ 227.472484][T11245] ? clear_bhb_loop+0x40/0x90 [ 227.472508][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.472529][T11245] RIP: 0033:0x7ffa9539de99 [ 227.472549][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.472568][T11245] RSP: 002b:00007ffa96212028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.472603][T11245] RAX: ffffffffffffffda RBX: 00007ffa95625fa0 RCX: 00007ffa9539de99 [ 227.472619][T11245] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 227.472633][T11245] RBP: 00007ffa95433eaf R08: 0000000000000000 R09: 0000000000000000 [ 227.472656][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.472669][T11245] R13: 00007ffa95626038 R14: 00007ffa95625fa0 R15: 00007fff2ed2e408 [ 227.472694][T11245] [ 227.936889][T11245] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 227.948824][T11245] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 227.957281][T11245] CPU: 1 UID: 0 PID: 11245 Comm: syz.3.1455 Not tainted syzkaller #0 PREEMPT(full) [ 227.966697][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 227.976784][T11245] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 227.983095][T11245] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 228.002830][T11245] RSP: 0018:ffffc9000d8ef280 EFLAGS: 00010246 [ 228.008984][T11245] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100fc6c00d [ 228.016997][T11245] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000d8ef200 [ 228.024995][T11245] RBP: ffffc9000d8ef370 R08: 0000000000000003 R09: 0000000000000004 [ 228.032991][T11245] R10: dffffc0000000000 R11: fffff52001b1de40 R12: ffffc9000d8ef300 [ 228.040979][T11245] R13: 1ffff92001b1de98 R14: dffffc0000000000 R15: 1ffff92001b1de5c [ 228.048977][T11245] FS: 00007ffa962126c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 228.057946][T11245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.064554][T11245] CR2: 0000200000000100 CR3: 000000005a670000 CR4: 00000000003526f0 [ 228.072551][T11245] Call Trace: [ 228.075854][T11245] [ 228.078805][T11245] ? kasan_quarantine_put+0xbb/0x1f0 [ 228.084127][T11245] ? kern_path+0xd1/0x150 [ 228.088497][T11245] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 228.094544][T11245] ? kern_path+0xd1/0x150 [ 228.098910][T11245] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 228.105036][T11245] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 228.111648][T11245] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 228.118037][T11245] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 228.124392][T11245] genl_family_rcv_msg_doit+0x233/0x340 [ 228.129963][T11245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.136064][T11245] ? bpf_lsm_capable+0x9/0x20 [ 228.140769][T11245] ? security_capable+0x7e/0x2c0 [ 228.145743][T11245] genl_rcv_msg+0x614/0x7a0 [ 228.150276][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.155327][T11245] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 228.161941][T11245] netlink_rcv_skb+0x226/0x4a0 [ 228.166735][T11245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.171781][T11245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.177095][T11245] ? down_read+0x2be/0x330 [ 228.181530][T11245] genl_rcv+0x28/0x40 [ 228.185534][T11245] netlink_unicast+0x7bb/0x940 [ 228.190325][T11245] netlink_sendmsg+0x813/0xb40 [ 228.195110][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.200417][T11245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 228.205373][T11245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.210678][T11245] sock_sendmsg_nosec+0x13a/0x180 [ 228.215726][T11245] ____sys_sendmsg+0x54e/0x850 [ 228.220513][T11245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.225830][T11245] ? import_iovec+0x73/0xa0 [ 228.230366][T11245] ___sys_sendmsg+0x2a5/0x360 [ 228.235073][T11245] ? __lock_acquire+0x683/0x2cf0 [ 228.240038][T11245] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.245267][T11245] ? futex_wait+0x2a2/0x390 [ 228.249801][T11245] ? __fget_files+0x2a/0x420 [ 228.254412][T11245] ? __fget_files+0x3a2/0x420 [ 228.259117][T11245] __x64_sys_sendmsg+0x1b1/0x290 [ 228.264096][T11245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.269588][T11245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.275673][T11245] do_syscall_64+0x174/0x580 [ 228.280290][T11245] ? trace_irq_disable+0x3b/0x140 [ 228.285335][T11245] ? clear_bhb_loop+0x40/0x90 [ 228.290031][T11245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.295943][T11245] RIP: 0033:0x7ffa9539de99 [ 228.300376][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.320005][T11245] RSP: 002b:00007ffa96212028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.328440][T11245] RAX: ffffffffffffffda RBX: 00007ffa95625fa0 RCX: 00007ffa9539de99 [ 228.336436][T11245] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 228.344427][T11245] RBP: 00007ffa95433eaf R08: 0000000000000000 R09: 0000000000000000 [ 228.352414][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.360403][T11245] R13: 00007ffa95626038 R14: 00007ffa95625fa0 R15: 00007fff2ed2e408 [ 228.368404][T11245] [ 228.371438][T11245] Modules linked in: [ 228.375581][T11245] ---[ end trace 0000000000000000 ]--- [ 228.381088][T11245] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 228.388901][T11245] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 228.408932][T11245] RSP: 0018:ffffc9000d8ef280 EFLAGS: 00010246 [ 228.416188][T11245] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100fc6c00d [ 228.424387][T11245] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000d8ef200 [ 228.432463][T11245] RBP: ffffc9000d8ef370 R08: 0000000000000003 R09: 0000000000000004 [ 228.440483][T11245] R10: dffffc0000000000 R11: fffff52001b1de40 R12: ffffc9000d8ef300 [ 228.449472][T11245] R13: 1ffff92001b1de98 R14: dffffc0000000000 R15: 1ffff92001b1de5c [ 228.457856][T11245] FS: 00007ffa962126c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 228.466950][T11245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 228.474270][T11245] CR2: 0000200000000100 CR3: 000000005a670000 CR4: 00000000003526f0 [ 228.482355][T11245] Kernel panic - not syncing: Fatal exception [ 228.489058][T11245] Kernel Offset: disabled [ 228.493405][T11245] Rebooting in 86400 seconds..