last executing test programs: 2.420747299s ago: executing program 4 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x4}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f00000009c0)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/93, 0x5d}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4dd}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x102, 0x0) getsockopt$sock_int(r4, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004005}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 2.374499672s ago: executing program 4 (id=1874): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="64b99b5dfe96d7cf925da1", 0xb}], 0x1}}], 0x1, 0x2000c000) 1.843333346s ago: executing program 3 (id=1879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000780)="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", &(0x7f0000000080)=""/110}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.736764223s ago: executing program 3 (id=1881): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00006800e97800000000000000000a00002d90420000000000040000"], 0x1c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ffffff7}}], 0x30}, 0x884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000480)="34d8d9a07265ae77d9ac05cf0c642cf14040c38551f7f9cdbc6e4bb67f561bd3ea0d941652df5faf7d67c7050f6a6defd1c3143ff34e4033a7b29c6a497e0a", 0xfffffffc}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @local}) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_getaddr={0x48, 0x16, 0x200, 0x80000000, 0x25dfdbfd, {0xa, 0x78, 0x50, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x9, 0x10001, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c5}, 0x8040) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r7) getsockname$packet(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000067060c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800dd8d000000000000000002001000fe5d58a5405941895f040001c1d040002b40effa4dbf000020"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r8 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) 1.415078221s ago: executing program 4 (id=1885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendmsg$802154_dgram(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000700)=ANY=[], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x30, '\x00', r6, @fallback=0x21}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000380)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r10, 0x101, 0x4, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a0c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12500, 0x0) 1.181929708s ago: executing program 2 (id=1887): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x3c}}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c61737400000000040002800800034000000105"], 0xe4}}, 0x20050800) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x46, 0xbd, &(0x7f0000000040)="0b3c1a2e3202b22efe971acb09d497994798b733e5cb45e5d40ab3b95dc20b1f12d0f2f2b3484973c927e3db2a1ce1dcfbdd7f756b5bb6c88cf4eb4242c379c1e5001c3444c3", &(0x7f0000000140)=""/189, 0xfffffcb1, 0x0, 0x46, 0x4e, &(0x7f0000000200)="7e7eedd25151324129531c2073acaf6e2c52e82177505ef1e6e3080dbdc849663d0da2e0a05f9b8fa43484a2c2d8fabc609729b4bf332b3f52ab85012c8ee39336bd8d1e5f37", &(0x7f0000000340)="363338dc3bc4605e96be79cb44eb54c75728b20bd4f7bdd1c37e7da5e1495234f0fd578e4031fcd8710951b0e5074883fb464dd224c41d67e64c2557fd474d45b8f2bf26ac16ca2a80f7510b1bbb", 0x0, 0x0, 0x8}, 0x50) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) 1.156589633s ago: executing program 4 (id=1888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="0bf49244", 0xf40b}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="80000000000000000000000007000000440a96418ecaca2e5e2b832395ffffffffac1414200a010100ac1414110a0101027f0000017f0000010a01010294040000443c09510a01010200007fff0a01010200000002ac1414aa00000002000000000000000400000000000000ffac1414aa00000000e00000010000046a000000140000000000000000000000010000000600000000000000110000000000000001000000010000000100000000000000110000000000000000000000010000006d000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x260}}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltaction={0xb0, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40000008}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0xb0}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r5, @ANYBLOB="010226bd7000fcdbdf252500000005002b00010000000a0001007770616e3100000008002f000e00000005002e000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x48800) (async, rerun: 32) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="610029bd700180000000000000000c0009000203aaaaaaaaaaaa0c00090004045455555555550500120005000000"], 0x34}}, 0x4040) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}, {{0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x3}, {0x3, 0x0, 0x1}}], 0x50) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@delqdisc={0x54, 0x25, 0x200, 0x70bd2c, 0x25dddbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x4, 0x9}, {0x9, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x8a, 0xd}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c8c4}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xffffff97) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000180)=0x400001, 0x4) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f0000000240)=0x49e1, 0x0) (rerun: 64) sendto$inet6(r9, 0x0, 0x0, 0x800, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="f8000000100004002bbd7000fbdbdf2500000000000000000000000000000000fe800000000cc00000000000000000144e248a9c4e2300020a00a0203a00000032a7e2dbf0cf89169c2f5b2ddd7536daf4dd81378b0a1aa7bc704fc7b7f6c1", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="ff020000000000000000000000000001000004d63200000000000000000000000000ffffffffffff000000000008000005000000000000000300000000000000010000000000000007000000000000000900000000000000a50400000000000001000000000000001000000000000000a10f0000000000000200000000000000ffff0000000000000700000066c1215f010000002abd7000ff34000002000181010000000000000008000b0005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x24004040) (async, rerun: 32) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x7}) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 1.13561124s ago: executing program 1 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x190c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 1.078185955s ago: executing program 0 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x21, 0x1, 0x0, 0x0, "0b1bfea5c969026b298f015a97a91f0e51a1a329316b36d36cf9663d903484a480a48619e2346cfda45739d84602590f91c5cdfb65cea317398ce70b278d86ad"}}}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x4c}}, 0x0) 1.062485792s ago: executing program 2 (id=1891): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040)=0x5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="560a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) close(r0) 944.968005ms ago: executing program 2 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) 869.980538ms ago: executing program 4 (id=1893): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x8c}}, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x2, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018006000100", @ANYRES32=r7, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r5) r9 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000060000000a00feffffff91100440d7bf3e902897390000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 861.787132ms ago: executing program 1 (id=1894): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x240080c0) 857.405627ms ago: executing program 0 (id=1895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x6, 0xc, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRESDEC=r0, @ANYRESHEX=0x0], &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x218, 0x30, 0x51b, 0x0, 0x0, {}, [{0x204, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x1}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x17, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x2}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x218}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0xfffffffffffffec4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x40, 0x5, 0x6, 0x3}, 0x10) 765.821402ms ago: executing program 3 (id=1896): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 683.634208ms ago: executing program 1 (id=1897): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000000)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x40}], 0x1, 0x901) 665.629412ms ago: executing program 2 (id=1898): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000815000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000008000300000000000800020000000000080003000000000004000458b717d7f2cc6b9c789643fe5014111ecb3ffbc0a532e9e51b9d7f138a95c3243db4ea54d03bb5613e603bf804fb9be2ed576eae3b7d300493f776e5c019b8127717031c6e07c81e5e17fc8397c07543b3e528903ebb49be4768e46197b34daadbc1927eb94d979c5f"], 0x7c}}, 0x0) 585.883986ms ago: executing program 4 (id=1899): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000900)={0xa, 0x4e1f, 0x0, @local, 0x2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000013c0)={'ipvlan0\x00', &(0x7f0000000340)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x3, 0x0, 0x4, 0x3, 0x3, 0x7, 0xfffffff1, [0x8, 0x5]}}) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20040814) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = accept4$rose(r9, &(0x7f00000001c0)=@short={0xb, @dev, @default}, &(0x7f00000002c0)=0x1c, 0x80800) r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESOCT=r10, @ANYRESOCT=r8], 0xdd12}], 0x1, 0x0, 0x0, 0x4000084}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000305000000000000020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES16=r12], 0x50}}, 0x0) 571.67653ms ago: executing program 3 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @null, 0x1, @rose}, &(0x7f0000000080)=0x1c, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, r5}, 0x14) bind$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @null}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) 565.560405ms ago: executing program 0 (id=1901): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="660a00000000000061115c0000000000850000000200080095000000000000fbf1c74133a06565c2c78d"], &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="30ee1b001214010000f05dc443708b4562dd864391d8df71610000080003000000004008004f00000000002000010000"], 0x30}}, 0x0) 552.791278ms ago: executing program 1 (id=1902): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 447.358769ms ago: executing program 3 (id=1903): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b0000080000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000160a0000000c00078008000a680006000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYBLOB="00000000000000000000000000000000000000000010"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000002c000000001dfad0c5412a4584d2104cc3afad00"/39, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000000000)={0x800, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}}, 0x88) write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@can_delroute={0x4c, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6698c13a70ca67e7"}, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "a4181b99997f9ec6"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 357.935532ms ago: executing program 2 (id=1904): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r5, 0x0, 0x7}, 0x38) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000040)={@rand_addr=0x64010102, @empty}, 0x8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) close(0xffffffffffffffff) 357.424575ms ago: executing program 0 (id=1905): r0 = socket$packet(0x11, 0xa, 0x300) shutdown(r0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x4c, 0x0, 0x4, 0x6c}, {0x9}]}, 0x10) 355.703786ms ago: executing program 1 (id=1906): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="1b332b13ad6ac4fc6a4e17cb493556afdcd806beec82509dc806a465afa9767399c96f2e9c37528d86a44fcee7ead484d853a3951c8d4750bee954d85287a7e3f693c87b6218f1b4ad10a37702e45274342703f51119aca1644ba3a69f73af17", 0x60}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'wlc\x00', 0xa, 0x0, 0x1a}, 0x2c) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x20000000}) 209.35359ms ago: executing program 0 (id=1907): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0xa, 0x0) sendto$x25(r1, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000080)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff000000000000000013d9eb461ffae06306788051efa1fbc25a6473d2fe3371ae4952b3371481cff51943539bd916f5d04d9dd5b0bb6c89569a386679fe922415a3cf0de59b8ea623cbd92e8457b80f314966ea3b7f530290438535968fbd1411a20a07378a9d20fc70ffd65076ac532a72cbed0ae9f4ee27b68b493a74a193dd625d85e43add019455ece662477734957bf6a2d48f6e2b8b5009a611dd51340f5c282e930c3e7f1fcac119", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000080005000304004008000500", @ANYRES32=r4, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 191.897094ms ago: executing program 3 (id=1908): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x30, 0x0, &(0x7f00000000c0)) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r6, 0x0) listen(r5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 110.370168ms ago: executing program 1 (id=1909): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000016003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000000c0a0101000000000071336a000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c000140ffffffffffffffff0c00024000000000000000001400000010000100"/240], 0xf0}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@remote, @local, @loopback}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c010000160001000000000000000000fe8000000e00000000000000000000bbff02000000000000000000000000000100"/64, @ANYRES64=r2, @ANYRES16=r5, @ANYRESDEC=0x0], 0x11c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r9 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000100bc6e4663fe8729a53fe9da280d910f91320001000000000000000000fd0000006a3d5c789646b7bf7670a7467a0d53771a19d0b15cc056880e9b"], 0x14}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16=r7, @ANYRESHEX=r8, @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r12, r13, 0x25, 0x20, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000140)=[0x9, 0x7fffffffffffffff, 0x0], 0xd}}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r11, 0x25, 0x6, @void}, 0xd) 103.726583ms ago: executing program 2 (id=1910): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x154, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x3, @vifc_lcl_addr=@remote, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=1911): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000a80)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x33, 0x1, 0x70bd29, 0x25dfdbfb, {0x7}}, 0x14}}, 0x4) recvmmsg$unix(r0, &(0x7f0000003600)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000540)=""/138, 0x8a}], 0x5, &(0x7f0000004b00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x2a8}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000001ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000002ec0)=""/209, 0xd1}, {&(0x7f0000003500)=""/150, 0x96}, {&(0x7f0000002fc0)=""/119, 0x77}, {&(0x7f0000003040)=""/223, 0xdf}, {&(0x7f0000003140)=""/114, 0x72}, {&(0x7f00000031c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000001d40)=""/248, 0xf8}], 0x8, &(0x7f0000003340)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003380), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003400)=""/216, 0xd8}, {&(0x7f0000004840)=""/149, 0x95}], 0x2}}], 0x4, 0x40, &(0x7f0000000600)) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r6, 0x0, 0x0, 0x4}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000a40)='veth1_to_team\x00', 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x4, 0x0, &(0x7f00000000c0)) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003800)=""/4117, 0x1015}, {&(0x7f0000000c00)=""/4101, 0x1005}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000000800)=""/240, 0xf0}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000001c40)=""/234, 0xea}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000000ac0)=""/18, 0x12}, {&(0x7f0000003700)=""/245, 0xf5}], 0x9}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 74.459387][ T5852] cgroup: Unknown subsys name 'net' [ 74.569770][ T5852] cgroup: Unknown subsys name 'cpuset' [ 74.578928][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.004421][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.285175][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.293905][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.302761][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.311913][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.320263][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.328868][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.336852][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.344901][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.348797][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.352673][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.369892][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.370408][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.377969][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.390084][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.392683][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.398683][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.414120][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.423623][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.424251][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.441342][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.450918][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.460991][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.468184][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.470536][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.486156][ T5883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.058664][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 81.256217][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 81.332398][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 81.418279][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 81.448446][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.455631][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.464495][ T5863] bridge_slave_0: entered allmulticast mode [ 81.473740][ T5863] bridge_slave_0: entered promiscuous mode [ 81.498865][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 81.526250][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.534063][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.542381][ T5863] bridge_slave_1: entered allmulticast mode [ 81.550055][ T5863] bridge_slave_1: entered promiscuous mode [ 81.604040][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.612319][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.620341][ T5865] bridge_slave_0: entered allmulticast mode [ 81.628526][ T5865] bridge_slave_0: entered promiscuous mode [ 81.676940][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.684176][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.692020][ T5865] bridge_slave_1: entered allmulticast mode [ 81.699514][ T5865] bridge_slave_1: entered promiscuous mode [ 81.769147][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.783392][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.805005][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.812833][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.820672][ T5873] bridge_slave_0: entered allmulticast mode [ 81.828369][ T5873] bridge_slave_0: entered promiscuous mode [ 81.884689][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.893019][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.902112][ T5873] bridge_slave_1: entered allmulticast mode [ 81.909644][ T5873] bridge_slave_1: entered promiscuous mode [ 81.919739][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.934072][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.009526][ T5863] team0: Port device team_slave_0 added [ 82.016001][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.023282][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.031010][ T5862] bridge_slave_0: entered allmulticast mode [ 82.038567][ T5862] bridge_slave_0: entered promiscuous mode [ 82.061541][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.069510][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.077298][ T5864] bridge_slave_0: entered allmulticast mode [ 82.084531][ T5864] bridge_slave_0: entered promiscuous mode [ 82.122995][ T5863] team0: Port device team_slave_1 added [ 82.142083][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.150061][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.158170][ T5862] bridge_slave_1: entered allmulticast mode [ 82.167670][ T5862] bridge_slave_1: entered promiscuous mode [ 82.175403][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.183637][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.191106][ T5864] bridge_slave_1: entered allmulticast mode [ 82.199500][ T5864] bridge_slave_1: entered promiscuous mode [ 82.209565][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.223384][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.234839][ T5865] team0: Port device team_slave_0 added [ 82.296383][ T5865] team0: Port device team_slave_1 added [ 82.318490][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.325734][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.353704][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.370139][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.377977][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.416493][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.469217][ T5873] team0: Port device team_slave_0 added [ 82.486600][ T5874] Bluetooth: hci2: command tx timeout [ 82.491782][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.505160][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.528544][ T5873] team0: Port device team_slave_1 added [ 82.554460][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.566411][ T5874] Bluetooth: hci0: command tx timeout [ 82.571926][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.582647][ T5880] Bluetooth: hci4: command tx timeout [ 82.582966][ T5880] Bluetooth: hci3: command tx timeout [ 82.598730][ T5874] Bluetooth: hci1: command tx timeout [ 82.610536][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.620183][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.650241][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.694611][ T5863] hsr_slave_0: entered promiscuous mode [ 82.703034][ T5863] hsr_slave_1: entered promiscuous mode [ 82.737096][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.744501][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.772386][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.808938][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.816224][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.843643][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.872127][ T5864] team0: Port device team_slave_0 added [ 82.881378][ T5864] team0: Port device team_slave_1 added [ 82.891936][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.900418][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.929869][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.956238][ T5862] team0: Port device team_slave_0 added [ 83.006994][ T5862] team0: Port device team_slave_1 added [ 83.047713][ T5865] hsr_slave_0: entered promiscuous mode [ 83.054322][ T5865] hsr_slave_1: entered promiscuous mode [ 83.060927][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 83.067136][ T5865] Cannot create hsr debugfs directory [ 83.102529][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.111529][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.141188][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.154956][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.162400][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.193993][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.285664][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.299248][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.336189][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.373518][ T5873] hsr_slave_0: entered promiscuous mode [ 83.384026][ T5873] hsr_slave_1: entered promiscuous mode [ 83.392496][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 83.400515][ T5873] Cannot create hsr debugfs directory [ 83.430643][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.441785][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.483604][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.605623][ T5864] hsr_slave_0: entered promiscuous mode [ 83.614985][ T5864] hsr_slave_1: entered promiscuous mode [ 83.624467][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 83.635093][ T5864] Cannot create hsr debugfs directory [ 83.856994][ T5862] hsr_slave_0: entered promiscuous mode [ 83.866462][ T5862] hsr_slave_1: entered promiscuous mode [ 83.875701][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 83.885985][ T5862] Cannot create hsr debugfs directory [ 84.325031][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.363921][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.382331][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.426757][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.520961][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.544140][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.560784][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.569466][ T5880] Bluetooth: hci2: command tx timeout [ 84.582204][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.646374][ T5880] Bluetooth: hci1: command tx timeout [ 84.646497][ T5874] Bluetooth: hci0: command tx timeout [ 84.656582][ T5883] Bluetooth: hci4: command tx timeout [ 84.664601][ T5880] Bluetooth: hci3: command tx timeout [ 84.698696][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.714282][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.728797][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.743166][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.868860][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.882799][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.931437][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.950334][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.044822][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.063384][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.086302][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.093909][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.104822][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.118296][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.207442][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.265333][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.285646][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.294069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.310483][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.317770][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.345217][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.352604][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.390422][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.401187][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.408860][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.562805][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.575679][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.603328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.611610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.630762][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.638164][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.738770][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.799633][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.880414][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.888329][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.901586][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.909158][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.931931][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.951160][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.959114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.009976][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.030605][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.038187][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.157766][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.381524][ T5863] veth0_vlan: entered promiscuous mode [ 86.424229][ T5865] veth0_vlan: entered promiscuous mode [ 86.493613][ T5863] veth1_vlan: entered promiscuous mode [ 86.509934][ T5865] veth1_vlan: entered promiscuous mode [ 86.650375][ T5880] Bluetooth: hci2: command tx timeout [ 86.676898][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.726377][ T5883] Bluetooth: hci3: command tx timeout [ 86.727390][ T5874] Bluetooth: hci4: command tx timeout [ 86.732813][ T5883] Bluetooth: hci1: command tx timeout [ 86.745168][ T5880] Bluetooth: hci0: command tx timeout [ 86.764023][ T5865] veth0_macvtap: entered promiscuous mode [ 86.780831][ T5865] veth1_macvtap: entered promiscuous mode [ 86.802350][ T5863] veth0_macvtap: entered promiscuous mode [ 86.828992][ T5863] veth1_macvtap: entered promiscuous mode [ 86.854270][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.871446][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.892273][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.926843][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.938453][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.958092][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990815][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.014775][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.039066][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.109483][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.206979][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.281603][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.294915][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.349525][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.375709][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.377252][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.445017][ T5873] veth0_vlan: entered promiscuous mode [ 87.496352][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.509571][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.524264][ T5864] veth0_vlan: entered promiscuous mode [ 87.588513][ T5864] veth1_vlan: entered promiscuous mode [ 87.628955][ T5873] veth1_vlan: entered promiscuous mode [ 87.647611][ T5862] veth0_vlan: entered promiscuous mode [ 87.670553][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.674470][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.707379][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.739253][ T5862] veth1_vlan: entered promiscuous mode [ 87.817377][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.830931][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.864529][ T5864] veth0_macvtap: entered promiscuous mode [ 87.865227][ T5989] Illegal XDP return value 1918244349 on prog (id 3) dev syz_tun, expect packet loss! [ 87.887835][ T5873] veth0_macvtap: entered promiscuous mode [ 87.907828][ T5864] veth1_macvtap: entered promiscuous mode [ 87.917506][ T5873] veth1_macvtap: entered promiscuous mode [ 87.950840][ T5862] veth0_macvtap: entered promiscuous mode [ 88.004413][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.020530][ T5862] veth1_macvtap: entered promiscuous mode [ 88.036524][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.057948][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.079615][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.104184][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.133538][ T5980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.143588][ T5992] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 88.154724][ T5980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.164715][ T5998] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 88.191193][ T5998] vlan2: entered allmulticast mode [ 88.200893][ T5998] bond0: entered allmulticast mode [ 88.219857][ T5998] bond_slave_0: entered allmulticast mode [ 88.244929][ T5998] bond_slave_1: entered allmulticast mode [ 88.266619][ T5980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.304118][ T5980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.338511][ T5980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.439461][ T5980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.459362][ T5980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.483905][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.582134][ T5980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.680413][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.718378][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.735428][ T5883] Bluetooth: hci2: command tx timeout [ 88.751561][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.770873][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.780040][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.795121][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.807006][ T5883] Bluetooth: hci4: command tx timeout [ 88.812620][ T5883] Bluetooth: hci3: command tx timeout [ 88.818618][ T5880] Bluetooth: hci1: command tx timeout [ 88.819328][ T5874] Bluetooth: hci0: command tx timeout [ 88.916981][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.926308][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.937235][ T2934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.962701][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.050395][ T6018] Zero length message leads to an empty skb [ 89.091578][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.118253][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.212722][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.225739][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.299836][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.333747][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.477666][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.536607][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.599860][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15'. [ 89.952900][ T6047] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 90.002767][ T6047] veth1_to_bond: entered allmulticast mode [ 90.010361][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.024448][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.127410][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.154413][ T6047] bond0: (slave bond_slave_1): Releasing backup interface [ 90.175206][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 90.176863][ T6047] bond_slave_1 (unregistering): left allmulticast mode [ 90.186693][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20'. [ 90.217981][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.293025][ T6047] veth1_to_bond (unregistering): left allmulticast mode [ 90.977537][ T6088] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 91.930137][ T6142] tipc: Started in network mode [ 91.935202][ T6142] tipc: Node identity 0ebd1530062b, cluster identity 4711 [ 91.969150][ T6142] tipc: Enabled bearer , priority 0 [ 91.985565][ T6147] syzkaller0: entered promiscuous mode [ 91.995624][ T6147] syzkaller0: entered allmulticast mode [ 92.015250][ T6142] tipc: Resetting bearer [ 92.019231][ T980] cfg80211: failed to load regulatory.db [ 92.037969][ T6137] tipc: Resetting bearer [ 92.073322][ T6137] tipc: Disabling bearer [ 92.260960][ T6156] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 92.281358][ T6156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.46'. [ 92.320968][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 92.346959][ T6152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.456067][ T6167] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 92.533099][ T6169] tipc: Enabling of bearer rejected, failed to enable media [ 93.055717][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 93.437905][ T6226] IPv6: sit1: Disabled Multicast RS [ 93.444934][ T6226] sit1: entered allmulticast mode [ 93.516611][ T6228] netlink: 'syz.1.66': attribute type 32 has an invalid length. [ 93.534893][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 93.560976][ T6228] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 93.651119][ T6228] netlink: 45 bytes leftover after parsing attributes in process `syz.1.66'. [ 93.657985][ T6231] netlink: 216 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.704919][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 93.750560][ T6238] netlink: 'syz.3.67': attribute type 9 has an invalid length. [ 93.844906][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 93.959186][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 93.970490][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 94.395031][ T6266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.576701][ T6274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.83'. [ 94.949414][ T6290] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 95.055689][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.084232][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.160205][ T6296] dvmrp0: entered allmulticast mode [ 95.167079][ T6300] dvmrp0: left allmulticast mode [ 95.459663][ T6311] netlink: 'syz.0.96': attribute type 12 has an invalid length. [ 95.562526][ T6317] Bluetooth: MGMT ver 1.23 [ 95.580291][ T6319] netlink: 'syz.4.99': attribute type 49 has an invalid length. [ 95.766979][ T6326] netlink: 96 bytes leftover after parsing attributes in process `syz.4.101'. [ 95.855253][ T6326] vlan2: entered allmulticast mode [ 95.885292][ T6326] gretap0: entered allmulticast mode [ 96.202749][ T6352] trusted_key: syz.2.106 sent an empty control message without MSG_MORE. [ 96.300977][ T6355] netlink: 'syz.1.110': attribute type 3 has an invalid length. [ 96.335290][ T6355] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.110'. [ 96.408458][ T6355] veth0: entered promiscuous mode [ 96.600064][ T6365] veth0: left promiscuous mode [ 96.638481][ T6380] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 96.670721][ T6380] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 96.902749][ T6394] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 97.044514][ T6398] netlink: 'syz.2.123': attribute type 14 has an invalid length. [ 97.050698][ T6400] IPv6: sit1: Disabled Multicast RS [ 97.064325][ T6400] sit1: entered allmulticast mode [ 97.116456][ T6398] netlink: 'syz.2.123': attribute type 14 has an invalid length. [ 97.116545][ T6405] warning: `syz.3.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.153882][ T64] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.194618][ T64] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.221728][ T64] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.325529][ T6400] IPv6: sit1: Disabled Multicast RS [ 97.333401][ T6400] sit1: entered allmulticast mode [ 97.340203][ T6413] netlink: 'syz.4.127': attribute type 23 has an invalid length. [ 97.398578][ T64] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.434724][ T6400] IPv6: sit1: Disabled Multicast RS [ 97.449251][ T6400] sit1: entered allmulticast mode [ 97.515000][ T6420] nbd: device at index 2 is going down [ 97.529907][ T6400] IPv6: sit1: Disabled Multicast RS [ 97.537615][ T6400] sit1: entered allmulticast mode [ 97.761850][ T6400] IPv6: sit1: Disabled Multicast RS [ 97.797196][ T6400] sit1: entered allmulticast mode [ 98.029165][ T5920] udevd[5920]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 98.361991][ T6469] delete_channel: no stack [ 98.571987][ T6481] tipc: Started in network mode [ 98.580448][ T6481] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 98.611828][ T6481] tipc: Enabled bearer , priority 10 [ 98.738362][ T6484] team0: No ports can be present during mode change [ 99.081984][ T6506] bond0: option ad_select: unable to set because the bond device is up [ 99.161668][ T6508] __nla_validate_parse: 10 callbacks suppressed [ 99.161690][ T6508] netlink: 288 bytes leftover after parsing attributes in process `syz.4.154'. [ 99.375109][ T6518] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 99.389867][ T6518] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 99.586373][ T6523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.160'. [ 99.617280][ T5928] tipc: Node number set to 10136234 [ 99.803047][ T6534] syzkaller1: entered promiscuous mode [ 99.816373][ T6534] syzkaller1: entered allmulticast mode [ 99.973090][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'. [ 100.079207][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 100.633612][ T6566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.661317][ T6566] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 101.092298][ T6592] validate_nla: 1 callbacks suppressed [ 101.092317][ T6592] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 101.129984][ T6597] netlink: 64 bytes leftover after parsing attributes in process `syz.1.182'. [ 101.153291][ T6592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 101.162760][ T6600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.183'. [ 101.294169][ T6604] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.184'. [ 101.449852][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 101.451824][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 101.475450][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.188'. [ 101.854308][ T6635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.183132][ T6653] lo: entered promiscuous mode [ 102.202850][ T6653] lo: entered allmulticast mode [ 102.397963][ T6665] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 102.628576][ T6678] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 102.671745][ T6678] bond1: (slave vcan1): Error -95 calling set_mac_address [ 102.700058][ T6680] bridge_slave_1: left allmulticast mode [ 102.717130][ T6680] bridge_slave_1: left promiscuous mode [ 102.741412][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.761776][ T6680] bridge_slave_0: left allmulticast mode [ 102.773680][ T6680] bridge_slave_0: left promiscuous mode [ 102.791491][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.913186][ T6687] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 102.923269][ T6687] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 103.134110][ T6700] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 103.141719][ T6703] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 103.378621][ T6707] bond0: (slave bond_slave_0): Releasing backup interface [ 103.404286][ T6707] bond0: (slave bond_slave_1): Releasing backup interface [ 103.454695][ T6707] team0: Port device team_slave_0 removed [ 103.482503][ T6707] team0: Port device team_slave_1 removed [ 103.492432][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.503508][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.520148][ T6707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.529927][ T6707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.594264][ T6712] bridge_slave_0: left allmulticast mode [ 103.605659][ T6712] bridge_slave_0: left promiscuous mode [ 103.648016][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.735276][ T6712] bridge_slave_1: left allmulticast mode [ 103.763494][ T6712] bridge_slave_1: left promiscuous mode [ 103.770739][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.793099][ T6712] bond0: (slave bond_slave_0): Releasing backup interface [ 103.815421][ T6712] bond0: (slave bond_slave_1): Releasing backup interface [ 103.819221][ T6725] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 103.831110][ T6725] netlink: 'syz.3.222': attribute type 11 has an invalid length. [ 103.852591][ T6712] team0: Port device team_slave_0 removed [ 103.873384][ T6712] team0: Port device team_slave_1 removed [ 103.880310][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.893558][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.906593][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.914534][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.226204][ T6755] veth0_to_bridge: entered promiscuous mode [ 105.256242][ T6755] veth0_to_bridge: left promiscuous mode [ 105.508761][ T6764] __nla_validate_parse: 7 callbacks suppressed [ 105.508779][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 105.789292][ T6777] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 106.018278][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 106.113689][ T6789] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 106.157320][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802886c000: rx timeout, send abort [ 106.167390][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802886c000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.254409][ T6791] netlink: 'syz.0.244': attribute type 21 has an invalid length. [ 106.273481][ T6791] netlink: 132 bytes leftover after parsing attributes in process `syz.0.244'. [ 106.724862][ T6804] netlink: 'syz.2.248': attribute type 8 has an invalid length. [ 106.848548][ T6803] netlink: 'syz.3.249': attribute type 6 has an invalid length. [ 107.096420][ T6820] syzkaller1: entered promiscuous mode [ 107.123287][ T6820] syzkaller1: entered allmulticast mode [ 107.386752][ T6828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.453684][ T6835] netlink: 388 bytes leftover after parsing attributes in process `syz.1.256'. [ 107.602342][ T6831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.733433][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.743521][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.982783][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 108.015974][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 108.165912][ T5874] Bluetooth: hci0: command tx timeout [ 108.317959][ T6863] netlink: 7 bytes leftover after parsing attributes in process `syz.3.263'. [ 108.664655][ T6866] netlink: 'syz.3.265': attribute type 29 has an invalid length. [ 108.715096][ T6866] netlink: 'syz.3.265': attribute type 29 has an invalid length. [ 108.783317][ T6866] netlink: 500 bytes leftover after parsing attributes in process `syz.3.265'. [ 108.854554][ T6866] unsupported nla_type 58 [ 108.893067][ T6868] Unsupported ieee802154 address type: 0 [ 109.310061][ T6883] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 109.388243][ T6883] ip6gre1: entered allmulticast mode [ 109.650952][ T6693] Set syz1 is full, maxelem 65536 reached [ 109.762714][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 109.868060][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 110.026351][ T6942] netlink: 'syz.0.278': attribute type 11 has an invalid length. [ 110.570387][ T6972] __nla_validate_parse: 8 callbacks suppressed [ 110.570408][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.285'. [ 110.717837][ T6978] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 110.893334][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 110.988915][ T6992] pimreg: entered allmulticast mode [ 110.998130][ T6995] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 111.030192][ T6995] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 111.053880][ T7001] tipc: Started in network mode [ 111.072923][ T7001] tipc: Node identity 62d992506fa2, cluster identity 4711 [ 111.116971][ T7001] tipc: Enabled bearer , priority 0 [ 111.141399][ T7003] syzkaller0: entered promiscuous mode [ 111.167294][ T7003] syzkaller0: entered allmulticast mode [ 111.262953][ T7003] tipc: Resetting bearer [ 111.288428][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 111.340731][ T7003] tipc: Disabling bearer [ 111.403275][ T7023] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 111.550037][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 111.594780][ T7020] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.612628][ T7020] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 111.626214][ T7020] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 111.674983][ T7041] netlink: 'syz.2.302': attribute type 1 has an invalid length. [ 111.698996][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 111.821887][ T7040] ip6gre1: entered allmulticast mode [ 111.849576][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.079489][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.306'. [ 112.339933][ T7059] openvswitch: netlink: IP tunnel dst address not specified [ 112.491036][ T7070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.312'. [ 112.544741][ T7068] tipc: Enabled bearer , priority 0 [ 112.561645][ T7068] syzkaller0: entered promiscuous mode [ 112.574779][ T7068] syzkaller0: entered allmulticast mode [ 112.733213][ T7073] tipc: Resetting bearer [ 112.766325][ T7073] tipc: Disabling bearer [ 112.908896][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.319'. [ 113.096787][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 113.317147][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.324'. [ 113.458149][ T7110] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 113.492755][ T7110] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 113.494040][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.907700][ T7129] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 115.091622][ T7186] lo: Caught tx_queue_len zero misconfig [ 115.286584][ T7194] sctp: [Deprecated]: syz.0.349 (pid 7194) Use of int in maxseg socket option. [ 115.286584][ T7194] Use struct sctp_assoc_value instead [ 115.342168][ T7196] vlan2: entered promiscuous mode [ 115.352452][ T7196] bridge0: entered promiscuous mode [ 116.097442][ T7225] __nla_validate_parse: 10 callbacks suppressed [ 116.097463][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 116.124825][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 116.158915][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 116.215124][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.356'. [ 116.235999][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.356'. [ 116.461870][ T7240] sctp: [Deprecated]: syz.0.361 (pid 7240) Use of int in max_burst socket option. [ 116.461870][ T7240] Use struct sctp_assoc_value instead [ 116.830922][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.848051][ T7266] nbd: must specify an index to disconnect [ 116.848622][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 116.863479][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 116.878951][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.959164][ T7265] xt_socket: unknown flags 0x50 [ 117.078998][ T7266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.162096][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.369'. [ 117.686489][ T7303] tipc: Started in network mode [ 117.703148][ T7303] tipc: Node identity ea8454954df4, cluster identity 4711 [ 117.747365][ T7303] tipc: Enabled bearer , priority 0 [ 117.756426][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.378'. [ 117.777270][ T7316] syzkaller0: entered promiscuous mode [ 117.785122][ T7316] syzkaller0: entered allmulticast mode [ 117.868352][ T7303] syzkaller0: mtu less than device minimum [ 117.877660][ T7302] tipc: Resetting bearer [ 117.957234][ T7302] tipc: Disabling bearer [ 118.221203][ T7338] unknown channel width for channel at 909000KHz? [ 118.234624][ T7337] netlink: 'syz.4.385': attribute type 3 has an invalid length. [ 118.234813][ T7338] unknown channel width for channel at 909000KHz? [ 118.267212][ T7340] netlink: 830 bytes leftover after parsing attributes in process `syz.1.387'. [ 118.298462][ T7332] bridge: RTM_NEWNEIGH with invalid ether address [ 119.191519][ T980] IPVS: starting estimator thread 0... [ 119.246466][ T7379] net veth1_virt_wifi .: renamed from virt_wifi0 [ 119.352664][ T7393] netlink: 'syz.4.398': attribute type 29 has an invalid length. [ 119.362428][ T7383] IPVS: using max 31 ests per chain, 74400 per kthread [ 119.418857][ T7395] netlink: 'syz.4.398': attribute type 29 has an invalid length. [ 119.635028][ T7405] Bluetooth: MGMT ver 1.23 [ 119.813927][ T7403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.846035][ T7403] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 120.009845][ T7403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.029879][ T7403] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 120.073871][ T7403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.087726][ T7403] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 120.127425][ T7403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.143973][ T7403] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 120.892129][ T7477] sock: sock_set_timeout: `syz.0.422' (pid 7477) tries to set negative timeout [ 120.954302][ T7477] netlink: 'syz.0.422': attribute type 33 has an invalid length. [ 121.196899][ T7502] __nla_validate_parse: 13 callbacks suppressed [ 121.196918][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 121.297048][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.430'. [ 121.311329][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 121.323810][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 121.359721][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 121.382085][ T7507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 121.508851][ T7514] tipc: Enabled bearer , priority 0 [ 121.532177][ T7514] syzkaller0: entered promiscuous mode [ 121.541230][ T7514] syzkaller0: entered allmulticast mode [ 121.555401][ T7514] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.646107][ T7514] tipc: Resetting bearer [ 121.673705][ T7513] tipc: Resetting bearer [ 121.739537][ T7513] tipc: Disabling bearer [ 121.927453][ T7548] netlink: 'syz.3.445': attribute type 11 has an invalid length. [ 122.013401][ T7550] netlink: zone id is out of range [ 122.054943][ T7550] netlink: zone id is out of range [ 122.070736][ T7550] netlink: zone id is out of range [ 122.089203][ T7550] netlink: zone id is out of range [ 122.122754][ T7550] netlink: zone id is out of range [ 122.128910][ T7562] openvswitch: netlink: Unknown key attributes 2 [ 122.155108][ T7550] netlink: zone id is out of range [ 122.176292][ T7561] tipc: Enabled bearer , priority 0 [ 122.197004][ T7550] netlink: zone id is out of range [ 122.212708][ T7561] syzkaller0: entered promiscuous mode [ 122.230031][ T7550] netlink: zone id is out of range [ 122.246037][ T7561] syzkaller0: entered allmulticast mode [ 122.328406][ T7550] tipc: Resetting bearer [ 122.345234][ T7549] tipc: Resetting bearer [ 122.391590][ T7549] tipc: Disabling bearer [ 122.702727][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.4.456'. [ 122.730732][ T7583] netlink: 'syz.3.455': attribute type 29 has an invalid length. [ 123.002104][ T7594] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 123.369403][ T7590] netlink: 14 bytes leftover after parsing attributes in process `syz.3.457'. [ 123.586222][ T7590] bond0 (unregistering): Released all slaves [ 123.773477][ T7609] syz.2.463 (7609) used greatest stack depth: 17864 bytes left [ 123.988303][ T7622] netlink: 168 bytes leftover after parsing attributes in process `syz.4.466'. [ 124.532077][ T7646] bond0: entered promiscuous mode [ 124.540863][ T7646] bond0: entered allmulticast mode [ 124.546988][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.614461][ T7652] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 125.012448][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 125.210462][ T7678] vlan3: entered allmulticast mode [ 125.449974][ T7693] sctp: [Deprecated]: syz.4.484 (pid 7693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.449974][ T7693] Use struct sctp_sack_info instead [ 125.862048][ T7709] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 126.031625][ T7718] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.480812][ T7727] __nla_validate_parse: 66 callbacks suppressed [ 126.480833][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 126.555637][ T7727] tipc: Started in network mode [ 126.620389][ T7727] tipc: Node identity ac14140f, cluster identity 4711 [ 126.628470][ T7727] tipc: New replicast peer: 255.255.255.255 [ 126.682480][ T7727] tipc: Enabled bearer , priority 10 [ 126.757272][ T7729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.810221][ T7730] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 126.820746][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 126.873692][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 126.924106][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 126.974046][ T7731] netlink: 'syz.4.493': attribute type 15 has an invalid length. [ 127.081877][ T5986] IPVS: starting estimator thread 0... [ 127.139330][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 127.187118][ T7745] IPVS: using max 34 ests per chain, 81600 per kthread [ 127.351693][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.387193][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.412868][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.454258][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.476595][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.493510][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.505433][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.529779][ T7764] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 127.626308][ T5935] tipc: Node number set to 2886997007 [ 127.762808][ T7779] netlink: 10 bytes leftover after parsing attributes in process `syz.3.505'. [ 128.140902][ T7555] net_ratelimit: 9 callbacks suppressed [ 128.140922][ T7555] Set syz1 is full, maxelem 65536 reached [ 128.412882][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 128.430772][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'. [ 128.572952][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 129.140569][ T7824] netlink: 364 bytes leftover after parsing attributes in process `syz.2.516'. [ 129.339685][ T7842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.380508][ T7842] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.073040][ T7869] macvlan2: entered allmulticast mode [ 130.301340][ T7882] syz_tun: entered allmulticast mode [ 130.378108][ T7883] sctp: [Deprecated]: syz.0.537 (pid 7883) Use of int in max_burst socket option. [ 130.378108][ T7883] Use struct sctp_assoc_value instead [ 130.567500][ T7898] ip6erspan0: entered promiscuous mode [ 130.950888][ T7916] validate_nla: 49 callbacks suppressed [ 130.950909][ T7916] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 131.013849][ T7926] tipc: Enabled bearer , priority 0 [ 131.024247][ T7926] syzkaller0: entered promiscuous mode [ 131.043234][ T7926] syzkaller0: entered allmulticast mode [ 131.075372][ T7926] sch_tbf: peakrate 4 is lower than or equals to rate 291338071292539305 ! [ 131.093384][ T7926] tipc: Resetting bearer [ 131.127289][ T7923] tipc: Resetting bearer [ 131.183540][ T7923] tipc: Disabling bearer [ 131.207438][ T7880] syz_tun: left allmulticast mode [ 131.848952][ T7974] __nla_validate_parse: 6 callbacks suppressed [ 131.848971][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 131.905536][ T7982] netlink: 84 bytes leftover after parsing attributes in process `syz.4.568'. [ 132.673543][ T7965] ip6gre1: left allmulticast mode [ 132.686002][ T7965] bond0: left promiscuous mode [ 132.691138][ T7965] bond0: left allmulticast mode [ 132.846301][ T7985] tipc: Enabled bearer , priority 12 [ 132.858687][ T6897] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.897217][ T6897] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.927330][ T6897] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.941363][ T6897] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.987114][ T8010] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 132.988749][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044910][ T8010] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 133.064289][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 133.780373][ T8066] netlink: 72 bytes leftover after parsing attributes in process `syz.0.584'. [ 134.177508][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.195183][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.350870][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 134.539395][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 134.591998][ T8040] ip6erspan0: left promiscuous mode [ 134.612956][ T8073] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 134.636614][ T6934] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.664942][ T6934] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.681798][ T6934] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.712054][ T6934] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.818870][ T6934] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.844796][ T8095] netlink: zone id is out of range [ 134.846272][ T6934] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.876344][ T6934] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.885439][ T6934] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.964299][ T8100] tipc: Enabling of bearer rejected, failed to enable media [ 135.284330][ T8108] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 135.309454][ T8108] team0: Device ipvlan1 failed to register rx_handler [ 135.575509][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 135.766849][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.608'. [ 135.777206][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 135.788818][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.608'. [ 135.819326][ T8143] veth0: entered promiscuous mode [ 135.851873][ T8149] netlink: 'syz.1.612': attribute type 83 has an invalid length. [ 135.918792][ T8139] syzkaller0: entered promiscuous mode [ 135.925025][ T8139] syzkaller0: entered allmulticast mode [ 135.940584][ T8142] veth0: left promiscuous mode [ 136.431427][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.036100][ T8196] nbd0: detected capacity change from 0 to 127 [ 138.193720][ T8216] __nla_validate_parse: 3 callbacks suppressed [ 138.193738][ T8216] netlink: 2 bytes leftover after parsing attributes in process `syz.1.625'. [ 138.216532][ T8216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.230401][ T8191] openvswitch: netlink: IPv4 tun info is not correct [ 138.297718][ T8198] nbd1: detected capacity change from 0 to 127 [ 138.364885][ T5883] block nbd0: Receive control failed (result -32) [ 138.364885][ T5874] block nbd0: Receive control failed (result -32) [ 138.369175][ T5880] block nbd1: Receive control failed (result -32) [ 138.373655][ T51] block nbd1: Receive control failed (result -32) [ 138.586802][ T8234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 138.727155][ T8238] netlink: 'syz.1.631': attribute type 5 has an invalid length. [ 138.751100][ T8240] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.632'. [ 138.952139][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 138.984753][ T8250] openvswitch: netlink: Unknown nsh attribute 0 [ 138.991559][ T8250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.022186][ T8250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.636'. [ 139.076843][ T8257] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 139.152105][ T8257] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 139.184644][ T8257] netlink: 208 bytes leftover after parsing attributes in process `syz.2.639'. [ 139.195710][ T8257] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 139.206649][ T8257] netlink: 'syz.2.639': attribute type 2 has an invalid length. [ 139.272471][ T8269] IPVS: Scheduler module ip_vs_sip not found [ 139.308769][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'. [ 139.464717][ T8277] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 139.863072][ T8298] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 139.996591][ T8298] bond2: entered promiscuous mode [ 140.002316][ T8298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.058610][ T8304] netlink: 'syz.2.649': attribute type 29 has an invalid length. [ 140.078283][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 140.110442][ T8304] netlink: 576 bytes leftover after parsing attributes in process `syz.2.649'. [ 140.124897][ T8313] veth0_vlan: entered allmulticast mode [ 140.143121][ T8317] bridge0: port 1(syz_tun) entered blocking state [ 140.154232][ T8317] bridge0: port 1(syz_tun) entered disabled state [ 140.163155][ T8317] syz_tun: entered allmulticast mode [ 140.175102][ T8317] syz_tun: entered promiscuous mode [ 140.339688][ T8334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.657'. [ 140.585403][ T8350] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 140.660593][ T8348] netlink: ct family unspecified [ 140.665728][ T8348] openvswitch: netlink: Actions may not be safe on all matching packets [ 140.782124][ T8363] veth1_to_bond: entered allmulticast mode [ 140.839090][ T8363] veth1_to_bond: entered promiscuous mode [ 140.861599][ T8368] netlink: 'syz.2.665': attribute type 11 has an invalid length. [ 141.075476][ T8363] hsr_slave_0 (unregistering): left promiscuous mode [ 141.216767][ T8363] veth1_to_bond: left promiscuous mode [ 141.223092][ T8363] veth1_to_bond: left allmulticast mode [ 141.254356][ T8394] netem: incorrect gi model size [ 141.264976][ T8394] netem: change failed [ 141.316649][ T8390] block nbd3: server does not support multiple connections per device. [ 141.337012][ T8390] block nbd3: shutting down sockets [ 141.647699][ T8426] tipc: Enabled bearer , priority 0 [ 141.679510][ T8422] tipc: Enabling of bearer rejected, already enabled [ 141.698911][ T8426] syzkaller0: entered promiscuous mode [ 141.722077][ T8426] syzkaller0: entered allmulticast mode [ 141.830989][ T8442] tipc: Resetting bearer [ 141.888378][ T8442] tipc: Disabling bearer [ 142.312849][ T8472] GUP no longer grows the stack in syz.0.696 (8472): 200000006000-200000008000 (200000005000) [ 142.331241][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) [ 142.331272][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.331291][ T8472] Call Trace: [ 142.331300][ T8472] [ 142.331309][ T8472] dump_stack_lvl+0x189/0x250 [ 142.331345][ T8472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.331369][ T8472] ? __pfx__printk+0x10/0x10 [ 142.331395][ T8472] ? find_vma+0xe7/0x160 [ 142.331438][ T8472] __get_user_pages+0x24d0/0x2ce0 [ 142.331462][ T8472] ? __lock_acquire+0xab9/0xd20 [ 142.331520][ T8472] ? __gup_longterm_locked+0xc68/0x1660 [ 142.331554][ T8472] __gup_longterm_locked+0xde9/0x1660 [ 142.331594][ T8472] ? sanity_check_pinned_pages+0x123a/0x1300 [ 142.331628][ T8472] gup_fast_fallback+0x1e6a/0x2010 [ 142.331701][ T8472] ? __pfx_gup_fast_fallback+0x10/0x10 [ 142.331731][ T8472] ? __cgroup_account_cputime+0xe5/0x120 [ 142.331771][ T8472] ? pin_user_pages_fast+0x4d/0xb0 [ 142.331799][ T8472] iov_iter_extract_pages+0x35a/0x5e0 [ 142.331836][ T8472] extract_iter_to_sg+0xe46/0x24e0 [ 142.331882][ T8472] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 142.331904][ T8472] ? __local_bh_enable_ip+0x12d/0x1c0 [ 142.331926][ T8472] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.331949][ T8472] ? __local_bh_enable_ip+0x12d/0x1c0 [ 142.331968][ T8472] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 142.331994][ T8472] ? __asan_memset+0x22/0x50 [ 142.332020][ T8472] hash_sendmsg+0x4f4/0x11d0 [ 142.332074][ T8472] ? __pfx_hash_sendmsg+0x10/0x10 [ 142.332103][ T8472] __sock_sendmsg+0x21c/0x270 [ 142.332138][ T8472] ____sys_sendmsg+0x52d/0x830 [ 142.332169][ T8472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.332203][ T8472] ? import_iovec+0x74/0xa0 [ 142.332231][ T8472] ___sys_sendmsg+0x21f/0x2a0 [ 142.332259][ T8472] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.332325][ T8472] ? __fget_files+0x2a/0x420 [ 142.332341][ T8472] ? __fget_files+0x3a0/0x420 [ 142.332371][ T8472] __sys_sendmmsg+0x227/0x430 [ 142.332402][ T8472] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.332425][ T8472] ? do_futex+0x333/0x420 [ 142.332460][ T8472] ? fd_install+0x97/0x540 [ 142.332510][ T8472] ? rcu_is_watching+0x15/0xb0 [ 142.332538][ T8472] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.332566][ T8472] do_syscall_64+0xfa/0x3b0 [ 142.332586][ T8472] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.332606][ T8472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.332626][ T8472] ? clear_bhb_loop+0x60/0xb0 [ 142.332659][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.332678][ T8472] RIP: 0033:0x7f1390f8eba9 [ 142.332697][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.332714][ T8472] RSP: 002b:00007f1391d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.332743][ T8472] RAX: ffffffffffffffda RBX: 00007f13911d5fa0 RCX: 00007f1390f8eba9 [ 142.332758][ T8472] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 142.332771][ T8472] RBP: 00007f1391011e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.332783][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.332795][ T8472] R13: 00007f13911d6038 R14: 00007f13911d5fa0 R15: 00007fffb1004ef8 [ 142.332834][ T8472] [ 143.321661][ T8526] __nla_validate_parse: 7 callbacks suppressed [ 143.321682][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 143.655521][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 143.689702][ T8552] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 143.772022][ T8556] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 143.874548][ T8562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.724'. [ 143.953142][ T8567] netlink: 'syz.0.726': attribute type 7 has an invalid length. [ 144.032851][ T8567] : entered promiscuous mode [ 144.189349][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 144.209159][ T8582] gtp0: entered promiscuous mode [ 144.214272][ T8582] gtp0: entered allmulticast mode [ 144.231844][ T8586] bridge_slave_0: invalid flags given to default FDB implementation [ 144.311731][ T8595] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.733'. [ 144.321822][ T8590] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.733'. [ 144.325409][ T8596] netlink: 'syz.1.735': attribute type 11 has an invalid length. [ 144.343734][ T8590] openvswitch: netlink: Message has 5 unknown bytes. [ 144.349139][ T8595] openvswitch: netlink: Message has 5 unknown bytes. [ 144.779520][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 144.787950][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 144.871442][ T8606] hsr_slave_1 (unregistering): left promiscuous mode [ 144.923289][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.739'. [ 145.135427][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 145.160564][ T8623] ip6gre0: Master is either lo or non-ether device [ 145.677784][ T8652] IPVS: Error connecting to the multicast addr [ 146.704500][ T8705] netlink: 'syz.2.764': attribute type 11 has an invalid length. [ 146.771319][ T8707] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 146.792533][ T8707] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 146.876949][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.898500][ T8707] bond0: (slave team0): Enslaving as an active interface with an up link [ 147.428402][ T8732] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 147.913868][ T8765] netlink: 'syz.1.783': attribute type 4 has an invalid length. [ 148.163740][ T8783] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 148.211622][ T8781] »»»»»»: renamed from veth0_to_bond (while UP) [ 149.484878][ T8858] sch_fq: defrate 0 ignored. [ 149.684970][ T8866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.147234][ T8880] syzkaller1: entered promiscuous mode [ 150.159801][ T8880] syzkaller1: entered allmulticast mode [ 150.310618][ T8893] __nla_validate_parse: 10 callbacks suppressed [ 150.310638][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 150.396713][ T8896] xt_HMARK: spi-set and port-set can't be combined [ 150.689579][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 151.239525][ T8945] netlink: 14 bytes leftover after parsing attributes in process `syz.2.834'. [ 151.428118][ T8942] "syz.4.833" (8942) uses obsolete ecb(arc4) skcipher [ 151.594756][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 151.707343][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 151.732995][ T8969] bond0: entered promiscuous mode [ 151.799001][ T8969] bond0: left promiscuous mode [ 152.139625][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 152.379633][ T9018] syzkaller1: entered promiscuous mode [ 152.405679][ T9018] syzkaller1: entered allmulticast mode [ 152.421959][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 152.534413][ T9021] netlink: 260 bytes leftover after parsing attributes in process `syz.1.854'. [ 152.670117][ T9035] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 152.677240][ T9038] veth0: entered promiscuous mode [ 152.681731][ T9035] netlink: 224 bytes leftover after parsing attributes in process `syz.4.859'. [ 152.700073][ T9039] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 152.708597][ T9039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.859'. [ 152.747483][ T9035] bridge_slave_0: left promiscuous mode [ 152.753435][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.780247][ T9035] bridge_slave_1: left allmulticast mode [ 152.792524][ T9035] bridge_slave_1: left promiscuous mode [ 152.809951][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.834449][ T9035] bond0: (slave bond_slave_0): Releasing backup interface [ 152.862744][ T9035] bond0: (slave bond_slave_1): Releasing backup interface [ 152.903909][ T9035] team0: Port device team_slave_0 removed [ 152.920510][ T9035] team0: Port device team_slave_1 removed [ 152.927635][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.935038][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.945300][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.952996][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.965109][ T9035] tipc: Resetting bearer [ 153.021446][ T9037] veth0: left promiscuous mode [ 153.042261][ T9053] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 153.051136][ T9053] bond0: (slave wlan1): Opening slave failed [ 153.183467][ T9059] tipc: Resetting bearer [ 153.210128][ T9066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.288222][ T9059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.516262][ T9074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.874589][ T9103] netlink: 'syz.3.876': attribute type 24 has an invalid length. [ 154.193606][ T9122] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 154.425079][ T9133] veth0: entered promiscuous mode [ 154.432682][ T9133] veth0: left promiscuous mode [ 154.445707][ T9133] netlink: 'syz.3.883': attribute type 9 has an invalid length. [ 154.671026][ T9159] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 154.690763][ T9160] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.277986][ T9202] netlink: 'syz.3.904': attribute type 29 has an invalid length. [ 155.317972][ T9202] netlink: 'syz.3.904': attribute type 29 has an invalid length. [ 155.368400][ T9202] vlan2: entered allmulticast mode [ 155.399525][ T9202] bridge_slave_0: entered allmulticast mode [ 155.610895][ T9220] __nla_validate_parse: 11 callbacks suppressed [ 155.610913][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 155.644392][ T9220] netlink: 'syz.4.910': attribute type 7 has an invalid length. [ 155.661186][ T9220] netlink: 'syz.4.910': attribute type 8 has an invalid length. [ 155.686008][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 155.713008][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.910'. [ 155.911544][ T9245] syzkaller1: entered promiscuous mode [ 155.948426][ T9245] syzkaller1: entered allmulticast mode [ 155.989328][ T9245] ip6gre0: Master is either lo or non-ether device [ 156.262593][ T9273] openvswitch: netlink: IP tunnel dst address not specified [ 156.381554][ T9277] tipc: Enabled bearer , priority 0 [ 156.414714][ T9277] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 156.448301][ T9277] syzkaller0: entered promiscuous mode [ 156.459686][ T9290] delete_channel: no stack [ 156.469056][ T9277] syzkaller0: entered allmulticast mode [ 156.487594][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.929'. [ 156.536245][ T9277] tipc: Resetting bearer [ 156.578364][ T9294] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 156.591039][ T9295] tipc: Enabling of bearer rejected, already enabled [ 156.591639][ T9293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.930'. [ 156.615662][ T9293] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 156.625509][ T9293] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 156.649296][ T9301] netlink: 152 bytes leftover after parsing attributes in process `syz.2.932'. [ 156.679939][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.932'. [ 156.707366][ T9303] Bluetooth: MGMT ver 1.23 [ 156.709337][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 156.725302][ T9277] tipc: Resetting bearer [ 156.762136][ T9277] tipc: Disabling bearer [ 156.840449][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.933'. [ 157.044985][ T9327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.071568][ T9332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.939'. [ 158.267541][ T9420] bond0: Caught tx_queue_len zero misconfig [ 158.340742][ T9424] validate_nla: 1 callbacks suppressed [ 158.340762][ T9424] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 158.649115][ T9437] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.977057][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 158.985096][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.044219][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.053321][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.082286][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.090547][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.099039][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.114046][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.124070][ T9459] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 159.130340][ T9463] sctp: [Deprecated]: syz.1.980 (pid 9463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.130340][ T9463] Use struct sctp_sack_info instead [ 159.421802][ T9483] syzkaller0: entered promiscuous mode [ 159.439324][ T9483] syzkaller0: entered allmulticast mode [ 159.455143][ T9482] tipc: Enabled bearer , priority 0 [ 159.583777][ T9482] tipc: Resetting bearer [ 159.648613][ T9482] tipc: Disabling bearer [ 159.683903][ T9507] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 159.699483][ T9506] syzkaller1: entered promiscuous mode [ 159.716059][ T9506] syzkaller1: entered allmulticast mode [ 159.738811][ T9506] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.783719][ T9507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.881278][ T9514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.890899][ T9514] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.911751][ T9514] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 160.233693][ T9549] TCP: TCP_TX_DELAY enabled [ 160.264077][ T9550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.435624][ T9559] syzkaller1: entered promiscuous mode [ 160.443074][ T9559] syzkaller1: entered allmulticast mode [ 160.665292][ T9572] __nla_validate_parse: 17 callbacks suppressed [ 160.665311][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 160.833624][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 160.953796][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.999829][ T9594] xt_l2tp: invalid flags combination: 8 [ 161.022292][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 161.034705][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 161.065533][ T9600] sctp: [Deprecated]: syz.4.1023 (pid 9600) Use of int in maxseg socket option. [ 161.065533][ T9600] Use struct sctp_assoc_value instead [ 161.180055][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 161.204542][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1027'. [ 161.252353][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 161.288275][ T9616] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 163.161399][ T9651] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 163.342543][ T43] IPVS: starting estimator thread 0... [ 163.430019][ T9674] openvswitch: netlink: IP tunnel dst address not specified [ 163.442764][ T9666] syzkaller0: entered promiscuous mode [ 163.448890][ T9671] IPVS: using max 29 ests per chain, 69600 per kthread [ 163.476965][ T9666] syzkaller0: entered allmulticast mode [ 163.622686][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 163.940213][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 165.132308][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1052'. [ 165.210168][ T9699] validate_nla: 68 callbacks suppressed [ 165.210188][ T9699] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 165.321185][ T9699] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 165.332239][ T9704] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 165.385440][ T9715] netlink: 'syz.3.1060': attribute type 12 has an invalid length. [ 165.750655][ T9739] __nla_validate_parse: 1 callbacks suppressed [ 165.750675][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 165.784467][ T9737] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.198450][ T9776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1075'. [ 166.270902][ T9780] veth1_to_bond: entered allmulticast mode [ 166.281401][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 166.361528][ T9780] veth1_to_bond (unregistering): left allmulticast mode [ 166.423329][ T9788] veth0_to_bridge: entered promiscuous mode [ 166.433849][ T9788] veth0_to_bridge: left promiscuous mode [ 166.671109][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 166.684716][ T9801] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 166.702644][ T9801] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 167.090503][ T9827] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 167.102730][ T9829] netlink: 'syz.3.1091': attribute type 83 has an invalid length. [ 167.115045][ T9828] netlink: 'syz.3.1091': attribute type 83 has an invalid length. [ 167.344320][ T9845] tipc: Enabling of bearer rejected, already enabled [ 167.367566][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 167.459195][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1099'. [ 167.471032][ T6930] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.494120][ T6930] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.602745][ T6930] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.639976][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 167.644627][ T6930] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.713654][ T9853] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 167.974299][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1106'. [ 167.997160][ T9887] lo: Caught tx_queue_len zero misconfig [ 168.007444][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 168.027444][ T9887] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 168.325385][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 168.560235][ T9930] netlink: 'syz.3.1122': attribute type 2 has an invalid length. [ 169.024436][ T9957] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 169.036389][ T9957] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 169.059414][ T9961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.647893][ T9994] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.809715][T10007] vlan3: entered promiscuous mode [ 169.813195][T10010] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20000 [ 169.815044][T10007] bridge0: entered promiscuous mode [ 170.239723][ T848] IPVS: starting estimator thread 0... [ 170.350324][T10033] IPVS: using max 28 ests per chain, 67200 per kthread [ 170.372172][T10043] IPVS: ip_vs_add_dest(): server weight less than zero [ 170.394431][T10044] validate_nla: 2 callbacks suppressed [ 170.394450][T10044] netlink: 'syz.1.1158': attribute type 15 has an invalid length. [ 171.847592][T10025] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 171.855348][T10025] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 171.863346][T10025] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 171.917142][T10032] __nla_validate_parse: 9 callbacks suppressed [ 171.917170][T10032] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1157'. [ 171.947688][T10047] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1160'. [ 172.081325][T10055] pim6reg: entered allmulticast mode [ 172.123099][T10059] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 172.136646][T10062] netlink: 'syz.2.1165': attribute type 18 has an invalid length. [ 172.154940][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 172.167695][T10059] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 172.185942][T10059] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1164'. [ 172.201001][T10062] netlink: 'syz.2.1165': attribute type 18 has an invalid length. [ 172.234843][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 172.423305][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 172.436506][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 172.948427][T10115] syz.0.1182 (10115) used obsolete PPPIOCDETACH ioctl [ 173.212592][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 173.315416][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 173.364758][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1191'. [ 173.752058][T10155] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 173.780434][T10155] team0: Device ipvlan1 failed to register rx_handler [ 173.912899][T10171] dvmrp0: entered allmulticast mode [ 173.965644][T10155] dvmrp0: left allmulticast mode [ 175.222910][T10259] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 175.467835][T10268] netlink: 'syz.0.1221': attribute type 39 has an invalid length. [ 177.192500][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.200705][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.214481][T10374] lo: left promiscuous mode [ 177.223334][T10376] __nla_validate_parse: 14 callbacks suppressed [ 177.223354][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1256'. [ 177.240118][T10374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.265542][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.324223][T10373] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.337694][T10379] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 177.361860][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.405044][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.427430][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.445144][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.467610][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.479516][T10373] hsr0 speed is unknown, defaulting to 1000 [ 177.703868][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1267'. [ 177.725703][T10409] netlink: 4604 bytes leftover after parsing attributes in process `syz.3.1267'. [ 178.162158][T10435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1276'. [ 178.324851][T10445] netlink: 'syz.1.1279': attribute type 12 has an invalid length. [ 178.423281][T10453] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1282'. [ 178.483335][T10453] netlink: 'syz.0.1282': attribute type 3 has an invalid length. [ 178.521075][T10453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1282'. [ 178.566821][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 178.646427][T10459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 178.745056][T10469] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 178.752902][T10463] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 178.762393][T10463] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.788548][T10469] IPVS: Unknown mcast interface: vcan0 [ 178.830884][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 178.992306][T10488] tipc: Enabled bearer , priority 0 [ 179.043244][T10495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'. [ 179.124591][T10489] syzkaller0: entered promiscuous mode [ 179.131080][T10489] syzkaller0: entered allmulticast mode [ 179.224761][T10489] tipc: Resetting bearer [ 179.408964][T10489] tipc: Disabling bearer [ 179.537556][T10522] netlink: 'syz.2.1301': attribute type 9 has an invalid length. [ 179.596571][T10517] netlink: 'syz.2.1301': attribute type 9 has an invalid length. [ 179.650283][T10526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.813916][T10539] veth0: entered promiscuous mode [ 180.192808][T10559] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 180.202719][T10552] syzkaller0: entered promiscuous mode [ 180.218409][T10552] syzkaller0: entered allmulticast mode [ 180.806167][ T51] Bluetooth: hci0: command tx timeout [ 182.078990][T10596] sctp: [Deprecated]: syz.0.1325 (pid 10596) Use of int in max_burst socket option. [ 182.078990][T10596] Use struct sctp_assoc_value instead [ 182.573704][T10635] netlink: 'syz.3.1336': attribute type 7 has an invalid length. [ 182.605972][T10635] netlink: 'syz.3.1336': attribute type 8 has an invalid length. [ 182.710417][T10640] __nla_validate_parse: 12 callbacks suppressed [ 182.710437][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1340'. [ 182.801008][T10649] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1341'. [ 182.845058][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1341'. [ 182.894244][ T7989] IPVS: starting estimator thread 0... [ 182.987426][T10654] IPVS: using max 24 ests per chain, 57600 per kthread [ 184.624612][T10677] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 184.633781][T10677] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1350'. [ 184.657352][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 184.760759][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 184.777441][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 185.122237][T10700] team0 (unregistering): Port device team_slave_0 removed [ 185.136568][T10700] team0 (unregistering): Port device team_slave_1 removed [ 185.160169][T10703] net veth1_virt_wifi .: renamed from virt_wifi0 [ 185.452888][T10722] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 185.465560][T10722] delete_channel: no stack [ 185.481088][T10724] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 185.611778][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 185.636458][T10730] batadv_slave_1: entered promiscuous mode [ 185.645568][T10730] batman_adv: batadv0: Adding interface: macsec2 [ 185.652653][T10730] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.700488][T10730] batman_adv: batadv0: Interface activated: macsec2 [ 185.762570][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1369'. [ 185.865562][T10736] bridge_slave_0: left allmulticast mode [ 185.885264][T10736] bridge_slave_0: left promiscuous mode [ 185.903104][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.919751][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'. [ 185.933178][T10736] bridge_slave_1: left allmulticast mode [ 185.951839][T10749] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 185.956476][T10736] bridge_slave_1: left promiscuous mode [ 185.973182][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.986883][T10736] bond0: (slave bond_slave_0): Releasing backup interface [ 185.999046][T10736] bond_slave_0: left allmulticast mode [ 186.039736][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.057571][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.074542][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.109895][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.204915][T10749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.275899][T10756] bond5: (slave gretap1): making interface the new active one [ 186.310177][T10756] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 188.231756][T10794] __nla_validate_parse: 2 callbacks suppressed [ 188.231773][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 188.272440][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 188.289335][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 188.411447][T10805] netlink: 'syz.2.1388': attribute type 33 has an invalid length. [ 188.420347][T10805] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1388'. [ 188.645081][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 188.664384][T10829] netlink: 'syz.3.1397': attribute type 62 has an invalid length. [ 188.811902][T10837] netlink: 'syz.3.1400': attribute type 7 has an invalid length. [ 189.038402][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1404'. [ 189.072671][T10853] openvswitch: netlink: Flow actions attr not present in new flow. [ 189.141916][T10858] netlink: 'syz.4.1408': attribute type 24 has an invalid length. [ 189.270242][T10862] bond4: entered promiscuous mode [ 189.275580][T10862] bond4: entered allmulticast mode [ 189.282348][T10862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.409633][T10862] bond4 (unregistering): Released all slaves [ 189.433209][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 189.508258][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 189.682450][T10885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 189.801032][T10891] tipc: Enabled bearer , priority 0 [ 189.812160][T10891] syzkaller0: entered promiscuous mode [ 189.817944][T10891] syzkaller0: entered allmulticast mode [ 189.903283][T10890] tipc: Resetting bearer [ 189.945509][T10890] tipc: Disabling bearer [ 190.122949][T10903] IPVS: Error connecting to the multicast addr [ 190.128406][T10909] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 190.143848][T10909] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1424'. [ 190.686054][T10949] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 190.738650][T10954] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 190.770691][T10949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.851922][T10956] bond6: (slave veth3): Enslaving as an active interface with a down link [ 190.884816][T10956] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 191.088742][T10980] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 191.252981][T10992] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 191.314016][T10992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.358293][T10994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.366266][T10994] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 191.380268][T10994] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 191.437772][T10992] veth1: entered promiscuous mode [ 191.451984][T10992] bond4: (slave veth1): Enslaving as an active interface with a down link [ 191.462942][T10997] tipc: Enabled bearer , priority 0 [ 191.474418][T10997] syzkaller0: entered promiscuous mode [ 191.481868][T10997] syzkaller0: entered allmulticast mode [ 191.517582][T10992] vlan3: entered allmulticast mode [ 191.522911][T10992] bond4: entered allmulticast mode [ 191.598363][T10997] tipc: Resetting bearer [ 191.628648][T10995] tipc: Resetting bearer [ 191.731901][T10995] tipc: Disabling bearer [ 192.062884][T11036] netlink: 'syz.3.1465': attribute type 11 has an invalid length. [ 192.542658][T11067] vlan3: entered allmulticast mode [ 192.550848][T11067] erspan0: entered allmulticast mode [ 192.863734][T11093] netlink: 'syz.2.1484': attribute type 58 has an invalid length. [ 192.882057][T11091] tipc: Enabled bearer , priority 0 [ 192.882303][T11093] netlink: 'syz.2.1484': attribute type 58 has an invalid length. [ 192.897269][T11091] syzkaller0: entered promiscuous mode [ 192.897291][T11091] syzkaller0: entered allmulticast mode [ 192.900270][T11091] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 192.946391][T11091] tipc: Resetting bearer [ 192.955064][T11089] tipc: Resetting bearer [ 192.990805][T11089] tipc: Disabling bearer [ 193.012365][T11098] macvtap1: entered promiscuous mode [ 193.019528][T11098] macvtap1: entered allmulticast mode [ 193.025646][T11098] team0: Device macvtap1 is already an upper device of the team interface [ 193.167837][T11104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.323189][T11123] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 193.413216][T11131] bond4: entered promiscuous mode [ 193.420511][T11131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.462249][T11133] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.473349][T11133] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 193.484763][T11141] validate_nla: 3 callbacks suppressed [ 193.484780][T11141] netlink: 'syz.0.1496': attribute type 10 has an invalid length. [ 193.486811][T11133] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 193.520752][T11133] bond4: (slave wireguard0): making interface the new active one [ 193.529624][T11133] wireguard0: entered promiscuous mode [ 193.537918][T11133] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 193.577291][T11141] veth0_vlan: entered allmulticast mode [ 193.624245][T11149] __nla_validate_parse: 19 callbacks suppressed [ 193.624263][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1497'. [ 193.640001][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1497'. [ 193.685668][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 193.706196][T11153] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 193.914898][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 194.022224][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 194.070452][T11175] netlink: 'syz.4.1505': attribute type 1 has an invalid length. [ 194.137134][T11165] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 194.169996][T11175] 8021q: adding VLAN 0 to HW filter on device bond8 [ 194.411684][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466759][T11185] netlink: 'syz.0.1507': attribute type 2 has an invalid length. [ 194.588716][T11194] nbd: must specify an index to disconnect [ 194.631606][T11197] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 194.825023][T11213] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 194.880373][T11215] netlink: 'syz.4.1513': attribute type 11 has an invalid length. [ 194.954493][T11207] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.967728][T11207] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 194.978349][T11207] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 195.120418][T11227] syz.0.1516 uses old SIOCAX25GETINFO [ 195.799084][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 195.910161][T11280] IPVS: length: 101 != 24 [ 195.925465][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 195.973321][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 196.001577][T11286] bond0: Device is already in use. [ 196.052277][T11287] sctp: [Deprecated]: syz.4.1537 (pid 11287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.052277][T11287] Use struct sctp_sack_info instead [ 196.059871][T11289] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 196.078182][T11289] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1538'. [ 196.181339][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'. [ 196.947666][T11330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.293289][T11348] netlink: 'syz.4.1555': attribute type 4 has an invalid length. [ 197.622183][T11375] netlink: 'syz.4.1564': attribute type 7 has an invalid length. [ 197.944157][T11388] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 198.310611][T11422] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 198.617721][T11436] unknown channel width for channel at 909000KHz? [ 198.634579][T11436] unknown channel width for channel at 909000KHz? [ 198.666127][T11436] unknown channel width for channel at 909000KHz? [ 198.783279][T11450] __nla_validate_parse: 15 callbacks suppressed [ 198.783299][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 198.845249][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1589'. [ 199.016203][T11465] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.179509][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 199.306040][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 199.326479][T11480] netlink: 13152 bytes leftover after parsing attributes in process `syz.2.1595'. [ 199.342059][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 199.455018][T11488] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1600'. [ 199.469449][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1600'. [ 200.183158][T11528] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 200.277600][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 200.596061][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 200.647133][T11559] bond0: Device is already in use. [ 201.484922][T11574] bond9: entered promiscuous mode [ 201.491271][T11574] bond9: entered allmulticast mode [ 201.497017][T11574] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.602755][T11588] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 201.823902][T11609] netlink: 'syz.4.1628': attribute type 1 has an invalid length. [ 201.884665][T11609] 8021q: adding VLAN 0 to HW filter on device bond11 [ 201.901168][T11609] bond10: (slave bond11): making interface the new active one [ 201.911161][T11609] bond10: (slave bond11): Enslaving as an active interface with an up link [ 204.574408][T11585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.841435][T11654] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 204.846007][T11650] __nla_validate_parse: 4 callbacks suppressed [ 204.846024][T11650] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1642'. [ 205.250979][T11680] atomic_op ffff8880576f5198 conn xmit_atomic 0000000000000000 [ 205.280429][T11681] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 205.420354][T11687] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.433904][T11687] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 205.445067][T11687] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 205.520801][T11681] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.544753][T11681] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 205.560435][T11694] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1654'. [ 205.581720][T11701] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1656'. [ 205.599051][T11701] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 205.609907][T11701] openvswitch: netlink: Duplicate key (type 0). [ 205.640673][T11701] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 205.972698][T11726] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1661'. [ 206.354290][T11741] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 206.441738][T11743] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 206.619560][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 206.715883][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 206.770769][T11757] vlan4: entered allmulticast mode [ 206.783397][T11757] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 206.942468][T11765] pim6reg1: entered promiscuous mode [ 206.950052][T11765] pim6reg1: entered allmulticast mode [ 206.956106][T11762] block nbd3: server does not support multiple connections per device. [ 206.964864][T11762] block nbd3: shutting down sockets [ 207.115343][T11775] netlink: 'syz.1.1680': attribute type 5 has an invalid length. [ 207.138195][T11775] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 207.444999][T11798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1685'. [ 207.578688][T11796] syzkaller0: entered promiscuous mode [ 207.594554][T11796] syzkaller0: entered allmulticast mode [ 207.607341][T11804] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 207.824597][T11813] ip6gre1: entered allmulticast mode [ 208.062860][T11829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1695'. [ 208.082389][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1696'. [ 208.318236][T11844] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 208.326620][T11844] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1702'. [ 208.337435][T11844] team0: Device hsr_slave_0 failed to register rx_handler [ 208.541354][T11864] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 208.593295][T11867] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 208.852465][T11881] netlink: 'syz.2.1717': attribute type 2 has an invalid length. [ 208.978025][T11888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.610800][T11921] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 210.233419][T11952] C: renamed from team_slave_0 [ 210.267880][T11952] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 210.280150][T11954] __nla_validate_parse: 42 callbacks suppressed [ 210.280172][T11954] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1738'. [ 210.301165][T11952] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.308060][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 210.333152][T11954] 8021q: VLANs not supported on gre0 [ 210.374023][T11955] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 210.393473][T11955] netlink: 'syz.1.1735': attribute type 2 has an invalid length. [ 210.490261][T11960] netlink: 'syz.0.1740': attribute type 4 has an invalid length. [ 210.502555][T11961] netlink: 'syz.4.1739': attribute type 1 has an invalid length. [ 210.595790][T11961] 8021q: adding VLAN 0 to HW filter on device bond12 [ 210.720126][T11957] bond12: (slave veth5): Enslaving as an active interface with a down link [ 210.740325][T11964] bond6: (slave veth0_to_bond): Releasing active interface [ 210.758603][T11964] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 210.773586][T11957] netlink: 'syz.4.1739': attribute type 11 has an invalid length. [ 210.795123][T11957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1739'. [ 210.821980][T11961] bond12: (slave veth7): Enslaving as an active interface with a down link [ 210.842194][T11968] IPVS: Unknown mcast interface: nr0 [ 210.899945][T11961] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1739'. [ 211.209410][T11993] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 211.240750][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1750'. [ 211.466988][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'. [ 211.501177][T12005] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 211.607833][T12011] ksmbd: Unknown IPC event: 3, ignore. [ 211.608786][T12016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1756'. [ 211.634984][T12016] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 211.952813][T12032] tipc: Enabled bearer , priority 0 [ 211.978258][T12032] syzkaller0: entered promiscuous mode [ 211.983954][T12032] syzkaller0: entered allmulticast mode [ 212.022327][T12037] batman_adv: batadv0: Adding interface: macvtap1 [ 212.042525][T12037] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.077225][T12037] batman_adv: batadv0: Interface activated: macvtap1 [ 212.097963][T12032] tipc: Resetting bearer [ 212.148996][T12039] syzkaller1: entered promiscuous mode [ 212.181631][T12039] syzkaller1: entered allmulticast mode [ 212.188138][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 212.222653][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 212.295056][T12032] tipc: Resetting bearer [ 212.320634][T12032] tipc: Disabling bearer [ 212.412592][T12056] bond5: entered promiscuous mode [ 212.432279][T12056] bond5: entered allmulticast mode [ 212.441178][T12056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.649081][T12056] bond5 (unregistering): Released all slaves [ 212.689313][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 212.753527][T12069] pim6reg: entered allmulticast mode [ 213.079794][T12087] syz_tun: left allmulticast mode [ 213.085061][T12087] syz_tun: left promiscuous mode [ 213.090953][T12087] bridge0: port 1(syz_tun) entered disabled state [ 213.193059][T12087] bond4: (slave wireguard0): Releasing backup interface [ 213.220731][T12087] wireguard0: left promiscuous mode [ 213.229746][T12098] validate_nla: 4 callbacks suppressed [ 213.229765][T12098] netlink: 'syz.2.1784': attribute type 7 has an invalid length. [ 213.306486][T12101] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 213.321444][T12099] tipc: Enabled bearer , priority 0 [ 213.340604][T12087] syzkaller0: entered promiscuous mode [ 213.370582][T12087] syzkaller0: entered allmulticast mode [ 213.422043][T12087] tipc: Resetting bearer [ 213.435068][T12085] tipc: Resetting bearer [ 213.487247][T12085] tipc: Disabling bearer [ 213.515015][T12115] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 213.525461][T12115] netlink: 'syz.1.1789': attribute type 2 has an invalid length. [ 213.567508][ T6935] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.643894][ T6935] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.669649][ T6935] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.681200][ T6935] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.972893][T12145] hsr0 speed is unknown, defaulting to 1000 [ 214.165486][T12159] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 214.343858][T12141] bond0: (slave team0): Releasing backup interface [ 214.355523][T12141] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 214.444769][T12141] bond0: (slave bridge_slave_1): Releasing backup interface [ 214.722016][T12141] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 214.744979][T12141] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 214.752728][T12141] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 214.761808][T12141] ip6gre1: left allmulticast mode [ 214.770872][T12141] vlan2: left promiscuous mode [ 214.778649][T12141] bridge0: left promiscuous mode [ 214.802362][T12141] bond3: (slave ip6gretap1): Releasing backup interface [ 214.819485][T12141] gtp0: left promiscuous mode [ 214.824310][T12141] gtp0: left allmulticast mode [ 214.853109][T12141] bond5: (slave gretap1): Releasing active interface [ 214.906604][T12159] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 214.948795][ T64] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.978169][ T64] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.001063][ T64] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.067017][ T64] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.097920][ T64] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.119313][ T64] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.260298][ T64] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.287749][ T64] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.320309][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.342306][T12184] __nla_validate_parse: 15 callbacks suppressed [ 215.342328][T12184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1809'. [ 215.362857][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.372817][ T51] Bluetooth: hci0: command tx timeout [ 215.393556][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.404113][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.505462][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 215.535895][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 215.552514][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 215.612712][T12200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 215.662560][T12204] netlink: 'syz.2.1817': attribute type 7 has an invalid length. [ 215.695247][T12204] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1817'. [ 216.158891][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 216.196146][T12236] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 216.235423][T12236] bond0: (slave wlan1): Opening slave failed [ 216.274608][T12239] : renamed from hsr0 [ 216.743646][T12256] openvswitch: netlink: EtherType 0 is less than min 600 [ 216.757600][T12259] netlink: 'syz.3.1833': attribute type 1 has an invalid length. [ 216.780650][T12259] netlink: 'syz.3.1833': attribute type 1 has an invalid length. [ 216.797411][T12260] netlink: 'syz.1.1832': attribute type 11 has an invalid length. [ 216.833482][T12262] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1834'. [ 216.873686][T12262] NCSI netlink: No device for ifindex 0 [ 217.414146][T12300] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1841'. [ 217.618307][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 217.932229][T12315] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 217.942097][T12315] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 218.188944][T12321] hsr0 speed is unknown, defaulting to 1000 [ 219.069109][T12357] netlink: 'syz.3.1859': attribute type 5 has an invalid length. [ 219.368080][T12365] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 219.479391][T12365] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 219.504470][T12387] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 219.863495][T12404] pim6reg1: entered promiscuous mode [ 219.880843][T12404] pim6reg1: entered allmulticast mode [ 220.725415][T12436] __nla_validate_parse: 7 callbacks suppressed [ 220.725434][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 220.949257][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'. [ 220.988730][T12444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.307065][T12453] team0: Device gtp1 is up. Set it down before adding it as a team port [ 221.566100][T12465] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 221.574994][T12465] nbd: error processing sock list [ 221.595665][T12465] block nbd3: shutting down sockets [ 221.641400][T12474] IPVS: Unknown mcast interface: vcan0 [ 221.817021][T12481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1898'. [ 222.205380][T12503] 8021q: VLANs not supported on ip6_vti0 [ 222.242791][T12507] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1909'. [ 222.244352][T12502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1907'. [ 222.271145][T12508] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 222.271150][T12505] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 222.370689][T12513] bond6: (slave gretap1): making interface the new active one [ 222.379757][T12513] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 222.394330][T12510] dvmrp1: entered allmulticast mode [ 222.404445][T12516] [ 222.406899][T12516] ====================================================== [ 222.413995][T12516] WARNING: possible circular locking dependency detected [ 222.421111][T12516] syzkaller #0 Not tainted [ 222.425529][T12516] ------------------------------------------------------ [ 222.432563][T12516] syz.0.1911/12516 is trying to acquire lock: [ 222.438808][T12516] ffffffff8e23f8a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x153/0x610 [ 222.448044][T12516] [ 222.448044][T12516] but task is already holding lock: [ 222.455604][T12516] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 222.465273][T12516] [ 222.465273][T12516] which lock already depends on the new lock. [ 222.465273][T12516] [ 222.475779][T12516] [ 222.475779][T12516] the existing dependency chain (in reverse order) is: [ 222.484791][T12516] [ 222.484791][T12516] -> #2 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 222.492696][T12516] lock_acquire+0x120/0x360 [ 222.497817][T12516] __mutex_lock+0x187/0x1350 [ 222.503016][T12516] pcpu_alloc_noprof+0x286/0x1720 [ 222.508568][T12516] sbitmap_init_node+0x1e1/0x630 [ 222.514043][T12516] sbitmap_queue_init_node+0x3e/0x4d0 [ 222.520023][T12516] blk_mq_init_tags+0x110/0x280 [ 222.525387][T12516] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 222.531607][T12516] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 222.537938][T12516] nbd_start_device+0x17f/0xb10 [ 222.543386][T12516] nbd_genl_connect+0x135b/0x18f0 [ 222.548926][T12516] genl_family_rcv_msg_doit+0x212/0x300 [ 222.555164][T12516] genl_rcv_msg+0x60e/0x790 [ 222.560589][T12516] netlink_rcv_skb+0x208/0x470 [ 222.565868][T12516] genl_rcv+0x28/0x40 [ 222.570458][T12516] netlink_unicast+0x82c/0x9e0 [ 222.575747][T12516] netlink_sendmsg+0x805/0xb30 [ 222.581115][T12516] __sock_sendmsg+0x21c/0x270 [ 222.586435][T12516] ____sys_sendmsg+0x505/0x830 [ 222.591728][T12516] ___sys_sendmsg+0x21f/0x2a0 [ 222.596920][T12516] __x64_sys_sendmsg+0x19b/0x260 [ 222.602378][T12516] do_syscall_64+0xfa/0x3b0 [ 222.607481][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.613893][T12516] [ 222.613893][T12516] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 222.622492][T12516] lock_acquire+0x120/0x360 [ 222.627524][T12516] blk_alloc_queue+0x538/0x620 [ 222.632898][T12516] __blk_mq_alloc_disk+0x15c/0x340 [ 222.638692][T12516] nbd_dev_add+0x46c/0xae0 [ 222.643714][T12516] nbd_init+0x168/0x1f0 [ 222.648485][T12516] do_one_initcall+0x233/0x820 [ 222.653771][T12516] do_initcall_level+0x104/0x190 [ 222.659372][T12516] do_initcalls+0x59/0xa0 [ 222.664213][T12516] kernel_init_freeable+0x334/0x4b0 [ 222.669958][T12516] kernel_init+0x1d/0x1d0 [ 222.674807][T12516] ret_from_fork+0x436/0x7d0 [ 222.680083][T12516] ret_from_fork_asm+0x1a/0x30 [ 222.685364][T12516] [ 222.685364][T12516] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 222.692571][T12516] validate_chain+0xb9b/0x2140 [ 222.697871][T12516] __lock_acquire+0xab9/0xd20 [ 222.703122][T12516] lock_acquire+0x120/0x360 [ 222.708490][T12516] fs_reclaim_acquire+0x72/0x100 [ 222.714116][T12516] prepare_alloc_pages+0x153/0x610 [ 222.719828][T12516] __alloc_frozen_pages_noprof+0x123/0x370 [ 222.726758][T12516] __alloc_pages_noprof+0xa/0x30 [ 222.732298][T12516] pcpu_populate_chunk+0x182/0xb30 [ 222.738014][T12516] pcpu_alloc_noprof+0xcbf/0x1720 [ 222.743583][T12516] bpf_map_alloc_percpu+0xbc/0x1b0 [ 222.749213][T12516] prealloc_init+0x225/0x630 [ 222.754419][T12516] htab_map_alloc+0x6ce/0xc70 [ 222.759619][T12516] map_create+0xaa0/0x14d0 [ 222.764548][T12516] __sys_bpf+0x60f/0x870 [ 222.769580][T12516] __x64_sys_bpf+0x7c/0x90 [ 222.774510][T12516] do_syscall_64+0xfa/0x3b0 [ 222.779694][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.786285][T12516] [ 222.786285][T12516] other info that might help us debug this: [ 222.786285][T12516] [ 222.796847][T12516] Chain exists of: [ 222.796847][T12516] fs_reclaim --> &q->q_usage_counter(io)#49 --> pcpu_alloc_mutex [ 222.796847][T12516] [ 222.810542][T12516] Possible unsafe locking scenario: [ 222.810542][T12516] [ 222.818089][T12516] CPU0 CPU1 [ 222.823754][T12516] ---- ---- [ 222.829107][T12516] lock(pcpu_alloc_mutex); [ 222.833705][T12516] lock(&q->q_usage_counter(io)#49); [ 222.841592][T12516] lock(pcpu_alloc_mutex); [ 222.849303][T12516] lock(fs_reclaim); [ 222.853459][T12516] [ 222.853459][T12516] *** DEADLOCK *** [ 222.853459][T12516] [ 222.861768][T12516] 1 lock held by syz.0.1911/12516: [ 222.866959][T12516] #0: ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 222.876973][T12516] [ 222.876973][T12516] stack backtrace: [ 222.882941][T12516] CPU: 1 UID: 0 PID: 12516 Comm: syz.0.1911 Not tainted syzkaller #0 PREEMPT(full) [ 222.882963][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.882974][T12516] Call Trace: [ 222.882983][T12516] [ 222.882992][T12516] dump_stack_lvl+0x189/0x250 [ 222.883016][T12516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.883035][T12516] ? __pfx__printk+0x10/0x10 [ 222.883058][T12516] ? print_lock_name+0xde/0x100 [ 222.883081][T12516] print_circular_bug+0x2ee/0x310 [ 222.883102][T12516] check_noncircular+0x134/0x160 [ 222.883122][T12516] validate_chain+0xb9b/0x2140 [ 222.883139][T12516] ? finish_task_switch+0x266/0x950 [ 222.883164][T12516] ? finish_task_switch+0x32b/0x950 [ 222.883186][T12516] ? rcu_is_watching+0x15/0xb0 [ 222.883202][T12516] ? trace_sched_exit_tp+0x36/0x110 [ 222.883223][T12516] ? __schedule+0x17ae/0x4cc0 [ 222.883240][T12516] __lock_acquire+0xab9/0xd20 [ 222.883266][T12516] ? prepare_alloc_pages+0x153/0x610 [ 222.883281][T12516] lock_acquire+0x120/0x360 [ 222.883304][T12516] ? prepare_alloc_pages+0x153/0x610 [ 222.883321][T12516] ? __pfx___schedule+0x10/0x10 [ 222.883337][T12516] fs_reclaim_acquire+0x72/0x100 [ 222.883351][T12516] ? prepare_alloc_pages+0x153/0x610 [ 222.883365][T12516] prepare_alloc_pages+0x153/0x610 [ 222.883383][T12516] __alloc_frozen_pages_noprof+0x123/0x370 [ 222.883401][T12516] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.883417][T12516] ? preempt_schedule+0xae/0xc0 [ 222.883438][T12516] __alloc_pages_noprof+0xa/0x30 [ 222.883453][T12516] pcpu_populate_chunk+0x182/0xb30 [ 222.883484][T12516] pcpu_alloc_noprof+0xcbf/0x1720 [ 222.883513][T12516] bpf_map_alloc_percpu+0xbc/0x1b0 [ 222.883539][T12516] prealloc_init+0x225/0x630 [ 222.883568][T12516] htab_map_alloc+0x6ce/0xc70 [ 222.883590][T12516] map_create+0xaa0/0x14d0 [ 222.883613][T12516] ? security_bpf+0x7e/0x300 [ 222.883638][T12516] __sys_bpf+0x60f/0x870 [ 222.883659][T12516] ? __pfx___sys_bpf+0x10/0x10 [ 222.883687][T12516] ? rcu_is_watching+0x15/0xb0 [ 222.883712][T12516] __x64_sys_bpf+0x7c/0x90 [ 222.883731][T12516] do_syscall_64+0xfa/0x3b0 [ 222.883750][T12516] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.883765][T12516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.883781][T12516] ? clear_bhb_loop+0x60/0xb0 [ 222.883799][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.883815][T12516] RIP: 0033:0x7f1390f8eba9 [ 222.883831][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.883847][T12516] RSP: 002b:00007f1391d52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.883865][T12516] RAX: ffffffffffffffda RBX: 00007f13911d5fa0 RCX: 00007f1390f8eba9 [ 222.883878][T12516] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000 [ 222.883889][T12516] RBP: 00007f1391011e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.883900][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.883910][T12516] R13: 00007f13911d6038 R14: 00007f13911d5fa0 R15: 00007fffb1004ef8 [ 222.883928][T12516]