last executing test programs: 2.496857303s ago: executing program 1 (id=1688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) 2.35264818s ago: executing program 1 (id=1690): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@broadcast}]}, 0x20}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = socket(0x10, 0x3, 0x0) connect$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.247270241s ago: executing program 3 (id=1692): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x28}], 0x1}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newchain={0x24, 0x64, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0xfff3, 0x8}, {0xb, 0x10}}}, 0x24}}, 0x24000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xf0) 2.186553972s ago: executing program 4 (id=1693): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000001600)=""/209, &(0x7f0000000180)=0xd1) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (rerun: 64) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="7ea365189161b927174c97a76fc156f44a491011864e007995321963edc65f19fffe9843ca8c9a2c4d6a56886ba4ff7eed14251760e46a626e2d4f424d963ba432bddb96e963a1c20a31c0c1a4e37068e626e8b239118905ecb359529aed323789a4c151c06287e6a2abd9b8e1f0148c0bc7f8d2aba3284abd59c45aa52bc9300e464c871c67f527d534f566e1f4433d0aa5", 0x92}, {&(0x7f0000000400)="87a3de0e613682ba97117da2055a36e026035b0730693dbc6c6422442797733e169f61a3cd129ebadd96a6e6856a5617a81c9ab69e0164ae6bb4924954118543e9d0845e00e7bbaabbf822e1ba90f9ae3cd0979936b1f36cde3c7bbc8180e3918af3c43d1038004dc79a3d87f301bd73f401f6db1aa70bf6b75a5d4cc63c20d0560cced063db6406e5c3ceb57b3684278a6eec77c28512ad565d2fdbe4e40b1f33acd3afff513d53cf360d82c110d91582a1a0e08188573a7559e470e759568768d90701d396347f1c2ebfa6386f10672f58", 0xd2}, {&(0x7f00000001c0)="a2bf18ac598a53e29001d152ede307f4fdb052f38ec1fa9c13b67ff2e5dffbd07a59614871ef08e8b9dc581c279e5e187ebc9dd45141c5a9fab3bc8b5aca16b516b670878a32", 0x46}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="8fe01109a969c824c6431be271be3bbd394119d277d6cf2be0a4885903f4483b5123c9b6da57993aae3fdd375874b0a57ba1ba9220af48a6888ce65733aced609270845fd6af58f3db814d16c18ef5b7161f947368ab6b1787c665dfd35647a614c8e468779362f7cd0af9d0ecbb4bebf24c9a8a5e85fef93d59819c80956621e00974d4dc5c5af6d2dcedb7238009d86fb2914985153a991512717b50cfc1fb2cbc359975c5643717f75c9d5213db2f5a0417a4131bd569b7b2747245218375e7e05f799ddc09210c7242e34d9fb837465492a12ed6565dde11", 0xda}], 0x5) 1.973969316s ago: executing program 3 (id=1694): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x7}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009001000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) 1.901810264s ago: executing program 1 (id=1695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002700)=""/4089, &(0x7f0000001000)=0xff9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x27, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0xd82, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd74, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd60, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "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"}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000001900)={0x4a8, 0x26, 0x800, 0x70bd2a, 0x25dfdbfe, {0x1a}, [@typed={0x8, 0x23, 0x0, 0x0, @pid=r6}, @generic="be2ac6dc546a6576f5bd94ad37a9257df6578292608cd5425481e7f1f9917947a5f27cdb8add18d64d3f3b4e1491f6c493ad2da0bb595c668f11e8469dc6acd6a4ba5ffc16ceeea569036afd4816d622163d2e2aa90d47742762c18866560e1dec6b626ad8b42fc37bc275a0a8d311fada054a7e18fda329166ddab93c23286d974a02ca9e46d85a990d0e042fae60adf56b3232be26c096b5fd900fb101f5a0312305757a518d303405bf7f802c37355ceec4125cbed2ed9ce0d9a6a42168bf4c1a2e66886b9886c0101d6ffc", @generic="5786d7bf703020961739e9f1c37c5ea5af28d2d157af0228a37066316aa59ce337040ae911e9b3b5939ddb988b2a7987119c04c10db0cb103b3315939427d4b8b99791cea44efdd60293fcc6633ccf2cddce4b9c417c1ce7bbb36a8f85b7f3f16f", @nested={0xf6, 0xc5, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x1e}, @generic="43f0a69e62", @generic="d55891fa703ad05662ae4c84e40510381ba77e1a55a2497a9189cb1f4dd2f3a2", @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @generic="55c9e0f6ba504afb471dc2a337d0a1d2800c572198639ac022f9f00bd60a2a26606c8b5e8819674b5e475d8dbcda3c87f75aa6b860880fef70707d1aa02ca149782a6808542b4c231eb3db7bcb2a81f2033fd353f08fc39177f2a7b12d69e4e07813512268ca61df1ef12b6434a6991608f607143f50c2bfbda84d0dce3d40dcd4c953f739e34f8bbf77a89107dfbff3801cdc8f230cf0eb2f13bfb80f", @typed={0xc, 0x144, 0x0, 0x0, @u64=0x200}, @typed={0xf, 0xb2, 0x0, 0x0, @str='syzkaller0\x00'}]}, @generic="036260f5dad47dc6dfeeef376d14b1606d39d905c2d89ddd4788318d7758ebf187467d25d7499f46165d4db62b988308f76d7897b9ccd8e0b0439787502158fab3b60c2848ec3a08cb70ddcaf2fd51e0aee560ba4e654465d87a5ae6df01aab565690c8afc81ab60461af3f79589ca45408d4b9429c1fef0309fb7b441d17673a45b899e7dc92aaca0420dc3ec4c43c9aee1afc4593223e289dc7920ec2436fefa138745c021", @generic="a7ce9b07e5ee8ea2af99fe679f9d72579b690388da1b52c6e62deca298644c6e768e8a5a0a3b51be8fbfa460a82e73c04e693745ca3f8d0db0ba2329d520d63c16b5c10550df81f3fb9e2ed477a18bca851cf63401517099fc2b443df841c9159217eda90d3b9657cf739c28ef6811edb3a7a9cefee255ae6a10db98bf9e001917b40f5cc2f42c6ea32e38d842d925fd094ebdbcb9f37250df8e80110d83cb5388c97883c0d0d4c3", @typed={0x4, 0x117}, @generic="aaf404a6196f9a2f3f70fb1bef36bf6f3949068f6557520f9e13a31fe78a07dd1ef5e04cc32341aa6c7f2bd0193c938d93e8ceeeb2c679ab19b62c3a84ff2baa0b76f5c719597d4ba0f87c58965ead4767ba11927ab2d1f4fb74714c17bb17e45daffc2b2e31d8f0fae381d3b34ef61c5d12157eed9a17d703857243a6e9dbe3c21383aa3feacf5b3b859e937d9d734b9b1c7cd203a6fa953a19a201e9bd5d7e4dc5a2", @generic="1f33ff2b0865b0e9beea02e6454e9753d3f4c1726032cf3b1eff5c9f98fa19cd729a29ebdb7279bb5afb0aac7f56102bf4321d8506eda3fa073ea9f968c25ebc3945241c693ce7017faa294ef99d5c2f95d2f20b67d43624649965fc70ce831a7b203f505e6d5e1cc3ae7c48d14c2e4afc"]}, 0x4a8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, r9, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 1.868930202s ago: executing program 3 (id=1697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd", 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r3}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd", 0x19) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r3}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 1.632300187s ago: executing program 3 (id=1699): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x7d, &(0x7f00000001c0)=0x1) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0x2, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f6, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xc7f5, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x9, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xa70, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0x9, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0x0, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0xb, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x2, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0x0, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.475031875s ago: executing program 4 (id=1701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x218, 0x218, 0xffffffff, 0x218, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, &(0x7f0000000240), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d2, 0x4d4], 0x1}}, @common=@icmp={{0x28}, {0x0, "b906", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1a, @private=0xa010102, @remote, @port=0x4e20, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x4, 0x3, 0x2, 0x2, 0x6], 0x5, 0x1}}}, @common=@addrtype={{0x30}, {0x20, 0x200}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x7, @rand_addr=0x64010101, @loopback, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e21], [0x4e22, 0x4e21], 0xa, 0x2, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e23, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000100)=0x6) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 1.446627898s ago: executing program 3 (id=1703): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x93}]}}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r4, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000327bd7000fbdbdf253a00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099060010000003200000060065000f0000d9"], 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000001800000000030005000000000002000000ac1414aa0000000000000000298e4a28d388221537ae8f9c1194f5a601bd26926f6ffa8c6193783332b06d011994a416ae829af1a01322154d65ee283504926d89b09e8c4cb1fdbbba063961271f"], 0x50}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f00000015c0)={0x2, 0x0, 0x0, &(0x7f0000001580)}) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001500)={{}, {0x4}, 0x6, 0x0, 0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00', &(0x7f0000001200)="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", 0x14e, 0x0, &(0x7f0000001380)={0x2, 0x11b, {0x1, 0xc, 0x5f, "f390a733159ebaedd5904fcec04eb715fb05004641bc440a4c009c8312319d0dcbc0255d81b1a99e31c0f1a6d867abfc40a23904eaeb1f9da7bae61d842ae6366cb33efba4dfa2ba9b0d1e734ad9e089f3cabb6639524c22a193cbb33a77e0", 0xaf, "6fa6abc0fd1fd42a302b8dbdb460b1a077bdd328d9b8c6f9d0bc35cb63220846736af8df320aa3114014b75f7c09cdc6ad7427d0949c28678024be6c5332364cfc744e28db502cba58be520d93d2a389fcc306aeed8be5df7e20e3c2f827f73ef25939243faa184fd8d2bcb448c79ec4b56a1d875d038313cc03608641c68965da3691bd47806774c0759ce96f1450eef4446d6ad91d2afe84a348be44dd00f7def39ec8cdc854a3566776fc7eb534"}, 0x3f, "46918cb06e373b82452a2bd53ee729f3a3555ef6433225595bfddac49600a66591887a34ad1419ce35fcf39a100cb496d5a0222606235c16723a9e19654637"}, 0x166}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x8ac, r5, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2cc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x27}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x88}]}, {0x140, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x37}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x100, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x9}, {0x7, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0x9, 0x2, 0x800, 0x2, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x6, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {}, {0x4, 0x6}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x6}, {0x3}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc04f, 0x4, 0x7, 0x9, 0xff, 0x7f, 0x3, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x3, 0x1, 0x6, 0x0, 0x9, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x1, 0x6c, 0x60, 0xb, 0x60, 0xb, 0x6, 0x1, 0x30, 0x39, 0xc, 0xb, 0x1b, 0x48, 0x4, 0x12, 0x2, 0x6, 0x0, 0x12]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x7}, {0x4, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x6, 0xa}, {0x7}, {0x6, 0x3}, {0x4, 0xa}, {0x7}, {0x6, 0x2}, {0x3, 0x9}, {0x2}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x2}, {0x5, 0x9}, {0x6, 0x6}, {0x2, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6c7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x1b, 0x0, 0x60, 0x18, 0x36, 0x9, 0x4, 0x5, 0x12, 0xd]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x0, 0x2, 0xd, 0x9f, 0xd, 0x4, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x1, 0x3, 0x4, 0xfff, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x4, 0x0, 0x995, 0x8, 0xe, 0x8c]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xff}]}]}, @NL80211_ATTR_TID_CONFIG={0x33c, 0x11d, 0x0, 0x1, [{0x4}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x101, 0x0, 0x9, 0xdd9, 0x1, 0xe30a]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x3, 0xa}, {0x3, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x4}, {0x3}, {0x4, 0x5}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x7, 0x8}, {0x5, 0x8}, {}, {0x7, 0x6}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x2}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {}, {0x5, 0x7}, {0x4, 0x9}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x7}, {0x7, 0x3}, {0x1}, {0x7, 0x3}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x7}, {0x2, 0x9}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x4, 0x6, 0xffff, 0x800, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x34, 0xb, 0x36, 0x12, 0x16, 0x24, 0x12, 0x48, 0x36, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x18, 0x3, 0x38, 0xc, 0x5, 0x24, 0x1b, 0x9, 0x18, 0x34, 0x18, 0x18, 0x2, 0x63, 0x30, 0x2, 0xc, 0x5, 0x15, 0xb]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x60, 0x6, 0x4, 0x18, 0xb, 0x5, 0x5, 0x6c, 0x36, 0x1b, 0xc, 0x1, 0x16, 0x24, 0x12, 0x0, 0x60, 0x1b, 0x36, 0xc, 0x3, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x3, 0x2, 0x4, 0x1b, 0x4, 0x3, 0x2, 0x60, 0x0, 0x5, 0x18, 0x6c, 0x6c, 0x0, 0x36, 0x9, 0x21, 0x1, 0x60, 0x12, 0x16, 0x12, 0xb, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x8, 0x2, 0x0, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x3, 0x9, 0x7, 0x9, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd2, 0x6, 0x1, 0x401, 0x8eb4, 0x2, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x3}, {0x4, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x3, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x6}, {}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x6}, {0x7, 0x16}, {0x4, 0x8}, {0x4, 0x5}, {0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x1}, {0x4, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x2, 0x5}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x8}, {0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x5, 0x48, 0x6c, 0x0, 0x48, 0x1b, 0x18, 0xb, 0x6c, 0x24, 0x6c, 0xb, 0x4, 0x12, 0x5, 0x48, 0x1b, 0x30, 0x18, 0x6c, 0x12]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x40, 0x4, 0x9f3, 0x9, 0x4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x100, 0x3, 0x9, 0x7, 0x200, 0x40, 0x11]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0xee, 0x9, 0x8, 0x3, 0x1000, 0x5]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9, 0x8001, 0x7, 0x4, 0x4, 0x2, 0x40, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c4, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x1, 0x1b, 0x6, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7, 0x5, 0xff0a, 0x0, 0x391d, 0x8, 0x9]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x4}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x7, 0x8}, {0x4, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x56, 0x6a3, 0xfff9, 0x3ff, 0xd, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x5}, {}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x2, 0x3}, {0x3, 0x6}, {0x4, 0xa}, {0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0xd}, {0x6, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x6}, {0x6}, {0x0, 0x1}, {0x5}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x3, 0x3}, {0x2, 0x7}, {0x5, 0x6}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fa2, 0x0, 0x4, 0x74, 0x1, 0x8, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x41, 0x4, 0x40, 0x7, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x6}, {0x5, 0x2}, {0x2, 0x5}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x9}, {0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x5, 0x4}, {0x4}, {0x7, 0x6}, {0x4, 0xa}, {0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x9, 0x16, 0x2, 0x2588b9436164ffd5, 0x4, 0x9, 0x24, 0xc, 0x12, 0x6c, 0x36, 0x12, 0xc, 0xc, 0xc, 0xb, 0x5, 0x48, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}]}]}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) syz_80211_join_ibss(&(0x7f0000001580)='wlan1\x00', &(0x7f0000001600)=@default_ap_ssid, 0x6, 0x1) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 1.409436358s ago: executing program 2 (id=1704): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.361773844s ago: executing program 1 (id=1705): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x7, 0xeca3}, 0x100, './file0\x00'}) getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair(0x21, 0x6, 0x9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000200)=0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x8059) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000003c0)={0xc, 0x3, 0x0, 0xfffffff7, 0x2, 0x0, [{0x40, 0x77, 0x800, '\x00', 0x1000}, {0x5, 0x1, 0x8, '\x00', 0x178c}]}) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) getpeername$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) sendmsg$nl_crypto(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@delrng={0x10, 0x14, 0x100, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x48851}, 0x40800) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000a00)) getpeername$ax25(r0, &(0x7f0000000a40)={{0x3, @netrom}, [@netrom, @rose, @null, @netrom, @default, @default, @remote, @rose]}, &(0x7f0000000ac0)=0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x41) syz_genetlink_get_family_id$net_dm(&(0x7f0000000c80), r4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000cc0)=@gcm_128={{0x304}, "ac348419e7cf3273", "8d1e9ec612c7b5bebd5e29f4f5eb6d0d", "b0ef70a6", "b19a0164a1c3b627"}, 0x28) r9 = socket(0x11, 0x3, 0x9) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000d00)="9c59d886fca8336e07b30e1bf8d2035a78fa16eca362fbb2be884bcf460acb1024b2abf65d37dc75c3709fc63f034741cb081691f01c77a87078a7dada7a484e8072e71b1832cbb49343f42fc32deddfb2e2e9c3df7e389a9d49867fdf6188400b072d03", 0x64) syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000dc0)={"f3f992605617f148de9f22ababbf7c2a", 0x0, 0x0, {0xfffffffffffffffa, 0x1}, {0xcbf, 0x2}, 0x4ec0, [0x2, 0x1, 0x5, 0x8000, 0x7, 0x8, 0xffff, 0x8000000000000001, 0x6, 0x9, 0xffffffffffffffff, 0x7, 0x7, 0xfffffffffffffff8, 0x8, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000ec0)=r10) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000f00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000f40)=0x2c) 1.36136416s ago: executing program 4 (id=1706): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f000504000000000000000002", @ANYRES16=r1], 0x114}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x8000}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=r4, r5, 0x5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x18}}, 0x0) r8 = socket(0x22, 0x2, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 1.358228516s ago: executing program 0 (id=1707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x20, 0x20, 0x2, 0x3ff, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x7, 0x44, [@loopback]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r4, 0x34aa000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r8, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r4}, 0x18) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r9, 0x80047453, 0x0) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003800010700000000000000000800000096b2ba"], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@empty, 0x50, r3}) 1.232168458s ago: executing program 0 (id=1708): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018006000100", @ANYRES32=r6, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000040)=0xfffffa3c, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0x10}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1.231907198s ago: executing program 2 (id=1709): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000090d3ed0af586a3669300"/28], 0x48) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r2, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0xfffffffe, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x2, 0x0, 0x48) recvmmsg(r7, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/118, 0x76}], 0x1}, 0x3}], 0x1, 0x40000003, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r8 = accept4(r5, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000a060601000000000000000000000800050001000719000068d1cc8f"], 0x1c}}, 0x4000800) sendmmsg$unix(r8, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) close(0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) 1.145939865s ago: executing program 1 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004000}, 0x40000) 1.145373975s ago: executing program 4 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000008c0)={'veth0_vlan\x00', 0x7fff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 1.01458568s ago: executing program 2 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000c100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x23}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xd, 0xf, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001a00"/28], 0x50) close(r6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) 942.573653ms ago: executing program 1 (id=1713): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c"], 0xfdef) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)=""/250, &(0x7f0000000300)=0xfa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) openat$cgroup_int(r5, &(0x7f00000001c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0x36) 865.793571ms ago: executing program 0 (id=1714): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780001"], 0x0) 864.81636ms ago: executing program 2 (id=1715): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xea}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x200, 0x2, [0xc, 0xfffd]}, &(0x7f0000000200)=0xc) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 862.366724ms ago: executing program 4 (id=1716): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x800) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000300)={0xffffffffffffff7f, 0x3, 0x4, 0x0, 0x0, [{{r1}}, {{r3}, 0x1116799b}, {{r1}, 0x800}, {{r4}, 0x8}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 761.181811ms ago: executing program 0 (id=1717): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000040)=0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x1848, 0x4) r3 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 694.040264ms ago: executing program 2 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x34, r1, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac06, 0xfac0b]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) (fail_nth: 7) 677.607498ms ago: executing program 4 (id=1719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2c385aa3d49108bc436a", 0x20) close(r1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)=""/183, &(0x7f0000000040)=0xb7) 640.279027ms ago: executing program 0 (id=1720): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r8], 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@setlink={0x34, 0x13, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x41110}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) 141.785671ms ago: executing program 2 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069d0b32f82fa3241703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "25a9853889d6fc80", "48fc28ca0d9864822615a5d3ef509d3d", "40a07488", "7902d4b09662c2f6"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069d0b32f82fa3241703667726500001c0002800600030080000000080004000300000006000e0002000000"], 0x4c}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @rand_addr=0x64010102}}}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x11, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, [0x0, 0x4000]}}) (async) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "25a9853889d6fc80", "48fc28ca0d9864822615a5d3ef509d3d", "40a07488", "7902d4b09662c2f6"}, 0x28) (async) 124.319414ms ago: executing program 3 (id=1722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{}, {0x94, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 0s ago: executing program 0 (id=1723): unshare(0x22020600) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b88a8450081003b00884800000000000f0f0000000000000000000000000000020000000000000000000000000000ff0bf2b5edf2d8a845b400c6eae19323df2fca783b95fd006d8047bf43a77554f991c9ac06ac2bcd48fdd8a71180259512322ba4e124c4ea02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) getsockopt(r2, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) close(r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 68.244461][ T5853] cgroup: Unknown subsys name 'net' [ 68.420131][ T5853] cgroup: Unknown subsys name 'cpuset' [ 68.429026][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.807291][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.359085][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365524][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.764179][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.780433][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.789406][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.798871][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.807219][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.814714][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.824747][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.831035][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.832574][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.847482][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.855540][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.857645][ T5187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.863625][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.878876][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.886619][ T5187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.886903][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.910585][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.918299][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.920335][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.926756][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.940562][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.941378][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.955206][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.963450][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.973844][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.531923][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 74.667561][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 74.729472][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 74.825115][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.832497][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.840348][ T5880] bridge_slave_0: entered allmulticast mode [ 74.849648][ T5880] bridge_slave_0: entered promiscuous mode [ 74.895942][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.903587][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.910826][ T5880] bridge_slave_1: entered allmulticast mode [ 74.917929][ T5880] bridge_slave_1: entered promiscuous mode [ 74.924954][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 74.970614][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 75.072754][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.085095][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.111008][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.118707][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.126384][ T5863] bridge_slave_0: entered allmulticast mode [ 75.133258][ T5863] bridge_slave_0: entered promiscuous mode [ 75.140261][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.147701][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.154820][ T5864] bridge_slave_0: entered allmulticast mode [ 75.162032][ T5864] bridge_slave_0: entered promiscuous mode [ 75.202196][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.209636][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.217653][ T5863] bridge_slave_1: entered allmulticast mode [ 75.224561][ T5863] bridge_slave_1: entered promiscuous mode [ 75.247543][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.254643][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.261827][ T5864] bridge_slave_1: entered allmulticast mode [ 75.269291][ T5864] bridge_slave_1: entered promiscuous mode [ 75.331348][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.356035][ T5880] team0: Port device team_slave_0 added [ 75.383786][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.396396][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.407068][ T5880] team0: Port device team_slave_1 added [ 75.423933][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.431164][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.440497][ T5869] bridge_slave_0: entered allmulticast mode [ 75.447775][ T5869] bridge_slave_0: entered promiscuous mode [ 75.472364][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.509783][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.517087][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.524340][ T5869] bridge_slave_1: entered allmulticast mode [ 75.532292][ T5869] bridge_slave_1: entered promiscuous mode [ 75.574509][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.581860][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.589443][ T5866] bridge_slave_0: entered allmulticast mode [ 75.598054][ T5866] bridge_slave_0: entered promiscuous mode [ 75.616040][ T5863] team0: Port device team_slave_0 added [ 75.649350][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.656721][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.683093][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.694723][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.702343][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.709708][ T5866] bridge_slave_1: entered allmulticast mode [ 75.717440][ T5866] bridge_slave_1: entered promiscuous mode [ 75.726248][ T5863] team0: Port device team_slave_1 added [ 75.734900][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.747539][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.758036][ T5864] team0: Port device team_slave_0 added [ 75.764454][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.771755][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.797719][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.856156][ T5864] team0: Port device team_slave_1 added [ 75.915845][ T5877] Bluetooth: hci2: command tx timeout [ 75.928205][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.939675][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.946678][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.973139][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.986987][ T5869] team0: Port device team_slave_0 added [ 75.993445][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.001062][ T5877] Bluetooth: hci1: command tx timeout [ 76.002036][ T51] Bluetooth: hci3: command tx timeout [ 76.006930][ T5877] Bluetooth: hci4: command tx timeout [ 76.014340][ T5868] Bluetooth: hci0: command tx timeout [ 76.018423][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.049392][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.085843][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.100665][ T5880] hsr_slave_0: entered promiscuous mode [ 76.106992][ T5880] hsr_slave_1: entered promiscuous mode [ 76.114850][ T5869] team0: Port device team_slave_1 added [ 76.129487][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.136528][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.162884][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.231647][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.238642][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.265085][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.299371][ T5866] team0: Port device team_slave_0 added [ 76.308359][ T5866] team0: Port device team_slave_1 added [ 76.331026][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.338038][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.365125][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.377686][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.384609][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.411447][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.502686][ T5863] hsr_slave_0: entered promiscuous mode [ 76.509923][ T5863] hsr_slave_1: entered promiscuous mode [ 76.516164][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 76.521953][ T5863] Cannot create hsr debugfs directory [ 76.529434][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.536666][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.562989][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.613839][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.621150][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.647705][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.672906][ T5864] hsr_slave_0: entered promiscuous mode [ 76.679350][ T5864] hsr_slave_1: entered promiscuous mode [ 76.685461][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 76.691185][ T5864] Cannot create hsr debugfs directory [ 76.803187][ T5869] hsr_slave_0: entered promiscuous mode [ 76.809429][ T5869] hsr_slave_1: entered promiscuous mode [ 76.815474][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 76.821207][ T5869] Cannot create hsr debugfs directory [ 76.866825][ T5866] hsr_slave_0: entered promiscuous mode [ 76.873301][ T5866] hsr_slave_1: entered promiscuous mode [ 76.880001][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 76.886090][ T5866] Cannot create hsr debugfs directory [ 77.310524][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.322682][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.354255][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.378405][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.431711][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.447392][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.464946][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.490500][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.555195][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.576519][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.610346][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.622667][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.710440][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.753910][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.768839][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.780091][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.848125][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.859313][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.879888][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.902242][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.957606][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.978578][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.998759][ T5877] Bluetooth: hci2: command tx timeout [ 78.051213][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.068635][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.075815][ T51] Bluetooth: hci3: command tx timeout [ 78.081238][ T51] Bluetooth: hci0: command tx timeout [ 78.085793][ T5868] Bluetooth: hci1: command tx timeout [ 78.087173][ T5877] Bluetooth: hci4: command tx timeout [ 78.120226][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.127587][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.139547][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.146699][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.157624][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.164754][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.234259][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.243235][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.250402][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.291326][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.331477][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.348703][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.367277][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.374401][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.403807][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.410990][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.456934][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.464021][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.474547][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482163][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.531537][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.662441][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.727662][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.734826][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.781904][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.789099][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.908764][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.034407][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.203898][ T5880] veth0_vlan: entered promiscuous mode [ 79.241398][ T5864] veth0_vlan: entered promiscuous mode [ 79.259635][ T5880] veth1_vlan: entered promiscuous mode [ 79.301888][ T5864] veth1_vlan: entered promiscuous mode [ 79.342542][ T5880] veth0_macvtap: entered promiscuous mode [ 79.353526][ T5880] veth1_macvtap: entered promiscuous mode [ 79.387056][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.410941][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.468636][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.491530][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.555103][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.570434][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.584766][ T5864] veth0_macvtap: entered promiscuous mode [ 79.593755][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.614393][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.638957][ T5864] veth1_macvtap: entered promiscuous mode [ 79.654382][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.706752][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.765933][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.775000][ T5863] veth0_vlan: entered promiscuous mode [ 79.831232][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.871399][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.881818][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914192][ T5863] veth1_vlan: entered promiscuous mode [ 79.922444][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945683][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.964048][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.969460][ T5866] veth0_vlan: entered promiscuous mode [ 80.041926][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.050700][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.077179][ T5877] Bluetooth: hci2: command tx timeout [ 80.118386][ T5866] veth1_vlan: entered promiscuous mode [ 80.135543][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.143375][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.159014][ T5877] Bluetooth: hci4: command tx timeout [ 80.160147][ T5868] Bluetooth: hci0: command tx timeout [ 80.164424][ T5877] Bluetooth: hci3: command tx timeout [ 80.170362][ T5868] Bluetooth: hci1: command tx timeout [ 80.192385][ T5863] veth0_macvtap: entered promiscuous mode [ 80.198239][ T5880] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.242717][ T5863] veth1_macvtap: entered promiscuous mode [ 80.264187][ T5869] veth0_vlan: entered promiscuous mode [ 80.341458][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.353013][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.365157][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.383478][ T5869] veth1_vlan: entered promiscuous mode [ 80.404771][ T5866] veth0_macvtap: entered promiscuous mode [ 80.452097][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.486524][ T5866] veth1_macvtap: entered promiscuous mode [ 80.520015][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549655][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.590067][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.602913][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.624170][ T5869] veth0_macvtap: entered promiscuous mode [ 80.650297][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.677119][ T5869] veth1_macvtap: entered promiscuous mode [ 80.702408][ T30] audit: type=1800 audit(1758394219.291:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 80.776689][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.819751][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.870199][ T5991] netlink: 'syz.1.6': attribute type 8 has an invalid length. [ 80.893745][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.903591][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.922382][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.950939][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.978053][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.024713][ T2919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.050403][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.087380][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.117341][ T5994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.147154][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.170076][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.184252][ T5996] veth1_macvtap: left promiscuous mode [ 81.217034][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.299477][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.318106][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.330085][ T5999] ip6erspan0: entered promiscuous mode [ 81.336907][ T5999] ip6erspan0: entered allmulticast mode [ 81.422258][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.438924][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.562789][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.585808][ T6002] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 81.594569][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.679763][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.689873][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.750811][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.785032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.156204][ T5868] Bluetooth: hci2: command tx timeout [ 82.239717][ T5868] Bluetooth: hci3: command tx timeout [ 82.239750][ T5878] Bluetooth: hci4: command tx timeout [ 82.245243][ T5868] Bluetooth: hci1: command tx timeout [ 82.252246][ T5877] Bluetooth: hci0: command tx timeout [ 82.410844][ T6036] veth0: entered promiscuous mode [ 82.428336][ T6038] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 82.451407][ T6025] veth0: left promiscuous mode [ 82.733101][ T6049] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 82.976387][ T6064] netlink: zone id is out of range [ 83.004206][ T6064] netlink: zone id is out of range [ 83.034654][ T6064] netlink: zone id is out of range [ 83.063492][ T6064] netlink: zone id is out of range [ 83.088667][ T6064] netlink: zone id is out of range [ 83.094694][ T6064] netlink: zone id is out of range [ 83.102930][ T6064] netlink: zone id is out of range [ 83.110841][ T6064] netlink: zone id is out of range [ 83.124118][ T6064] netlink: zone id is out of range [ 83.287265][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 83.289586][ T6077] nbd: must specify at least one socket [ 83.340321][ T6077] netlink: 'syz.2.28': attribute type 9 has an invalid length. [ 83.351553][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.379694][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.379883][ T6077] netlink: 'syz.2.28': attribute type 9 has an invalid length. [ 83.399306][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.440386][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.461210][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.494462][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.512708][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.530160][ T6086] netlink: 'syz.3.34': attribute type 7 has an invalid length. [ 83.547980][ T6084] netlink: 6 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.559938][ T6077] Zero length message leads to an empty skb [ 83.591258][ T6086] : entered promiscuous mode [ 83.902883][ T6107] netlink: 68 bytes leftover after parsing attributes in process `syz.4.38'. [ 84.049373][ T6111] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 84.093727][ T6115] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 84.549241][ T6138] syz.3.47 uses obsolete (PF_INET,SOCK_PACKET) [ 84.641855][ T6141] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.773639][ T6146] delete_channel: no stack [ 84.841624][ T6150] syzkaller1: entered promiscuous mode [ 84.851514][ T6150] syzkaller1: entered allmulticast mode [ 85.129927][ T6162] xt_l2tp: invalid flags combination: 0 [ 85.261566][ T6173] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 85.310474][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.357426][ T6177] netlink: 'syz.2.59': attribute type 4 has an invalid length. [ 85.376659][ T6171] tipc: Started in network mode [ 85.381652][ T6171] tipc: Node identity 0e450139d816, cluster identity 4711 [ 85.389212][ T6177] netlink: 17 bytes leftover after parsing attributes in process `syz.2.59'. [ 85.411263][ T6171] tipc: Enabled bearer , priority 0 [ 85.443009][ T6176] syzkaller0: entered promiscuous mode [ 85.448772][ T6176] syzkaller0: entered allmulticast mode [ 85.473690][ T6173] veth3: entered promiscuous mode [ 85.546419][ T6176] tipc: Resetting bearer [ 85.572290][ T6170] tipc: Resetting bearer [ 85.671176][ T6170] tipc: Disabling bearer [ 85.748127][ T6188] netlink: 108 bytes leftover after parsing attributes in process `syz.0.61'. [ 85.946914][ T6196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.64'. [ 85.995967][ T5877] Bluetooth: hci0: command 0x080f tx timeout [ 86.232900][ T6210] netlink: 'syz.0.70': attribute type 4 has an invalid length. [ 86.519088][ T6230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 86.725778][ T9] cfg80211: failed to load regulatory.db [ 87.248753][ T6260] vlan2: entered allmulticast mode [ 87.256749][ T6260] hsr0: entered allmulticast mode [ 87.276642][ T6260] hsr_slave_0: entered allmulticast mode [ 87.292525][ T6260] hsr_slave_1: entered allmulticast mode [ 88.143597][ T6301] team0: Device gtp0 is of different type [ 88.266401][ T6304] veth0_to_bridge: entered promiscuous mode [ 88.401923][ T6314] syzkaller1: entered promiscuous mode [ 88.418365][ T6320] sctp: [Deprecated]: syz.4.100 (pid 6320) Use of int in maxseg socket option. [ 88.418365][ T6320] Use struct sctp_assoc_value instead [ 88.420799][ T6314] syzkaller1: entered allmulticast mode [ 88.651312][ T6333] __nla_validate_parse: 3 callbacks suppressed [ 88.651330][ T6333] netlink: 68 bytes leftover after parsing attributes in process `syz.4.103'. [ 88.763457][ T6303] veth0_to_bridge: left promiscuous mode [ 88.904575][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 88.972557][ T6342] bond0: entered promiscuous mode [ 88.977775][ T6342] bond_slave_0: entered promiscuous mode [ 88.983762][ T6342] bond_slave_1: entered promiscuous mode [ 88.996733][ T6342] bond0: left promiscuous mode [ 89.030097][ T6342] bond_slave_0: left promiscuous mode [ 89.058568][ T6342] bond_slave_1: left promiscuous mode [ 89.487538][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.110'. [ 89.516429][ T6365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.110'. [ 89.577495][ T6368] warning: `syz.3.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.940710][ T6388] net_ratelimit: 16 callbacks suppressed [ 89.940728][ T6388] openvswitch: netlink: IPv4 tun info is not correct [ 89.941619][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 89.980437][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 90.033951][ T6385] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.063328][ T6392] sock: sock_timestamping_bind_phc: sock not bind to device [ 90.064445][ T6388] team1: entered promiscuous mode [ 90.102789][ T6388] team1: entered allmulticast mode [ 90.153261][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059726800: rx timeout, send abort [ 90.162617][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059726800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.202165][ T6395] netlink: 'syz.0.118': attribute type 6 has an invalid length. [ 90.210121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805900a800: rx timeout, send abort [ 90.218805][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805900a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.699540][ T6407] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 90.743070][ T6407] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.776423][ T6407] gretap1: entered promiscuous mode [ 90.799396][ T6407] gretap1: entered allmulticast mode [ 90.888096][ T6421] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 91.151822][ T6440] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 91.183118][ T6445] netlink: 'syz.4.130': attribute type 7 has an invalid length. [ 91.207197][ T6440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.208560][ T6446] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 91.217595][ T6440] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.226302][ T6446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 91.238713][ T6445] : entered promiscuous mode [ 91.251188][ T6446] batadv0: entered promiscuous mode [ 91.264298][ T6446] batadv0: entered allmulticast mode [ 91.294139][ T6446] bond0: (slave batadv0): Releasing backup interface [ 91.305087][ T6446] bridge0: port 3(batadv0) entered blocking state [ 91.320935][ T6446] bridge0: port 3(batadv0) entered disabled state [ 91.331266][ T6441] : left promiscuous mode [ 91.449628][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a22f400: rx timeout, send abort [ 91.458136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a22f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.555810][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 91.565914][ T2996] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 91.576292][ T2996] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 92.053565][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 92.108220][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 92.145037][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.348591][ T6495] Bluetooth: MGMT ver 1.23 [ 92.380077][ T6499] Bluetooth: MGMT ver 1.23 [ 92.602287][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.784870][ T6508] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 92.812410][ T6508] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 92.930027][ T6516] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 93.572259][ T6552] netlink: 'syz.4.162': attribute type 13 has an invalid length. [ 93.614120][ T6552] veth0_macvtap: left promiscuous mode [ 93.645199][ T6549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.648970][ T6552] macvtap0: entered allmulticast mode [ 93.714003][ T6552] macvtap0: refused to change device tx_queue_len [ 93.912653][ T6558] __nla_validate_parse: 5 callbacks suppressed [ 93.912670][ T6558] netlink: 76 bytes leftover after parsing attributes in process `syz.4.162'. [ 93.932057][ T6558] netlink: 76 bytes leftover after parsing attributes in process `syz.4.162'. [ 93.964549][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 94.093276][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.168'. [ 94.253616][ T6582] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.169'. [ 95.014243][ T6620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.046645][ T6620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.081033][ T6620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.106845][ T6620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.117173][ T6620] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 95.388039][ T6632] tipc: Started in network mode [ 95.401831][ T6632] tipc: Node identity 7f000001, cluster identity 4711 [ 95.433060][ T6632] tipc: Enabled bearer , priority 10 [ 95.477768][ T6632] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 95.488578][ T6632] tipc: Enabled bearer , priority 10 [ 95.500903][ T6638] tipc: Enabling of bearer rejected, media not registered [ 95.954085][ T6663] Illegal XDP return value 4294967274 on prog (id 45) dev N/A, expect packet loss! [ 96.536375][ T1210] tipc: Node number set to 2130706433 [ 97.181411][ T6736] gtp0: entered promiscuous mode [ 97.187403][ T6736] gtp0: entered allmulticast mode [ 97.435579][ T5877] Bluetooth: hci4: command tx timeout [ 97.694850][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 97.884027][ T6773] tipc: Enabling of bearer rejected, failed to enable media [ 98.571700][ T6803] veth1_to_bond: entered promiscuous mode [ 98.585535][ T6803] veth1_to_bond: entered allmulticast mode [ 98.606206][ T6803] wg2: entered promiscuous mode [ 98.611093][ T6803] wg2: entered allmulticast mode [ 98.770723][ T6820] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.847849][ T6822] nftables ruleset with unbound chain [ 99.864578][ T6871] __nla_validate_parse: 73 callbacks suppressed [ 99.864597][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 99.950963][ T6881] netlink: 'syz.4.251': attribute type 24 has an invalid length. [ 100.013327][ T6880] netlink: 14 bytes leftover after parsing attributes in process `syz.0.255'. [ 100.201736][ T6880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.220705][ T6880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.250309][ T6880] bond0 (unregistering): Released all slaves [ 132.801466][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.501972][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 150.591414][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 150.602943][ T6940] bridge0: port 3(batadv0) entered disabled state [ 150.683116][ T6940] bridge_slave_1: left allmulticast mode [ 150.705468][ T6940] bridge_slave_1: left promiscuous mode [ 150.720808][ T6940] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.763813][ T6940] bridge_slave_0: left allmulticast mode [ 150.784147][ T6940] bridge_slave_0: left promiscuous mode [ 150.792496][ T6940] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.994326][ T6957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.238448][ T6975] tipc: Started in network mode [ 151.243614][ T6975] tipc: Node identity 5e6d66252ca3, cluster identity 4711 [ 151.253393][ T6975] tipc: Enabled bearer , priority 0 [ 151.263201][ T6976] tipc: Enabling of bearer rejected, already enabled [ 151.283998][ T6969] syzkaller0: entered promiscuous mode [ 151.315483][ T6969] syzkaller0: entered allmulticast mode [ 151.327370][ T6975] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 151.419680][ T6969] tipc: Resetting bearer [ 151.488681][ T6967] tipc: Resetting bearer [ 151.579454][ T6967] tipc: Disabling bearer [ 151.633660][ T7002] netlink: 'syz.1.277': attribute type 12 has an invalid length. [ 151.694333][ T7002] netlink: 'syz.1.277': attribute type 29 has an invalid length. [ 151.712421][ T7002] netlink: 148 bytes leftover after parsing attributes in process `syz.1.277'. [ 151.781197][ T7002] netlink: 51 bytes leftover after parsing attributes in process `syz.1.277'. [ 151.834233][ T7006] netlink: 'syz.0.279': attribute type 2 has an invalid length. [ 151.877713][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 151.978592][ T7020] netlink: 156 bytes leftover after parsing attributes in process `syz.2.284'. [ 151.991885][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.283'. [ 152.389631][ T7039] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.451114][ T7041] sctp: [Deprecated]: syz.3.289 (pid 7041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.451114][ T7041] Use struct sctp_sack_info instead [ 152.513876][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 152.524562][ T7039] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.676292][ T7053] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 152.724521][ T7055] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.816368][ T7109] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.151978][ T7134] pimreg3: entered allmulticast mode [ 154.790115][ T7162] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 155.007881][ T7169] netlink: 'syz.2.325': attribute type 24 has an invalid length. [ 155.278299][ T7191] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 155.387310][ T5532] veth0_macvtap: left promiscuous mode [ 155.575542][ T7203] __nla_validate_parse: 12 callbacks suppressed [ 155.575560][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 155.673033][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 155.714551][ T7210] netlink: 240 bytes leftover after parsing attributes in process `syz.3.336'. [ 155.994516][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 156.056486][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 156.075598][ T7229] netlink: 'syz.4.342': attribute type 20 has an invalid length. [ 156.075627][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 156.150983][ T2996] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.160899][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 156.176885][ T2996] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.208858][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.246008][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 156.258644][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.271319][ T7229] netlink: 'syz.4.342': attribute type 20 has an invalid length. [ 156.308520][ T7238] @: entered promiscuous mode [ 156.356705][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 156.676923][ T7265] netlink: 360 bytes leftover after parsing attributes in process `syz.0.347'. [ 157.346886][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 157.356262][ T5877] Bluetooth: hci0: command tx timeout [ 157.773400][ T7317] sctp: [Deprecated]: syz.2.360 (pid 7317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.773400][ T7317] Use struct sctp_sack_info instead [ 157.896553][ T7321] trusted_key: syz.3.358 sent an empty control message without MSG_MORE. [ 158.009472][ T7327] FAULT_INJECTION: forcing a failure. [ 158.009472][ T7327] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.092752][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT(full) [ 158.092784][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.092799][ T7327] Call Trace: [ 158.092807][ T7327] [ 158.092815][ T7327] dump_stack_lvl+0x189/0x250 [ 158.092846][ T7327] ? __pfx____ratelimit+0x10/0x10 [ 158.092863][ T7327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.092881][ T7327] ? __pfx__printk+0x10/0x10 [ 158.092901][ T7327] ? __might_fault+0xb0/0x130 [ 158.092934][ T7327] should_fail_ex+0x414/0x560 [ 158.092959][ T7327] _copy_from_user+0x2d/0xb0 [ 158.092980][ T7327] __sys_bind+0x199/0x3e0 [ 158.092999][ T7327] ? __pfx___sys_bind+0x10/0x10 [ 158.093026][ T7327] ? rcu_is_watching+0x15/0xb0 [ 158.093049][ T7327] __x64_sys_bind+0x7a/0x90 [ 158.093067][ T7327] do_syscall_64+0xfa/0x3b0 [ 158.093083][ T7327] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.093099][ T7327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.093115][ T7327] ? clear_bhb_loop+0x60/0xb0 [ 158.093135][ T7327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.093149][ T7327] RIP: 0033:0x7f20c858ec29 [ 158.093173][ T7327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.093187][ T7327] RSP: 002b:00007f20c9498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 158.093206][ T7327] RAX: ffffffffffffffda RBX: 00007f20c87d5fa0 RCX: 00007f20c858ec29 [ 158.093218][ T7327] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000005 [ 158.093228][ T7327] RBP: 00007f20c9498090 R08: 0000000000000000 R09: 0000000000000000 [ 158.093236][ T7327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.093246][ T7327] R13: 00007f20c87d6038 R14: 00007f20c87d5fa0 R15: 00007ffc3d5dcaa8 [ 158.093273][ T7327] [ 158.126040][ T7331] syzkaller1: entered promiscuous mode [ 158.370503][ T7331] syzkaller1: entered allmulticast mode [ 158.683958][ T6978] udevd[6978]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 159.209859][ T7367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 159.274325][ T7366] can: request_module (can-proto-4) failed. [ 159.508573][ T7380] raw_sendmsg: syz.4.379 forgot to set AF_INET. Fix it! [ 159.878256][ T7397] FAULT_INJECTION: forcing a failure. [ 159.878256][ T7397] name failslab, interval 1, probability 0, space 0, times 1 [ 159.934636][ T7397] CPU: 1 UID: 0 PID: 7397 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT(full) [ 159.934658][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.934668][ T7397] Call Trace: [ 159.934675][ T7397] [ 159.934683][ T7397] dump_stack_lvl+0x189/0x250 [ 159.934707][ T7397] ? __pfx____ratelimit+0x10/0x10 [ 159.934729][ T7397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.934748][ T7397] ? __pfx__printk+0x10/0x10 [ 159.934775][ T7397] ? __pfx___might_resched+0x10/0x10 [ 159.934796][ T7397] should_fail_ex+0x414/0x560 [ 159.934824][ T7397] should_failslab+0xa8/0x100 [ 159.934848][ T7397] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 159.934870][ T7397] ? __alloc_skb+0x112/0x2d0 [ 159.934896][ T7397] __alloc_skb+0x112/0x2d0 [ 159.934918][ T7397] netlink_sendmsg+0x5c6/0xb30 [ 159.934952][ T7397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.934974][ T7397] ? aa_sock_msg_perm+0xf1/0x1d0 [ 159.934993][ T7397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.935011][ T7397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.935029][ T7397] __sock_sendmsg+0x219/0x270 [ 159.935055][ T7397] ____sys_sendmsg+0x505/0x830 [ 159.935081][ T7397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.935109][ T7397] ? import_iovec+0x74/0xa0 [ 159.935133][ T7397] ___sys_sendmsg+0x21f/0x2a0 [ 159.935159][ T7397] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.935211][ T7397] ? __fget_files+0x2a/0x420 [ 159.935225][ T7397] ? __fget_files+0x3a0/0x420 [ 159.935250][ T7397] __x64_sys_sendmsg+0x19b/0x260 [ 159.935272][ T7397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.935299][ T7397] ? __pfx_ksys_write+0x10/0x10 [ 159.935318][ T7397] ? rcu_is_watching+0x15/0xb0 [ 159.935340][ T7397] ? do_syscall_64+0xbe/0x3b0 [ 159.935362][ T7397] do_syscall_64+0xfa/0x3b0 [ 159.935378][ T7397] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.935403][ T7397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.935419][ T7397] ? clear_bhb_loop+0x60/0xb0 [ 159.935439][ T7397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.935455][ T7397] RIP: 0033:0x7f8cbc98ec29 [ 159.935470][ T7397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.935484][ T7397] RSP: 002b:00007f8cbd756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.935502][ T7397] RAX: ffffffffffffffda RBX: 00007f8cbcbd6090 RCX: 00007f8cbc98ec29 [ 159.935514][ T7397] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 159.935525][ T7397] RBP: 00007f8cbd756090 R08: 0000000000000000 R09: 0000000000000000 [ 159.935535][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.935545][ T7397] R13: 00007f8cbcbd6128 R14: 00007f8cbcbd6090 R15: 00007ffd966f41d8 [ 159.935573][ T7397] [ 160.467123][ T7411] netlink: 'syz.4.390': attribute type 18 has an invalid length. [ 160.483944][ T7411] geneve2: entered promiscuous mode [ 160.648746][ T7409] __nla_validate_parse: 9 callbacks suppressed [ 160.648761][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 160.659854][ T7425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.388'. [ 160.867824][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 160.949917][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 160.991530][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 161.027017][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 161.285938][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 161.383190][ T7453] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 161.466964][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.543194][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.550441][ T7457] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 161.565140][ T7457] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 161.579890][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 161.665868][ T7453] veth5: entered promiscuous mode [ 161.687216][ T7453] bond0: (slave veth5): Enslaving as an active interface with a down link [ 161.726371][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.954193][ T7476] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 162.464359][ T7510] FAULT_INJECTION: forcing a failure. [ 162.464359][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.554787][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 162.563862][ T7510] CPU: 1 UID: 0 PID: 7510 Comm: syz.4.415 Not tainted syzkaller #0 PREEMPT(full) [ 162.563883][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.563893][ T7510] Call Trace: [ 162.563900][ T7510] [ 162.563907][ T7510] dump_stack_lvl+0x189/0x250 [ 162.563931][ T7510] ? __pfx____ratelimit+0x10/0x10 [ 162.563948][ T7510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.563967][ T7510] ? __pfx__printk+0x10/0x10 [ 162.563988][ T7510] ? __might_fault+0xb0/0x130 [ 162.564021][ T7510] should_fail_ex+0x414/0x560 [ 162.564049][ T7510] _copy_from_iter+0x1de/0x1790 [ 162.564075][ T7510] ? rcu_is_watching+0x15/0xb0 [ 162.564094][ T7510] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 162.564117][ T7510] ? __pfx__copy_from_iter+0x10/0x10 [ 162.564137][ T7510] ? __build_skb_around+0x257/0x3e0 [ 162.564160][ T7510] ? netlink_sendmsg+0x642/0xb30 [ 162.564176][ T7510] ? skb_put+0x11b/0x210 [ 162.564198][ T7510] netlink_sendmsg+0x6b2/0xb30 [ 162.564231][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.564252][ T7510] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.564272][ T7510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.564289][ T7510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.564308][ T7510] __sock_sendmsg+0x219/0x270 [ 162.564333][ T7510] ____sys_sendmsg+0x505/0x830 [ 162.564358][ T7510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.564386][ T7510] ? import_iovec+0x74/0xa0 [ 162.564408][ T7510] ___sys_sendmsg+0x21f/0x2a0 [ 162.564428][ T7510] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.564481][ T7510] ? __fget_files+0x2a/0x420 [ 162.564495][ T7510] ? __fget_files+0x3a0/0x420 [ 162.564519][ T7510] __x64_sys_sendmsg+0x19b/0x260 [ 162.564539][ T7510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.564568][ T7510] ? __pfx_ksys_write+0x10/0x10 [ 162.564586][ T7510] ? rcu_is_watching+0x15/0xb0 [ 162.564606][ T7510] ? do_syscall_64+0xbe/0x3b0 [ 162.564627][ T7510] do_syscall_64+0xfa/0x3b0 [ 162.564643][ T7510] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.564659][ T7510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.564675][ T7510] ? clear_bhb_loop+0x60/0xb0 [ 162.564695][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.564709][ T7510] RIP: 0033:0x7f543838ec29 [ 162.564724][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.564736][ T7510] RSP: 002b:00007f54392d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.564754][ T7510] RAX: ffffffffffffffda RBX: 00007f54385d6090 RCX: 00007f543838ec29 [ 162.564765][ T7510] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006 [ 162.564776][ T7510] RBP: 00007f54392d8090 R08: 0000000000000000 R09: 0000000000000000 [ 162.564786][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.564795][ T7510] R13: 00007f54385d6128 R14: 00007f54385d6090 R15: 00007ffef475c5d8 [ 162.564821][ T7510] [ 162.778463][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.254283][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 163.289098][ T7544] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 163.351690][ T7544] netlink: 'syz.2.423': attribute type 11 has an invalid length. [ 163.574321][ T7549] tipc: Enabled bearer , priority 0 [ 163.601522][ T7549] syzkaller0: entered promiscuous mode [ 163.608650][ T7549] syzkaller0: entered allmulticast mode [ 163.643878][ T7549] tipc: Resetting bearer [ 163.732761][ T7548] tipc: Resetting bearer [ 163.799320][ T7548] tipc: Disabling bearer [ 163.818909][ T7574] batadv0: entered promiscuous mode [ 163.824991][ T7574] batadv_slave_1: entered promiscuous mode [ 163.831864][ T7574] batadv_slave_1: left promiscuous mode [ 163.838769][ T7574] batadv0: left promiscuous mode [ 163.910966][ T2963] nci: nci_ntf_packet: unknown ntf opcode 0x805 [ 164.039022][ T7592] tipc: Trying to set illegal importance in message [ 165.113904][ T7639] C: renamed from lo (while UP) [ 165.326066][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.465233][ T7647] hsr_slave_0 (unregistering): left promiscuous mode [ 166.311113][ T7691] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 166.322545][ T7691] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 166.777358][ T7712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.003090][ T7723] __nla_validate_parse: 15 callbacks suppressed [ 167.003108][ T7723] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.470'. [ 167.232909][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 167.529664][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 167.932723][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 168.192599][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 168.263959][ T7785] netlink: 68 bytes leftover after parsing attributes in process `syz.0.493'. [ 168.332440][ T7786] netlink: 68 bytes leftover after parsing attributes in process `syz.0.493'. [ 168.360538][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 169.334648][ T7851] netlink: 'syz.2.508': attribute type 12 has an invalid length. [ 169.388434][ T7851] netlink: 4616 bytes leftover after parsing attributes in process `syz.2.508'. [ 170.294501][ T7903] netlink: 52 bytes leftover after parsing attributes in process `syz.4.522'. [ 170.767977][ T7933] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 170.904248][ T7928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.630952][ T7969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.662040][ T7969] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 172.417928][ T8011] nbd: must specify a size in bytes for the device [ 172.443604][ T8014] __nla_validate_parse: 9 callbacks suppressed [ 172.443618][ T8014] netlink: 44 bytes leftover after parsing attributes in process `syz.4.552'. [ 172.461463][ T8011] nbd: must specify a size in bytes for the device [ 172.471547][ T8013] nbd: must specify a size in bytes for the device [ 172.482466][ T8011] nbd: must specify a size in bytes for the device [ 172.490841][ T8013] nbd: must specify a size in bytes for the device [ 172.499934][ T8011] nbd: must specify a size in bytes for the device [ 172.508784][ T8013] nbd: must specify a size in bytes for the device [ 172.519066][ T8011] nbd: must specify a size in bytes for the device [ 172.528165][ T8013] nbd: must specify a size in bytes for the device [ 172.534935][ T8011] nbd: must specify a size in bytes for the device [ 172.544111][ T8013] nbd: must specify a size in bytes for the device [ 172.556583][ T8011] nbd: must specify a size in bytes for the device [ 172.563374][ T8013] nbd: must specify a size in bytes for the device [ 172.577597][ T8011] nbd: must specify a size in bytes for the device [ 172.584389][ T8013] nbd: must specify a size in bytes for the device [ 172.593000][ T8011] nbd: must specify a size in bytes for the device [ 172.601173][ T8011] nbd: must specify a size in bytes for the device [ 172.609047][ T8013] nbd: must specify a size in bytes for the device [ 172.620230][ T8013] nbd: must specify a size in bytes for the device [ 172.628267][ T8011] nbd: must specify a size in bytes for the device [ 172.635099][ T8013] nbd: must specify a size in bytes for the device [ 172.646661][ T8011] nbd: must specify a size in bytes for the device [ 172.678756][ T8013] nbd: must specify a size in bytes for the device [ 172.702206][ T8013] nbd: must specify a size in bytes for the device [ 172.709934][ T8011] nbd: must specify a size in bytes for the device [ 172.732520][ T8013] nbd: must specify a size in bytes for the device [ 172.750583][ T8011] nbd: must specify a size in bytes for the device [ 172.771686][ T8013] nbd: must specify a size in bytes for the device [ 172.791838][ T8026] bridge3: entered promiscuous mode [ 172.801400][ T8011] nbd: must specify a size in bytes for the device [ 172.816693][ T8013] nbd: must specify a size in bytes for the device [ 172.823307][ T8026] bridge3: entered allmulticast mode [ 172.832003][ T8011] nbd: must specify a size in bytes for the device [ 172.839094][ T8011] nbd: must specify a size in bytes for the device [ 172.846300][ T8013] nbd: must specify a size in bytes for the device [ 172.852926][ T8013] nbd: must specify a size in bytes for the device [ 172.859977][ T8011] nbd: must specify a size in bytes for the device [ 172.866988][ T8011] nbd: must specify a size in bytes for the device [ 172.874395][ T8013] nbd: must specify a size in bytes for the device [ 172.883456][ T8013] nbd: must specify a size in bytes for the device [ 172.890217][ T8011] nbd: must specify a size in bytes for the device [ 172.900415][ T8011] nbd: must specify a size in bytes for the device [ 172.908190][ T8011] nbd: must specify a size in bytes for the device [ 172.915033][ T8011] nbd: must specify a size in bytes for the device [ 172.916995][ T8025] bridge3: entered promiscuous mode [ 172.922320][ T8011] nbd: must specify a size in bytes for the device [ 172.933941][ T8025] bridge3: entered allmulticast mode [ 172.934144][ T8013] nbd: must specify a size in bytes for the device [ 172.946414][ T8011] nbd: must specify a size in bytes for the device [ 172.953053][ T8011] nbd: must specify a size in bytes for the device [ 172.960392][ T8013] nbd: must specify a size in bytes for the device [ 172.969149][ T8013] nbd: must specify a size in bytes for the device [ 172.979426][ T8013] nbd: must specify a size in bytes for the device [ 172.989762][ T8011] nbd: must specify a size in bytes for the device [ 172.996853][ T8011] nbd: must specify a size in bytes for the device [ 173.003566][ T8013] nbd: must specify a size in bytes for the device [ 173.011478][ T8013] nbd: must specify a size in bytes for the device [ 173.022757][ T8011] nbd: must specify a size in bytes for the device [ 173.100767][ T8013] nbd: must specify a size in bytes for the device [ 173.132640][ T8038] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.140642][ T8011] nbd: must specify a size in bytes for the device [ 173.151155][ T8011] nbd: must specify a size in bytes for the device [ 173.170928][ T8011] nbd: must specify a size in bytes for the device [ 173.177919][ T8013] nbd: must specify a size in bytes for the device [ 173.186097][ T8013] nbd: must specify a size in bytes for the device [ 173.193304][ T8011] nbd: must specify a size in bytes for the device [ 173.200468][ T8011] nbd: must specify a size in bytes for the device [ 173.210119][ T8011] nbd: must specify a size in bytes for the device [ 173.223706][ T8011] nbd: must specify a size in bytes for the device [ 173.230533][ T8013] nbd: must specify a size in bytes for the device [ 173.253817][ T8011] nbd: must specify a size in bytes for the device [ 173.339842][ T8048] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 173.720693][ T8068] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 173.732732][ T8068] netlink: 244 bytes leftover after parsing attributes in process `syz.4.567'. [ 174.106602][ T8087] netlink: 'syz.3.572': attribute type 8 has an invalid length. [ 174.323203][ T8105] netlink: 'syz.0.576': attribute type 21 has an invalid length. [ 174.379988][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 174.904019][ T8126] netlink: 'syz.3.581': attribute type 2 has an invalid length. [ 174.958417][ T8126] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.581'. [ 175.016261][ T8126] nbd: must specify at least one socket [ 175.615895][ T8161] netlink: 'syz.1.591': attribute type 7 has an invalid length. [ 175.833708][ T8176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 175.883090][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.598'. [ 175.902822][ T8180] macvtap1: entered promiscuous mode [ 175.924358][ T8180] macvtap1: entered allmulticast mode [ 175.942089][ T8180] bond_slave_0: entered promiscuous mode [ 175.947963][ T8180] bond_slave_1: entered promiscuous mode [ 175.975206][ T8185] netlink: 216 bytes leftover after parsing attributes in process `syz.4.599'. [ 176.023349][ T8180] bond0: entered allmulticast mode [ 176.051779][ T8180] bond_slave_0: entered allmulticast mode [ 176.079703][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 176.085569][ T8180] bond_slave_1: entered allmulticast mode [ 176.095852][ T8180] bond0: entered promiscuous mode [ 176.104517][ T8180] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.130913][ T8180] team0: Device macvtap1 failed to register rx_handler [ 176.165219][ T8180] bond0: left allmulticast mode [ 176.171743][ T8180] bond_slave_0: left allmulticast mode [ 176.180750][ T8180] bond_slave_1: left allmulticast mode [ 176.189791][ T8180] bond0: left promiscuous mode [ 176.198033][ T8180] bond_slave_0: left promiscuous mode [ 176.203523][ T8180] bond_slave_1: left promiscuous mode [ 176.322810][ T8196] netlink: 108 bytes leftover after parsing attributes in process `syz.1.601'. [ 176.798721][ T8225] sch_fq: defrate 0 ignored. [ 176.892475][ T8229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.899975][ T8229] IPv6: NLM_F_CREATE should be set when creating new route [ 176.907256][ T8229] IPv6: NLM_F_CREATE should be set when creating new route [ 176.933055][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 176.943225][ T8229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.341885][ T8255] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.582135][ T8270] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.590518][ T6020] IPVS: starting estimator thread 0... [ 177.674573][ T8274] __nla_validate_parse: 4 callbacks suppressed [ 177.674587][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 177.690828][ T8272] IPVS: using max 25 ests per chain, 60000 per kthread [ 177.707116][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.724055][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 177.754678][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.620'. [ 177.775514][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 177.785894][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.620'. [ 177.799044][ T8278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.620'. [ 177.971251][ T8291] xt_HMARK: spi-set and port-set can't be combined [ 178.008995][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 178.062931][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 178.147393][ T8301] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 178.175359][ T8301] netlink: 'syz.0.629': attribute type 2 has an invalid length. [ 178.189402][ T8302] netlink: 'syz.3.628': attribute type 13 has an invalid length. [ 178.197387][ T8302] netlink: 'syz.3.628': attribute type 17 has an invalid length. [ 178.223530][ T8301] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 178.245894][ T8294] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 178.253542][ T8294] netlink: 220 bytes leftover after parsing attributes in process `syz.2.626'. [ 178.275756][ T8301] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.629'. [ 178.396031][ T8302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.487255][ T8319] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001 [ 178.515529][ T8310] netlink: 'syz.4.630': attribute type 27 has an invalid length. [ 178.533361][ T8310] netlink: 'syz.4.630': attribute type 4 has an invalid length. [ 178.822608][ T8331] bond2: entered promiscuous mode [ 178.829773][ T8331] bond2: entered allmulticast mode [ 178.836006][ T8331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.843911][ T8327] pim6reg1: entered promiscuous mode [ 178.858906][ T8327] pim6reg1: entered allmulticast mode [ 179.015114][ T8339] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 179.568205][ T8366] C: renamed from lo (while UP) [ 180.569764][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.636850][ T8429] netlink: 'syz.3.666': attribute type 21 has an invalid length. [ 181.404354][ T8455] syzkaller1: entered promiscuous mode [ 181.409912][ T8455] syzkaller1: entered allmulticast mode [ 182.982213][ T8535] __nla_validate_parse: 7 callbacks suppressed [ 182.982229][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 183.194657][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 183.265773][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 183.296164][ T8557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.704'. [ 183.405162][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 183.552899][ T8570] tipc: Enabled bearer , priority 0 [ 183.649147][ T8570] syzkaller0: entered promiscuous mode [ 183.654629][ T8570] syzkaller0: entered allmulticast mode [ 183.668700][ T8573] tipc: Resetting bearer [ 183.694078][ T8579] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 183.723177][ T8569] tipc: Resetting bearer [ 183.853060][ T8569] tipc: Disabling bearer [ 183.907420][ T8588] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 184.160972][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 184.270027][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 184.541519][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 184.707713][ T8633] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 184.793458][ T8645] syzkaller1: entered promiscuous mode [ 184.823488][ T8645] syzkaller1: entered allmulticast mode [ 184.988981][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 185.020786][ T8652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.086801][ T8652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.196941][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 185.448122][ T8652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.500806][ T8652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.540189][ T8684] 8021q: VLANs not supported on gre0 [ 185.749576][ T8652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.796935][ T8652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.123732][ T8652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.143815][ T8652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.310553][ T8723] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 186.411620][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.4.742'. [ 186.537778][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.593859][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.692370][ T78] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.738429][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.855354][ T3514] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.863547][ T3514] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.893543][ T3514] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.904664][ T3514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.979027][ T8759] netlink: 'syz.3.750': attribute type 33 has an invalid length. [ 187.028046][ T8759] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 187.091921][ T8768] netlink: 'syz.4.753': attribute type 1 has an invalid length. [ 187.133736][ T8769] netlink: 'syz.1.751': attribute type 7 has an invalid length. [ 187.182190][ T8769] netlink: 'syz.1.751': attribute type 8 has an invalid length. [ 187.327193][ T8772] block nbd1: server does not support multiple connections per device. [ 187.373917][ T8772] block nbd1: shutting down sockets [ 187.998587][ T8811] netlink: 'syz.1.761': attribute type 25 has an invalid length. [ 188.043776][ T8813] __nla_validate_parse: 5 callbacks suppressed [ 188.043792][ T8813] netlink: 116 bytes leftover after parsing attributes in process `syz.3.762'. [ 188.206480][ T8797] netlink: 'syz.2.758': attribute type 13 has an invalid length. [ 188.214895][ T8797] netlink: 'syz.2.758': attribute type 17 has an invalid length. [ 188.229383][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 188.257330][ T8797] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.927200][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 188.940955][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 188.999294][ T8849] team0: Port device team_slave_0 removed [ 189.015046][ T8859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.778'. [ 189.050308][ T8849] team0: Port device team_slave_1 removed [ 189.071605][ T8860] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 189.074194][ T8849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.106025][ T8849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.127081][ T8849] bond0: (slave veth5): Releasing active interface [ 189.220632][ T8867] netlink: 'syz.4.780': attribute type 2 has an invalid length. [ 189.228485][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.4.780'. [ 189.494626][ T8883] tipc: Enabling of bearer rejected, failed to enable media [ 189.532774][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 189.614736][ T8885] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 189.727939][ T8896] xt_l2tp: wrong L2TP version: 7 [ 190.081817][ T8917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.793'. [ 190.169278][ T8923] netlink: 165 bytes leftover after parsing attributes in process `syz.0.796'. [ 190.180548][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.795'. [ 190.546532][ T8937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.569609][ T8939] bond1: (slave geneve2): making interface the new active one [ 190.579556][ T8939] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 190.615594][ T8947] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 191.166048][ T8973] gretap0: entered promiscuous mode [ 191.474525][ T8987] sctp: [Deprecated]: syz.1.817 (pid 8987) Use of int in maxseg socket option. [ 191.474525][ T8987] Use struct sctp_assoc_value instead [ 191.624577][ T8988] bond2: entered promiscuous mode [ 191.629963][ T8988] bond2: entered allmulticast mode [ 191.636094][ T8988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.913984][ T30] audit: type=1107 audit(1758394330.501:3): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.386509][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.559546][ T9038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.608080][ T9042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.635618][ T5877] Bluetooth: hci0: command tx timeout [ 192.918477][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.926166][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.126935][ T9070] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 193.400983][ T9046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.433160][ T9046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.746975][ T3514] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.772647][ T3514] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.849075][ T3514] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.910042][ T3514] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.085661][ T9095] __nla_validate_parse: 73 callbacks suppressed [ 194.085678][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 194.159401][ T9098] netlink: 1 bytes leftover after parsing attributes in process `syz.4.850'. [ 194.203711][ T9103] tipc: Enabling of bearer rejected, failed to enable media [ 194.263026][ T9099] vlan0: entered promiscuous mode [ 194.263773][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289921][ T9099] vlan0: entered allmulticast mode [ 194.295053][ T9099] veth0_vlan: entered allmulticast mode [ 194.373413][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 194.408133][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.856'. [ 194.426617][ T9113] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 194.453470][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 194.477570][ T9108] validate_nla: 2 callbacks suppressed [ 194.477583][ T9108] netlink: 'syz.0.857': attribute type 4 has an invalid length. [ 194.661204][ T9128] sctp: [Deprecated]: syz.3.861 (pid 9128) Use of int in max_burst socket option. [ 194.661204][ T9128] Use struct sctp_assoc_value instead [ 194.913407][ T9140] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 194.929555][ T9140] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 195.823882][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 196.049057][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.884'. [ 196.156641][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 196.336348][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.342438][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 196.450931][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 196.453475][ T9214] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.890'. [ 196.669739][ T9225] openvswitch: netlink: Flow key attr not present in new flow. [ 196.716724][ T9225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.723960][ T9225] IPv6: NLM_F_CREATE should be set when creating new route [ 197.222202][ T9256] netlink: 'syz.4.902': attribute type 11 has an invalid length. [ 198.082241][ T2955] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 199.185174][ T9352] netlink: 'syz.1.928': attribute type 21 has an invalid length. [ 199.208652][ T9351] __nla_validate_parse: 17 callbacks suppressed [ 199.208667][ T9351] netlink: 256 bytes leftover after parsing attributes in process `syz.4.930'. [ 199.305487][ T9359] tipc: Enabled bearer , priority 0 [ 199.321509][ T9359] syzkaller0: entered promiscuous mode [ 199.333946][ T9359] syzkaller0: entered allmulticast mode [ 199.405256][ T9359] netlink: 76 bytes leftover after parsing attributes in process `syz.3.932'. [ 199.423753][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.933'. [ 199.445087][ T9359] tipc: Resetting bearer [ 199.458194][ T9369] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.557193][ T9358] tipc: Resetting bearer [ 199.632826][ T9358] tipc: Disabling bearer [ 199.693072][ T9383] tipc: Started in network mode [ 199.698739][ T9383] tipc: Node identity 6a8a6c80cc3, cluster identity 4711 [ 199.708170][ T9383] tipc: Enabled bearer , priority 0 [ 199.737265][ T9383] syzkaller0: entered promiscuous mode [ 199.760342][ T9383] syzkaller0: entered allmulticast mode [ 199.790614][ T9383] tipc: Resetting bearer [ 199.858561][ T9393] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.940'. [ 199.918597][ T9382] tipc: Resetting bearer [ 199.993025][ T9382] tipc: Disabling bearer [ 200.146997][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'. [ 200.193620][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'. [ 200.661451][ T9467] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.953'. [ 200.831426][ T9476] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 201.007580][ T9480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.044608][ T9480] bond1: (slave bond2): making interface the new active one [ 201.052709][ T9480] bond1: (slave bond2): Enslaving as an active interface with an up link [ 201.079439][ T9476] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 201.110641][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'. [ 201.142407][ T9476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.411539][ T9501] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 201.445525][ T9501] netlink: 224 bytes leftover after parsing attributes in process `syz.1.963'. [ 202.019388][ T9515] macvtap1: entered promiscuous mode [ 202.035064][ T9515] macvtap1: entered allmulticast mode [ 202.045848][ T9515] bond_slave_0: entered promiscuous mode [ 202.051589][ T9515] bond_slave_1: entered promiscuous mode [ 202.079249][ T9515] bond0: entered allmulticast mode [ 202.084527][ T9515] bond_slave_0: entered allmulticast mode [ 202.090847][ T9515] bond_slave_1: entered allmulticast mode [ 202.097649][ T9515] bond0: entered promiscuous mode [ 202.105060][ T9515] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 202.113066][ T9515] team0: Device macvtap1 failed to register rx_handler [ 202.122648][ T9515] bond0: left allmulticast mode [ 202.135975][ T9515] bond_slave_0: left allmulticast mode [ 202.161734][ T9515] bond_slave_1: left allmulticast mode [ 202.176219][ T9515] bond0: left promiscuous mode [ 202.185063][ T9515] bond_slave_0: left promiscuous mode [ 202.190577][ T9515] bond_slave_1: left promiscuous mode [ 202.199759][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.971'. [ 202.210475][ T9532] netlink: 'syz.1.971': attribute type 30 has an invalid length. [ 202.288058][ T9530] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 202.305420][ T9530] netlink: 'syz.1.971': attribute type 2 has an invalid length. [ 202.824268][ T9556] IPv6: sit1: Disabled Multicast RS [ 202.873020][ T9556] sit1: entered allmulticast mode [ 203.278122][ T9577] syz_tun: entered allmulticast mode [ 203.475608][ T9576] syz_tun: left allmulticast mode [ 203.842418][ T9601] netlink: 'syz.1.993': attribute type 83 has an invalid length. [ 204.366099][ T9628] __nla_validate_parse: 4 callbacks suppressed [ 204.366115][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1002'. [ 204.424891][ T9637] netlink: 'syz.1.1002': attribute type 21 has an invalid length. [ 204.680542][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 205.169939][ T9676] openvswitch: netlink: IPv4 tun info is not correct [ 205.335071][ T9682] netlink: 191164 bytes leftover after parsing attributes in process `syz.3.1018'. [ 205.480376][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 205.605464][ T9690] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1020'. [ 205.645457][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 205.678648][ T9690] tipc: Enabling of bearer rejected, failed to enable media [ 205.706823][ T9698] netlink: 'syz.4.1024': attribute type 29 has an invalid length. [ 205.731909][ T9698] netlink: 'syz.4.1024': attribute type 29 has an invalid length. [ 205.767203][ T9698] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1024'. [ 205.777808][ T9704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 205.802634][ T9704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1026'. [ 206.349382][ T9728] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1033'. [ 206.368074][ T9730] netlink: 'syz.1.1034': attribute type 10 has an invalid length. [ 206.462408][ T9730] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 206.729949][ T9748] netlink: 'syz.1.1037': attribute type 1 has an invalid length. [ 207.165923][ T9767] bridge_slave_1: default FDB implementation only supports local addresses [ 207.230747][ T9775] GUP no longer grows the stack in syz.1.1046 (9775): 200000006000-200000008000 (200000005000) [ 207.283649][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.1.1046 Not tainted syzkaller #0 PREEMPT(full) [ 207.283673][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.283682][ T9775] Call Trace: [ 207.283689][ T9775] [ 207.283697][ T9775] dump_stack_lvl+0x189/0x250 [ 207.283725][ T9775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.283744][ T9775] ? __pfx__printk+0x10/0x10 [ 207.283762][ T9775] ? find_vma+0xe7/0x160 [ 207.283799][ T9775] __get_user_pages+0x24d0/0x2ce0 [ 207.283817][ T9775] ? __lock_acquire+0xab9/0xd20 [ 207.283868][ T9775] ? __gup_longterm_locked+0xc68/0x1660 [ 207.283895][ T9775] __gup_longterm_locked+0xde9/0x1660 [ 207.283930][ T9775] ? sanity_check_pinned_pages+0x123a/0x1300 [ 207.283960][ T9775] gup_fast_fallback+0x1e6a/0x2010 [ 207.284015][ T9775] ? __pfx_gup_fast_fallback+0x10/0x10 [ 207.284035][ T9775] ? __pfx___calc_delta+0x10/0x10 [ 207.284056][ T9775] ? __pfx___calc_delta+0x10/0x10 [ 207.284084][ T9775] ? pin_user_pages_fast+0x4d/0xb0 [ 207.284106][ T9775] iov_iter_extract_pages+0x35a/0x5e0 [ 207.284137][ T9775] extract_iter_to_sg+0xe46/0x24e0 [ 207.284181][ T9775] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 207.284200][ T9775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.284217][ T9775] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.284236][ T9775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.284252][ T9775] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.284275][ T9775] ? __asan_memset+0x22/0x50 [ 207.284297][ T9775] hash_sendmsg+0x4f4/0x11d0 [ 207.284344][ T9775] ? __pfx_hash_sendmsg+0x10/0x10 [ 207.284365][ T9775] __sock_sendmsg+0x219/0x270 [ 207.284393][ T9775] ____sys_sendmsg+0x52d/0x830 [ 207.284419][ T9775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.284449][ T9775] ? import_iovec+0x74/0xa0 [ 207.284472][ T9775] ___sys_sendmsg+0x21f/0x2a0 [ 207.284494][ T9775] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.284550][ T9775] ? __fget_files+0x2a/0x420 [ 207.284565][ T9775] ? __fget_files+0x3a0/0x420 [ 207.284595][ T9775] __sys_sendmmsg+0x227/0x430 [ 207.284622][ T9775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.284639][ T9775] ? do_futex+0x333/0x420 [ 207.284669][ T9775] ? __sys_bind+0x33b/0x3e0 [ 207.284707][ T9775] ? rcu_is_watching+0x15/0xb0 [ 207.284729][ T9775] __x64_sys_sendmmsg+0xa0/0xc0 [ 207.284751][ T9775] do_syscall_64+0xfa/0x3b0 [ 207.284767][ T9775] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.284784][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.284800][ T9775] ? clear_bhb_loop+0x60/0xb0 [ 207.284821][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.284836][ T9775] RIP: 0033:0x7f8cbc98ec29 [ 207.284851][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.284865][ T9775] RSP: 002b:00007f8cbd777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.284883][ T9775] RAX: ffffffffffffffda RBX: 00007f8cbcbd5fa0 RCX: 00007f8cbc98ec29 [ 207.284895][ T9775] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000006 [ 207.284906][ T9775] RBP: 00007f8cbca11e41 R08: 0000000000000000 R09: 0000000000000000 [ 207.284916][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.284926][ T9775] R13: 00007f8cbcbd6038 R14: 00007f8cbcbd5fa0 R15: 00007ffd966f41d8 [ 207.284956][ T9775] [ 207.285815][ T9777] netlink: 'syz.3.1045': attribute type 3 has an invalid length. [ 207.621871][ T9777] netlink: 'syz.3.1045': attribute type 3 has an invalid length. [ 207.676801][ T9785] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.781820][ T9785] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.741731][ T9872] netem: incorrect ge model size [ 230.750502][ T9872] netem: change failed [ 230.780085][ T9873] __nla_validate_parse: 18 callbacks suppressed [ 230.780101][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 231.039394][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.046690][ T9898] IPv6: NLM_F_CREATE should be set when creating new route [ 231.053936][ T9898] IPv6: NLM_F_CREATE should be set when creating new route [ 231.061216][ T9898] IPv6: NLM_F_CREATE should be set when creating new route [ 231.076930][ T9900] rdma_op ffff8880563959f0 conn xmit_rdma 0000000000000000 [ 231.118805][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'. [ 231.543573][ T9078] IPVS: starting estimator thread 0... [ 231.647011][ T9933] IPVS: using max 26 ests per chain, 62400 per kthread [ 231.831706][ T9947] sctp: [Deprecated]: syz.0.1094 (pid 9947) Use of int in maxseg socket option. [ 231.831706][ T9947] Use struct sctp_assoc_value instead [ 231.923870][ T9950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1095'. [ 231.978808][ T9951] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1095'. [ 232.161142][ T9964] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1100'. [ 232.294207][ T9970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.403981][ T9975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1102'. [ 232.419102][ T9452] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 232.428855][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'. [ 233.366272][T10019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'. [ 233.475467][T10026] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1116'. [ 233.484879][T10028] netlink: 'syz.0.1112': attribute type 21 has an invalid length. [ 233.514180][T10027] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1116'. [ 233.531582][T10035] 8021q: VLANs not supported on tunl0 [ 233.811538][T10044] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 234.063013][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.385819][T10078] tipc: Enabled bearer , priority 0 [ 234.410779][T10078] syzkaller0: entered promiscuous mode [ 234.417672][T10081] netlink: 'syz.4.1134': attribute type 83 has an invalid length. [ 234.436262][T10078] syzkaller0: entered allmulticast mode [ 234.493032][T10078] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 234.515128][T10081] netlink: 'syz.4.1134': attribute type 83 has an invalid length. [ 234.680013][T10096] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 234.726333][T10100] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 234.827374][T10100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.862768][T10108] bond3: (slave veth9): Enslaving as an active interface with a down link [ 234.915984][T10100] veth11: entered promiscuous mode [ 234.925159][T10100] bond3: (slave veth11): Enslaving as an active interface with a down link [ 235.075945][T10077] tipc: Resetting bearer [ 235.166618][T10077] tipc: Disabling bearer [ 235.212146][ T5950] IPVS: starting estimator thread 0... [ 235.292379][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.326097][T10129] IPVS: using max 28 ests per chain, 67200 per kthread [ 235.954443][T10165] __nla_validate_parse: 11 callbacks suppressed [ 235.954461][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 235.982963][T10164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'. [ 236.123521][T10171] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 236.155709][T10171] netlink: 'syz.4.1160': attribute type 32 has an invalid length. [ 236.164411][T10171] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 236.358822][T10182] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 236.504482][T10181] veth9: entered promiscuous mode [ 236.548768][T10182] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 236.684324][T10207] openvswitch: netlink: Key type 310 is out of range max 32 [ 236.824145][T10214] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 236.922346][T10214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.033519][T10222] bond4: (slave geneve3): making interface the new active one [ 237.052701][T10222] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 237.469478][T10264] netlink: 'syz.3.1188': attribute type 26 has an invalid length. [ 237.822686][T10281] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1193'. [ 237.873447][T10281] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1193'. [ 237.889893][T10285] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1195'. [ 237.902052][T10281] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 237.917090][T10287] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1194'. [ 237.935966][T10287] xt_socket: unknown flags 0xd0 [ 238.194772][T10298] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 238.202850][T10300] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 238.217103][T10301] tipc: Enabling of bearer rejected, failed to enable media [ 238.225815][T10298] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1199'. [ 238.305178][T10298] geneve2: entered promiscuous mode [ 238.315922][T10298] geneve2: entered allmulticast mode [ 238.534833][T10313] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 238.944977][T10335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.012714][T10335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1211'. [ 239.071304][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 239.145389][T10343] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1217'. [ 239.145992][T10346] IPVS: set_ctl: invalid protocol: 62 172.20.20.187:20004 [ 240.144381][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.069688][T10458] validate_nla: 1 callbacks suppressed [ 241.069704][T10458] netlink: 'syz.4.1247': attribute type 29 has an invalid length. [ 241.094274][T10458] __nla_validate_parse: 5 callbacks suppressed [ 241.094288][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 241.118322][T10458] netlink: 'syz.4.1247': attribute type 29 has an invalid length. [ 241.180757][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 241.199362][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 241.374711][T10475] netlink: 'syz.1.1252': attribute type 11 has an invalid length. [ 241.409126][T10475] netlink: 'syz.1.1252': attribute type 11 has an invalid length. [ 241.437079][T10475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1252'. [ 241.993287][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 242.050744][T10501] veth0: entered promiscuous mode [ 242.116866][T10501] veth0: left promiscuous mode [ 242.426155][T10527] tipc: Enabling of bearer rejected, failed to enable media [ 242.767309][T10544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1269'. [ 242.977160][T10556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 243.112772][T10559] Can't find ip_set type hash:net>net [ 243.331787][T10579] tipc: Enabled bearer , priority 0 [ 243.390632][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 243.453194][T10579] netlink: 'syz.4.1277': attribute type 21 has an invalid length. [ 243.467654][T10579] netlink: 'syz.4.1277': attribute type 6 has an invalid length. [ 243.502862][T10579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1277'. [ 243.602603][T10591] syzkaller0: entered promiscuous mode [ 243.625264][T10591] syzkaller0: entered allmulticast mode [ 243.693865][T10602] tipc: Resetting bearer [ 243.733186][T10601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.758227][T10605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1285'. [ 243.902745][T10607] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 244.253780][T10628] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 244.405652][ T9079] tipc: Node number set to 1926129189 [ 244.486920][T10644] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.270957][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.278919][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.431054][T10688] tunl0: entered promiscuous mode [ 245.464979][T10688] netlink: 'syz.2.1308': attribute type 3 has an invalid length. [ 246.150686][T10740] __nla_validate_parse: 3 callbacks suppressed [ 246.150703][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1320'. [ 246.167990][T10741] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 246.459792][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1324'. [ 246.787233][T10768] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1331'. [ 247.040800][T10787] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 247.050151][T10787] tipc: Enabled bearer , priority 10 [ 247.344132][T10797] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1340'. [ 247.352607][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 247.367331][T10801] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 247.384362][T10801] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1342'. [ 247.399234][T10801] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 247.410021][T10797] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1340'. [ 247.562315][T10809] netlink: 'syz.2.1346': attribute type 12 has an invalid length. [ 247.592184][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1346'. [ 247.603694][T10812] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 247.629426][T10812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 247.850084][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 247.967480][T10808] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 248.307002][T10809] netlink: 'syz.2.1346': attribute type 13 has an invalid length. [ 248.341871][T10809] netlink: 'syz.2.1346': attribute type 17 has an invalid length. [ 248.422119][T10809] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 248.447692][T10839] netlink: 'syz.1.1355': attribute type 29 has an invalid length. [ 248.485951][T10855] tipc: Enabled bearer , priority 0 [ 248.494659][T10844] netlink: 'syz.1.1355': attribute type 29 has an invalid length. [ 248.522360][T10854] syzkaller0: entered promiscuous mode [ 248.555951][T10854] syzkaller0: entered allmulticast mode [ 248.851848][T10854] tipc: Resetting bearer [ 248.915731][T10854] tipc: Disabling bearer [ 249.044260][T10869] tipc: Started in network mode [ 249.050465][T10869] tipc: Node identity 56d44dea9409, cluster identity 4711 [ 249.056317][T10880] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 249.062433][T10869] tipc: Enabled bearer , priority 0 [ 249.221449][T10864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 249.251952][T10873] syzkaller0: entered promiscuous mode [ 249.280311][T10873] syzkaller0: entered allmulticast mode [ 249.300533][T10883] tipc: Resetting bearer [ 249.358286][T10863] tipc: Resetting bearer [ 249.414970][T10863] tipc: Disabling bearer [ 249.454687][T10894] tipc: Enabled bearer , priority 0 [ 249.587752][T10894] tipc: Disabling bearer [ 249.620326][T10899] FAULT_INJECTION: forcing a failure. [ 249.620326][T10899] name failslab, interval 1, probability 0, space 0, times 0 [ 249.642496][T10899] CPU: 0 UID: 0 PID: 10899 Comm: syz.2.1370 Not tainted syzkaller #0 PREEMPT(full) [ 249.642522][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.642543][T10899] Call Trace: [ 249.642550][T10899] [ 249.642557][T10899] dump_stack_lvl+0x189/0x250 [ 249.642582][T10899] ? __pfx____ratelimit+0x10/0x10 [ 249.642601][T10899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.642619][T10899] ? __pfx__printk+0x10/0x10 [ 249.642650][T10899] ? __pfx___might_resched+0x10/0x10 [ 249.642666][T10899] ? fs_reclaim_acquire+0x7d/0x100 [ 249.642688][T10899] should_fail_ex+0x414/0x560 [ 249.642717][T10899] should_failslab+0xa8/0x100 [ 249.642741][T10899] __kmalloc_noprof+0xcb/0x4f0 [ 249.642761][T10899] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 249.642789][T10899] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 249.642818][T10899] genl_family_rcv_msg_doit+0xb8/0x300 [ 249.642846][T10899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.642876][T10899] ? apparmor_capable+0x137/0x1b0 [ 249.642898][T10899] ? bpf_lsm_capable+0x9/0x20 [ 249.642918][T10899] ? security_capable+0x7e/0x2e0 [ 249.642948][T10899] genl_rcv_msg+0x60e/0x790 [ 249.642976][T10899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.642995][T10899] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 249.643014][T10899] ? __pfx_nl80211_connect+0x10/0x10 [ 249.643029][T10899] ? __pfx_nl80211_post_doit+0x10/0x10 [ 249.643051][T10899] ? __asan_memcpy+0x40/0x70 [ 249.643069][T10899] ? __pfx_ref_tracker_free+0x10/0x10 [ 249.643094][T10899] netlink_rcv_skb+0x205/0x470 [ 249.643108][T10899] ? __lock_acquire+0xab9/0xd20 [ 249.643131][T10899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.643153][T10899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.643192][T10899] ? down_read+0x1ad/0x2e0 [ 249.643214][T10899] genl_rcv+0x28/0x40 [ 249.643233][T10899] netlink_unicast+0x82f/0x9e0 [ 249.643266][T10899] ? __pfx_netlink_unicast+0x10/0x10 [ 249.643291][T10899] ? netlink_sendmsg+0x642/0xb30 [ 249.643307][T10899] ? skb_put+0x11b/0x210 [ 249.643330][T10899] netlink_sendmsg+0x805/0xb30 [ 249.643358][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.643379][T10899] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.643399][T10899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.643416][T10899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.643435][T10899] __sock_sendmsg+0x219/0x270 [ 249.643461][T10899] ____sys_sendmsg+0x505/0x830 [ 249.643487][T10899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.643518][T10899] ? import_iovec+0x74/0xa0 [ 249.643542][T10899] ___sys_sendmsg+0x21f/0x2a0 [ 249.643565][T10899] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.643625][T10899] ? __fget_files+0x2a/0x420 [ 249.643646][T10899] ? __fget_files+0x3a0/0x420 [ 249.643673][T10899] __x64_sys_sendmsg+0x19b/0x260 [ 249.643697][T10899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.643727][T10899] ? __pfx_ksys_write+0x10/0x10 [ 249.643755][T10899] ? do_syscall_64+0xbe/0x3b0 [ 249.643778][T10899] do_syscall_64+0xfa/0x3b0 [ 249.643794][T10899] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.643811][T10899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.643828][T10899] ? clear_bhb_loop+0x60/0xb0 [ 249.643848][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.643864][T10899] RIP: 0033:0x7f20c858ec29 [ 249.643881][T10899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.643894][T10899] RSP: 002b:00007f20c9498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.643912][T10899] RAX: ffffffffffffffda RBX: 00007f20c87d5fa0 RCX: 00007f20c858ec29 [ 249.643925][T10899] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 249.643936][T10899] RBP: 00007f20c9498090 R08: 0000000000000000 R09: 0000000000000000 [ 249.643946][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.643956][T10899] R13: 00007f20c87d6038 R14: 00007f20c87d5fa0 R15: 00007ffc3d5dcaa8 [ 249.643986][T10899] [ 250.078724][T10910] netlink: 'syz.2.1374': attribute type 8 has an invalid length. [ 250.453585][T10923] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 250.519414][T10937] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 250.519822][T10932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 250.650242][T10935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.703904][T10944] FAULT_INJECTION: forcing a failure. [ 250.703904][T10944] name failslab, interval 1, probability 0, space 0, times 0 [ 250.777140][T10944] CPU: 0 UID: 0 PID: 10944 Comm: syz.1.1384 Not tainted syzkaller #0 PREEMPT(full) [ 250.777164][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.777174][T10944] Call Trace: [ 250.777181][T10944] [ 250.777188][T10944] dump_stack_lvl+0x189/0x250 [ 250.777213][T10944] ? __pfx____ratelimit+0x10/0x10 [ 250.777232][T10944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.777251][T10944] ? __pfx__printk+0x10/0x10 [ 250.777287][T10944] ? __pfx___might_resched+0x10/0x10 [ 250.777302][T10944] ? fs_reclaim_acquire+0x7d/0x100 [ 250.777324][T10944] should_fail_ex+0x414/0x560 [ 250.777352][T10944] should_failslab+0xa8/0x100 [ 250.777376][T10944] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 250.777398][T10944] ? __alloc_skb+0x112/0x2d0 [ 250.777421][T10944] __alloc_skb+0x112/0x2d0 [ 250.777443][T10944] netlink_ack+0x146/0xa50 [ 250.777458][T10944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.777477][T10944] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 250.777496][T10944] ? __pfx_nl80211_post_doit+0x10/0x10 [ 250.777518][T10944] ? __asan_memcpy+0x40/0x70 [ 250.777536][T10944] ? __pfx_ref_tracker_free+0x10/0x10 [ 250.777560][T10944] netlink_rcv_skb+0x28c/0x470 [ 250.777576][T10944] ? __lock_acquire+0xab9/0xd20 [ 250.777598][T10944] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.777620][T10944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.777658][T10944] ? down_read+0x1ad/0x2e0 [ 250.777679][T10944] genl_rcv+0x28/0x40 [ 250.777698][T10944] netlink_unicast+0x82f/0x9e0 [ 250.777730][T10944] ? __pfx_netlink_unicast+0x10/0x10 [ 250.777756][T10944] ? netlink_sendmsg+0x642/0xb30 [ 250.777772][T10944] ? skb_put+0x11b/0x210 [ 250.777794][T10944] netlink_sendmsg+0x805/0xb30 [ 250.777822][T10944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.777844][T10944] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.777863][T10944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.777881][T10944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.777900][T10944] __sock_sendmsg+0x219/0x270 [ 250.777927][T10944] ____sys_sendmsg+0x505/0x830 [ 250.777954][T10944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.777983][T10944] ? import_iovec+0x74/0xa0 [ 250.778008][T10944] ___sys_sendmsg+0x21f/0x2a0 [ 250.778032][T10944] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.778090][T10944] ? __fget_files+0x2a/0x420 [ 250.778104][T10944] ? __fget_files+0x3a0/0x420 [ 250.778129][T10944] __x64_sys_sendmsg+0x19b/0x260 [ 250.778152][T10944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.778183][T10944] ? __pfx_ksys_write+0x10/0x10 [ 250.778201][T10944] ? rcu_is_watching+0x15/0xb0 [ 250.778224][T10944] ? do_syscall_64+0xbe/0x3b0 [ 250.778246][T10944] do_syscall_64+0xfa/0x3b0 [ 250.778263][T10944] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.778285][T10944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.778301][T10944] ? clear_bhb_loop+0x60/0xb0 [ 250.778322][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.778338][T10944] RIP: 0033:0x7f8cbc98ec29 [ 250.778353][T10944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.778366][T10944] RSP: 002b:00007f8cbd777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.778384][T10944] RAX: ffffffffffffffda RBX: 00007f8cbcbd5fa0 RCX: 00007f8cbc98ec29 [ 250.778396][T10944] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 250.778407][T10944] RBP: 00007f8cbd777090 R08: 0000000000000000 R09: 0000000000000000 [ 250.778417][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.778427][T10944] R13: 00007f8cbcbd6038 R14: 00007f8cbcbd5fa0 R15: 00007ffd966f41d8 [ 250.778457][T10944] [ 251.174780][T10963] __nla_validate_parse: 6 callbacks suppressed [ 251.174796][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1388'. [ 251.193000][T10959] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1387'. [ 251.454114][T10946] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 251.538223][T10982] tipc: Enabled bearer , priority 0 [ 251.729616][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1393'. [ 251.768948][T10982] syzkaller0: entered promiscuous mode [ 251.774522][T10982] syzkaller0: entered allmulticast mode [ 251.780983][T10982] tipc: Resetting bearer [ 251.829743][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 251.838988][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 251.883772][T10995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.902375][T10998] vlan0: entered promiscuous mode [ 251.907559][T10998] bond2: entered promiscuous mode [ 251.912742][T10998] vlan0: entered allmulticast mode [ 251.921657][T10998] bond2: entered allmulticast mode [ 251.977699][T10995] bond2: (slave gretap2): making interface the new active one [ 251.986776][T10995] gretap2: entered promiscuous mode [ 251.993049][T10995] gretap2: entered allmulticast mode [ 252.007825][T10995] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 252.153916][T10977] tipc: Resetting bearer [ 253.433601][T10977] tipc: Disabling bearer [ 253.446207][T11015] kthread_run failed with err -4 [ 253.883775][T11040] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1411'. [ 253.896322][T11040] veth0_to_team: entered promiscuous mode [ 253.931375][T11040] veth0_to_team: entered allmulticast mode [ 254.027530][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1414'. [ 254.178795][T11060] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 254.220364][T11061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.308554][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 254.328111][T11068] netlink: 'syz.1.1419': attribute type 11 has an invalid length. [ 254.336428][T11068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1419'. [ 254.516084][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 255.055464][ T30] audit: type=1800 audit(1758394393.641:4): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1432" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1387 res=0 errno=0 [ 255.233608][T11111] validate_nla: 2 callbacks suppressed [ 255.233625][T11111] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 255.680334][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817395][T11143] veth0: entered promiscuous mode [ 255.838040][T11143] veth0: left promiscuous mode [ 256.417287][T11169] netlink: 'syz.2.1451': attribute type 3 has an invalid length. [ 256.453121][T11169] __nla_validate_parse: 1 callbacks suppressed [ 256.453143][T11169] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1451'. [ 256.544370][T11172] netlink: 'syz.2.1451': attribute type 3 has an invalid length. [ 256.574615][T11172] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1451'. [ 256.610190][T11173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1453'. [ 257.363563][T11187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.405962][T11213] lo: entered allmulticast mode [ 257.427610][T11210] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.600086][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 257.615658][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1465'. [ 257.728565][T11226] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 257.760279][T11226] netlink: 'syz.2.1468': attribute type 11 has an invalid length. [ 257.787760][T11226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1468'. [ 258.430443][T11263] netlink: 'syz.1.1477': attribute type 9 has an invalid length. [ 258.452836][T11264] netlink: 'syz.1.1477': attribute type 9 has an invalid length. [ 258.648203][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1480'. [ 258.712242][T11281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1481'. [ 258.856402][T11286] sctp: [Deprecated]: syz.4.1482 (pid 11286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.856402][T11286] Use struct sctp_sack_info instead [ 258.952349][T11295] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1480'. [ 259.450520][T11321] netlink: 'syz.0.1492': attribute type 10 has an invalid length. [ 259.488362][T11321] team0: Port device dummy0 added [ 260.082199][T11358] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.765132][T11397] netlink: 'syz.1.1510': attribute type 7 has an invalid length. [ 260.803300][T11397] netlink: 'syz.1.1510': attribute type 8 has an invalid length. [ 260.981137][T11407] netlink: 'syz.0.1512': attribute type 39 has an invalid length. [ 261.462885][T11410] __nla_validate_parse: 22 callbacks suppressed [ 261.462902][T11410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1514'. [ 261.613858][T11410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1514'. [ 261.701915][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 261.713604][T11410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1514'. [ 261.732363][T11410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1514'. [ 261.779362][T11410] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1514'. [ 261.932456][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 261.955841][T11445] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1523'. [ 262.120181][T11458] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1527'. [ 262.175753][T11458] xt_policy: neither incoming nor outgoing policy selected [ 262.230693][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 262.496378][T11470] openvswitch: netlink: Missing valid actions attribute. [ 262.536372][T11470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.966498][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.078825][T11487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.192130][T11528] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 264.348302][T11534] unknown channel width for channel at 909000KHz? [ 264.372620][T11534] unknown channel width for channel at 909000KHz? [ 264.389746][T11534] unknown channel width for channel at 909000KHz? [ 264.559521][T11544] netlink: 'syz.2.1553': attribute type 2 has an invalid length. [ 264.851253][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805affcc00: rx timeout, send abort [ 264.859607][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805affd000: rx timeout, send abort [ 264.868137][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805affcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.884045][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805affd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 264.924714][ T5877] Bluetooth: hci4: link tx timeout [ 264.931249][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.343809][T11589] netlink: 'syz.2.1566': attribute type 29 has an invalid length. [ 265.381179][T11589] netlink: 'syz.2.1566': attribute type 29 has an invalid length. [ 265.765073][T11607] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.846601][T11609] netlink: 'syz.2.1573': attribute type 7 has an invalid length. [ 266.210586][T11626] veth0_to_bridge: entered promiscuous mode [ 266.351447][T11633] tipc: Enabling of bearer rejected, already enabled [ 266.385889][T11625] veth0_to_bridge: left promiscuous mode [ 266.718553][T11653] __nla_validate_parse: 6 callbacks suppressed [ 266.718569][T11653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1589'. [ 266.755392][T11653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1589'. [ 266.956814][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 268.477894][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 268.624344][T11668] xt_bpf: check failed: parse error [ 268.869932][T11715] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 268.881711][T11716] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1597'. [ 269.150293][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 269.353453][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1604'. [ 269.407811][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a131000: rx timeout, send abort [ 269.416200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a475800: rx timeout, send abort [ 269.424941][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a131000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.439381][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a475800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.561182][T11753] netlink: 'syz.3.1606': attribute type 11 has an invalid length. [ 269.619746][T11753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1606'. [ 269.671503][T11748] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 269.716902][T11753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.932265][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 269.947657][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 270.114300][T11781] netlink: 'syz.4.1609': attribute type 5 has an invalid length. [ 270.331597][T11797] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1612'. [ 270.455524][ T9079] IPVS: starting estimator thread 0... [ 270.573861][T11804] IPVS: using max 28 ests per chain, 67200 per kthread [ 270.757521][T11818] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 270.938393][T11831] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.985466][T11831] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 271.016561][T11831] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 271.064922][T11833] netlink: 'syz.3.1622': attribute type 7 has an invalid length. [ 271.173674][T11822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 271.184869][T11822] bond4: (slave bond5): making interface the new active one [ 271.195103][T11822] bond4: (slave bond5): Enslaving as an active interface with an up link [ 271.223665][T11833] : entered promiscuous mode [ 271.891836][T11882] FAULT_INJECTION: forcing a failure. [ 271.891836][T11882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.929223][T11882] CPU: 1 UID: 0 PID: 11882 Comm: syz.0.1637 Not tainted syzkaller #0 PREEMPT(full) [ 271.929248][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.929258][T11882] Call Trace: [ 271.929265][T11882] [ 271.929272][T11882] dump_stack_lvl+0x189/0x250 [ 271.929296][T11882] ? __pfx____ratelimit+0x10/0x10 [ 271.929314][T11882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.929334][T11882] ? __pfx__printk+0x10/0x10 [ 271.929355][T11882] ? __might_fault+0xb0/0x130 [ 271.929388][T11882] should_fail_ex+0x414/0x560 [ 271.929417][T11882] _copy_from_user+0x2d/0xb0 [ 271.929438][T11882] ___sys_sendmsg+0x158/0x2a0 [ 271.929461][T11882] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.929518][T11882] ? __fget_files+0x2a/0x420 [ 271.929533][T11882] ? __fget_files+0x3a0/0x420 [ 271.929559][T11882] __x64_sys_sendmsg+0x19b/0x260 [ 271.929582][T11882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.929612][T11882] ? __pfx_ksys_write+0x10/0x10 [ 271.929631][T11882] ? rcu_is_watching+0x15/0xb0 [ 271.929654][T11882] ? do_syscall_64+0xbe/0x3b0 [ 271.929675][T11882] do_syscall_64+0xfa/0x3b0 [ 271.929692][T11882] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.929709][T11882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.929725][T11882] ? clear_bhb_loop+0x60/0xb0 [ 271.929746][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.929762][T11882] RIP: 0033:0x7fcebdf8ec29 [ 271.929777][T11882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.929790][T11882] RSP: 002b:00007fcebed55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.929816][T11882] RAX: ffffffffffffffda RBX: 00007fcebe1d5fa0 RCX: 00007fcebdf8ec29 [ 271.929828][T11882] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 271.929838][T11882] RBP: 00007fcebed55090 R08: 0000000000000000 R09: 0000000000000000 [ 271.929849][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.929858][T11882] R13: 00007fcebe1d6038 R14: 00007fcebe1d5fa0 R15: 00007ffff8f48d08 [ 271.929888][T11882] [ 272.193155][T11886] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 272.268358][T11889] lo speed is unknown, defaulting to 1000 [ 272.280026][T11889] lo speed is unknown, defaulting to 1000 [ 272.290581][T11889] lo speed is unknown, defaulting to 1000 [ 272.309626][T11889] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 272.341745][T11889] lo speed is unknown, defaulting to 1000 [ 272.349807][T11889] lo speed is unknown, defaulting to 1000 [ 272.359446][T11889] lo speed is unknown, defaulting to 1000 [ 272.372431][T11889] lo speed is unknown, defaulting to 1000 [ 272.391077][T11889] lo speed is unknown, defaulting to 1000 [ 272.571611][T11906] netlink: 'syz.1.1645': attribute type 11 has an invalid length. [ 272.604945][T11906] vlan2: entered promiscuous mode [ 272.614758][T11906] vlan2: entered allmulticast mode [ 272.622199][T11906] hsr_slave_1: entered allmulticast mode [ 272.825251][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fad9400: rx timeout, send abort [ 272.833836][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fadac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.860575][T11917] gtp1: entered promiscuous mode [ 272.871845][T11917] gtp1: entered allmulticast mode [ 272.940941][T11922] __nla_validate_parse: 6 callbacks suppressed [ 272.940957][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 272.974724][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1653'. [ 273.101708][T11939] netlink: 'syz.1.1654': attribute type 21 has an invalid length. [ 273.110451][T11939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1654'. [ 273.174124][T11939] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 273.333517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fad9400: abort rx timeout. Force session deactivation [ 273.582276][T11952] gretap0: left promiscuous mode [ 273.689864][T11965] netlink: 'syz.0.1662': attribute type 30 has an invalid length. [ 273.702482][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.748357][T11968] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 273.770962][T11952] wg2: left promiscuous mode [ 273.791657][T11952] veth1_to_bond: left promiscuous mode [ 273.814653][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.829342][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.930770][T11952] bond2: left promiscuous mode [ 273.939629][T11952] vlan2: left promiscuous mode [ 274.055016][ T9443] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.096715][ T9443] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.111145][T11975] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 274.113109][ T9443] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.151123][T11975] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1663'. [ 274.197811][ T9443] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.204275][T11975] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 274.383525][T11984] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 274.412431][T11984] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1667'. [ 274.458072][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 274.549755][T11994] netlink: 'syz.3.1670': attribute type 21 has an invalid length. [ 274.567987][T11994] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1670'. [ 274.647230][T11994] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1670'. [ 274.854106][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 274.876865][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 275.174097][T12021] tipc: Enabled bearer , priority 0 [ 275.202663][T12021] syzkaller0: entered promiscuous mode [ 275.209687][T12021] syzkaller0: entered allmulticast mode [ 275.299525][T12021] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.345112][T12021] tipc: Resetting bearer [ 275.369362][T12020] tipc: Resetting bearer [ 275.421481][T12020] tipc: Disabling bearer [ 275.602350][T12056] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 275.880128][T12067] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 275.940314][T12070] bridge_slave_1: left allmulticast mode [ 275.973363][T12070] bridge_slave_1: left promiscuous mode [ 276.007949][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.053631][T12070] bridge_slave_0: left allmulticast mode [ 276.069363][T12070] bridge_slave_0: left promiscuous mode [ 276.075164][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.481641][T12101] validate_nla: 2 callbacks suppressed [ 276.481658][T12101] netlink: 'syz.0.1698': attribute type 2 has an invalid length. [ 276.502017][T12101] nbd: must specify a device to reconfigure [ 276.660796][T12109] Bluetooth: MGMT ver 1.23 [ 277.116707][T12132] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 277.152047][T12132] nbd: error processing sock list [ 277.193735][T12132] block nbd1: shutting down sockets [ 277.348858][T12145] netlink: 'syz.1.1713': attribute type 32 has an invalid length. [ 277.371651][T12145] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 277.619731][T12154] FAULT_INJECTION: forcing a failure. [ 277.619731][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 277.636337][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.2.1718 Not tainted syzkaller #0 PREEMPT(full) [ 277.636360][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.636370][T12154] Call Trace: [ 277.636378][T12154] [ 277.636386][T12154] dump_stack_lvl+0x189/0x250 [ 277.636408][T12154] ? __pfx____ratelimit+0x10/0x10 [ 277.636430][T12154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.636448][T12154] ? __pfx__printk+0x10/0x10 [ 277.636474][T12154] ? __pfx___might_resched+0x10/0x10 [ 277.636489][T12154] ? fs_reclaim_acquire+0x7d/0x100 [ 277.636511][T12154] should_fail_ex+0x414/0x560 [ 277.636539][T12154] should_failslab+0xa8/0x100 [ 277.636562][T12154] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 277.636584][T12154] ? __alloc_skb+0x112/0x2d0 [ 277.636607][T12154] __alloc_skb+0x112/0x2d0 [ 277.636629][T12154] netlink_ack+0x146/0xa50 [ 277.636644][T12154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.636672][T12154] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 277.636692][T12154] ? __pfx_nl80211_post_doit+0x10/0x10 [ 277.636714][T12154] ? __asan_memcpy+0x40/0x70 [ 277.636731][T12154] ? __pfx_ref_tracker_free+0x10/0x10 [ 277.636755][T12154] netlink_rcv_skb+0x28c/0x470 [ 277.636771][T12154] ? __lock_acquire+0xab9/0xd20 [ 277.636793][T12154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.636815][T12154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.636852][T12154] ? down_read+0x1ad/0x2e0 [ 277.636874][T12154] genl_rcv+0x28/0x40 [ 277.636893][T12154] netlink_unicast+0x82f/0x9e0 [ 277.636926][T12154] ? __pfx_netlink_unicast+0x10/0x10 [ 277.636950][T12154] ? netlink_sendmsg+0x642/0xb30 [ 277.636966][T12154] ? skb_put+0x11b/0x210 [ 277.636987][T12154] netlink_sendmsg+0x805/0xb30 [ 277.637015][T12154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.637037][T12154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.637057][T12154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.637075][T12154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.637093][T12154] __sock_sendmsg+0x219/0x270 [ 277.637119][T12154] ____sys_sendmsg+0x505/0x830 [ 277.637145][T12154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.637175][T12154] ? import_iovec+0x74/0xa0 [ 277.637200][T12154] ___sys_sendmsg+0x21f/0x2a0 [ 277.637222][T12154] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.637280][T12154] ? __fget_files+0x2a/0x420 [ 277.637297][T12154] ? __fget_files+0x3a0/0x420 [ 277.637323][T12154] __x64_sys_sendmsg+0x19b/0x260 [ 277.637346][T12154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.637377][T12154] ? __pfx_ksys_write+0x10/0x10 [ 277.637396][T12154] ? rcu_is_watching+0x15/0xb0 [ 277.637417][T12154] ? do_syscall_64+0xbe/0x3b0 [ 277.637439][T12154] do_syscall_64+0xfa/0x3b0 [ 277.637455][T12154] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.637473][T12154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.637489][T12154] ? clear_bhb_loop+0x60/0xb0 [ 277.637509][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.637525][T12154] RIP: 0033:0x7f20c858ec29 [ 277.637540][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.637554][T12154] RSP: 002b:00007f20c9498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.637573][T12154] RAX: ffffffffffffffda RBX: 00007f20c87d5fa0 RCX: 00007f20c858ec29 [ 277.637586][T12154] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 277.637597][T12154] RBP: 00007f20c9498090 R08: 0000000000000000 R09: 0000000000000000 [ 277.637608][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.637618][T12154] R13: 00007f20c87d6038 R14: 00007f20c87d5fa0 R15: 00007ffc3d5dcaa8 [ 277.637647][T12154] [ 278.173098][T12171] __nla_validate_parse: 9 callbacks suppressed [ 278.173115][T12171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. Connection to 10.128.0.31 closed by remote host. [ 279.601761][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 279.929588][ T9450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.230694][ T9450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.311350][ T5950] infiniband syz1: ib_query_port failed (-19) [ 280.341405][ T9450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.410644][ T9450] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.667348][ T9450] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 280.795554][ T2963] wlan1: Trigger new scan to find an IBSS to join [ 281.094056][ T9450] bond0 (unregistering): Released all slaves [ 281.175261][ T9450] bond1 (unregistering): (slave bond2): Releasing backup interface [ 281.184104][ T9450] bond1 (unregistering): Released all slaves [ 281.262675][ T9450] bond2 (unregistering): Released all slaves [ 281.346314][ T9450] bond3 (unregistering): Released all slaves [ 281.358939][ T9450] bond4 (unregistering): (slave bond5): Releasing backup interface [ 281.368708][ T9450] bond4 (unregistering): Released all slaves [ 281.447988][ T9450] bond5 (unregistering): Released all slaves [ 281.460333][ T9450] bond6 (unregistering): Released all slaves [ 281.563359][ T9450] tipc: Disabling bearer [ 281.573723][ T9450] tipc: Disabling bearer [ 281.580536][ T9450] tipc: Left network mode [ 281.722607][ T9450] hsr_slave_0: left promiscuous mode [ 281.729221][ T9450] hsr_slave_1: left promiscuous mode [ 281.744489][ T9450] veth1_macvtap: left promiscuous mode [ 281.751435][ T9450] veth0_macvtap: left promiscuous mode [ 281.757048][ T9450] veth1_vlan: left promiscuous mode [ 282.267936][ T9450] team0 (unregistering): Port device dummy0 removed [ 282.359126][ T9450] lo (unregistering): left allmulticast mode [ 282.628067][ T9450] IPVS: stop unused estimator thread 0... [ 282.676271][ T9450] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.686693][ T9450] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.732578][ T9450] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.742482][ T9450] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.779769][ T9450] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.789522][ T9450] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.851034][ T9450] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.860832][ T9450] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.157031][ T9450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.168317][ T9450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.240999][ T9450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.251430][ T9450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.298549][ T9450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.309306][ T9450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.384323][ T9450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.394679][ T9450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.473354][ T9450] bridge_slave_1: left allmulticast mode [ 283.479379][ T9450] bridge_slave_1: left promiscuous mode [ 283.485695][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.495049][ T9450] bridge_slave_0: left allmulticast mode [ 283.500894][ T9450] bridge_slave_0: left promiscuous mode [ 283.506729][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.521018][ T9450] bridge_slave_1: left allmulticast mode [ 283.526765][ T9450] bridge_slave_1: left promiscuous mode [ 283.532403][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.542237][ T9450] bridge_slave_0: left allmulticast mode [ 283.548035][ T9450] bridge_slave_0: left promiscuous mode [ 283.553674][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.568906][ T9450] bridge_slave_1: left allmulticast mode [ 283.574525][ T9450] bridge_slave_1: left promiscuous mode [ 283.580300][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.590602][ T9450] bridge_slave_0: left allmulticast mode [ 283.597151][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.610856][ T9450] tipc: Resetting bearer [ 283.813648][ T9450] bond4 (unregistering): (slave geneve3): Releasing active interface [ 283.833303][ T9450] bond1 (unregistering): (slave geneve2): Releasing active interface [ 283.841471][ T2955] wlan1: Trigger new scan to find an IBSS to join [ 284.137822][ T9450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.148304][ T9450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.158817][ T9450] bond0 (unregistering): Released all slaves [ 284.243948][ T9450] bond1 (unregistering): Released all slaves [ 284.321765][ T9450] bond2 (unregistering): Released all slaves [ 284.399222][ T9450] bond3 (unregistering): (slave veth9): Releasing active interface [ 284.408748][ T9450] bond3 (unregistering): (slave veth11): Releasing active interface [ 284.418371][ T9450] bond3 (unregistering): Released all slaves [ 284.496044][ T9450] bond4 (unregistering): Released all slaves [ 284.644848][ T9450] bond2 (unregistering): (slave gretap2): Releasing active interface [ 284.653124][ T9450] gretap2 (unregistering): left promiscuous mode [ 284.659579][ T9450] gretap2 (unregistering): left allmulticast mode [ 284.716431][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.829697][ T9450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.839693][ T9450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.848788][ T9450] bond0 (unregistering): Released all slaves [ 284.862131][ T9450] bond1 (unregistering): Released all slaves [ 284.950855][ T9450] bond2 (unregistering): Released all slaves [ 285.290549][ T9450] tipc: Disabling bearer [ 285.405795][ T9450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.416452][ T9450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.427254][ T9450] bond0 (unregistering): Released all slaves [ 285.441210][ T9450] bond1 (unregistering): Released all slaves [ 285.453880][ T9450] bond2 (unregistering): Released all slaves [ 285.469040][ T9450] bond3 (unregistering): Released all slaves [ 285.485435][ T9450] bond4 (unregistering): Released all slaves [ 285.499270][ T9450] bond5 (unregistering): Released all slaves [ 285.648660][ T9450] : left promiscuous mode [ 285.687081][ T9450] : left promiscuous mode [ 285.765158][ T9450] tipc: Left network mode [ 285.781728][ T9450] tipc: Left network mode [ 285.795704][ T9450] tipc: Disabling bearer [ 285.805675][ T9450] tipc: Left network mode [ 285.824727][ T9450] IPVS: stopping master sync thread 7053 ... [ 286.449200][ T9450] hsr_slave_0: left promiscuous mode [ 286.454948][ T9450] hsr_slave_1: left promiscuous mode [ 286.460807][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.468214][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.477382][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.484762][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.495912][ T9450] hsr_slave_0: left promiscuous mode [ 286.501676][ T9450] hsr_slave_1: left promiscuous mode [ 286.507393][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.514986][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.526184][ T9450] hsr_slave_0: left promiscuous mode [ 286.531921][ T9450] hsr_slave_1: left promiscuous mode [ 286.537701][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.545080][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.553389][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.561015][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.587135][ T9450] veth1_macvtap: left promiscuous mode [ 286.593870][ T9450] veth1_macvtap: left promiscuous mode [ 286.958587][ T9450] team0 (unregistering): Port device team_slave_1 removed [ 286.992821][ T9450] team0 (unregistering): Port device team_slave_0 removed [ 287.326199][ T9450] pimreg3 (unregistering): left allmulticast mode [ 287.534437][ T9450] team0 (unregistering): Port device team_slave_1 removed [ 287.566090][ T9450] team0 (unregistering): Port device team_slave_0 removed [ 288.028733][ T9450] team0 (unregistering): Port device team_slave_1 removed [ 288.062767][ T9450] team0 (unregistering): Port device team_slave_0 removed