last executing test programs: 1.241881231s ago: executing program 1 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.07209054s ago: executing program 0 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRES32], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 987.430378ms ago: executing program 3 (id=1258): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5b3a, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) 986.982886ms ago: executing program 1 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000b00)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x86, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x101, 0x6, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x5, 0x2, 0x6, 0x4, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x5, 0xc, 0x5, 0x40000008, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x6, 0x8000, 0xffffff01, 0x80000001, 0x80, 0x9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0xfff, 0x97, 0x6, 0x791a, 0x0, 0x0, 0x7, 0xab8, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x4, 0x6f, 0x3f, 0x6, 0x2007, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xffffffff, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x0, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x7, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x587, 0x8, 0x1, 0x800, 0x3c, 0x6, 0x3ff, 0x2, 0x431, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x3, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0xa94, 0x1, 0x8001, 0x2, 0xfffffff8, 0x5, 0x8, 0xfffeffff, 0x1, 0x0, 0x49fb, 0x1, 0xd0c0, 0x8, 0xc974, 0x3, 0xff, 0x7, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x9, 0x7fff, 0x5, 0x7ff, 0x800, 0x7, 0x0, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x4010000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x80000001, 0x6, 0x3, 0xf, 0x6, 0x9, 0x7, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x9, 0x9, 0x5, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2, 0x401, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 882.268169ms ago: executing program 2 (id=1262): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r1, 0x1, 0x20, 0x6, @local}, 0x14) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 811.51351ms ago: executing program 0 (id=1263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 811.033607ms ago: executing program 3 (id=1264): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x9a, &(0x7f0000000480)=ANY=[], 0x0) 782.366712ms ago: executing program 4 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB=' '], 0x38}}, 0x0) 772.890523ms ago: executing program 1 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002800e97800"], 0x18}}, 0x0) 675.603683ms ago: executing program 2 (id=1267): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 675.283459ms ago: executing program 0 (id=1268): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 648.179133ms ago: executing program 4 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000e5ffffffffff02000000100001"], 0x24}}, 0x0) 602.609192ms ago: executing program 3 (id=1270): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b5952cbf7000ffdbdf250a1800fe", @ANYRES32=r2, @ANYBLOB="14000200000000000000000000000000000000000800080095050000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 523.605385ms ago: executing program 1 (id=1271): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x0, 0x82, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback={0x2, 0x460c6}, 0x0, 0x0, 0x2, 0x80}}) 523.238843ms ago: executing program 2 (id=1272): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@dev={0xac, 0x14, 0x14, 0x26}, @remote}, 0xc) 501.235164ms ago: executing program 4 (id=1273): syz_emit_ethernet(0x6a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x34, 0x29, 0x0, @empty, @local, {[@fragment={0x2f, 0x0, 0x1, 0x0, 0x0, 0x6, 0x67}, @srh={0x87, 0x2, 0x4, 0x1, 0x8, 0x40, 0x3, [@private2]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 441.718955ms ago: executing program 3 (id=1274): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x2, 0x7ff, 0x80000000}, {}, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x3c}, 0xa, @in6=@private2, 0x0, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 386.78726ms ago: executing program 2 (id=1275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) 384.015692ms ago: executing program 0 (id=1276): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 383.612597ms ago: executing program 1 (id=1277): unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 342.957476ms ago: executing program 4 (id=1278): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 312.267547ms ago: executing program 2 (id=1279): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 231.610512ms ago: executing program 3 (id=1280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x24}}, 0x0) 228.915256ms ago: executing program 0 (id=1281): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 228.498729ms ago: executing program 1 (id=1282): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 202.824693ms ago: executing program 4 (id=1283): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 155.694087ms ago: executing program 2 (id=1284): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r4, &(0x7f0000000240)='ns/ipc\x00') sendmmsg$inet6(r1, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, 0x8) ppoll(&(0x7f0000000100)=[{r0, 0x10}, {r0}, {r0, 0x4420}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200)={[0x1031]}, 0x8) (async) ppoll(&(0x7f0000000100)=[{r0, 0x10}, {r0}, {r0, 0x4420}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200)={[0x1031]}, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x4}]}) close(r0) 151.910291ms ago: executing program 3 (id=1285): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1f, &(0x7f00000008c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4ddf631552a04e7c, 0x0, 0x3, 0x7, 0xb, 0xfffffffffffffff8, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xc7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1], &(0x7f00000004c0)=[{0x1, 0x1, 0xa, 0x8}, {0x0, 0x5, 0xf, 0xc}, {0x2, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x3, 0x5}, {0x5, 0x3, 0x8, 0x4}, {0x3, 0x5, 0xd, 0xc}, {0x0, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xa, 0x7}], 0x10, 0x5b, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000180), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "a4170f13868d96b9", "707f5df69a462e7214376dc2cc2aaa2b", "3355934e", "aff16cce64d17c55"}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) pipe(&(0x7f0000000140)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1f, &(0x7f00000008c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4ddf631552a04e7c, 0x0, 0x3, 0x7, 0xb, 0xfffffffffffffff8, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xc7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r1], &(0x7f00000004c0)=[{0x1, 0x1, 0xa, 0x8}, {0x0, 0x5, 0xf, 0xc}, {0x2, 0x1, 0xf, 0x2}, {0x3, 0x3, 0x3, 0x5}, {0x5, 0x3, 0x8, 0x4}, {0x3, 0x5, 0xd, 0xc}, {0x0, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xa, 0x7}], 0x10, 0x5b, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000180), &(0x7f0000000380)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "a4170f13868d96b9", "707f5df69a462e7214376dc2cc2aaa2b", "3355934e", "aff16cce64d17c55"}, 0x28) (async) 19.550443ms ago: executing program 0 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2de129bd7000fbdbdf254c00000008000300", @ANYRES16=r2, @ANYBLOB="fcc0f75369"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x20004001) 0s ago: executing program 4 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r7, 0x100, 0x7ff, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 83.895214][ T5818] cgroup: Unknown subsys name 'net' [ 84.032797][ T5818] cgroup: Unknown subsys name 'cpuset' [ 84.041847][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.697882][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.721962][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.732470][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.740263][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.748329][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.748420][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.763475][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.764973][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.778338][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.791854][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.799457][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.800375][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.814887][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.815787][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.839503][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.848135][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.857357][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.865502][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.875493][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.875862][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.883637][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.901807][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.910117][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.917664][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.925176][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.929266][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.385169][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.626944][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.634292][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.642895][ T5829] bridge_slave_0: entered allmulticast mode [ 90.650428][ T5829] bridge_slave_0: entered promiscuous mode [ 90.738358][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.745555][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.752928][ T5829] bridge_slave_1: entered allmulticast mode [ 90.760438][ T5829] bridge_slave_1: entered promiscuous mode [ 90.769928][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.906524][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.923297][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.936451][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.006720][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.094430][ T5829] team0: Port device team_slave_0 added [ 91.128274][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.142990][ T5829] team0: Port device team_slave_1 added [ 91.282901][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.290345][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.297742][ T5828] bridge_slave_0: entered allmulticast mode [ 91.305010][ T5828] bridge_slave_0: entered promiscuous mode [ 91.338273][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.346139][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.353892][ T5835] bridge_slave_0: entered allmulticast mode [ 91.361985][ T5835] bridge_slave_0: entered promiscuous mode [ 91.370872][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.378111][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.404257][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.416991][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.424337][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.431706][ T5828] bridge_slave_1: entered allmulticast mode [ 91.439828][ T5828] bridge_slave_1: entered promiscuous mode [ 91.452809][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.460326][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.468079][ T5831] bridge_slave_0: entered allmulticast mode [ 91.475375][ T5831] bridge_slave_0: entered promiscuous mode [ 91.483308][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.490690][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.498271][ T5835] bridge_slave_1: entered allmulticast mode [ 91.505545][ T5835] bridge_slave_1: entered promiscuous mode [ 91.515817][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.525634][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.552456][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.615101][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.622490][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.630230][ T5831] bridge_slave_1: entered allmulticast mode [ 91.637944][ T5831] bridge_slave_1: entered promiscuous mode [ 91.692608][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.731050][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.744389][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.758476][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.784553][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.808358][ T5836] Bluetooth: hci0: command tx timeout [ 91.812175][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.893967][ T978] cfg80211: failed to load regulatory.db [ 91.905017][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.912867][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.920550][ T5844] bridge_slave_0: entered allmulticast mode [ 91.928088][ T5844] bridge_slave_0: entered promiscuous mode [ 91.965752][ T5829] hsr_slave_0: entered promiscuous mode [ 91.967810][ T55] Bluetooth: hci2: command tx timeout [ 91.971964][ T5837] Bluetooth: hci3: command tx timeout [ 91.977052][ T55] Bluetooth: hci1: command tx timeout [ 91.988020][ T5836] Bluetooth: hci4: command tx timeout [ 91.990754][ T5829] hsr_slave_1: entered promiscuous mode [ 92.006840][ T5828] team0: Port device team_slave_0 added [ 92.013273][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.020666][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.028246][ T5844] bridge_slave_1: entered allmulticast mode [ 92.035531][ T5844] bridge_slave_1: entered promiscuous mode [ 92.045222][ T5831] team0: Port device team_slave_0 added [ 92.055354][ T5831] team0: Port device team_slave_1 added [ 92.064309][ T5835] team0: Port device team_slave_0 added [ 92.073748][ T5835] team0: Port device team_slave_1 added [ 92.088097][ T5828] team0: Port device team_slave_1 added [ 92.199010][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.211826][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.237358][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.244382][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.271055][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.282862][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.290992][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.317081][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.330314][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.337305][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.364134][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.390264][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.397507][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.423562][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.472078][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.479329][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.505892][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.531553][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.538742][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.565005][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.586954][ T5844] team0: Port device team_slave_0 added [ 92.647170][ T5844] team0: Port device team_slave_1 added [ 92.759445][ T5828] hsr_slave_0: entered promiscuous mode [ 92.766053][ T5828] hsr_slave_1: entered promiscuous mode [ 92.773454][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.781575][ T5828] Cannot create hsr debugfs directory [ 92.793569][ T5835] hsr_slave_0: entered promiscuous mode [ 92.800115][ T5835] hsr_slave_1: entered promiscuous mode [ 92.806230][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.813872][ T5835] Cannot create hsr debugfs directory [ 92.820734][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.828109][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.854201][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.908882][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.915884][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.942458][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.965674][ T5831] hsr_slave_0: entered promiscuous mode [ 92.973193][ T5831] hsr_slave_1: entered promiscuous mode [ 92.979548][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.987169][ T5831] Cannot create hsr debugfs directory [ 93.189580][ T5844] hsr_slave_0: entered promiscuous mode [ 93.196066][ T5844] hsr_slave_1: entered promiscuous mode [ 93.202394][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.210109][ T5844] Cannot create hsr debugfs directory [ 93.440103][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.485619][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.530357][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.542920][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.706361][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.721235][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.733124][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.762573][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.843516][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.857119][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.878351][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.888198][ T5836] Bluetooth: hci0: command tx timeout [ 93.896293][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.032085][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.043403][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.051331][ T5836] Bluetooth: hci4: command tx timeout [ 94.056789][ T5836] Bluetooth: hci1: command tx timeout [ 94.062298][ T55] Bluetooth: hci3: command tx timeout [ 94.062340][ T55] Bluetooth: hci2: command tx timeout [ 94.089579][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.104010][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.122046][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.142244][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.162570][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.234891][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.242216][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.262512][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.276151][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.295528][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.302743][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.327883][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.342786][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.371010][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.391760][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.398982][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.436429][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.443997][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.511863][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.605558][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.711467][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.718728][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.744742][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.752072][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.789846][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.905446][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.922501][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.955232][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.962451][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.014872][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.022082][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.055640][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.100316][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.107562][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.151624][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.158838][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.215824][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.332996][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.468116][ T5829] veth0_vlan: entered promiscuous mode [ 95.531235][ T5829] veth1_vlan: entered promiscuous mode [ 95.590174][ T5831] veth0_vlan: entered promiscuous mode [ 95.634801][ T5831] veth1_vlan: entered promiscuous mode [ 95.662043][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.757383][ T5829] veth0_macvtap: entered promiscuous mode [ 95.803718][ T5831] veth0_macvtap: entered promiscuous mode [ 95.847140][ T5831] veth1_macvtap: entered promiscuous mode [ 95.877765][ T5829] veth1_macvtap: entered promiscuous mode [ 95.927355][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.963929][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.971442][ T5836] Bluetooth: hci0: command tx timeout [ 95.986523][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.010836][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.032805][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047244][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.056754][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.066808][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.087977][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.128530][ T5836] Bluetooth: hci1: command tx timeout [ 96.128854][ T55] Bluetooth: hci3: command tx timeout [ 96.133971][ T5846] Bluetooth: hci4: command tx timeout [ 96.140370][ T5837] Bluetooth: hci2: command tx timeout [ 96.191460][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.230160][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.249132][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258410][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.267153][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.296887][ T5828] veth0_vlan: entered promiscuous mode [ 96.363900][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.384931][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.419606][ T5828] veth1_vlan: entered promiscuous mode [ 96.440371][ T5844] veth0_vlan: entered promiscuous mode [ 96.447081][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.458647][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.515430][ T5844] veth1_vlan: entered promiscuous mode [ 96.587320][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.615657][ T5828] veth0_macvtap: entered promiscuous mode [ 96.628172][ T5828] veth1_macvtap: entered promiscuous mode [ 96.644481][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.681503][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.749568][ T5844] veth0_macvtap: entered promiscuous mode [ 96.781457][ T5835] veth0_vlan: entered promiscuous mode [ 96.804511][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.813495][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.819734][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.840475][ T5844] veth1_macvtap: entered promiscuous mode [ 96.866454][ T5835] veth1_vlan: entered promiscuous mode [ 96.893059][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.948750][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.968550][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.981108][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.990211][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.063974][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.169856][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.196042][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.215053][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.230115][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.250127][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.251754][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.283175][ T5835] veth0_macvtap: entered promiscuous mode [ 97.332036][ T5835] veth1_macvtap: entered promiscuous mode [ 97.369421][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.380920][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.480849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.539189][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.614682][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.640769][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.654872][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.666650][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.698883][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.706759][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.861138][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.907559][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.049319][ T5837] Bluetooth: hci0: command tx timeout [ 98.130763][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.154380][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.184882][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.214423][ T5837] Bluetooth: hci1: command tx timeout [ 98.214460][ T55] Bluetooth: hci4: command tx timeout [ 98.219903][ T5836] Bluetooth: hci2: command tx timeout [ 98.219943][ T5836] Bluetooth: hci3: command tx timeout [ 98.240996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.403206][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.435856][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.682827][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.765926][ T5964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.799228][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 98.889704][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 98.959800][ T5965] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 98.983887][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.066131][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 99.109815][ T5971] syz.4.5 (5971) used greatest stack depth: 19944 bytes left [ 99.292520][ T5977] batman_adv: batadv0: Adding interface: gretap1 [ 99.387682][ T5977] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 99.776641][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.829046][ T6000] netlink: 68 bytes leftover after parsing attributes in process `syz.3.29'. [ 99.883768][ T5997] Zero length message leads to an empty skb [ 99.894297][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 100.275873][ T6016] netlink: 160 bytes leftover after parsing attributes in process `syz.1.32'. [ 100.361054][ T6018] No such timeout policy "syz0" [ 100.415944][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 100.468465][ T6021] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 100.476728][ T6021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.601689][ T6027] IPv6: Can't replace route, no match found [ 100.828565][ T6035] 8021q: adding VLAN 0 to HW filter on device team1 [ 100.904261][ T6039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.919190][ T6041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.957309][ T5888] IPVS: starting estimator thread 0... [ 101.040762][ T6052] openvswitch: netlink: EtherType 0 is less than min 600 [ 101.057704][ T6043] IPVS: using max 26 ests per chain, 62400 per kthread [ 101.551407][ T6070] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 101.572599][ T6070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.607257][ T6076] warning: `syz.4.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.872702][ T6089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.982539][ T6098] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 102.046314][ T6088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.197298][ T6105] team0: entered promiscuous mode [ 102.204217][ T6105] team_slave_0: entered promiscuous mode [ 102.213444][ T6105] team_slave_1: entered promiscuous mode [ 102.246552][ T6105] batadv_slave_1: entered promiscuous mode [ 102.414223][ T6117] __nla_validate_parse: 8 callbacks suppressed [ 102.414243][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.430354][ T978] IPVS: starting estimator thread 0... [ 102.488483][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.529273][ T6120] IPVS: using max 25 ests per chain, 60000 per kthread [ 102.720986][ T6140] netlink: 92 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.812161][ T6146] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 102.857587][ T6146] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 102.865304][ T6146] netlink: 236 bytes leftover after parsing attributes in process `syz.3.69'. [ 102.988289][ T6163] x_tables: duplicate underflow at hook 2 [ 103.095105][ T6165] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 103.124207][ T6165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.175733][ T6165] netlink: 9 bytes leftover after parsing attributes in process `syz.4.78'. [ 103.194249][ T6165] ï‰Oܼ: renamed from hsr0 (while UP) [ 103.212639][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 103.227088][ T6165] ï‰Oܼ: entered promiscuous mode [ 103.280616][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 103.362965][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 103.415294][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 103.437749][ T5888] IPVS: starting estimator thread 0... [ 103.539111][ T6185] IPVS: using max 25 ests per chain, 60000 per kthread [ 103.625667][ T6182] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 103.643471][ T6182] 0ªÃøÂFNð¡: entered allmulticast mode [ 103.670426][ T6189] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 103.924785][ T6206] syz.0.92 (6206) used greatest stack depth: 18792 bytes left [ 103.962914][ T6211] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 104.193896][ T6225] net_ratelimit: 6 callbacks suppressed [ 104.193920][ T6225] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 104.418279][ T6232] pim6reg: entered allmulticast mode [ 104.864793][ T6265] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 105.039317][ T6274] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 105.054451][ T6274] hsr0: entered promiscuous mode [ 105.091090][ T6274] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.103301][ T6274] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 105.120606][ T6274] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 105.150686][ T6279] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.181662][ T6282] sctp: [Deprecated]: syz.4.118 (pid 6282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.181662][ T6282] Use struct sctp_sack_info instead [ 105.254401][ T6276] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 105.263198][ T6276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.511263][ T6345] x_tables: duplicate entry at hook 1 [ 106.516808][ T6345] x_tables: duplicate entry at hook 1 [ 106.558294][ T6345] x_tables: duplicate entry at hook 1 [ 106.602033][ T6345] x_tables: duplicate entry at hook 1 [ 106.820777][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.829261][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.971861][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.986494][ T6357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.084333][ T6357] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.095199][ T6357] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.104286][ T6357] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.115036][ T6357] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.651520][ T6394] __nla_validate_parse: 11 callbacks suppressed [ 107.651543][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'. [ 107.720810][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 107.758154][ T6400] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 107.769447][ T6400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.839044][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.867385][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.210095][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 108.223370][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 108.298272][ T6419] erspan0: entered promiscuous mode [ 108.321370][ T6419] erspan0: left promiscuous mode [ 108.363592][ T6429] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 108.544131][ T6440] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 108.649923][ T6442] openvswitch: netlink: IPv6 tunnel dst address is zero [ 108.672547][ T6446] x_tables: ip_tables: osf match: only valid for protocol 6 [ 108.685581][ T6447] x_tables: ip_tables: osf match: only valid for protocol 6 [ 108.921611][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 109.209566][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 109.578588][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 110.165938][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 110.326495][ T6499] sctp: [Deprecated]: syz.1.178 (pid 6499) Use of int in max_burst socket option. [ 110.326495][ T6499] Use struct sctp_assoc_value instead [ 110.348082][ T6486] netem: unknown loss type 0 [ 110.353108][ T6486] netem: change failed [ 110.373707][ T10] IPVS: starting estimator thread 0... [ 110.397885][ T6498] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 110.492446][ T6505] IPVS: using max 24 ests per chain, 57600 per kthread [ 110.617112][ T6513] 8021q: VLANs not supported on ip6gre0 [ 110.629031][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 110.640016][ T6514] syz.3.184 uses obsolete (PF_INET,SOCK_PACKET) [ 110.658322][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 110.691084][ T6511] bridge0: port 2(bridge_slave_1) entered listening state [ 110.753266][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.803615][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.825136][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.857815][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.866142][ T6528] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 110.883463][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.893586][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.903903][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.924381][ T6528] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 110.949437][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 110.961104][ T6521] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 111.281451][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.303151][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.310515][ T6543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.788081][ T6577] trusted_key: syz.0.200 sent an empty control message without MSG_MORE. [ 111.967623][ T6571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.043714][ T6593] vlan2: entered allmulticast mode [ 112.055284][ T6593] gretap0: entered allmulticast mode [ 112.059028][ T6595] xt_TCPMSS: Only works on TCP SYN packets [ 112.346245][ T6606] vlan0: entered allmulticast mode [ 112.351535][ T6606] veth0_vlan: entered allmulticast mode [ 112.374129][ T6606] team0: Port device vlan0 added [ 112.496824][ T6609] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 112.664133][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.714732][ T6613] bond1: (slave geneve2): making interface the new active one [ 112.759125][ T6613] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.805626][ T6619] veth3: entered promiscuous mode [ 112.816240][ T6619] bond1: (slave veth3): Enslaving as an active interface with a down link [ 112.832684][ T6621] bond0: entered allmulticast mode [ 112.855818][ T6621] bond_slave_0: entered allmulticast mode [ 112.861912][ T6621] bond_slave_1: entered allmulticast mode [ 113.061500][ T6632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.348948][ T6640] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 113.743826][ T6672] __nla_validate_parse: 5 callbacks suppressed [ 113.743846][ T6672] netlink: 84 bytes leftover after parsing attributes in process `syz.2.225'. [ 113.846580][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 113.855864][ T6674] tipc: Started in network mode [ 113.867661][ T6674] tipc: Node identity 0eaa84b2b226, cluster identity 4711 [ 113.877016][ T6674] tipc: Enabled bearer , priority 0 [ 113.946986][ T6677] syzkaller0: entered promiscuous mode [ 113.954090][ T6677] syzkaller0: entered allmulticast mode [ 113.960470][ T6677] tipc: Resetting bearer [ 113.981465][ T6673] tipc: Resetting bearer [ 114.536516][ T6684] netlink: 72 bytes leftover after parsing attributes in process `syz.0.229'. [ 114.968575][ T978] tipc: Node number set to 3163325618 [ 115.070821][ T6673] tipc: Disabling bearer [ 115.081380][ T6679] netlink: 64 bytes leftover after parsing attributes in process `syz.2.228'. [ 115.090615][ T6679] netlink: 64 bytes leftover after parsing attributes in process `syz.2.228'. [ 115.276772][ T6693] syzkaller1: entered promiscuous mode [ 115.282560][ T6693] syzkaller1: entered allmulticast mode [ 115.292590][ T6693] tipc: Started in network mode [ 115.301996][ T6693] tipc: Node identity 4, cluster identity 4711 [ 115.309822][ T6693] tipc: Node number set to 4 [ 115.630077][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 115.909750][ T6733] vxcan1: tx address claim with dlc 0 [ 116.433678][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.436377][ T6761] x_tables: duplicate underflow at hook 3 [ 116.450392][ T6761] validate_nla: 59 callbacks suppressed [ 116.450412][ T6761] netlink: 'syz.0.254': attribute type 33 has an invalid length. [ 116.501067][ T6760] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 116.523262][ T6764] x_tables: duplicate underflow at hook 1 [ 116.542404][ T6760] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 116.966788][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 116.976002][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 116.985044][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 117.114177][ T6798] x_tables: ip_tables: osf match: only valid for protocol 6 [ 117.178394][ T6803] Bluetooth: MGMT ver 1.23 [ 118.447802][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.459078][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.481246][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.507763][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.016475][ T6854] __nla_validate_parse: 2 callbacks suppressed [ 119.016495][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 119.040787][ T6850] bond0: entered promiscuous mode [ 119.050387][ T6850] bond_slave_0: entered promiscuous mode [ 119.056310][ T6850] bond_slave_1: entered promiscuous mode [ 119.069572][ T6850] batadv0: entered promiscuous mode [ 119.084599][ T6850] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 119.105509][ T6850] Cannot create hsr debugfs directory [ 119.105599][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 119.111868][ T6850] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.138459][ T6859] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20000 [ 119.146434][ T6850] bond0: left promiscuous mode [ 119.163844][ T6850] bond_slave_0: left promiscuous mode [ 119.173706][ T6850] bond_slave_1: left promiscuous mode [ 119.183039][ T6858] netlink: 'syz.2.283': attribute type 13 has an invalid length. [ 119.199026][ T6850] batadv0: left promiscuous mode [ 119.204694][ T6858] netlink: 'syz.2.283': attribute type 17 has an invalid length. [ 119.244893][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 119.407221][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.440222][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.459566][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.693940][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 119.713180][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.722420][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.888707][ T6887] sctp: failed to load transform for md5: -2 [ 119.964011][ T6897] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 120.089805][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'. [ 120.226486][ T6905] netlink: 'syz.3.298': attribute type 13 has an invalid length. [ 120.244516][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 120.259414][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 120.312440][ T6907] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 120.321470][ T6907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.299'. [ 120.372839][ T6907] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 120.383577][ T6907] team0: Failed to send options change via netlink (err -105) [ 120.408096][ T6907] team0: Port device geneve0 added [ 120.426208][ T6914] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 120.805728][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 120.888482][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 121.109734][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.109734][ T6954] Use struct sctp_sack_info instead [ 121.187750][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.187750][ T6954] Use struct sctp_sack_info instead [ 121.204663][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.204663][ T6954] Use struct sctp_sack_info instead [ 121.221400][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.221400][ T6954] Use struct sctp_sack_info instead [ 121.238051][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.238051][ T6954] Use struct sctp_sack_info instead [ 121.256262][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.256262][ T6954] Use struct sctp_sack_info instead [ 121.272899][ T6954] sctp: [Deprecated]: syz.4.312 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.272899][ T6954] Use struct sctp_sack_info instead [ 123.192596][ T7054] netlink: 'syz.2.343': attribute type 142 has an invalid length. [ 123.722918][ T7084] netlink: 'syz.3.354': attribute type 4 has an invalid length. [ 124.153138][ T7109] __nla_validate_parse: 5 callbacks suppressed [ 124.153158][ T7109] netlink: 168 bytes leftover after parsing attributes in process `syz.4.365'. [ 124.155007][ T7106] bridge1: entered promiscuous mode [ 124.187796][ T7109] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.199743][ T7106] bridge1: entered allmulticast mode [ 124.203741][ T7111] netlink: 'syz.3.367': attribute type 11 has an invalid length. [ 124.229594][ T7109] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.365'. [ 124.268810][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.279861][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.289169][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.307615][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.317009][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.344425][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.366235][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.384496][ T7115] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 124.420168][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 124.484073][ T7123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.491464][ T7123] IPv6: NLM_F_CREATE should be set when creating new route [ 124.712886][ T7133] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.756415][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.4.374'. [ 124.790123][ T7139] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 124.854486][ T7147] set match dimension is over the limit! [ 125.058412][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 125.166895][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 125.189586][ T7171] netlink: 232 bytes leftover after parsing attributes in process `syz.0.386'. [ 125.732390][ T7192] netlink: 84 bytes leftover after parsing attributes in process `syz.3.389'. [ 125.755705][ T7192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.389'. [ 125.886430][ T7196] netlink: 13 bytes leftover after parsing attributes in process `syz.4.391'. [ 126.664218][ T7247] sock: sock_timestamping_bind_phc: sock not bind to device [ 126.762550][ T7253] unsupported nlmsg_type 40 [ 127.327261][ T7277] team0: Device hsr_slave_0 failed to register rx_handler [ 127.907827][ T7311] tipc: Trying to set illegal importance in message [ 127.921176][ T7314] tipc: Trying to set illegal importance in message [ 127.986689][ T7316] : entered promiscuous mode [ 127.999413][ T7319] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 128.225000][ T7330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 128.474260][ T7355] validate_nla: 50 callbacks suppressed [ 128.474275][ T7355] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 128.821232][ T7378] veth3: entered promiscuous mode [ 128.994436][ T7386] netlink: 'syz.0.452': attribute type 13 has an invalid length. [ 129.231204][ T7395] __nla_validate_parse: 16 callbacks suppressed [ 129.231225][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 129.354740][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'. [ 129.385763][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 129.750339][ T7430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.863244][ T7444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.469'. [ 129.874701][ T7430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.893625][ T7444] xt_connbytes: Forcing CT accounting to be enabled [ 129.900471][ T7444] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.062332][ T7430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.147033][ T7430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.303972][ T7430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.338359][ T7430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.402657][ T7463] can: request_module (can-proto-4) failed. [ 130.403350][ T7430] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.435601][ T7430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.627829][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.478'. [ 130.744136][ T7489] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 130.767579][ T7489] netlink: 'syz.1.481': attribute type 2 has an invalid length. [ 130.815208][ T7489] xt_limit: Overflow, try lower: 0/0 [ 131.040185][ T7506] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.048919][ T7506] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.057152][ T7506] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.066020][ T7506] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.084941][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 131.153787][ T7509] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.380728][ T7530] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 131.403931][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.495'. [ 131.463673][ T7530] team0: Port device geneve0 added [ 131.809543][ T7556] x_tables: duplicate underflow at hook 2 [ 131.897763][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.507'. [ 132.065088][ T7574] sctp: [Deprecated]: syz.1.508 (pid 7574) Use of int in max_burst socket option deprecated. [ 132.065088][ T7574] Use struct sctp_assoc_value instead [ 132.172860][ T7574] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 132.245540][ T7574] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 132.459090][ T7587] netlink: 'syz.0.514': attribute type 33 has an invalid length. [ 132.568289][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'. [ 132.622181][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 132.651799][ T7595] sctp: [Deprecated]: syz.3.518 (pid 7595) Use of int in maxseg socket option. [ 132.651799][ T7595] Use struct sctp_assoc_value instead [ 132.852006][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858888][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.932619][ T7607] geneve2: entered promiscuous mode [ 133.117885][ T7624] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 133.565555][ T7655] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.362124][ T7705] __nla_validate_parse: 35 callbacks suppressed [ 134.362144][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 134.481452][ T7715] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 134.674735][ T7733] bridge0: port 3(macsec1) entered blocking state [ 134.681857][ T7733] bridge0: port 3(macsec1) entered disabled state [ 134.692452][ T7733] macsec1: entered allmulticast mode [ 134.699593][ T7733] bridge1: entered allmulticast mode [ 134.709402][ T7733] macsec1: entered promiscuous mode [ 134.714868][ T7733] bridge1: entered promiscuous mode [ 134.752488][ T7733] bridge0: port 3(macsec1) entered blocking state [ 134.759215][ T7733] bridge0: port 3(macsec1) entered forwarding state [ 135.191182][ T7770] C: renamed from lo (while UP) [ 135.203899][ T7769] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 135.311602][ T7777] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.631977][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'. [ 135.651143][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 135.670810][ T7803] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 135.693651][ T7800] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 135.772360][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 135.792560][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 135.934474][ T7821] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 135.952096][ T7821] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 135.981264][ T7825] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 135.998560][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 136.011173][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 136.023799][ T7826] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 136.033472][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.046048][ T7825] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 136.201767][ T7834] netlink: 'syz.1.584': attribute type 11 has an invalid length. [ 136.261721][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 136.789353][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 136.798580][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 136.903904][ T7872] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 136.926249][ T7872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.376842][ T7902] netlink: 'syz.2.606': attribute type 11 has an invalid length. [ 137.406282][ T7902] netlink: 'syz.2.606': attribute type 11 has an invalid length. [ 137.605544][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.154806][ T7956] x_tables: ip_tables: osf match: only valid for protocol 6 [ 138.566143][ T7983] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 138.627819][ T7989] vlan0: entered promiscuous mode [ 138.638153][ T7989] vlan0: entered allmulticast mode [ 138.648692][ T7989] hsr_slave_1: entered allmulticast mode [ 138.978368][ T8010] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 139.016841][ T8010] netlink: 'syz.2.640': attribute type 3 has an invalid length. [ 139.201830][ T8020] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 139.257179][ T8027] netlink: 'syz.1.646': attribute type 3 has an invalid length. [ 139.442089][ T8033] __nla_validate_parse: 15 callbacks suppressed [ 139.442109][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 139.466215][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.650'. [ 139.608045][ T8048] nbd: must specify a size in bytes for the device [ 139.666346][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'. [ 139.760649][ T8061] TCP: TCP_TX_DELAY enabled [ 139.981073][ T8075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.660'. [ 139.988133][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 140.133910][ T8084] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 140.189351][ T8084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.290614][ T8098] veth5: entered promiscuous mode [ 140.301395][ T8098] bond2: (slave veth5): Enslaving as an active interface with a down link [ 140.321036][ T8098] vlan4: entered allmulticast mode [ 140.326233][ T8098] bond2: entered allmulticast mode [ 140.333815][ T8098] bond2: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 140.373126][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 140.643985][ T8120] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 140.953474][ T8133] xt_hashlimit: invalid rate [ 141.132362][ T8138] xfrm0: entered promiscuous mode [ 141.144044][ T8138] xfrm0: entered allmulticast mode [ 141.409429][ T8157] sctp: [Deprecated]: syz.1.685 (pid 8157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.409429][ T8157] Use struct sctp_sack_info instead [ 141.446830][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 141.507350][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 141.937034][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 141.960206][ T8192] netlink: 92 bytes leftover after parsing attributes in process `syz.3.699'. [ 142.295147][ T8208] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20001 [ 142.700025][ T8227] netlink: 'syz.0.713': attribute type 12 has an invalid length. [ 142.830940][ T8236] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.596328][ T8287] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 144.187058][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd02800: rx timeout, send abort [ 144.686256][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd02c00: rx timeout, send abort [ 144.696174][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd02800: abort rx timeout. Force session deactivation [ 145.194637][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dd02c00: abort rx timeout. Force session deactivation [ 145.253543][ T8307] IPv6: Can't replace route, no match found [ 145.491125][ T8338] syzkaller0: entered promiscuous mode [ 145.515315][ T8338] syzkaller0: entered allmulticast mode [ 145.558018][ T8337] tipc: Enabled bearer , priority 0 [ 145.560297][ T8340] openvswitch: netlink: Missing key (keys=40, expected=100) [ 145.620645][ T8348] netlink: 'syz.4.746': attribute type 2 has an invalid length. [ 145.663011][ T8347] gre1: entered promiscuous mode [ 145.671346][ T8347] gre1: entered allmulticast mode [ 145.702809][ T8337] tipc: Resetting bearer [ 145.753811][ T8337] tipc: Disabling bearer [ 146.043490][ T8363] __nla_validate_parse: 7 callbacks suppressed [ 146.043513][ T8363] netlink: 9 bytes leftover after parsing attributes in process `syz.1.753'. [ 146.113117][ T8363] 0·: renamed from hsr_slave_1 (while UP) [ 146.136852][ T8363] 0·: entered allmulticast mode [ 146.174240][ T8363] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 146.615470][ T8388] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 147.320744][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.367837][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.416321][ T8428] macvlan3: entered promiscuous mode [ 147.425001][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.449443][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.460531][ T8428] macvlan3: entered allmulticast mode [ 147.531684][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.543782][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.571522][ T8436] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 147.603460][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.649422][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.701959][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.793395][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.841328][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 147.855488][ T8444] netlink: 'syz.3.778': attribute type 11 has an invalid length. [ 147.859297][ T8442] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 147.874201][ T8442] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 147.885007][ T8445] tipc: Enabling of bearer rejected, failed to enable media [ 147.895303][ T8447] netlink: 'syz.0.779': attribute type 21 has an invalid length. [ 147.917795][ T8447] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 147.927370][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.943879][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.985116][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.022345][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.022345][ T8422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.064242][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.147759][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.147947][ T8422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.249823][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.261618][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 148.287180][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.305544][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.331035][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.348611][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.366348][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.382136][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.394365][ T8467] netlink: 128 bytes leftover after parsing attributes in process `syz.3.785'. [ 148.396027][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.418990][ T8467] netlink: 128 bytes leftover after parsing attributes in process `syz.3.785'. [ 148.449077][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.476743][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.511492][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.523579][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.543175][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.559007][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.592111][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.624354][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.817186][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.788'. [ 148.841704][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 148.843193][ T8475] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 148.885059][ T8475] netlink: 'syz.4.788': attribute type 2 has an invalid length. [ 148.925250][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 148.962155][ T8475] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.260315][ T8487] xt_CT: No such helper "snmp_trap" [ 149.338501][ T8500] netlink: 224 bytes leftover after parsing attributes in process `syz.3.796'. [ 149.756137][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 150.166778][ T8543] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 151.177771][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.198209][ T8573] batadv_slave_0: entered promiscuous mode [ 151.358434][ T8581] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 151.860748][ T8610] nbd: must specify a device to reconfigure [ 152.238624][ T8632] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 152.246449][ T8632] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 152.478325][ T8642] GUP no longer grows the stack in syz.1.843 (8642): 200000006000-20000000a000 (200000005000) [ 152.506070][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.1.843 Not tainted 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 PREEMPT(full) [ 152.506102][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.506120][ T8642] Call Trace: [ 152.506136][ T8642] [ 152.506146][ T8642] dump_stack_lvl+0x189/0x250 [ 152.506195][ T8642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.506229][ T8642] ? __pfx__printk+0x10/0x10 [ 152.506249][ T8642] ? find_vma+0xe7/0x160 [ 152.506292][ T8642] __get_user_pages+0x24e4/0x2a40 [ 152.506353][ T8642] ? __pfx___get_user_pages+0x10/0x10 [ 152.506380][ T8642] ? __gup_longterm_locked+0xbf7/0x15b0 [ 152.506408][ T8642] ? down_read_killable+0x1d1/0x350 [ 152.506440][ T8642] ? try_get_folio+0x633/0x660 [ 152.506473][ T8642] __gup_longterm_locked+0xd66/0x15b0 [ 152.506506][ T8642] ? try_grab_folio_fast+0x19a/0x4d0 [ 152.506553][ T8642] ? gup_fast_fallback+0x1672/0x1d60 [ 152.506584][ T8642] gup_fast_fallback+0x1843/0x1d60 [ 152.506651][ T8642] ? __pfx_gup_fast_fallback+0x10/0x10 [ 152.506676][ T8642] ? __mutex_lock+0x330/0xe80 [ 152.506710][ T8642] ? is_valid_gup_args+0x11f/0x200 [ 152.506739][ T8642] ? get_user_pages_fast+0x4d/0xb0 [ 152.506770][ T8642] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 152.506818][ T8642] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 152.506849][ T8642] ? wait_for_space+0x24d/0x2d0 [ 152.506880][ T8642] iov_iter_get_pages2+0x5e/0xa0 [ 152.506917][ T8642] __se_sys_vmsplice+0x548/0x10e0 [ 152.506968][ T8642] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 152.506999][ T8642] ? __pfx_futex_wake+0x10/0x10 [ 152.507035][ T8642] ? __lock_acquire+0xaac/0xd20 [ 152.507110][ T8642] ? rcu_is_watching+0x15/0xb0 [ 152.507140][ T8642] ? do_syscall_64+0xba/0x210 [ 152.507174][ T8642] do_syscall_64+0xf6/0x210 [ 152.507204][ T8642] ? clear_bhb_loop+0x60/0xb0 [ 152.507231][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.507252][ T8642] RIP: 0033:0x7f33d6b8e969 [ 152.507282][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.507301][ T8642] RSP: 002b:00007f33d7969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 152.507324][ T8642] RAX: ffffffffffffffda RBX: 00007f33d6db5fa0 RCX: 00007f33d6b8e969 [ 152.507339][ T8642] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 152.507351][ T8642] RBP: 00007f33d6c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 152.507364][ T8642] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 152.507376][ T8642] R13: 0000000000000000 R14: 00007f33d6db5fa0 R15: 00007ffc78a99668 [ 152.507414][ T8642] [ 152.770106][ T8642] netlink: 'syz.1.843': attribute type 2 has an invalid length. [ 153.058390][ T8655] __nla_validate_parse: 2 callbacks suppressed [ 153.058410][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 153.218930][ T8653] syzkaller0: entered promiscuous mode [ 153.231418][ T8653] syzkaller0: entered allmulticast mode [ 153.249617][ T8649] netlink: 'syz.4.846': attribute type 12 has an invalid length. [ 153.257591][ T8649] netlink: 'syz.4.846': attribute type 29 has an invalid length. [ 153.279818][ T8649] netlink: 148 bytes leftover after parsing attributes in process `syz.4.846'. [ 153.302468][ T8649] netlink: 59 bytes leftover after parsing attributes in process `syz.4.846'. [ 153.336545][ T8653] lo speed is unknown, defaulting to 1000 [ 153.360884][ T8653] lo speed is unknown, defaulting to 1000 [ 153.374287][ T8653] lo speed is unknown, defaulting to 1000 [ 153.430558][ T8653] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.506492][ T8653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.536863][ T8670] tipc: Enabled bearer , priority 0 [ 153.545960][ T8670] syzkaller0: entered promiscuous mode [ 153.551622][ T8670] syzkaller0: entered allmulticast mode [ 153.568369][ T8670] tipc: Resetting bearer [ 153.585995][ T8675] netlink: 10 bytes leftover after parsing attributes in process `syz.3.854'. [ 153.623305][ T8668] tipc: Resetting bearer [ 153.651777][ T8668] tipc: Disabling bearer [ 153.671084][ T8653] lo speed is unknown, defaulting to 1000 [ 153.764021][ T8653] lo speed is unknown, defaulting to 1000 [ 153.779486][ T8653] lo speed is unknown, defaulting to 1000 [ 153.813874][ T8653] lo speed is unknown, defaulting to 1000 [ 153.829919][ T8653] lo speed is unknown, defaulting to 1000 [ 153.926000][ T8685] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 154.045802][ T55] Bluetooth: hci4: link tx timeout [ 154.052376][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.696706][ T5837] Bluetooth: hci4: link tx timeout [ 154.702824][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.130724][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 156.159729][ T8713] netlink: 'syz.4.864': attribute type 9 has an invalid length. [ 156.175304][ T8713] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.864'. [ 156.589402][ T8733] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.871'. [ 156.815643][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.845171][ T8750] xt_bpf: check failed: parse error [ 157.246763][ T8767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.481969][ T8776] bridge: RTM_NEWNEIGH with invalid ether address [ 157.805355][ T8782] syzkaller0: entered promiscuous mode [ 157.815445][ T8782] syzkaller0: entered allmulticast mode [ 159.566927][ T8811] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.657022][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 159.686812][ T8815] netlink: 72 bytes leftover after parsing attributes in process `syz.0.894'. [ 159.806226][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 159.860115][ T8828] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 160.273685][ T8856] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 160.289312][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 160.302724][ T8858] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 160.311510][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 160.321099][ T8857] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 160.330304][ T8857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.483140][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 160.493699][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 160.505926][ T8871] netlink: 156 bytes leftover after parsing attributes in process `syz.1.911'. [ 160.516312][ T8871] netlink: 156 bytes leftover after parsing attributes in process `syz.1.911'. [ 160.681220][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 161.086398][ T8909] netlink: 'syz.0.926': attribute type 10 has an invalid length. [ 161.129918][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.146900][ T8909] team0: Port device bond0 added [ 161.223246][ T8914] ip6gre1: entered allmulticast mode [ 161.346678][ T8920] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.389188][ T8920] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.428656][ T8928] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.451683][ T8933] sctp: [Deprecated]: syz.1.936 (pid 8933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.451683][ T8933] Use struct sctp_sack_info instead [ 161.495172][ T8931] netlink: 'syz.0.935': attribute type 2 has an invalid length. [ 161.521354][ T8931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.739406][ T8942] netlink: 'syz.4.941': attribute type 9 has an invalid length. [ 161.864804][ T8954] openvswitch: netlink: Missing key (keys=40, expected=80) [ 162.491637][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.551030][ T8998] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 163.054233][ T9026] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 163.063831][ T9026] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 163.113946][ T9033] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 163.293757][ T9046] veth0_to_hsr: entered promiscuous mode [ 163.582055][ T9044] veth0_to_hsr: left promiscuous mode [ 163.659709][ T9066] : entered promiscuous mode [ 163.817115][ T9078] Bluetooth: MGMT ver 1.23 [ 165.217237][ T9122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.231567][ T9122] __nla_validate_parse: 18 callbacks suppressed [ 165.231587][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1001'. [ 165.270606][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'. [ 165.524683][ T9140] netlink: 'syz.4.1007': attribute type 39 has an invalid length. [ 165.595060][ T9142] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1009'. [ 165.786459][ T9154] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1011'. [ 165.878063][ T9157] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.032201][ T9166] No such timeout policy "syz0" [ 166.115658][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 166.144959][ T9170] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 166.180927][ T9172] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 166.279524][ T9174] lo speed is unknown, defaulting to 1000 [ 166.496295][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1022'. [ 166.605335][ T9184] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 166.655596][ T9189] syzkaller1: entered promiscuous mode [ 166.691156][ T9189] syzkaller1: entered allmulticast mode [ 166.926662][ T9186] veth9: entered promiscuous mode [ 166.942653][ T9195] erspan0: entered allmulticast mode [ 167.078690][ T9212] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 167.104221][ T9212] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1027'. [ 167.134675][ T9214] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1028'. [ 167.310607][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1030'. [ 167.355090][ T9230] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1031'. [ 168.200934][ T9275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.962824][ T9317] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 169.683492][ T9371] sctp: [Deprecated]: syz.4.1069 (pid 9371) Use of int in maxseg socket option. [ 169.683492][ T9371] Use struct sctp_assoc_value instead [ 169.726052][ T9372] [H: renamed from veth0_vlan (while UP) [ 170.291480][ T9399] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 170.301983][ T9399] __nla_validate_parse: 38 callbacks suppressed [ 170.302000][ T9399] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1078'. [ 170.423768][ T9404] netlink: 'syz.4.1080': attribute type 7 has an invalid length. [ 170.432504][ T9404] netlink: 'syz.4.1080': attribute type 8 has an invalid length. [ 170.558442][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.565667][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.860702][ T9421] pim6reg1: entered promiscuous mode [ 170.866085][ T9421] pim6reg1: entered allmulticast mode [ 171.003632][ T9427] pim6reg1: entered promiscuous mode [ 171.017543][ T9427] pim6reg1: entered allmulticast mode [ 171.753489][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 172.906738][ T9461] lo speed is unknown, defaulting to 1000 [ 174.543541][ T9487] lo speed is unknown, defaulting to 1000 [ 174.694117][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 174.736037][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 174.988471][ T9510] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.441120][ T9530] lo speed is unknown, defaulting to 1000 [ 175.678535][ T9548] tipc: New replicast peer: 10.1.1.2 [ 175.702429][ T9548] tipc: Enabled bearer , priority 10 [ 175.966530][ T9556] pim6reg1: entered promiscuous mode [ 175.981093][ T9556] pim6reg1: entered allmulticast mode [ 176.168942][ T9562] xt_hashlimit: size too large, truncated to 1048576 [ 177.619350][ T9630] pim6reg1: entered promiscuous mode [ 177.628749][ T9630] pim6reg1: entered allmulticast mode [ 177.686226][ T9634] veth1_macvtap: left promiscuous mode [ 177.695691][ T9634] macsec0: entered promiscuous mode [ 178.062979][ T9654] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1191'. [ 178.251692][ T9663] pim6reg1: entered promiscuous mode [ 178.257183][ T9663] pim6reg1: entered allmulticast mode [ 178.675847][ T9679] bridge0: entered promiscuous mode [ 178.682117][ T9679] bridge0: entered allmulticast mode [ 178.778062][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.785045][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.236896][ T9707] xt_hashlimit: max too large, truncated to 1048576 [ 181.190241][ T9742] wg2: entered promiscuous mode [ 181.195196][ T9742] wg2: entered allmulticast mode [ 181.237038][ T9761] pim6reg1: entered promiscuous mode [ 181.268007][ T9761] pim6reg1: entered allmulticast mode [ 181.537216][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 181.782083][ T9789] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 181.915577][ T9799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1257'. [ 181.945706][ T9799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1257'. [ 182.027813][ T9806] netlink: 952 bytes leftover after parsing attributes in process `syz.1.1259'. [ 182.290324][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 182.789242][ T9850] dummy0: entered promiscuous mode [ 182.795667][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 182.864879][ T9850] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 182.889102][ T9850] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9850, name: syz.1.1282 [ 182.900433][ T9850] preempt_count: 0, expected: 0 [ 182.910545][ T9850] RCU nest depth: 1, expected: 0 [ 182.924936][ T9850] 2 locks held by syz.1.1282/9850: [ 182.932572][ T9850] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 182.942152][ T9850] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60 [ 182.951958][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.1.1282 Not tainted 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 PREEMPT(full) [ 182.951987][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.952000][ T9850] Call Trace: [ 182.952009][ T9850] [ 182.952018][ T9850] dump_stack_lvl+0x189/0x250 [ 182.952059][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.952100][ T9850] ? print_lock_name+0xde/0x100 [ 182.952143][ T9850] __might_resched+0x495/0x610 [ 182.952170][ T9850] ? __virt_addr_valid+0x185/0x540 [ 182.952205][ T9850] ? __pfx___might_resched+0x10/0x10 [ 182.952231][ T9850] ? call_rcu+0x6dd/0x990 [ 182.952251][ T9850] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.952288][ T9850] __mutex_lock+0x106/0xe80 [ 182.952321][ T9850] ? __pfx_call_rcu+0x10/0x10 [ 182.952346][ T9850] ? dev_set_promiscuity+0x10e/0x260 [ 182.952378][ T9850] ? __pfx___mutex_lock+0x10/0x10 [ 182.952406][ T9850] ? __lock_acquire+0xaac/0xd20 [ 182.952448][ T9850] ? packet_notifier+0x78/0xa60 [ 182.952474][ T9850] ? __pfx_addrconf_ifdown+0x10/0x10 [ 182.952499][ T9850] dev_set_promiscuity+0x10e/0x260 [ 182.952533][ T9850] packet_notifier+0x292/0xa60 [ 182.952562][ T9850] ? packet_notifier+0x78/0xa60 [ 182.952589][ T9850] notifier_call_chain+0x1b3/0x3e0 [ 182.952620][ T9850] unregister_netdevice_many_notify+0x15d8/0x2330 [ 182.952658][ T9850] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 182.952695][ T9850] ? rtnl_dellink+0x331/0x710 [ 182.952727][ T9850] ? unregister_netdevice_queue+0x1b3/0x380 [ 182.952769][ T9850] ? __nla_parse+0x40/0x60 [ 182.952808][ T9850] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 182.952840][ T9850] rtnl_dellink+0x488/0x710 [ 182.952872][ T9850] ? __pfx_rtnl_dellink+0x10/0x10 [ 182.953009][ T9850] ? __pfx_rtnl_dellink+0x10/0x10 [ 182.953032][ T9850] rtnetlink_rcv_msg+0x7cf/0xb70 [ 182.953061][ T9850] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 182.953084][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.953113][ T9850] ? ref_tracker_free+0x63a/0x7d0 [ 182.953135][ T9850] ? __copy_skb_header+0xa7/0x550 [ 182.953177][ T9850] netlink_rcv_skb+0x219/0x490 [ 182.953203][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.953230][ T9850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.953278][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.953303][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.953335][ T9850] netlink_unicast+0x75b/0x8d0 [ 182.953369][ T9850] netlink_sendmsg+0x805/0xb30 [ 182.953407][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.953438][ T9850] ? aa_sock_msg_perm+0x94/0x160 [ 182.953465][ T9850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.953490][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.953509][ T9850] __sock_sendmsg+0x219/0x270 [ 182.953527][ T9850] ____sys_sendmsg+0x505/0x830 [ 182.953554][ T9850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.953584][ T9850] ? import_iovec+0x74/0xa0 [ 182.953609][ T9850] ___sys_sendmsg+0x21f/0x2a0 [ 182.953632][ T9850] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.953683][ T9850] ? __fget_files+0x2a/0x420 [ 182.953703][ T9850] ? __fget_files+0x3a0/0x420 [ 182.953732][ T9850] __x64_sys_sendmsg+0x19b/0x260 [ 182.953755][ T9850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.953791][ T9850] ? do_syscall_64+0xba/0x210 [ 182.953821][ T9850] do_syscall_64+0xf6/0x210 [ 182.953842][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 182.953862][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.953876][ T9850] RIP: 0033:0x7f33d6b8e969 [ 182.953890][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.953903][ T9850] RSP: 002b:00007f33d7969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.953919][ T9850] RAX: ffffffffffffffda RBX: 00007f33d6db5fa0 RCX: 00007f33d6b8e969 [ 182.953930][ T9850] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 182.953940][ T9850] RBP: 00007f33d6c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 182.953949][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.953957][ T9850] R13: 0000000000000000 R14: 00007f33d6db5fa0 R15: 00007ffc78a99668 [ 182.953981][ T9850] [ 182.954031][ T9850] [ 183.352472][ T9850] ============================= [ 183.357330][ T9850] [ BUG: Invalid wait context ] [ 183.362182][ T9850] 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 Tainted: G W [ 183.370852][ T9850] ----------------------------- [ 183.375694][ T9850] syz.1.1282/9850 is trying to lock: [ 183.380977][ T9850] ffff88807b49cd30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 183.391362][ T9850] other info that might help us debug this: [ 183.397250][ T9850] context-{5:5} [ 183.400710][ T9850] 2 locks held by syz.1.1282/9850: [ 183.405825][ T9850] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 183.414816][ T9850] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60 [ 183.424241][ T9850] stack backtrace: [ 183.427972][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.1.1282 Tainted: G W 6.15.0-rc6-syzkaller-00183-gb95ed5517354 #0 PREEMPT(full) [ 183.427997][ T9850] Tainted: [W]=WARN [ 183.428003][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.428015][ T9850] Call Trace: [ 183.428022][ T9850] [ 183.428030][ T9850] dump_stack_lvl+0x189/0x250 [ 183.428061][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.428086][ T9850] ? __pfx__printk+0x10/0x10 [ 183.428104][ T9850] ? print_lock_name+0xde/0x100 [ 183.428134][ T9850] __lock_acquire+0xbcf/0xd20 [ 183.428162][ T9850] ? dev_set_promiscuity+0x10e/0x260 [ 183.428185][ T9850] lock_acquire+0x120/0x360 [ 183.428209][ T9850] ? dev_set_promiscuity+0x10e/0x260 [ 183.428232][ T9850] ? call_rcu+0x6dd/0x990 [ 183.428252][ T9850] __mutex_lock+0x182/0xe80 [ 183.428275][ T9850] ? dev_set_promiscuity+0x10e/0x260 [ 183.428298][ T9850] ? __pfx_call_rcu+0x10/0x10 [ 183.428315][ T9850] ? dev_set_promiscuity+0x10e/0x260 [ 183.428338][ T9850] ? __pfx___mutex_lock+0x10/0x10 [ 183.428361][ T9850] ? __lock_acquire+0xaac/0xd20 [ 183.428390][ T9850] ? packet_notifier+0x78/0xa60 [ 183.428410][ T9850] ? __pfx_addrconf_ifdown+0x10/0x10 [ 183.428429][ T9850] dev_set_promiscuity+0x10e/0x260 [ 183.428453][ T9850] packet_notifier+0x292/0xa60 [ 183.428474][ T9850] ? packet_notifier+0x78/0xa60 [ 183.428495][ T9850] notifier_call_chain+0x1b3/0x3e0 [ 183.428517][ T9850] unregister_netdevice_many_notify+0x15d8/0x2330 [ 183.428540][ T9850] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 183.428570][ T9850] ? rtnl_dellink+0x331/0x710 [ 183.428592][ T9850] ? unregister_netdevice_queue+0x1b3/0x380 [ 183.428623][ T9850] ? __nla_parse+0x40/0x60 [ 183.428645][ T9850] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 183.428671][ T9850] rtnl_dellink+0x488/0x710 [ 183.428693][ T9850] ? __pfx_rtnl_dellink+0x10/0x10 [ 183.428757][ T9850] ? __pfx_rtnl_dellink+0x10/0x10 [ 183.428776][ T9850] rtnetlink_rcv_msg+0x7cf/0xb70 [ 183.428797][ T9850] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 183.428815][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.428836][ T9850] ? ref_tracker_free+0x63a/0x7d0 [ 183.428855][ T9850] ? __copy_skb_header+0xa7/0x550 [ 183.428884][ T9850] netlink_rcv_skb+0x219/0x490 [ 183.428905][ T9850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.428925][ T9850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.428953][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.428973][ T9850] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.428995][ T9850] netlink_unicast+0x75b/0x8d0 [ 183.429017][ T9850] netlink_sendmsg+0x805/0xb30 [ 183.429042][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.429064][ T9850] ? aa_sock_msg_perm+0x94/0x160 [ 183.429084][ T9850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.429104][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.429125][ T9850] __sock_sendmsg+0x219/0x270 [ 183.429144][ T9850] ____sys_sendmsg+0x505/0x830 [ 183.429170][ T9850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.429198][ T9850] ? import_iovec+0x74/0xa0 [ 183.429224][ T9850] ___sys_sendmsg+0x21f/0x2a0 [ 183.429256][ T9850] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.429296][ T9850] ? __fget_files+0x2a/0x420 [ 183.429319][ T9850] ? __fget_files+0x3a0/0x420 [ 183.429347][ T9850] __x64_sys_sendmsg+0x19b/0x260 [ 183.429373][ T9850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.429405][ T9850] ? do_syscall_64+0xba/0x210 [ 183.429431][ T9850] do_syscall_64+0xf6/0x210 [ 183.429454][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 183.429474][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.429492][ T9850] RIP: 0033:0x7f33d6b8e969 [ 183.429508][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.429523][ T9850] RSP: 002b:00007f33d7969038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.429542][ T9850] RAX: ffffffffffffffda RBX: 00007f33d6db5fa0 RCX: 00007f33d6b8e969 [ 183.429555][ T9850] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 183.429566][ T9850] RBP: 00007f33d6c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 183.429577][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.429587][ T9850] R13: 0000000000000000 R14: 00007f33d6db5fa0 R15: 00007ffc78a99668 [ 183.429607][ T9850] [ 183.855992][ T9850] dummy0 (unregistering): left promiscuous mode