last executing test programs: 4.532015411s ago: executing program 2 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) (async) 4.531647821s ago: executing program 1 (id=1717): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) 4.33105955s ago: executing program 2 (id=1720): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.220500096s ago: executing program 2 (id=1722): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='bbr', 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xf) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 4.160097645s ago: executing program 1 (id=1724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000800fbff0000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x50) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000800fbff0000000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x50) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) (async) 4.15974453s ago: executing program 3 (id=1725): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 3.773207811s ago: executing program 1 (id=1726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x17, 0x1, 0x70bd28, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000000000a00000005"], 0x1c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) 3.77279892s ago: executing program 2 (id=1727): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1000}) 3.772306407s ago: executing program 4 (id=1728): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x24, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x200, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffffc, 0xfffffffe, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) socket$nl_route(0x10, 0x3, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xfffff801}, &(0x7f0000000100)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000080) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x8, 0xf}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.727910496s ago: executing program 3 (id=1729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000396d8e92cd535c6a33a9fe9c7b38df48fe042d9c44308acc794f742b6b45c228cd10532d56bfb03bfc9c0749e3e7b43eaf163208fe1dbfa77699af5d878253c323f426c893f442c38e35699908c8de333943947e4998682c114c93bbefb9d92a8d20b400b07e504c24dcbc2c33fb2d23dbd045e3f177f2e162858010f35e87175d"], 0xb8}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x5e, 0x4f, 0xf5, 0x100, 0x40, @dev={0xfe, 0x80, '\x00', 0xd}, @mcast1, 0x10, 0x8000, 0x7ff, 0x2}}) (async) r6 = getuid() (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @broadcast, @private}, &(0x7f0000000600)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@getpolicy={0x13c8, 0x15, 0x200, 0x70bd2b, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@multicast1, 0x4e22, 0x3000, 0x4e27, 0x0, 0x2, 0x0, 0x20, 0x67, r3, r4}, 0x6e6bbf, 0x2}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cbc-blowfish-asm,blake2s-160)\x00'}}}, @algo_aead={0x104c, 0x12, {{'gcm(aes)\x00'}, 0x8000, 0xc0, "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"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e24, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x1, 0x4e21, 0x7f, 0xa, 0xa0, 0x80, 0x5e, r5, r6}, {@in6=@remote, 0x4d6, 0xd4}, @in=@rand_addr=0x64010102, {0x11, 0xff, 0x5, 0x2, 0xd, 0xfff, 0x1, 0xba1c}, {0x81, 0x6, 0x8, 0x80}, {0x4, 0xb6}, 0x70bd2c, 0x0, 0x2, 0x2, 0x4, 0x40}}, @algo_auth={0xf3, 0x1, {{'blake2s-128-x86\x00'}, 0x558, "07ab4474293bde6b897c5cb3ecddf1cf83a814105680bf32b3f6f06f1c2426abeeabc9e8510707a7c5ddaf6af10595a5468ca30d4b19f297591d78e0e38181d46a8d0c2f8c410ace3b6d9148176fe882199e69bb45743dc81a5922d814b444e024be1ed531657b5a2ff2998439a3106d46bbe5db23c2c554f02c466d5b1023b2bd6aef4b4828cc200bc446ece834a1df9f850156d6c1619cba8b3101a09685f4fcd1b56e1fd6819a14a62c"}}, @algo_auth_trunc={0xd6, 0x14, {{'md4-generic\x00'}, 0x450, 0xa0, "dd18943a1069104ecc9fc0b87d3b60d587334899ad482b97fcd8421ed4bf58102c7617264ab042d8cb6900a2f1cf69968e79982b5ddeac8f45b9ee4cc03e4395794963c6989009aae05817c37f1bd0a538b7f3755a6cdd720eddf2c0ae71698e9afc0b4df1eb41abeeb2b24d74340801b8e3402c1d12e5baec9806e5f1b8ac1c0e33545e4345a6ddeac8"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5b}, @offload={0xc, 0x1c, {r7, 0x2}}]}, 0x13c8}}, 0x0) (async) vmsplice(r1, &(0x7f0000001ac0)=[{&(0x7f0000000040)="83ae92360d627211749e902c26369c899f2a7126847a1f0eefb0d2ccb53430f1bec50dcb84924a62cc650c87588ef9715e4042dd48a06118dffc9ab66b2db85a26494c4acf8dd62b41c83141900f448a934348ce22e6d8", 0x57}, {&(0x7f0000001a40)="ea70226fddbfb1bb26d729d089c9755943db35350ead3ca179169b69eee9cf0ffd16d4853a2bdd0c9174ab9dcda2f9f47e4e56c6a041ff3fb2628a8cbbf27e72a9f85b7bc9200a8629d5ef26b9", 0x4d}], 0x2, 0x8) 3.571944736s ago: executing program 2 (id=1730): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, &(0x7f00000006c0), 0x0}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x4810) r6 = socket(0x11, 0x2, 0x10001) sendto(r6, 0x0, 0x0, 0x50, &(0x7f0000000180)=@qipcrtr={0x2a, 0x5, 0xfffffffe}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff3400048005000300010000000500030002000000050003000500000005000300050000000500030080ff00008a55049d4983a620080002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={0x318, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_LLC_SDP={0xe8, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x5, 0x1, '*'}, {0x4}, {0xa, 0x1, 'wlan0\x00'}, {0x9, 0x1, '\'\xb3:(\''}, {0xa, 0x1, 'team0\x00'}, {0xa, 0x1, 'wlan0\x00'}, {0x4}, {0x6, 0x1, '}\''}]}, {0x1c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '%(\xdf#.'}]}, {0x20, 0x0, 0x0, 0x1, [{0x1a, 0x1, 'mcast_rejoin_interval\x00'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xb, 0x1, ':})+(F$'}]}, {0x44, 0x0, 0x0, 0x1, [{0x6, 0x1, '{('}, {0x11, 0x1, ':@{^-!,\'%($^:'}, {0x4}, {0x5, 0x1, '&'}, {0x12, 0x1, 'bpf_hash_func\x00'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x204, 0x13, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xab-{]]'}, {0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, 'team\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '!(!*-'}, {0x12, 0x1, 'bpf_hash_func\x00'}, {0xd, 0x1, '))#)*$@(('}, {0x4}]}, {0x34, 0x0, 0x0, 0x1, [{0x12, 0x1, 'bpf_hash_func\x00'}, {0x11, 0x1, '}@\\+&L*)/)\'@$'}, {0x7, 0x1, '#\x1e#'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x28, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'team0\x00'}, {0x12, 0x1, 'bpf_hash_func\x00'}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, '+%$'}, {0x8, 0x1, '#@[%'}, {0xa, 0x1, '.]$\\\','}]}, {0x74, 0x0, 0x0, 0x1, [{0x9, 0x1, 'team\x00'}, {0x1a, 0x1, 'mcast_rejoin_interval\x00'}, {0x1a, 0x1, 'mcast_rejoin_interval\x00'}, {0x15, 0x1, '/)!:.:\x92]*&^:+.%)*'}, {0x12, 0x1, 'bpf_hash_func\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '\x00'}, {0xa, 0x1, 'team0\x00'}, {0xa, 0x1, '6+@#$*'}, {0x4}, {0xa, 0x1, 'team0\x00'}, {0x6, 0x1, '&$'}, {0xc, 0x1, 'batadv0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\'*&\xc2/\xa2'}, {0x4}, {0x7, 0x1, '{@@'}, {0xb, 0x1, 'N^!/&,!'}, {0x12, 0x1, 'bpf_hash_func\x00'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x318}, 0x1, 0x0, 0x0, 0x66d40874dabe920}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r17, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 3.571559266s ago: executing program 3 (id=1731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000910dc1d2390ad59404ed542a410bbd91103f000008ed70c0e80762a0993713ed93cba4e6f40000950000000000000087924c847a677703c84f4677b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc850}, 0x440c0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_LABELS_MASK={0xc, 0x17, [0x2, 0xfffffbff]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3.447732322s ago: executing program 0 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000200)=""/108, 0x6c, 0xff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00eeff0f00010400000000000000000000000053f4d23189a82574e094476eae785f052495f5ae44c4b9509d5edf33a100b1963628f983a5ee327451bc4ba6de683210b3eb9ed7df751bb329b155e542b7b44342e3", @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) 3.348032758s ago: executing program 1 (id=1733): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0xb, 0xd}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000580)={r5, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000400)=0x84) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25037c0000d07518110800023724d43f1b1e335c"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_genetlink_get_family_id$ethtool(0x0, r9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, 0x0, 0x40010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x9, 0x8, 0x58, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x40, 0x3ff, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.267562692s ago: executing program 4 (id=1734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)="59d8b8161168c72a4ca8a86ad56ab64f735fffdeea111a4b1237c331b430199151e031ef0650dd8fc0b7387e80e91f7c24ef1eda5a1f222b551849f5089de621b17bbd8085fdef45a74d8a29254026eaa24a2375469bb5f6e578759bdaa5ad5a8ab378f6da27017018bb8679a1bfddd4ddbb359af151689f67841b12df5b8886e8764adc7f79de875c9c77e052d57160b11ff44ad2a881ded4bff989612e042f4d5bccf1ec361167", 0xa8}, {&(0x7f0000000240)="93cd9f56517a1b4ba3859b1798bb70860d64a1dd0ccffce5cbaa8f5de3d92ceda208319a1b6efe6e7999c697f4cddfc0c65555e21b030e371623dc5a30a1f1e91de2e060049e86b7f605fa39973b5179ae65f1b382a105e779ff5e63f5975562339dfcae29d00a7d094832eff1b0", 0x6e}, {&(0x7f00000002c0)="3ac2a1bf6a6820110958e2ac8e214f0e4008846f6fca840d7957ca4011225f3bb5edd20aa3cc9b8a0f3c9f8feb20c0c359a16e5227e0a0922f53ed2b57e6567fc7d2090577aed938781392de06c9aa9c08553265e94eda9bdbe8a54088216638fb", 0x61}, {&(0x7f0000000340)="f5fe75046ae9f69ea67913e748946f68b23aeb479c404aa74e026963cba01ac31292a678c52d8b304ee630f186e570e42651f5579196895cdb1b4c752a2542041e83ba1d7a2560cc3a0033cbe8fd0eba1a2ef5d46aa03e4d3243c3ef4e8c253c43f2871a459ab908ee3ff970f5e26f0484b5f2e04b3d5fe90260d7291f9d3be4e3583e257701d1daeb66acefa14726a2bc42d486e89edaf0b0b444df29d80468fb0d6b150d73486ef24301f98d9b6c5d4c85e532056bc5c7213fd7678d5bf741bda657bd8bea98b827163b52786f78aee20e79d33e56b253ae5c49753abf49c72a", 0xe1}, {&(0x7f00000004c0)="faf77d39d4ff502bea7d217c64778cc44a935ea416cafa5fcc21e783461b3de0ebb97865f7c09fe7221aa28cd113d9cf238c144cb7ef6f1c842fb521e370ba71448c86f2f5d82b8ea4f18abd0d3607ec137b2371a9c3820b96343ffa989e48d07e9307a2186295ee3508fa1fc0541dac6fe2c5c851551212267083f630640a754d48279beaaa2316c4bfedd65c373d59c3c6788ec8e7c85a9ef911bc6051a7df165da5819b70f3a5c975efb6002efcc4c08f", 0xb2}, {&(0x7f00000006c0)="727311907f53f69fa20e7e154581b41d9e574d10c4f37366698704dba568154eb30a574f70b7706b849b090e609b66b90b5dba47ed6095c7759c5cb8c481d309a1c5a0432bf219b3c987", 0x4a}, {&(0x7f0000000740)="4c49a91190e771e8e81ad2a8e93fe4e9e82e73d4618bee8b3d8be48589961c2c3fedc565d93b685190564eca29b737b6fa898756fb55d5f42446596d9ee90bc31c006c77b3c9bef281dc028402eac431b8ddd94c58f361adf7026be76f80ffa65a2a3a53608b60c8992949723a24b923d38fc37f9a90149deaef1e3559879565806b42643c5ba696d936311caba6b598f0769d540deeb7df83006902b002864ef7c6", 0xa2}], 0x7, &(0x7f0000000880)=[{0x88, 0x10b, 0x8, "a0b9809de8e61eca0b7a0d3abb4b76e9215cd48d7e3e5c0e9f396d249476791e5493b3f7e18da5d935003665ee84cc9e95ae565447240039be753c265d64e7476d4a9ec790347c5783d143ee069a145e8a9f6d3ab69066e76aceae5c885070170c93fdfeeef0babf7651e3283dbef6b32c58db7275ce"}], 0x88}, 0x4040851) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 3.180879953s ago: executing program 4 (id=1735): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x66, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e21, 0xff, @remote, 0xe32c}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x8}, 0x8) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r3, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 3.127862655s ago: executing program 0 (id=1736): syz_emit_ethernet(0xa2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f000000000000000000000000000000020000080600074003040000280002800600034000020000060002400000000014000180041d0100ac1414aa080002007f000001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40100) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.011955046s ago: executing program 0 (id=1737): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000980)="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", 0x681}, {&(0x7f0000001980)="6bd049f55d8c", 0x6}, {&(0x7f0000000580)="ff79", 0x2}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)="64ac", 0x2}, {&(0x7f0000000180)="0f", 0x1}, {&(0x7f0000000380)='98', 0x2}], 0x9}}], 0x1, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket(0x24, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x8, 0x0, &(0x7f0000000140)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@mcast2, 0x46, r4}) 2.983775693s ago: executing program 0 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x6c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x2}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x55a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xff, 0x75, 0x18]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) (fail_nth: 6) 2.43751158s ago: executing program 3 (id=1739): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xfffffe10}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r5 = getuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$netlink(r2, &(0x7f0000000640)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="40010000180000012bbd7000fedbdf2508003b00", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1becff2434ae8e309bd5c23f04988cd159a81ac72a6dbd"], 0x140}, {&(0x7f0000000440)={0x200, 0x17, 0x400, 0x70bd29, 0x25dfdbff, "", [@typed={0x101, 0x2a, 0x0, 0x0, @binary="f85c932de6c93f68e434c00ed4f83a4842a80662c023456eb0c29dc59b72507479bca8d18b3823f856d2187a001de8daf973f2a8487968820bb13299f9a3f5d19d30c4f1e86254f774ceaf4ff8da8e18acfbe2e5dbe5f19654f61cce9921266616d501ceb111c1bade4cf1016418dbfc6b7b414384a7abf91a87431a777ba8ad08def485f3d978ce6a15c6def1963f1f1ff961bba85bc7e1a738fb896b87c140f615db7b549c30b786eb1a847922777843611159b8cf50e9f93cd30b778be617f7d42e9a3a6f31998ffc965690d4c4a5e816b9b39d0316ab0353ec8b792ef9e47c74767d47781fb59cc0d69690648de25a6ef5f97000d3ea35c42c7315"}, @nested={0xec, 0x6b, 0x0, 0x1, [@generic="ede9cbb6b3cc9c2410365adf51809d33beece4d10975adc3c76f14b6e6780e3aaa840531ca2d78fc14281fa41d8c2db1ff56e769f750d6e4dd9dc1e438f1e3f05108b49a6079c0527c2b4daa043e1867db249de29555b14fbc69be2d63bc5c8c8cdfb551b9ae474eb6688377a143e18a0135e272f66e6a82052516d7b48a0b9c702ba058e9f699600c3131a808006bd5f5c92a7ec0f037cbc2ac2c6af7845905221d8b081276e732422f53de695e303c5d18e26ff5a4e01d67446c68868fb3bf335caeca3f38cca8c2be8b37cd770df5857275768f04e7d52b1bbb11dd91caa2", @nested={0x4, 0x1e}, @nested={0x4, 0x62}]}]}, 0x200}, {&(0x7f0000000740)={0x104, 0x10, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x4, 0x27}, @generic="8c4ab5f8f45f432cb075bfcf2adc6a1cc55adc2f96fc9d6676a63592b11d2b6ff603edda229548b7c3b6b292bc0ced38466bb58e38ff263cd35fe5253e5b130fe0ae2ddd255a2127fe2f2aca765619daee8c7bce745b5c8a1e1ebc6b696012ca7e8d98e366bda495142072f51aba8a496e85281cd6afbbced057432abbd21ca7a89ec3bfeda1279f4444f11ee877b5e453f00dbdb54f31a176f4dfda70e624a10eef65830dd2ce36ae045cd31e2c519c9c3759a2e33debe71bb295968866a27e87e39cb8158c540ec1e3548429f3ac05e617e10768956433edaf9fff1c8dbb0df08f5f59b1d78a73e93eda1316126e26"]}, 0x104}, {&(0x7f0000000980)={0xf4, 0x27, 0x400, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0x8f, 0x0, 0x0, @u64=0xff}, @nested={0x92, 0x0, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="79697f2fe01d239325bc352b6bbe1220a5695bd2022282249694a5eb6005a52d30f95843726b41f993a908fb265ab27288150d414e3db08b62c58ac6560fac4aae80ecb66c37b696198a67353e8be06bb2ec98dc0b8f8666d501801b792d065496fd9f66362e1e67ca92509e40516683e8ea4d45f2eb49b7e6a4f08ea943f9d707ee", @typed={0x8, 0xc5, 0x0, 0x0, @uid=r7}]}, @generic="f5ff795915ef0c710be622b47e12e0bfd52db13419b924539e5b2ae0f109de1500e31e8a1d9bb6cdacac28d1d6d2e5c7d76603e9297b327395", @typed={0x8, 0xd0, 0x0, 0x0, @u32}]}, 0xf4}], 0x4, 0x0, 0x0, 0x2}, 0x44080) 339.246427ms ago: executing program 2 (id=1740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x7, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@default, @default}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 337.612643ms ago: executing program 3 (id=1741): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=@newtaction={0x14, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="07a6000000"], 0x158}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 335.273174ms ago: executing program 0 (id=1742): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000002", @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="0a00f500ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 334.757853ms ago: executing program 4 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080008400400000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 326.887438ms ago: executing program 1 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r0) 155.278267ms ago: executing program 4 (id=1745): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x6c}}, 0x40000c0) 154.908163ms ago: executing program 0 (id=1746): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) 138.50936ms ago: executing program 1 (id=1747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x205, 0x70bd27, 0xffff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe51b, 0x1}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000110) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x6c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x2}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x55a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xff, 0x75, 0x18]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40005}, 0x40840) 81.850362ms ago: executing program 3 (id=1748): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006301edff0000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=1749): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="e10931d8640aaaaaaaaaaa3986dd60ea0c0000188800fe880000000000000000000000000001fe8000000000000000000000000000aa2c00052166000000000000000010907802fc000100004000"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x1, 0x40000060, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8, 0x0, 0x0, 0x40, 0x4000000, 0xe, 0xab23}, 0x1c) kernel console output (not intermixed with test programs): luetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.632449][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.641514][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.647170][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.653782][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.660473][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.691670][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.699745][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.707995][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.715753][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.723815][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.749876][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.759022][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.386041][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 83.506076][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 83.521000][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 83.603731][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 83.638951][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.646648][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.654132][ T5833] bridge_slave_0: entered allmulticast mode [ 83.661890][ T5833] bridge_slave_0: entered promiscuous mode [ 83.685210][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.704286][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.711501][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.719013][ T5833] bridge_slave_1: entered allmulticast mode [ 83.726069][ T5833] bridge_slave_1: entered promiscuous mode [ 83.867561][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.898688][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.905840][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.913426][ T5823] bridge_slave_0: entered allmulticast mode [ 83.920783][ T5823] bridge_slave_0: entered promiscuous mode [ 83.931496][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.952155][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.959860][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.967120][ T5829] bridge_slave_0: entered allmulticast mode [ 83.974208][ T5829] bridge_slave_0: entered promiscuous mode [ 83.982061][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.989772][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.997107][ T5823] bridge_slave_1: entered allmulticast mode [ 84.004111][ T5823] bridge_slave_1: entered promiscuous mode [ 84.036489][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.043703][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.051205][ T5829] bridge_slave_1: entered allmulticast mode [ 84.058288][ T5829] bridge_slave_1: entered promiscuous mode [ 84.143403][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.155037][ T5833] team0: Port device team_slave_0 added [ 84.160957][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.168304][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.175712][ T5822] bridge_slave_0: entered allmulticast mode [ 84.182905][ T5822] bridge_slave_0: entered promiscuous mode [ 84.203375][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.214942][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.226323][ T5833] team0: Port device team_slave_1 added [ 84.244904][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.252764][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.260414][ T5822] bridge_slave_1: entered allmulticast mode [ 84.267753][ T5822] bridge_slave_1: entered promiscuous mode [ 84.274986][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.282220][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.289580][ T5837] bridge_slave_0: entered allmulticast mode [ 84.296587][ T5837] bridge_slave_0: entered promiscuous mode [ 84.307600][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.348494][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.355639][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.363771][ T5837] bridge_slave_1: entered allmulticast mode [ 84.370920][ T5837] bridge_slave_1: entered promiscuous mode [ 84.399090][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.406060][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.432397][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.469251][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.490179][ T5823] team0: Port device team_slave_0 added [ 84.498056][ T5823] team0: Port device team_slave_1 added [ 84.505542][ T5829] team0: Port device team_slave_0 added [ 84.513579][ T5829] team0: Port device team_slave_1 added [ 84.520075][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.527533][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.558044][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.582487][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.622728][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.665899][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.673190][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.697776][ T5824] Bluetooth: hci3: command tx timeout [ 84.700054][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.704733][ T5824] Bluetooth: hci1: command tx timeout [ 84.721421][ T5836] Bluetooth: hci2: command tx timeout [ 84.733422][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.764872][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.772035][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.777131][ T5836] Bluetooth: hci0: command tx timeout [ 84.798739][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.815183][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.822199][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.848559][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.859567][ T5836] Bluetooth: hci4: command tx timeout [ 84.877802][ T5833] hsr_slave_0: entered promiscuous mode [ 84.884329][ T5833] hsr_slave_1: entered promiscuous mode [ 84.892955][ T5822] team0: Port device team_slave_0 added [ 84.899635][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.906639][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.932643][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.971522][ T5822] team0: Port device team_slave_1 added [ 84.999072][ T5837] team0: Port device team_slave_0 added [ 85.043773][ T5837] team0: Port device team_slave_1 added [ 85.082896][ T5823] hsr_slave_0: entered promiscuous mode [ 85.097324][ T5823] hsr_slave_1: entered promiscuous mode [ 85.104178][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 85.110408][ T5823] Cannot create hsr debugfs directory [ 85.145711][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.153946][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.180829][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.195202][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.202614][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.228746][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.282244][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.289464][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.315833][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.333367][ T5829] hsr_slave_0: entered promiscuous mode [ 85.340602][ T5829] hsr_slave_1: entered promiscuous mode [ 85.346621][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 85.352441][ T5829] Cannot create hsr debugfs directory [ 85.382066][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.389131][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.415312][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.570126][ T5822] hsr_slave_0: entered promiscuous mode [ 85.576836][ T5822] hsr_slave_1: entered promiscuous mode [ 85.583513][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 85.592260][ T5822] Cannot create hsr debugfs directory [ 85.623368][ T5837] hsr_slave_0: entered promiscuous mode [ 85.629718][ T5837] hsr_slave_1: entered promiscuous mode [ 85.635740][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 85.641906][ T5837] Cannot create hsr debugfs directory [ 86.038224][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.057497][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.081089][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.099823][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.143546][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.162672][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.174175][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.194027][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.281355][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.292210][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.303142][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.313890][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.416089][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.431542][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.442390][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.454180][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.572792][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.594259][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.606249][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.616572][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.644374][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.652637][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.700210][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.716078][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.723415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.750601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.757846][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.777815][ T5144] Bluetooth: hci3: command tx timeout [ 86.783574][ T5824] Bluetooth: hci1: command tx timeout [ 86.789360][ T5836] Bluetooth: hci2: command tx timeout [ 86.825645][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.857332][ T5824] Bluetooth: hci0: command tx timeout [ 86.890235][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.901478][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.908681][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.937047][ T5824] Bluetooth: hci4: command tx timeout [ 86.962269][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.969489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.100272][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.115114][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.166530][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.173716][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.229584][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.236886][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.254453][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.313178][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.334456][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.341610][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.381529][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.388731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.430210][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.536569][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.543805][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.600661][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.607896][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.654218][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.863909][ T5833] veth0_vlan: entered promiscuous mode [ 87.952244][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.981488][ T5833] veth1_vlan: entered promiscuous mode [ 88.094841][ T5833] veth0_macvtap: entered promiscuous mode [ 88.114637][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.130509][ T5833] veth1_macvtap: entered promiscuous mode [ 88.166087][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.201308][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.230912][ T5829] veth0_vlan: entered promiscuous mode [ 88.239893][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.256301][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270765][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.291578][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.301637][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.332100][ T5829] veth1_vlan: entered promiscuous mode [ 88.372515][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.443184][ T5823] veth0_vlan: entered promiscuous mode [ 88.473383][ T5829] veth0_macvtap: entered promiscuous mode [ 88.500437][ T5822] veth0_vlan: entered promiscuous mode [ 88.509735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.525630][ T5829] veth1_macvtap: entered promiscuous mode [ 88.535599][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.538956][ T5823] veth1_vlan: entered promiscuous mode [ 88.636070][ T5822] veth1_vlan: entered promiscuous mode [ 88.652901][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.654257][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.668189][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.673993][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.718635][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752995][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.780135][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.806517][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.822615][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.853417][ T5823] veth0_macvtap: entered promiscuous mode [ 88.860513][ T5824] Bluetooth: hci1: command tx timeout [ 88.860578][ T5836] Bluetooth: hci2: command tx timeout [ 88.865920][ T5824] Bluetooth: hci3: command tx timeout [ 88.939283][ T5824] Bluetooth: hci0: command tx timeout [ 88.969605][ T5823] veth1_macvtap: entered promiscuous mode [ 89.017885][ T5824] Bluetooth: hci4: command tx timeout [ 89.029252][ T5822] veth0_macvtap: entered promiscuous mode [ 89.072257][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.090993][ T5837] veth0_vlan: entered promiscuous mode [ 89.109341][ T5822] veth1_macvtap: entered promiscuous mode [ 89.153813][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.187387][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.201109][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.209403][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218984][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.234238][ T5837] veth1_vlan: entered promiscuous mode [ 89.247236][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261998][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.279960][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.310683][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.312398][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.326295][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.426808][ T106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452069][ T106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.478434][ T106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.491130][ T5950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.508488][ T106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.561960][ T5950] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.570069][ T5837] veth0_macvtap: entered promiscuous mode [ 89.655892][ T5837] veth1_macvtap: entered promiscuous mode [ 89.699121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.712750][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.809130][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.849051][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.866348][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.945317][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.963328][ T5962] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 89.972986][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.001749][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.060325][ T106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.095685][ T106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104640][ T106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.121371][ T106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.150779][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.187197][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.225742][ T5969] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 90.408205][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.435732][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.551076][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.568294][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.737963][ T5981] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2'. [ 90.887742][ T5986] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 90.925144][ T5986] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 90.941909][ T5824] Bluetooth: hci3: command tx timeout [ 90.942211][ T5144] Bluetooth: hci2: command tx timeout [ 90.949705][ T5824] Bluetooth: hci1: command tx timeout [ 91.021288][ T5824] Bluetooth: hci0: command tx timeout [ 91.039567][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 91.044166][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.099152][ T5824] Bluetooth: hci4: command tx timeout [ 91.108510][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 91.116543][ T5967] Zero length message leads to an empty skb [ 91.143758][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 91.176766][ T5998] netlink: 'syz.4.14': attribute type 1 has an invalid length. [ 91.270345][ T6003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15'. [ 91.347474][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.707723][ T6018] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 91.778143][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17'. [ 91.780577][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17'. [ 91.804157][ T6021] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 91.849356][ T6021] syzkaller0: entered promiscuous mode [ 91.855019][ T6021] syzkaller0: entered allmulticast mode [ 91.984648][ T6018] ip6_vti0: Master is either lo or non-ether device [ 91.996158][ T24] cfg80211: failed to load regulatory.db [ 92.150850][ T6040] warning: `syz.3.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.363427][ T6051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.401345][ T6055] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 92.745292][ T6073] syzkaller1: entered promiscuous mode [ 92.774093][ T6073] syzkaller1: entered allmulticast mode [ 95.101798][ T6035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.332428][ T6098] tls_set_device_offload: netdev not found [ 95.421492][ T6115] netlink: 396 bytes leftover after parsing attributes in process `syz.3.40'. [ 95.702486][ T6132] netlink: 'syz.0.42': attribute type 16 has an invalid length. [ 95.735485][ T6132] netlink: 'syz.0.42': attribute type 17 has an invalid length. [ 95.913169][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.030645][ T6145] raw_sendmsg: syz.1.45 forgot to set AF_INET. Fix it! [ 96.043044][ T6148] netlink: 'syz.4.46': attribute type 4 has an invalid length. [ 96.405660][ T6162] netlink: 9 bytes leftover after parsing attributes in process `syz.1.50'. [ 96.419429][ T6125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.579283][ T6170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 96.607526][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 96.661611][ T6162] xt_CT: No such helper "snmp_trap" [ 96.727241][ T6179] netlink: 'syz.4.55': attribute type 21 has an invalid length. [ 96.743380][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 97.160854][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 97.228807][ T6198] vlan2: entered promiscuous mode [ 97.277099][ T6198] gretap0: entered promiscuous mode [ 97.295759][ T6206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.341286][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 97.369894][ T6204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 97.390347][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 97.403722][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 97.481514][ T6213] syzkaller0: entered promiscuous mode [ 97.513515][ T6213] syzkaller0: entered allmulticast mode [ 98.061536][ T6231] syz.3.71 uses old SIOCAX25GETINFO [ 98.349405][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 98.440906][ T6254] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.730071][ T6267] syzkaller1: entered promiscuous mode [ 98.757600][ T6267] syzkaller1: entered allmulticast mode [ 99.144929][ T6288] netlink: 'syz.4.88': attribute type 21 has an invalid length. [ 99.499382][ T6296] syzkaller0: entered promiscuous mode [ 99.802361][ T6315] netlink: 'syz.4.97': attribute type 2 has an invalid length. [ 99.854925][ T6324] syz_tun: entered allmulticast mode [ 100.093543][ T6326] syzkaller0: entered promiscuous mode [ 100.108045][ T6334] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 100.127415][ T6326] syzkaller0: entered allmulticast mode [ 101.049640][ T6380] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 101.367705][ T6407] veth0: entered promiscuous mode [ 101.373420][ T6407] veth0: left promiscuous mode [ 101.463871][ T6413] __nla_validate_parse: 16 callbacks suppressed [ 101.463893][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 101.842229][ T6428] vlan2: entered allmulticast mode [ 101.862520][ T6428] hsr0: entered allmulticast mode [ 101.868618][ T6428] hsr_slave_0: entered allmulticast mode [ 101.874457][ T6428] hsr_slave_1: entered allmulticast mode [ 102.032326][ T6394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.480668][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 102.579613][ T6470] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 102.644345][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 102.769455][ T6476] netlink: 'syz.1.143': attribute type 9 has an invalid length. [ 102.793973][ T6476] netlink: 'syz.1.143': attribute type 11 has an invalid length. [ 102.835143][ T6476] netlink: 'syz.1.143': attribute type 12 has an invalid length. [ 102.877093][ T6476] netlink: 211616 bytes leftover after parsing attributes in process `syz.1.143'. [ 102.923192][ T6487] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 103.059786][ T6487] syzkaller0: entered promiscuous mode [ 103.065328][ T6487] syzkaller0: entered allmulticast mode [ 103.096529][ T6487] tipc: Started in network mode [ 103.101831][ T6487] tipc: Node identity bad79219cb7f, cluster identity 4711 [ 103.109860][ T6487] tipc: Enabled bearer , priority 0 [ 103.147573][ T6485] tipc: Resetting bearer [ 103.205872][ T6485] tipc: Disabling bearer [ 103.291191][ T6516] netlink: 'syz.0.149': attribute type 8 has an invalid length. [ 103.537836][ T6495] syzkaller0: entered promiscuous mode [ 103.548448][ T6495] syzkaller0: entered allmulticast mode [ 103.564383][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 103.669551][ T6528] netlink: 'syz.0.155': attribute type 16 has an invalid length. [ 103.698245][ T6528] netlink: 'syz.0.155': attribute type 17 has an invalid length. [ 103.721347][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.987626][ T12] wlan1: Trigger new scan to find an IBSS to join [ 105.157174][ T6528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.374647][ T6563] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 105.410554][ T6563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.475736][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 105.584368][ T6569] netlink: 'syz.4.164': attribute type 1 has an invalid length. [ 105.675027][ T6569] bond2: entered promiscuous mode [ 105.687594][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.762381][ T6574] macvtap1: entered allmulticast mode [ 105.824276][ T6589] sctp: [Deprecated]: syz.0.168 (pid 6589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.824276][ T6589] Use struct sctp_sack_info instead [ 105.856189][ T6590] x_tables: duplicate underflow at hook 3 [ 105.871201][ T6585] bond2: (slave bridge2): making interface the new active one [ 105.893715][ T6585] bridge2: entered promiscuous mode [ 105.902710][ T6585] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 105.912278][ T6579] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 105.935048][ T6594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.168'. [ 105.988500][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 105.991046][ T6589] netlink: 44 bytes leftover after parsing attributes in process `syz.0.168'. [ 106.029083][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'. [ 106.110083][ T6594] geneve0: entered allmulticast mode [ 106.367752][ T6613] netlink: 'syz.0.175': attribute type 11 has an invalid length. [ 106.394340][ T6613] netlink: 'syz.0.175': attribute type 11 has an invalid length. [ 106.414672][ T6613] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 106.492268][ T6613] __nla_validate_parse: 6 callbacks suppressed [ 106.492289][ T6613] netlink: 396 bytes leftover after parsing attributes in process `syz.0.175'. [ 106.512435][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.520879][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.863335][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 106.938143][ T35] wlan1: Trigger new scan to find an IBSS to join [ 107.104621][ T6647] trusted_key: syz.0.184 sent an empty control message without MSG_MORE. [ 107.754196][ T6683] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 107.959986][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 107.977301][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 108.008175][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 108.444622][ T6717] bridge0: port 3(gretap0) entered blocking state [ 108.466210][ T6717] bridge0: port 3(gretap0) entered disabled state [ 108.481008][ T6717] gretap0: entered allmulticast mode [ 108.500838][ T6717] gretap0: entered promiscuous mode [ 108.538784][ T6721] x_tables: duplicate entry at hook 1 [ 108.560036][ T6717] bridge0: port 3(gretap0) entered blocking state [ 108.566778][ T6717] bridge0: port 3(gretap0) entered forwarding state [ 108.569816][ T6721] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.642118][ T6721] xt_SECMARK: invalid mode: 9 [ 108.953596][ T6733] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 108.966582][ T6733] netlink: 228 bytes leftover after parsing attributes in process `syz.0.204'. [ 109.027631][ T106] wlan1: Trigger new scan to find an IBSS to join [ 109.057369][ T6735] netlink: 128 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.066368][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.620010][ T6778] netlink: 260 bytes leftover after parsing attributes in process `syz.3.215'. [ 109.737228][ T5824] Bluetooth: hci4: command tx timeout [ 109.978760][ T106] wlan1: Trigger new scan to find an IBSS to join [ 110.040224][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 110.424443][ T6815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 110.673820][ T6831] netlink: 'syz.4.229': attribute type 4 has an invalid length. [ 110.738346][ T6836] netlink: 'syz.4.229': attribute type 4 has an invalid length. [ 110.874186][ T35] wlan1: Creating new IBSS network, BSSID a2:3d:7f:c1:11:9f [ 110.918943][ T6842] netlink: 'syz.2.232': attribute type 1 has an invalid length. [ 111.013428][ T6843] Bluetooth: MGMT ver 1.23 [ 111.228988][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.236621][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.311794][ T6861] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.371043][ T6861] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.480800][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.515666][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.713844][ T6842] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 112.089835][ T6884] bond1: entered promiscuous mode [ 112.095157][ T6884] bond1: entered allmulticast mode [ 112.104049][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.114926][ T64] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.161534][ T6874] syzkaller0: entered promiscuous mode [ 112.168019][ T6874] syzkaller0: entered allmulticast mode [ 112.391191][ T6897] __nla_validate_parse: 5 callbacks suppressed [ 112.391211][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 112.422357][ T64] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.432148][ T64] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.677215][ T6917] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 113.679261][ T64] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.689105][ T6913] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 113.861524][ T6927] TCP: TCP_TX_DELAY enabled [ 113.914444][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.915693][ T6929] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 114.058980][ T6935] tipc: Started in network mode [ 114.078205][ T6935] tipc: Node identity 7a49020e7676, cluster identity 4711 [ 114.094678][ T6935] tipc: Enabled bearer , priority 0 [ 114.166725][ T6935] syzkaller0: entered promiscuous mode [ 114.187032][ T6935] syzkaller0: entered allmulticast mode [ 114.193387][ T6935] tipc: Resetting bearer [ 114.248965][ T6934] tipc: Resetting bearer [ 114.526610][ T6945] "syz.0.252" (6945) uses obsolete ecb(arc4) skcipher [ 114.675366][ T6967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.256'. [ 115.147028][ T5824] block nbd0: Receive control failed (result -32) [ 115.658930][ T6934] tipc: Disabling bearer [ 115.782095][ T10] tipc: Node number set to 205455886 [ 116.041906][ T6988] syz_tun: left allmulticast mode [ 116.081466][ T6986] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.164416][ T6986] syzkaller0: entered promiscuous mode [ 116.182035][ T6986] syzkaller0: entered allmulticast mode [ 116.189416][ T6988] syzkaller0: entered promiscuous mode [ 116.197881][ T6988] syzkaller0: entered allmulticast mode [ 116.211174][ T6986] tipc: Started in network mode [ 116.216190][ T6986] tipc: Node identity 12a1b1913c07, cluster identity 4711 [ 116.228675][ T6986] tipc: Enabled bearer , priority 0 [ 116.258908][ T6984] tipc: Resetting bearer [ 116.316131][ T6984] tipc: Disabling bearer [ 116.855367][ T7020] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.273'. [ 117.185396][ T7040] netlink: 'syz.1.277': attribute type 8 has an invalid length. [ 117.634152][ T7063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.284'. [ 117.726418][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 117.756076][ T7060] IPVS: length: 8 != 1152 [ 117.762058][ T7060] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.283'. [ 117.772053][ T7060] bridge_slave_1: default FDB implementation only supports local addresses [ 117.785315][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 117.837260][ T7070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.286'. [ 117.846650][ T7057] openvswitch: netlink: Flow key attr not present in new flow. [ 117.877890][ T7070] openvswitch: netlink: Multiple metadata blocks provided [ 118.035407][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 118.067818][ T7075] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.124719][ T7075] bond1: (slave lo): Enslaving as an active interface with an up link [ 118.152347][ T7075] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 118.367303][ T7100] netlink: 'syz.2.292': attribute type 25 has an invalid length. [ 118.375236][ T7100] netlink: 'syz.2.292': attribute type 9 has an invalid length. [ 118.735146][ T7114] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 118.924070][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 118.941748][ T7127] netlink: 240 bytes leftover after parsing attributes in process `syz.0.299'. [ 118.959272][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 119.069266][ T7126] bridge0: port 3(syz_tun) entered blocking state [ 119.075940][ T7126] bridge0: port 3(syz_tun) entered disabled state [ 119.096463][ T7126] syz_tun: entered allmulticast mode [ 119.129295][ T7126] syz_tun: entered promiscuous mode [ 119.225274][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.558851][ T7152] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 119.578845][ T7152] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 119.813434][ T7160] s5ÿÿø: renamed from vlan1 (while UP) [ 120.219926][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 120.695249][ T7197] xt_cgroup: invalid path, errno=-2 [ 121.006236][ T7213] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 121.059921][ T7213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 121.899857][ T7263] netlink: zone id is out of range [ 121.905048][ T7263] netlink: zone id is out of range [ 121.931405][ T7263] netlink: zone id is out of range [ 121.937282][ T7263] netlink: zone id is out of range [ 121.943441][ T7263] netlink: zone id is out of range [ 121.955674][ T7263] netlink: zone id is out of range [ 121.979114][ T7263] netlink: zone id is out of range [ 121.990418][ T7263] netlink: zone id is out of range [ 121.995898][ T7263] netlink: zone id is out of range [ 122.259402][ T7278] netlink: 'syz.2.342': attribute type 16 has an invalid length. [ 122.288126][ T7278] netlink: 'syz.2.342': attribute type 17 has an invalid length. [ 122.734562][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.872457][ T7320] __nla_validate_parse: 5 callbacks suppressed [ 122.872478][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 123.025096][ T7328] netlink: 'syz.3.349': attribute type 24 has an invalid length. [ 123.145809][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 123.186589][ T7337] sctp: [Deprecated]: syz.0.351 (pid 7337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.186589][ T7337] Use struct sctp_sack_info instead [ 123.621674][ T7359] netlink: 52 bytes leftover after parsing attributes in process `syz.0.359'. [ 123.641975][ T7359] netlink: 52 bytes leftover after parsing attributes in process `syz.0.359'. [ 123.655408][ T7359] netlink: 52 bytes leftover after parsing attributes in process `syz.0.359'. [ 123.797785][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 123.828222][ T7370] netlink: 'syz.2.362': attribute type 24 has an invalid length. [ 124.512137][ T7396] Bluetooth: MGMT ver 1.23 [ 124.542606][ T7400] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 124.552260][ T7404] netlink: 'syz.1.374': attribute type 13 has an invalid length. [ 124.647526][ T7400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.693374][ T7404] veth0_macvtap: left promiscuous mode [ 124.709154][ T7404] macvtap0: entered allmulticast mode [ 124.728624][ T7404] macvtap0: refused to change device tx_queue_len [ 124.770856][ T7399] bond3: (slave ip6erspan0): making interface the new active one [ 124.798786][ T7399] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 124.820006][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.376'. [ 125.189988][ T7430] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 125.246246][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 125.272118][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 125.287307][ T7430] bond2: entered promiscuous mode [ 125.294004][ T7430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.403108][ T7435] bond2: (slave bridge1): making interface the new active one [ 125.415261][ T7435] bridge1: entered promiscuous mode [ 125.449892][ T7435] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 125.641626][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 125.668152][ T7440] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 125.851222][ T7449] netlink: 'syz.0.386': attribute type 3 has an invalid length. [ 126.034116][ T7453] netlink: 'syz.0.389': attribute type 21 has an invalid length. [ 126.399377][ T7472] siw: device registration error -23 [ 126.447692][ T7474] xt_l2tp: wrong L2TP version: 0 [ 127.048394][ T7497] nft_compat: unsupported protocol 1 [ 127.760504][ T7523] vlan2: entered allmulticast mode [ 127.765675][ T7523] bond0: entered allmulticast mode [ 127.782218][ T5824] block nbd1: Receive control failed (result -1) [ 127.857714][ T7523] bond_slave_0: entered allmulticast mode [ 127.872888][ T7523] bond_slave_1: entered allmulticast mode [ 127.898513][ T7527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.908898][ T7527] bond_slave_0: left allmulticast mode [ 127.916318][ T7527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.926422][ T7527] bond_slave_1: left allmulticast mode [ 127.935823][ T7527] bond0 (unregistering): Released all slaves [ 127.954264][ T7530] __nla_validate_parse: 6 callbacks suppressed [ 127.954283][ T7530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.410'. [ 128.308230][ T7541] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 128.328394][ T10] hid-generic 0005:10CF:0C6C.0001: unknown main item tag 0x0 [ 128.343977][ T7541] bond2 (unregistering): Released all slaves [ 128.352980][ T10] hid-generic 0005:10CF:0C6C.0001: hidraw0: BLUETOOTH HID v0.04 Device [syz0] on aa:aa:aa:aa:aa:aa [ 128.396234][ T7551] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 128.431665][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 128.491601][ T7546] bridge0: entered promiscuous mode [ 128.497810][ T7546] macsec1: entered promiscuous mode [ 128.503291][ T7546] macsec1: entered allmulticast mode [ 128.510126][ T7546] bridge0: entered allmulticast mode [ 128.518004][ T7546] bridge0: port 3(macsec1) entered blocking state [ 128.524678][ T7546] bridge0: port 3(macsec1) entered disabled state [ 128.540032][ T7546] bridge0: left allmulticast mode [ 128.545368][ T7546] bridge0: left promiscuous mode [ 128.587866][ T7554] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.596364][ T7554] netlink: 'syz.2.416': attribute type 83 has an invalid length. [ 128.628134][ T7554] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 128.637556][ T7554] netlink: 280 bytes leftover after parsing attributes in process `syz.2.416'. [ 128.693280][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 129.112270][ T7581] xt_hashlimit: size too large, truncated to 1048576 [ 129.226428][ T7588] xt_hashlimit: size too large, truncated to 1048576 [ 129.257346][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 129.378851][ T7603] "syz.3.430" (7603) uses obsolete ecb(arc4) skcipher [ 129.419976][ T7597] net_ratelimit: 137 callbacks suppressed [ 129.419997][ T7597] openvswitch: netlink: Key type 339 is out of range max 32 [ 129.767605][ T7619] netlink: 76 bytes leftover after parsing attributes in process `syz.0.432'. [ 129.964757][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'. [ 129.978949][ T7627] netlink: 14 bytes leftover after parsing attributes in process `syz.0.435'. [ 130.126119][ T7631] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 130.151237][ T7631] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 130.194494][ T7631] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 130.411728][ T7646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.653946][ T2939] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 130.687149][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 130.708728][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 131.068875][ T7678] macvtap1: entered promiscuous mode [ 131.074237][ T7678] vlan0: entered promiscuous mode [ 131.091292][ T7678] macvtap1: entered allmulticast mode [ 131.096727][ T7678] vlan0: entered allmulticast mode [ 131.114514][ T7678] veth0_vlan: entered allmulticast mode [ 131.319543][ T7698] netlink: 'syz.3.452': attribute type 3 has an invalid length. [ 131.375628][ T7653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.928764][ T7732] netlink: 'syz.0.462': attribute type 33 has an invalid length. [ 132.169363][ T7721] pim6reg1: entered promiscuous mode [ 132.174722][ T7721] pim6reg1: entered allmulticast mode [ 132.523704][ T7752] xt_CT: No such helper "snmp_trap" [ 132.545565][ T7755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.632749][ T7757] netlink: 'syz.4.469': attribute type 22 has an invalid length. [ 132.668437][ T7757] netlink: 'syz.4.469': attribute type 22 has an invalid length. [ 132.738781][ T7757] pim6reg1: entered promiscuous mode [ 132.767010][ T7757] pim6reg1: entered allmulticast mode [ 132.850637][ T7768] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 132.870871][ T7768] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 132.946129][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952668][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.146580][ T7786] __nla_validate_parse: 72 callbacks suppressed [ 133.146604][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.475'. [ 133.216399][ T7786] tipc: Invalid UDP bearer configuration [ 133.216463][ T7786] tipc: Enabling of bearer rejected, failed to enable media [ 133.278044][ T7787] tipc: Enabling of bearer rejected, failed to enable media [ 133.929894][ T7820] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 133.998804][ T7823] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 134.050288][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.482'. [ 134.063600][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 134.139577][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 134.172833][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 134.240238][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.4.481'. [ 134.274900][ T7828] bond3: (slave ip6gretap1): making interface the new active one [ 134.310917][ T7828] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 134.355779][ T7841] netlink: 144 bytes leftover after parsing attributes in process `syz.3.484'. [ 134.378934][ T7829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.415600][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.433025][ T7824] bond4: (slave bond0): making interface the new active one [ 134.463132][ T7824] bond4: (slave bond0): Enslaving as an active interface with an up link [ 134.486243][ T7833] .`: renamed from bond0 (while UP) [ 134.555054][ T7848] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 134.595071][ T12] bond4: (slave .`): link status definitely down, disabling slave [ 134.628999][ T12] bond4: now running without any active interface! [ 134.810532][ T7863] ipt_REJECT: TCP_RESET invalid for non-tcp [ 134.960435][ T7870] vlan2: entered allmulticast mode [ 134.970448][ T7870] bond0: entered allmulticast mode [ 134.975614][ T7870] bond_slave_0: entered allmulticast mode [ 135.020745][ T7870] bond_slave_1: entered allmulticast mode [ 135.048233][ T7870] netlink: 14 bytes leftover after parsing attributes in process `syz.2.494'. [ 135.150436][ T7870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.192891][ T7870] bond_slave_0: left allmulticast mode [ 135.206657][ T7870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.277648][ T7870] bond_slave_1: left allmulticast mode [ 135.286569][ T7870] bond0 (unregistering): Released all slaves [ 135.721277][ T7905] validate_nla: 1 callbacks suppressed [ 135.721296][ T7905] netlink: 'syz.3.502': attribute type 62 has an invalid length. [ 136.051041][ T7909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.175114][ T7921] pimreg: entered allmulticast mode [ 136.246616][ T7925] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 136.383145][ T7933] gretap0: left allmulticast mode [ 136.414960][ T7933] gretap0: left promiscuous mode [ 136.442788][ T7933] bridge0: port 3(gretap0) entered disabled state [ 136.500584][ T7933] bridge_slave_0: left allmulticast mode [ 136.506292][ T7933] bridge_slave_0: left promiscuous mode [ 136.526009][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.590064][ T7933] bridge_slave_1: left allmulticast mode [ 136.595779][ T7933] bridge_slave_1: left promiscuous mode [ 136.615483][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.692459][ T7933] bond0: (slave bond_slave_0): Releasing backup interface [ 136.759882][ T7933] bond0: (slave bond_slave_1): Releasing backup interface [ 136.768360][ T7949] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.512'. [ 136.835622][ T7933] team0: Port device team_slave_0 removed [ 136.900946][ T7933] team0: Port device team_slave_1 removed [ 136.931025][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.958907][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.974730][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.982292][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.994009][ T7933] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.243951][ T7960] netlink: 240 bytes leftover after parsing attributes in process `syz.4.517'. [ 137.422445][ T7968] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 138.012445][ T8006] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 138.057837][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.066186][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.076197][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.084193][ T8011] openvswitch: netlink: IP tunnel dst address not specified [ 138.093124][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.106332][ T8012] sctp: [Deprecated]: syz.4.533 (pid 8012) Use of int in maxseg socket option. [ 138.106332][ T8012] Use struct sctp_assoc_value instead [ 138.124361][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.182802][ T8015] bond0: (slave geneve2): making interface the new active one [ 138.203672][ T8015] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 138.217610][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.242029][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.262907][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.295867][ T8019] __nla_validate_parse: 4 callbacks suppressed [ 138.295885][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'. [ 138.315022][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.376768][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 138.406194][ T8019] veth0_to_team: entered promiscuous mode [ 138.414626][ T8019] veth0_to_team: left promiscuous mode [ 138.614476][ T8033] netlink: 'syz.1.538': attribute type 13 has an invalid length. [ 138.676078][ T8035] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 138.744495][ T8033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.085911][ T8053] tipc: Started in network mode [ 139.116710][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.128950][ T8053] tipc: Node identity ac14140f, cluster identity 4711 [ 139.136291][ T8053] tipc: New replicast peer: 255.255.255.255 [ 139.146845][ T8053] tipc: Enabled bearer , priority 10 [ 139.295153][ T8057] syzkaller0: entered promiscuous mode [ 139.314890][ T8057] syzkaller0: entered allmulticast mode [ 139.394133][ T8071] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.106108][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 140.138168][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.257533][ T9] tipc: Node number set to 2886997007 [ 140.358776][ T8107] netlink: 'syz.4.558': attribute type 3 has an invalid length. [ 140.393544][ T8107] tipc: Invalid UDP bearer configuration [ 140.393606][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 140.429366][ T8107] syz.4.558 (8107) used greatest stack depth: 17472 bytes left [ 140.553811][ T8125] tipc: Cannot configure node identity twice [ 140.585026][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.601829][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.620036][ T2939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.630888][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.642791][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.644591][ T8134] openvswitch: netlink: Multiple metadata blocks provided [ 140.804804][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 140.848505][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 140.861032][ T8146] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 140.902594][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.927658][ T8146] bridge_slave_1: left allmulticast mode [ 140.944587][ T8146] bridge_slave_1: left promiscuous mode [ 140.955440][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.963535][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 140.999168][ T8154] netlink: 132 bytes leftover after parsing attributes in process `syz.3.573'. [ 141.004878][ T8146] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.099390][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.181938][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.256995][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 141.359026][ T8172] netlink: zone id is out of range [ 141.364509][ T8172] netlink: zone id is out of range [ 141.390971][ T8172] netlink: zone id is out of range [ 141.538052][ T8177] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 141.733490][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.580'. [ 141.851854][ T8194] bond5: ARP target 1.0.0.0 is already present [ 141.858695][ T8194] bond5: option arp_ip_target: invalid value (1) [ 141.867846][ T8194] bond5 (unregistering): Released all slaves [ 142.516204][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 142.918663][ T8247] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 143.488748][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.516221][ T8251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.604868][ T8251] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 143.748851][ T8251] vlan2: left allmulticast mode [ 143.753742][ T8251] hsr0: left allmulticast mode [ 143.765639][ T8251] hsr_slave_0: left allmulticast mode [ 143.771529][ T8251] hsr_slave_1: left allmulticast mode [ 143.778088][ T8251] bond2: left promiscuous mode [ 143.782932][ T8251] bridge2: left promiscuous mode [ 143.797792][ T8251] macvtap1: left allmulticast mode [ 143.920961][ T2939] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.967084][ T2939] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.979690][ T2939] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.989087][ T2939] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.139876][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 144.170348][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 144.243314][ T8302] netlink: 'syz.0.603': attribute type 17 has an invalid length. [ 144.253430][ T8299] syzkaller1: entered promiscuous mode [ 144.254116][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 144.268148][ T8299] syzkaller1: entered allmulticast mode [ 144.285872][ T8302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 144.327883][ T8299] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.602'. [ 144.377038][ T8299] bridge_slave_1: default FDB implementation only supports local addresses [ 144.854838][ T8332] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 144.887707][ T8334] netlink: 'syz.1.611': attribute type 29 has an invalid length. [ 144.950276][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 145.219744][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 145.284658][ T8341] bond0: (slave vcan1): refused to change device type [ 145.750244][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 145.789087][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 145.882481][ T8377] syzkaller0: entered promiscuous mode [ 145.931632][ T8377] syzkaller0: entered allmulticast mode [ 146.119968][ T8394] pimreg: left allmulticast mode [ 146.270159][ T8404] netlink: 'syz.0.626': attribute type 83 has an invalid length. [ 146.384621][ T8411] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 146.566276][ T8423] netlink: 72 bytes leftover after parsing attributes in process `syz.3.629'. [ 147.846507][ T8497] netlink: 'syz.4.648': attribute type 1 has an invalid length. [ 148.459493][ T8529] pimreg3: entered allmulticast mode [ 148.573464][ T8540] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 148.605139][ T8540] netlink: 'syz.1.660': attribute type 7 has an invalid length. [ 148.645326][ T8540] netlink: 'syz.1.660': attribute type 8 has an invalid length. [ 148.975595][ T8558] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 149.060585][ T8558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.088560][ T8562] bond5: (slave ip6erspan0): making interface the new active one [ 149.106467][ T8562] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 149.381746][ T8572] sctp: [Deprecated]: syz.4.664 (pid 8572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.381746][ T8572] Use struct sctp_sack_info instead [ 149.919234][ T8596] tipc: Enabled bearer , priority 0 [ 149.936297][ T8590] __nla_validate_parse: 7 callbacks suppressed [ 149.936318][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.668'. [ 149.957948][ T8602] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 150.022191][ T8596] syzkaller1: entered promiscuous mode [ 150.031969][ T8596] syzkaller1: entered allmulticast mode [ 150.057935][ T8600] syzkaller0: entered promiscuous mode [ 150.076832][ T8600] syzkaller0: entered allmulticast mode [ 150.133651][ T8596] tipc: Resetting bearer [ 150.238249][ T8594] tipc: Resetting bearer [ 150.255215][ T8594] tipc: Disabling bearer [ 150.291194][ T8614] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 150.300723][ T8616] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 150.447696][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.679'. [ 150.464897][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 150.570793][ T8634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.578274][ T8634] IPv6: NLM_F_CREATE should be set when creating new route [ 150.585581][ T8634] IPv6: NLM_F_CREATE should be set when creating new route [ 150.709149][ T8629] vlan0: left allmulticast mode [ 150.714034][ T8629] veth0_vlan: left allmulticast mode [ 150.719992][ T8629] vlan0: left promiscuous mode [ 150.725099][ T8629] macvtap1: left promiscuous mode [ 150.730831][ T8629] macvtap1: left allmulticast mode [ 150.743880][ T106] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.784170][ T106] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.814767][ T106] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.841322][ T161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.866252][ T8636] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 150.907935][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 150.917828][ T8636] netlink: 'syz.4.684': attribute type 10 has an invalid length. [ 150.933979][ T8636] .`: (slave bridge0): Enslaving as an active interface with an up link [ 150.943421][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 151.158658][ T8658] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 151.370323][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 151.380205][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 151.405058][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 151.478112][ T8673] sctp: [Deprecated]: syz.2.695 (pid 8673) Use of int in maxseg socket option. [ 151.478112][ T8673] Use struct sctp_assoc_value instead [ 151.512145][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.696'. [ 151.545916][ T8670] netlink: 72 bytes leftover after parsing attributes in process `syz.3.696'. [ 151.756663][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.698'. [ 152.169010][ T8709] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:19998 [ 152.182288][ T8719] netlink: 'syz.3.709': attribute type 15 has an invalid length. [ 152.239082][ T8708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.520281][ T8735] xt_cgroup: invalid path, errno=-2 [ 152.675920][ T8746] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 152.693330][ T8746] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 152.711273][ T8743] gre1: entered promiscuous mode [ 152.726117][ T8743] gre1: entered allmulticast mode [ 153.236561][ T8776] syzkaller0: entered promiscuous mode [ 153.263797][ T8776] syzkaller0: entered allmulticast mode [ 153.371858][ T8790] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 153.681391][ T8803] net_ratelimit: 197 callbacks suppressed [ 153.681411][ T8803] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 153.713547][ T8806] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 153.726209][ T8806] bond3 (unregistering): Released all slaves [ 153.827342][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.094976][ T8827] TC_ACT_REPEAT abuse ? [ 154.101964][ T8827] x_tables: unsorted underflow at hook 1 [ 154.504371][ T8843] netlink: 'syz.1.746': attribute type 8 has an invalid length. [ 154.688529][ T8855] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 154.901487][ T8860] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 154.912854][ T8860] syzkaller1: Linktype set failed because interface is up [ 154.929146][ T8278] syzkaller1: tun_net_xmit 90 [ 154.938709][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.008367][ T106] syzkaller1: tun_net_xmit 86 [ 155.018661][ T8871] __nla_validate_parse: 13 callbacks suppressed [ 155.018679][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.756'. [ 155.047691][ T8872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 155.058391][ T8871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 155.077793][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 155.281602][ T8881] syzkaller0: entered promiscuous mode [ 155.287609][ T8881] syzkaller0: entered allmulticast mode [ 155.300020][ T8881] tc action pedit offset must be on 32 bit boundaries [ 155.357927][ T8278] syzkaller1: tun_net_xmit 90 [ 155.414177][ T8883] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 155.456650][ T8884] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.469913][ T8884] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 155.481307][ T8884] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 155.846733][ T5824] Bluetooth: hci4: link tx timeout [ 155.853268][ T5824] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.863115][ T5836] Bluetooth: hci4: link tx timeout [ 155.868412][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.886656][ T8899] ip6tnl0: Caught tx_queue_len zero misconfig [ 155.983234][ T8901] xt_TCPMSS: Only works on TCP SYN packets [ 156.047560][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.116959][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 156.137060][ T8912] netlink: 112 bytes leftover after parsing attributes in process `syz.0.767'. [ 156.308140][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 156.433698][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 156.730827][ T8946] netlink: 'syz.2.775': attribute type 2 has an invalid length. [ 156.778325][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 156.797903][ T8946] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.775'. [ 157.167775][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.899448][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 158.267375][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.367675][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.467528][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.567508][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.667463][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.767517][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.867525][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.977475][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.077420][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.177647][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.277526][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.427263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.377302][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.477474][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.982417][ T161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 172.577319][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.677566][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.777627][ T7300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.877439][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.977455][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.077493][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.997796][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.031132][ T8957] bridge0: port 3(syz_tun) entered blocking state [ 179.037803][ T8957] bridge0: port 3(syz_tun) entered listening state [ 179.179620][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.221266][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.230471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.387389][ T8982] netlink: 'syz.0.785': attribute type 1 has an invalid length. [ 179.437280][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.451496][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.492787][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.521020][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 179.815493][ T9004] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 179.932520][ T9004] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 179.968772][ T9004] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 180.043738][ T9004] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 180.150645][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 180.228908][ T9004] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 180.335441][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 180.388507][ T9004] bond9: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 180.491240][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 180.504493][ T8267] IPVS: starting estimator thread 0... [ 180.584053][ T9004] bond10: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 180.607081][ T9057] IPVS: using max 26 ests per chain, 62400 per kthread [ 180.650587][ T9063] syzkaller0: entered promiscuous mode [ 180.656276][ T9063] syzkaller0: entered allmulticast mode [ 180.657788][ T9065] netlink: 'syz.0.802': attribute type 3 has an invalid length. [ 181.068179][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 181.098106][ C1] bridge0: port 3(syz_tun) entered learning state [ 181.113514][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 181.160917][ T9091] netlink: 52 bytes leftover after parsing attributes in process `syz.3.814'. [ 181.182920][ T9088] erspan0: entered promiscuous mode [ 181.190927][ T9088] gretap0: entered promiscuous mode [ 181.230747][ T9095] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 181.251242][ T9095] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 181.420812][ T35] net_ratelimit: 5 callbacks suppressed [ 181.420831][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.430688][ T9104] netlink: 'syz.4.818': attribute type 11 has an invalid length. [ 181.506518][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'. [ 181.664983][ T9118] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.672903][ T9118] team0: Device macvlan2 is already an upper device of the team interface [ 181.770306][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 181.800690][ T9127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.803421][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.809916][ T9127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.817610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.838913][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 181.907227][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.916001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.951076][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.961576][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.970990][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.305357][ T9145] netlink: 'syz.0.831': attribute type 30 has an invalid length. [ 182.369785][ T9148] netlink: 'syz.0.831': attribute type 30 has an invalid length. [ 182.397537][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.415031][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.465362][ T9153] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 182.475906][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.542396][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.734690][ T9166] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 182.787576][ T9169] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 182.947691][ T9179] netlink: 'syz.4.842': attribute type 4 has an invalid length. [ 183.145942][ T9194] netlink: 'syz.4.845': attribute type 24 has an invalid length. [ 183.177050][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 183.183750][ C1] bridge0: topology change detected, propagating [ 183.322405][ T9205] lo: Caught tx_queue_len zero misconfig [ 186.066046][ T9189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.327854][ T9261] syz.4.866 (9261) used obsolete PPPIOCDETACH ioctl [ 186.544200][ T9275] __nla_validate_parse: 8 callbacks suppressed [ 186.544220][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 186.667379][ T9281] syzkaller0: entered promiscuous mode [ 186.673060][ T9281] syzkaller0: entered allmulticast mode [ 186.889721][ T9293] net_ratelimit: 8 callbacks suppressed [ 186.889741][ T9293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.960452][ T9293] team0: No ports can be present during mode change [ 187.396739][ T9326] netlink: 'syz.2.883': attribute type 2 has an invalid length. [ 188.896295][ T9420] netlink: 260 bytes leftover after parsing attributes in process `syz.2.912'. [ 188.961821][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.912'. [ 189.245137][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 189.547876][ T9460] netlink: 72 bytes leftover after parsing attributes in process `syz.2.926'. [ 189.812428][ T9478] openvswitch: netlink: Key type 339 is out of range max 32 [ 189.858109][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.933'. [ 189.897174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.905693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.914550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.923187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.012093][ T9489] Cannot find add_set index 2 as target [ 190.085217][ T9497] Unsupported ieee802154 address type: 0 [ 190.149436][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 190.454331][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 190.498976][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 190.539431][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 191.633175][ T9580] __nla_validate_parse: 5 callbacks suppressed [ 191.633195][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 191.890906][ T9586] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.908070][ T9586] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.922444][ T9588] netlink: 'syz.3.961': attribute type 11 has an invalid length. [ 191.942635][ T9588] netlink: 224 bytes leftover after parsing attributes in process `syz.3.961'. [ 192.294797][ T9605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.304277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.525831][ T9610] tap0: tun_chr_ioctl cmd 1074025676 [ 192.549636][ T9610] tap0: owner set to 0 [ 192.563133][ T9615] netlink: 766 bytes leftover after parsing attributes in process `syz.1.970'. [ 192.831117][ T9637] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 192.862922][ T9640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.973'. [ 192.900875][ T9637] netlink: 17 bytes leftover after parsing attributes in process `syz.1.974'. [ 192.909423][ T9641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.181314][ T9653] netlink: zone id is out of range [ 193.186496][ T9653] netlink: zone id is out of range [ 193.208176][ T9653] netlink: zone id is out of range [ 193.213348][ T9653] netlink: zone id is out of range [ 193.233131][ T9653] netlink: zone id is out of range [ 193.259286][ T9653] netlink: zone id is out of range [ 193.261133][ T9665] netlink: 8700 bytes leftover after parsing attributes in process `syz.2.979'. [ 193.264448][ T9653] netlink: zone id is out of range [ 193.264461][ T9653] netlink: zone id is out of range [ 193.349095][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.388455][ T9664] bridge_slave_0 (unregistering): left allmulticast mode [ 193.423659][ T9664] bridge_slave_0 (unregistering): left promiscuous mode [ 193.444348][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.724006][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 194.018690][ T9704] netlink: 10308 bytes leftover after parsing attributes in process `syz.1.992'. [ 194.050555][ T9704] netlink: 'syz.1.992': attribute type 3 has an invalid length. [ 194.203705][ T9719] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 194.354127][ T9725] bond11 (unregistering): Released all slaves [ 194.382309][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468366][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 194.476549][ T9712] bond11: (slave gretap1): making interface the new active one [ 194.486444][ T9712] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 194.530464][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.995'. [ 194.547990][ T9712] 8021q: adding VLAN 0 to HW filter on device bond11 [ 194.759773][ T9754] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 194.818048][ T9752] veth0_to_bond: entered allmulticast mode [ 195.631714][ T9807] syzkaller0: entered promiscuous mode [ 195.658162][ T9807] syzkaller0: entered allmulticast mode [ 195.665291][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 195.721597][ T9812] bridge4: entered promiscuous mode [ 195.729258][ T9812] bridge4: entered allmulticast mode [ 195.736485][ T9816] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.136119][ T9844] vxcan2: entered allmulticast mode [ 196.381544][ T9855] tunl0: entered promiscuous mode [ 196.397237][ T9855] netlink: 'syz.0.1039': attribute type 3 has an invalid length. [ 196.593101][ T9868] netlink: 'syz.0.1042': attribute type 83 has an invalid length. [ 196.840248][ T9882] __nla_validate_parse: 8 callbacks suppressed [ 196.840270][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 196.902295][ T9886] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 197.075153][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'. [ 197.415533][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'. [ 197.523478][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1061'. [ 197.561481][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 197.703484][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 197.724376][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 197.812429][ T9932] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.878189][ T9935] net_ratelimit: 189 callbacks suppressed [ 197.878208][ T9935] netlink: set zone limit has 4 unknown bytes [ 197.905530][ T9932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.981367][ T9932] netlink: 'syz.4.1063': attribute type 13 has an invalid length. [ 197.990353][ T9932] netlink: 'syz.4.1063': attribute type 58 has an invalid length. [ 198.026191][ T9932] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1063'. [ 198.353549][ T9960] syzkaller0: entered promiscuous mode [ 198.363701][ T9960] syzkaller0: entered allmulticast mode [ 198.505417][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 198.608174][ T9969] team1: entered promiscuous mode [ 198.633552][ T9969] team1: entered allmulticast mode [ 198.840323][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'. [ 200.249723][T10063] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 200.869278][T10102] team0: No ports can be present during mode change [ 200.895884][T10105] 8021q: VLANs not supported on ip_vti0 [ 201.187986][T10127] sctp: [Deprecated]: syz.2.1124 (pid 10127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.187986][T10127] Use struct sctp_sack_info instead [ 202.249137][T10145] syzkaller0: entered promiscuous mode [ 202.254636][T10145] syzkaller0: entered allmulticast mode [ 202.907273][ T2939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.824488][T10105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.003960][T10154] __nla_validate_parse: 1 callbacks suppressed [ 204.003979][T10154] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1133'. [ 204.025308][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1133'. [ 205.343481][T10166] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 205.537518][T10172] bond3: (slave gre0): Device is not bonding slave [ 205.553341][T10172] bond3: option active_slave: invalid value (gre0) [ 205.593830][T10172] bond3 (unregistering): Released all slaves [ 206.051749][T10211] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 206.058799][T10210] atomic_op ffff888078c15198 conn xmit_atomic 0000000000000000 [ 206.200166][T10211] 8021q: adding VLAN 0 to HW filter on device bond13 [ 206.314516][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 206.326768][T10219] 8021q: adding VLAN 0 to HW filter on device bond13 [ 206.358328][T10219] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.398812][T10219] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 206.576091][T10211] veth9: entered promiscuous mode [ 206.587383][T10211] bond13: (slave veth9): Enslaving as an active interface with a down link [ 206.616522][T10225] vlan3: entered allmulticast mode [ 206.625901][T10225] bond13: entered allmulticast mode [ 206.662025][T10239] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 206.669928][T10239] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1158'. [ 206.679307][T10239] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1158'. [ 206.701372][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 206.701391][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 206.701425][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 206.707458][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 206.711213][T10239] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 206.748484][T10239] netlink: 'syz.1.1158': attribute type 8 has an invalid length. [ 206.756452][T10239] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1158'. [ 206.804916][T10243] netlink: 'syz.3.1159': attribute type 7 has an invalid length. [ 207.014981][T10245] syzkaller1: entered promiscuous mode [ 207.022908][T10245] syzkaller1: entered allmulticast mode [ 207.047666][T10245] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 207.115801][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 207.143561][T10252] bond0: entered promiscuous mode [ 207.152962][T10252] batadv0: entered promiscuous mode [ 207.161106][T10252] debugfs: 'hsr1' already exists in 'hsr' [ 207.168415][T10252] Cannot create hsr debugfs directory [ 207.174056][T10252] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 207.184714][T10252] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 207.196401][T10252] hsr1: entered promiscuous mode [ 207.202527][T10252] hsr1: entered allmulticast mode [ 207.211651][T10252] bond0: entered allmulticast mode [ 207.217596][T10252] batadv0: entered allmulticast mode [ 207.223752][T10252] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 207.233874][T10252] bond0: left promiscuous mode [ 207.239736][T10252] batadv0: left promiscuous mode [ 207.272909][T10259] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 207.298555][T10259] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1160'. [ 207.327304][T10266] 8021q: VLANs not supported on ip6_vti0 [ 207.374403][T10245] bond14: (slave geneve3): making interface the new active one [ 207.406506][T10245] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 207.457053][ T7300] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.478595][ T7300] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.499855][T10275] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.519872][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.676706][ T7300] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.708405][ T7300] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 207.839022][T10290] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 207.865886][T10290] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 208.490673][T10323] syzkaller1: entered promiscuous mode [ 208.502294][T10323] syzkaller1: entered allmulticast mode [ 208.562107][T10275] infiniband syz1: set down [ 208.577834][T10275] infiniband syz1: added bond_slave_0 [ 208.603232][T10275] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 208.622126][T10275] infiniband syz1: Couldn't open port 1 [ 208.743981][T10275] RDS/IB: syz1: added [ 208.750603][T10275] smc: adding ib device syz1 with port count 1 [ 208.758718][T10275] smc: ib device syz1 port 1 has no pnetid [ 208.897796][T10343] syzkaller0: entered promiscuous mode [ 208.916142][T10343] syzkaller0: entered allmulticast mode [ 209.071805][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 209.726476][T10396] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 209.762599][T10396] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1208'. [ 210.249536][T10411] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 210.329479][T10412] netlink: 'syz.4.1212': attribute type 9 has an invalid length. [ 210.364232][T10412] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1212'. [ 210.685889][T10435] xt_TCPMSS: Only works on TCP SYN packets [ 210.721306][T10435] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1220'. [ 211.245231][T10463] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1227'. [ 211.270847][T10463] 8021q: VLANs not supported on gre0 [ 211.404657][ T8267] IPVS: starting estimator thread 0... [ 211.504779][T10474] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.632369][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 211.659392][T10478] validate_nla: 3 callbacks suppressed [ 211.659411][T10478] netlink: 'syz.0.1232': attribute type 7 has an invalid length. [ 211.688022][T10478] netlink: 'syz.0.1232': attribute type 8 has an invalid length. [ 211.706360][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 211.921864][T10484] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 212.308009][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 212.624341][ T8267] IPVS: starting estimator thread 0... [ 212.706417][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 212.716139][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 212.757713][T10517] IPVS: using max 25 ests per chain, 60000 per kthread [ 212.771559][T10523] bond15: entered promiscuous mode [ 212.799601][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 212.812264][T10523] 8021q: adding VLAN 0 to HW filter on device bond15 [ 212.956289][T10523] 8021q: adding VLAN 0 to HW filter on device bond15 [ 212.988019][T10523] bond15: (slave sit1): The slave device specified does not support setting the MAC address [ 213.039054][T10523] bond15: (slave sit1): Error -95 calling set_mac_address [ 213.173403][T10552] tipc: Enabled bearer , priority 10 [ 213.995075][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.111285][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.292270][T10616] __nla_validate_parse: 5 callbacks suppressed [ 214.292290][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'. [ 214.322172][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.379361][T10621] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 214.404978][T10623] siw: device registration error -23 [ 214.790948][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 214.963419][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 215.442767][T10675] syzkaller1: entered promiscuous mode [ 215.501014][T10675] syzkaller1: entered allmulticast mode [ 215.579981][T10675] syzkaller0: entered promiscuous mode [ 215.586973][T10675] syzkaller0: entered allmulticast mode [ 215.834635][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 216.258735][T10717] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1302'. [ 216.285384][T10717] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 216.305643][T10717] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1302'. [ 216.326273][T10716] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1302'. [ 216.341223][T10716] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 216.349204][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'. [ 216.360775][T10716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1302'. [ 216.996160][T10748] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1311'. [ 217.181710][T10750] netlink: 'syz.2.1312': attribute type 21 has an invalid length. [ 217.207535][T10750] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.227789][T10750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.235072][T10750] IPv6: NLM_F_CREATE should be set when creating new route [ 217.242394][T10750] IPv6: NLM_F_CREATE should be set when creating new route [ 217.249701][T10750] IPv6: NLM_F_CREATE should be set when creating new route [ 217.568518][T10764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.610576][T10761] syzkaller1: entered promiscuous mode [ 217.616097][T10761] syzkaller1: entered allmulticast mode [ 217.633984][T10761] xt_hashlimit: size too large, truncated to 1048576 [ 217.839912][T10779] netlink: 'syz.2.1320': attribute type 11 has an invalid length. [ 217.928554][T10779] veth11: entered allmulticast mode [ 218.328184][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.357210][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.387698][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.411643][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.413607][T10804] xt_hashlimit: size too large, truncated to 1048576 [ 218.419287][T10806] IPVS: ip_vs_add_dest(): server weight less than zero [ 218.428369][ T24] IPVS: starting estimator thread 0... [ 218.527776][T10808] IPVS: using max 27 ests per chain, 64800 per kthread [ 218.610010][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.628945][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.657242][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.675438][T10798] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 218.895439][T10826] netlink: zone id is out of range [ 218.903060][T10826] netlink: zone id is out of range [ 218.909156][T10826] netlink: zone id is out of range [ 218.914286][T10826] netlink: zone id is out of range [ 218.920762][T10826] netlink: zone id is out of range [ 218.925900][T10826] netlink: zone id is out of range [ 218.931665][T10826] netlink: zone id is out of range [ 218.936796][T10826] netlink: zone id is out of range [ 219.061002][T10832] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 219.330465][T10852] net_ratelimit: 186 callbacks suppressed [ 219.330485][T10852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.386586][T10855] __nla_validate_parse: 71 callbacks suppressed [ 219.386609][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 219.434754][T10853] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 219.502474][T10853] bond7 (unregistering): Released all slaves [ 219.553775][T10857] 8021q: adding VLAN 0 to HW filter on device .` [ 219.563444][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.582373][T10857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.715329][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 219.752952][T10867] bridge0: entered promiscuous mode [ 219.760319][T10867] macsec2: entered promiscuous mode [ 219.765731][T10867] macsec2: entered allmulticast mode [ 219.773780][T10867] bridge0: entered allmulticast mode [ 219.788923][T10867] bridge0: port 1(macsec2) entered blocking state [ 219.798915][T10867] bridge0: port 1(macsec2) entered disabled state [ 219.811488][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 219.829989][T10867] bridge0: left allmulticast mode [ 219.835238][T10867] bridge0: left promiscuous mode [ 219.909040][T10870] delete_channel: no stack [ 220.006670][T10886] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1355'. [ 220.085507][T10889] veth0: entered promiscuous mode [ 220.093508][T10889] veth0: left promiscuous mode [ 220.720840][T10916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'. [ 220.960004][T10944] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1369'. [ 220.996556][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 221.030908][T10946] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1373'. [ 221.103975][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 221.106186][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 221.384204][ T7300] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.404801][ T7300] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.425574][ T7300] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.444886][ T7300] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.981534][T10992] 8021q: VLANs not supported on wg1 [ 222.728497][T10976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.831100][T10976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.937788][T10976] macvtap0: left allmulticast mode [ 223.139010][T10976] bond1: left promiscuous mode [ 223.143905][T10976] bond1: left allmulticast mode [ 223.153470][T10976] bond2: left promiscuous mode [ 223.162737][T10976] bridge1: left promiscuous mode [ 223.202675][T10976] bridge4: left promiscuous mode [ 223.209797][T10976] bridge4: left allmulticast mode [ 223.218694][T10976] team1: left promiscuous mode [ 223.225152][T10976] team1: left allmulticast mode [ 223.231701][T10997] validate_nla: 65 callbacks suppressed [ 223.231717][T10997] netlink: 'syz.3.1387': attribute type 7 has an invalid length. [ 223.376576][ T161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.389475][ T161] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.409334][ T161] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.433528][ T161] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.467514][T11029] veth1_to_batadv: mtu less than device minimum [ 223.491934][T11029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.534651][T11029] bond0: (slave rose0): Enslaving as an active interface with an up link [ 225.114222][T11007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.381302][T11085] syzkaller0: entered promiscuous mode [ 225.396081][T11085] syzkaller0: entered allmulticast mode [ 225.479586][T11096] __nla_validate_parse: 5 callbacks suppressed [ 225.479606][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 225.553480][T11096] hsr_slave_0: left promiscuous mode [ 225.563713][T11096] hsr_slave_1: left promiscuous mode [ 225.571209][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1406'. [ 225.913759][T11123] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 225.921986][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 226.013404][T11131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1416'. [ 226.084537][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 226.772514][T11168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.915154][T11174] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.000038][T11179] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 227.065422][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 227.077615][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 227.095659][T11179] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.288322][T11179] veth3: entered promiscuous mode [ 227.312617][T11179] bond7: (slave veth3): Enslaving as an active interface with a down link [ 227.352049][T11187] vlan3: entered allmulticast mode [ 227.357789][T11187] bond7: entered allmulticast mode [ 227.365963][T11187] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 227.544035][T11201] gre2: entered promiscuous mode [ 227.576055][T11201] gre2: entered allmulticast mode [ 227.641415][T11194] syzkaller1: entered promiscuous mode [ 227.675367][T11194] syzkaller1: entered allmulticast mode [ 227.713955][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 228.337967][T11230] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1441'. [ 228.390920][T11235] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1440'. [ 228.392192][T11230] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 228.419800][T11235] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 228.728738][T11273] gretap0: entered promiscuous mode [ 228.734412][T11273] vlan2: entered promiscuous mode [ 228.870407][T11280] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 228.887544][T11281] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 228.950438][T11284] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 228.997562][T11284] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 229.015740][T11284] netlink: 'syz.3.1450': attribute type 8 has an invalid length. [ 229.416186][T11310] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 229.814481][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.862035][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.877854][T11333] sctp: [Deprecated]: syz.4.1465 (pid 11333) Use of int in max_burst socket option. [ 229.877854][T11333] Use struct sctp_assoc_value instead [ 229.894845][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.912178][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.932586][T11339] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 229.950656][T11339] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 229.961922][T11339] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 229.971496][T11339] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 230.188910][T11347] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 230.622530][T11365] __nla_validate_parse: 6 callbacks suppressed [ 230.622551][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 230.661882][T11365] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 230.675988][T11370] syzkaller0: entered promiscuous mode [ 230.683787][T11370] syzkaller0: entered allmulticast mode [ 230.732573][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 230.742455][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 230.764698][T11376] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.775263][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 230.905382][T11384] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 230.914157][T11384] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1480'. [ 230.924512][T11384] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1480'. [ 230.934913][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 231.059196][T11387] syzkaller0: entered promiscuous mode [ 231.064732][T11387] syzkaller0: entered allmulticast mode [ 231.255033][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 231.661894][T11431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1493'. [ 231.681804][T11433] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 231.720164][T11433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.745804][T11436] netlink: 'syz.1.1494': attribute type 21 has an invalid length. [ 231.761347][T11433] bond3: (slave veth7): Enslaving as an active interface with a down link [ 231.794216][T11433] vlan0: entered allmulticast mode [ 231.800389][T11433] veth0_to_bond: entered allmulticast mode [ 231.808375][T11433] veth0_to_bond: entered promiscuous mode [ 231.815041][T11433] veth0_to_bond: left promiscuous mode [ 231.823821][T11433] bond3: (slave vlan0): Enslaving as an active interface with a down link [ 232.357824][T11420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.550148][T11457] ieee802154 phy1 wpan1: encryption failed: -90 [ 232.932934][T11485] macvlan0: entered promiscuous mode [ 233.089487][T11497] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1514'. [ 233.109563][T11497] NCSI netlink: No device for ifindex 65584 [ 233.118904][T11500] netlink: 'syz.3.1516': attribute type 11 has an invalid length. [ 233.310500][T11511] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 233.495155][T11507] syzkaller0: entered promiscuous mode [ 233.511824][T11507] syzkaller0: entered allmulticast mode [ 233.890956][T11542] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 233.934502][T11255] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.843154][T11587] validate_nla: 3 callbacks suppressed [ 234.843175][T11587] netlink: 'syz.2.1544': attribute type 2 has an invalid length. [ 235.316575][T11610] ipvlan3: entered allmulticast mode [ 235.334147][T11610] batadv_slave_1: entered allmulticast mode [ 235.360317][T11610] batman_adv: batadv0: Adding interface: ipvlan3 [ 235.366713][T11610] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.407211][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.425422][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.436250][T11610] batman_adv: batadv0: Interface activated: ipvlan3 [ 236.021114][T11642] __nla_validate_parse: 4 callbacks suppressed [ 236.021134][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 236.022436][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 236.045331][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 236.051227][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 236.072281][T11642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.080358][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 236.104743][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 236.129185][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1566'. [ 236.173279][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 236.185087][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 236.344790][T11655] bond4 (unregistering): Released all slaves [ 236.569097][T11666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.588296][T11666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.614122][T11666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.684944][T11669] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 236.858060][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1577'. [ 237.776322][T11723] siw: device registration error -23 [ 238.658426][T11793] netlink: 'syz.2.1607': attribute type 1 has an invalid length. [ 238.715896][T11793] 8021q: adding VLAN 0 to HW filter on device bond16 [ 238.739095][T11798] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 238.752491][T11798] bond16: entered allmulticast mode [ 239.144878][T11819] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 239.193338][T11819] bond4: entered promiscuous mode [ 239.199660][T11819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.251490][T11820] ipvlan1: entered allmulticast mode [ 239.257858][T11820] bond4: entered allmulticast mode [ 239.290827][T11819] ipvlan3: entered allmulticast mode [ 239.401840][T11836] macvlan0: entered promiscuous mode [ 239.625289][T11846] netlink: 'syz.3.1619': attribute type 39 has an invalid length. [ 239.663541][T11848] nbd: couldn't find a device at index 2 [ 240.042008][T11863] delete_channel: no stack [ 240.365289][T11875] bond9: option xmit_hash_policy: invalid value (64) [ 240.383836][T11875] bond9 (unregistering): Released all slaves [ 240.754528][T11899] syzkaller0: entered promiscuous mode [ 240.768871][T11903] xt_SECMARK: invalid mode: 9 [ 240.793284][T11899] syzkaller0: entered allmulticast mode [ 240.820865][T11899] netlink: 'syz.3.1635': attribute type 6 has an invalid length. [ 240.889592][T11908] FAULT_INJECTION: forcing a failure. [ 240.889592][T11908] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 240.922157][T11908] CPU: 0 UID: 0 PID: 11908 Comm: syz.1.1638 Not tainted syzkaller #0 PREEMPT(full) [ 240.922185][T11908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.922197][T11908] Call Trace: [ 240.922205][T11908] [ 240.922214][T11908] dump_stack_lvl+0xe8/0x150 [ 240.922251][T11908] should_fail_ex+0x412/0x560 [ 240.922284][T11908] _copy_from_user+0x2d/0xb0 [ 240.922309][T11908] ___sys_sendmsg+0x1c6/0x360 [ 240.922342][T11908] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.922404][T11908] ? __fget_files+0x2a/0x420 [ 240.922433][T11908] ? __fget_files+0x3a0/0x420 [ 240.922470][T11908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.922495][T11908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.922540][T11908] ? __pfx_ksys_write+0x10/0x10 [ 240.922575][T11908] do_syscall_64+0x14d/0xf80 [ 240.922599][T11908] ? trace_irq_disable+0x3b/0x150 [ 240.922628][T11908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.922649][T11908] ? clear_bhb_loop+0x40/0x90 [ 240.922675][T11908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.922696][T11908] RIP: 0033:0x7f0b74b9c799 [ 240.922716][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.922732][T11908] RSP: 002b:00007f0b75b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.922755][T11908] RAX: ffffffffffffffda RBX: 00007f0b74e15fa0 RCX: 00007f0b74b9c799 [ 240.922769][T11908] RDX: 0000000000040810 RSI: 00002000000005c0 RDI: 0000000000000003 [ 240.922782][T11908] RBP: 00007f0b75b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 240.922795][T11908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.922807][T11908] R13: 00007f0b74e16038 R14: 00007f0b74e15fa0 R15: 00007ffdfcb7db08 [ 240.922840][T11908] [ 240.941121][T11911] xt_l2tp: v2 doesn't support IP mode [ 241.214202][T11924] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 241.250176][T11927] netlink: 'syz.2.1643': attribute type 3 has an invalid length. [ 241.283309][T11250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.298237][T11250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.327988][T11930] __nla_validate_parse: 20 callbacks suppressed [ 241.328007][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 241.594843][T11942] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1648'. [ 241.665785][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 241.713350][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 241.741958][T11950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1649'. [ 241.831069][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 241.842465][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1650'. [ 242.036070][T11962] bridge0: port 2(syz_tun) entered blocking state [ 242.051667][T11962] bridge0: port 2(syz_tun) entered disabled state [ 242.072294][T11962] syz_tun: entered allmulticast mode [ 242.080600][T11962] syz_tun: entered promiscuous mode [ 242.102714][T11967] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 242.112584][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 242.330405][T11983] net_ratelimit: 31 callbacks suppressed [ 242.330429][T11983] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 242.451911][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 242.464659][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 242.592470][T11999] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 242.641516][T12004] IPv6: Can't replace route, no match found [ 242.866473][T12018] netlink: 'syz.2.1670': attribute type 21 has an invalid length. [ 243.608020][T12048] nbd3: detected capacity change from 0 to 63 [ 243.638755][ T5835] block nbd3: Receive control failed (result -104) [ 243.638756][ T5828] block nbd3: Receive control failed (result -32) [ 244.522941][T12104] ip_vti0: Master is either lo or non-ether device [ 244.797944][T12115] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.808084][T12123] netlink: 'syz.4.1706': attribute type 12 has an invalid length. [ 244.853730][T12118] team_slave_0: entered promiscuous mode [ 244.863315][T12118] team_slave_0: entered allmulticast mode [ 244.888881][T12128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.245385][T12147] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 245.265275][T12147] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 245.295290][T12151] syzkaller1: entered promiscuous mode [ 245.296425][T12147] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 245.318657][T12151] syzkaller1: entered allmulticast mode [ 245.621754][T12174] FAULT_INJECTION: forcing a failure. [ 245.621754][T12174] name failslab, interval 1, probability 0, space 0, times 1 [ 245.646966][T12174] CPU: 1 UID: 0 PID: 12174 Comm: syz.4.1723 Not tainted syzkaller #0 PREEMPT(full) [ 245.646997][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.647009][T12174] Call Trace: [ 245.647017][T12174] [ 245.647025][T12174] dump_stack_lvl+0xe8/0x150 [ 245.647059][T12174] should_fail_ex+0x412/0x560 [ 245.647094][T12174] should_failslab+0xa8/0x100 [ 245.647120][T12174] ? skb_clone+0x212/0x3a0 [ 245.647143][T12174] kmem_cache_alloc_noprof+0x87/0x650 [ 245.647164][T12174] ? __netlink_lookup+0xc6/0x8b0 [ 245.647196][T12174] skb_clone+0x212/0x3a0 [ 245.647231][T12174] __netlink_deliver_tap+0x404/0x850 [ 245.647274][T12174] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.647305][T12174] netlink_deliver_tap+0x19c/0x1b0 [ 245.647336][T12174] netlink_unicast+0x7e3/0x9b0 [ 245.647372][T12174] ? __pfx_netlink_unicast+0x10/0x10 [ 245.647402][T12174] ? netlink_sendmsg+0x650/0xb40 [ 245.647436][T12174] netlink_sendmsg+0x813/0xb40 [ 245.647472][T12174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.647507][T12174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.647537][T12174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.647563][T12174] ____sys_sendmsg+0x972/0x9f0 [ 245.647590][T12174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.647616][T12174] ? import_iovec+0x73/0xa0 [ 245.647636][T12174] ___sys_sendmsg+0x2a5/0x360 [ 245.647659][T12174] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.647706][T12174] ? __fget_files+0x2a/0x420 [ 245.647728][T12174] ? __fget_files+0x3a0/0x420 [ 245.647759][T12174] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.647779][T12174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.647806][T12174] ? __pfx_ksys_write+0x10/0x10 [ 245.647833][T12174] do_syscall_64+0x14d/0xf80 [ 245.647850][T12174] ? trace_irq_disable+0x3b/0x150 [ 245.647872][T12174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.647888][T12174] ? clear_bhb_loop+0x40/0x90 [ 245.647907][T12174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.647922][T12174] RIP: 0033:0x7f2d5b19c799 [ 245.647938][T12174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.647951][T12174] RSP: 002b:00007f2d5c10b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.647970][T12174] RAX: ffffffffffffffda RBX: 00007f2d5b415fa0 RCX: 00007f2d5b19c799 [ 245.647982][T12174] RDX: 0000000000040810 RSI: 00002000000005c0 RDI: 0000000000000003 [ 245.647992][T12174] RBP: 00007f2d5c10b090 R08: 0000000000000000 R09: 0000000000000000 [ 245.648001][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.648010][T12174] R13: 00007f2d5b416038 R14: 00007f2d5b415fa0 R15: 00007ffc74631488 [ 245.648036][T12174] [ 246.063470][T12183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.342040][T12200] netlink: 'syz.2.1730': attribute type 4 has an invalid length. [ 246.359741][T12200] __nla_validate_parse: 14 callbacks suppressed [ 246.359761][T12200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1730'. [ 246.379586][T12204] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 246.453224][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 246.531062][T12211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.853495][T12235] FAULT_INJECTION: forcing a failure. [ 246.853495][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 246.871761][T12235] CPU: 1 UID: 0 PID: 12235 Comm: syz.0.1738 Not tainted syzkaller #0 PREEMPT(full) [ 246.871790][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.871802][T12235] Call Trace: [ 246.871810][T12235] [ 246.871820][T12235] dump_stack_lvl+0xe8/0x150 [ 246.871855][T12235] should_fail_ex+0x412/0x560 [ 246.871890][T12235] should_failslab+0xa8/0x100 [ 246.871916][T12235] ? skb_clone+0x212/0x3a0 [ 246.871941][T12235] kmem_cache_alloc_noprof+0x87/0x650 [ 246.871962][T12235] ? __netlink_lookup+0xc6/0x8b0 [ 246.871990][T12235] skb_clone+0x212/0x3a0 [ 246.872019][T12235] __netlink_deliver_tap+0x404/0x850 [ 246.872064][T12235] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.872096][T12235] netlink_deliver_tap+0x19c/0x1b0 [ 246.872128][T12235] netlink_unicast+0x7e3/0x9b0 [ 246.872166][T12235] ? __pfx_netlink_unicast+0x10/0x10 [ 246.872196][T12235] ? netlink_sendmsg+0x650/0xb40 [ 246.872231][T12235] netlink_sendmsg+0x813/0xb40 [ 246.872270][T12235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.872306][T12235] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.872338][T12235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.872365][T12235] ____sys_sendmsg+0x972/0x9f0 [ 246.872400][T12235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.872435][T12235] ? import_iovec+0x73/0xa0 [ 246.872471][T12235] ___sys_sendmsg+0x2a5/0x360 [ 246.872501][T12235] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.872566][T12235] ? __fget_files+0x2a/0x420 [ 246.872596][T12235] ? __fget_files+0x3a0/0x420 [ 246.872638][T12235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.872666][T12235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.872706][T12235] ? __pfx_ksys_write+0x10/0x10 [ 246.872743][T12235] do_syscall_64+0x14d/0xf80 [ 246.872766][T12235] ? trace_irq_disable+0x3b/0x150 [ 246.872794][T12235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.872815][T12235] ? clear_bhb_loop+0x40/0x90 [ 246.872842][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.872863][T12235] RIP: 0033:0x7fd5fd59c799 [ 246.872883][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.872900][T12235] RSP: 002b:00007fd5fe4bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.872923][T12235] RAX: ffffffffffffffda RBX: 00007fd5fd816090 RCX: 00007fd5fd59c799 [ 246.872938][T12235] RDX: 0000000000040810 RSI: 00002000000005c0 RDI: 0000000000000003 [ 246.872951][T12235] RBP: 00007fd5fe4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 246.872963][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.872975][T12235] R13: 00007fd5fd816128 R14: 00007fd5fd816090 R15: 00007ffd6725e518 [ 246.873010][T12235] [ 249.281151][T12200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.291210][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1733'. [ 249.488211][T12257] netlink: 'syz.4.1743': attribute type 4 has an invalid length. [ 249.719326][T12268] bond6: option fail_over_mac: invalid value (16) [ 249.728790][T12268] bond6 (unregistering): Released all slaves [ 249.798227][T12276] [ 249.800614][T12276] ====================================================== [ 249.807835][T12276] WARNING: possible circular locking dependency detected [ 249.814900][T12276] syzkaller #0 Not tainted [ 249.819321][T12276] ------------------------------------------------------ [ 249.826341][T12276] syz.4.1749/12276 is trying to acquire lock: [ 249.832406][T12276] ffffffff8e883040 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 249.841731][T12276] [ 249.841731][T12276] but task is already holding lock: [ 249.849096][T12276] ffff888030476538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 249.858343][T12276] [ 249.858343][T12276] which lock already depends on the new lock. [ 249.858343][T12276] [ 249.868746][T12276] [ 249.868746][T12276] the existing dependency chain (in reverse order) is: [ 249.877758][T12276] [ 249.877758][T12276] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 249.885364][T12276] __mutex_lock+0x19f/0x1300 [ 249.890486][T12276] __ipv6_dev_mc_inc+0x4e/0xa50 [ 249.895870][T12276] addrconf_join_solict+0x104/0x190 [ 249.901590][T12276] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 249.907058][T12276] ipv6_sock_ac_join+0x6a8/0x880 [ 249.912646][T12276] do_ipv6_setsockopt+0x2031/0x31c0 [ 249.918369][T12276] ipv6_setsockopt+0x59/0x170 [ 249.923569][T12276] do_sock_setsockopt+0x17c/0x1b0 [ 249.929113][T12276] __x64_sys_setsockopt+0x13d/0x1b0 [ 249.934932][T12276] do_syscall_64+0x14d/0xf80 [ 249.940043][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.946459][T12276] [ 249.946459][T12276] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 249.954197][T12276] lock_sock_nested+0x48/0x100 [ 249.959489][T12276] inet_shutdown+0x6a/0x390 [ 249.964516][T12276] nbd_mark_nsock_dead+0x2e9/0x560 [ 249.970166][T12276] recv_work+0x1c7f/0x1d90 [ 249.975189][T12276] process_scheduled_works+0xb6e/0x18c0 [ 249.981265][T12276] worker_thread+0xa53/0xfc0 [ 249.986404][T12276] kthread+0x388/0x470 [ 249.991015][T12276] ret_from_fork+0x51e/0xb90 [ 249.996249][T12276] ret_from_fork_asm+0x1a/0x30 [ 250.001736][T12276] [ 250.001736][T12276] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 250.009624][T12276] __mutex_lock+0x19f/0x1300 [ 250.015386][T12276] nbd_queue_rq+0x37b/0x1100 [ 250.020530][T12276] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.026610][T12276] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.033463][T12276] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.039971][T12276] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.045701][T12276] blk_mq_dispatch_list+0xd16/0xe10 [ 250.051431][T12276] blk_mq_flush_plug_list+0x48d/0x570 [ 250.057441][T12276] __blk_flush_plug+0x3ed/0x4d0 [ 250.063201][T12276] __submit_bio+0x28d/0x580 [ 250.068248][T12276] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 250.074410][T12276] block_read_full_folio+0x599/0x830 [ 250.080223][T12276] filemap_read_folio+0x137/0x3b0 [ 250.085776][T12276] do_read_cache_folio+0x358/0x590 [ 250.091412][T12276] read_part_sector+0xb6/0x2b0 [ 250.096695][T12276] adfspart_check_ICS+0xa5/0xa40 [ 250.102159][T12276] bdev_disk_changed+0x7ba/0x1550 [ 250.107890][T12276] blkdev_get_whole+0x380/0x510 [ 250.113266][T12276] bdev_open+0x31e/0xd30 [ 250.118040][T12276] blkdev_open+0x470/0x610 [ 250.122980][T12276] do_dentry_open+0x785/0x14e0 [ 250.128267][T12276] vfs_open+0x3b/0x340 [ 250.132859][T12276] path_openat+0x2e08/0x3860 [ 250.137970][T12276] do_file_open+0x23e/0x4a0 [ 250.142991][T12276] do_sys_openat2+0x113/0x200 [ 250.148239][T12276] __x64_sys_openat+0x138/0x170 [ 250.153624][T12276] do_syscall_64+0x14d/0xf80 [ 250.158736][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.165159][T12276] [ 250.165159][T12276] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 250.172375][T12276] __mutex_lock+0x19f/0x1300 [ 250.177490][T12276] nbd_queue_rq+0xc6/0x1100 [ 250.182516][T12276] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.188583][T12276] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.195433][T12276] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.201936][T12276] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.207572][T12276] blk_mq_dispatch_list+0xd16/0xe10 [ 250.213295][T12276] blk_mq_flush_plug_list+0x48d/0x570 [ 250.219192][T12276] __blk_flush_plug+0x3ed/0x4d0 [ 250.224579][T12276] __submit_bio+0x28d/0x580 [ 250.229608][T12276] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 250.235763][T12276] block_read_full_folio+0x599/0x830 [ 250.241662][T12276] filemap_read_folio+0x137/0x3b0 [ 250.247228][T12276] do_read_cache_folio+0x358/0x590 [ 250.252866][T12276] read_part_sector+0xb6/0x2b0 [ 250.258167][T12276] adfspart_check_ICS+0xa5/0xa40 [ 250.263629][T12276] bdev_disk_changed+0x7ba/0x1550 [ 250.269176][T12276] blkdev_get_whole+0x380/0x510 [ 250.274552][T12276] bdev_open+0x31e/0xd30 [ 250.279313][T12276] blkdev_open+0x470/0x610 [ 250.284254][T12276] do_dentry_open+0x785/0x14e0 [ 250.289544][T12276] vfs_open+0x3b/0x340 [ 250.294139][T12276] path_openat+0x2e08/0x3860 [ 250.299257][T12276] do_file_open+0x23e/0x4a0 [ 250.304283][T12276] do_sys_openat2+0x113/0x200 [ 250.309485][T12276] __x64_sys_openat+0x138/0x170 [ 250.314862][T12276] do_syscall_64+0x14d/0xf80 [ 250.320070][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.326485][T12276] [ 250.326485][T12276] -> #3 (set->srcu){.+.+}-{0:0}: [ 250.333614][T12276] __synchronize_srcu+0xca/0x3e0 [ 250.339080][T12276] elevator_switch+0x1e8/0x7a0 [ 250.344364][T12276] elevator_change+0x2cc/0x450 [ 250.349649][T12276] elevator_set_default+0x36c/0x430 [ 250.355368][T12276] blk_register_queue+0x366/0x430 [ 250.360915][T12276] __add_disk+0x677/0xd50 [ 250.365865][T12276] add_disk_fwnode+0xfb/0x480 [ 250.371157][T12276] nbd_dev_add+0x72c/0xb50 [ 250.376180][T12276] nbd_init+0x168/0x1f0 [ 250.380858][T12276] do_one_initcall+0x250/0x8d0 [ 250.386185][T12276] do_initcall_level+0x104/0x190 [ 250.391741][T12276] do_initcalls+0x59/0xa0 [ 250.396591][T12276] kernel_init_freeable+0x2a6/0x3e0 [ 250.402309][T12276] kernel_init+0x1d/0x1d0 [ 250.407172][T12276] ret_from_fork+0x51e/0xb90 [ 250.412297][T12276] ret_from_fork_asm+0x1a/0x30 [ 250.417597][T12276] [ 250.417597][T12276] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 250.425505][T12276] __mutex_lock+0x19f/0x1300 [ 250.430621][T12276] elevator_change+0x1b3/0x450 [ 250.435995][T12276] elevator_set_none+0xb5/0x140 [ 250.441369][T12276] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 250.447700][T12276] nbd_start_device+0x17f/0xb10 [ 250.453072][T12276] nbd_genl_connect+0x165b/0x1cf0 [ 250.458615][T12276] genl_family_rcv_msg_doit+0x22a/0x330 [ 250.464686][T12276] genl_rcv_msg+0x61c/0x7a0 [ 250.469723][T12276] netlink_rcv_skb+0x232/0x4b0 [ 250.475014][T12276] genl_rcv+0x28/0x40 [ 250.479515][T12276] netlink_unicast+0x80f/0x9b0 [ 250.484805][T12276] netlink_sendmsg+0x813/0xb40 [ 250.490095][T12276] ____sys_sendmsg+0x972/0x9f0 [ 250.495392][T12276] ___sys_sendmsg+0x2a5/0x360 [ 250.500598][T12276] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.506076][T12276] do_syscall_64+0x14d/0xf80 [ 250.511192][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.517609][T12276] [ 250.517609][T12276] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 250.526229][T12276] blk_alloc_queue+0x546/0x680 [ 250.531515][T12276] __blk_mq_alloc_disk+0x197/0x390 [ 250.537205][T12276] nbd_dev_add+0x499/0xb50 [ 250.542158][T12276] nbd_init+0x168/0x1f0 [ 250.546843][T12276] do_one_initcall+0x250/0x8d0 [ 250.552163][T12276] do_initcall_level+0x104/0x190 [ 250.557621][T12276] do_initcalls+0x59/0xa0 [ 250.562469][T12276] kernel_init_freeable+0x2a6/0x3e0 [ 250.568184][T12276] kernel_init+0x1d/0x1d0 [ 250.573037][T12276] ret_from_fork+0x51e/0xb90 [ 250.578412][T12276] ret_from_fork_asm+0x1a/0x30 [ 250.583710][T12276] [ 250.583710][T12276] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 250.590925][T12276] __lock_acquire+0x15a5/0x2cf0 [ 250.596303][T12276] lock_acquire+0xf0/0x2e0 [ 250.601241][T12276] fs_reclaim_acquire+0x71/0x100 [ 250.606702][T12276] __kmalloc_cache_noprof+0x40/0x660 [ 250.612511][T12276] __ipv6_dev_mc_inc+0x44f/0xa50 [ 250.617975][T12276] ipv6_add_dev+0xe34/0x13a0 [ 250.623452][T12276] addrconf_notify+0x771/0x1050 [ 250.628826][T12276] notifier_call_chain+0x1be/0x400 [ 250.634556][T12276] register_netdevice+0x173a/0x1cf0 [ 250.640280][T12276] br_add_bridge+0xa3/0xf0 [ 250.645218][T12276] br_ioctl_stub+0x588/0xd60 [ 250.650418][T12276] sock_ioctl+0x523/0x7f0 [ 250.655276][T12276] __se_sys_ioctl+0xfc/0x170 [ 250.660407][T12276] do_syscall_64+0x14d/0xf80 [ 250.665519][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.671934][T12276] [ 250.671934][T12276] other info that might help us debug this: [ 250.671934][T12276] [ 250.682343][T12276] Chain exists of: [ 250.682343][T12276] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 250.682343][T12276] [ 250.694948][T12276] Possible unsafe locking scenario: [ 250.694948][T12276] [ 250.702400][T12276] CPU0 CPU1 [ 250.707765][T12276] ---- ---- [ 250.713125][T12276] lock(&idev->mc_lock); [ 250.717468][T12276] lock(sk_lock-AF_INET6); [ 250.724670][T12276] lock(&idev->mc_lock); [ 250.731517][T12276] lock(fs_reclaim); [ 250.735500][T12276] [ 250.735500][T12276] *** DEADLOCK *** [ 250.735500][T12276] [ 250.743635][T12276] 3 locks held by syz.4.1749/12276: [ 250.748829][T12276] #0: ffffffff8fbaf048 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 250.758064][T12276] #1: ffffffff8fbcdbc8 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 250.767155][T12276] #2: ffff888030476538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 250.776843][T12276] [ 250.776843][T12276] stack backtrace: [ 250.782739][T12276] CPU: 1 UID: 0 PID: 12276 Comm: syz.4.1749 Not tainted syzkaller #0 PREEMPT(full) [ 250.782759][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.782769][T12276] Call Trace: [ 250.782776][T12276] [ 250.782782][T12276] dump_stack_lvl+0xe8/0x150 [ 250.782806][T12276] print_circular_bug+0x2e1/0x300 [ 250.782832][T12276] check_noncircular+0x12e/0x150 [ 250.782858][T12276] __lock_acquire+0x15a5/0x2cf0 [ 250.782879][T12276] ? preempt_schedule_thunk+0x16/0x30 [ 250.782898][T12276] ? __mutex_lock+0x32d/0x1300 [ 250.782915][T12276] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 250.782939][T12276] ? __alloc_skb+0x4e5/0x7d0 [ 250.782954][T12276] lock_acquire+0xf0/0x2e0 [ 250.782973][T12276] ? __kmalloc_cache_noprof+0x40/0x660 [ 250.782990][T12276] ? __pfx___mutex_lock+0x10/0x10 [ 250.783009][T12276] fs_reclaim_acquire+0x71/0x100 [ 250.783027][T12276] ? __kmalloc_cache_noprof+0x40/0x660 [ 250.783043][T12276] __kmalloc_cache_noprof+0x40/0x660 [ 250.783061][T12276] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 250.783084][T12276] __ipv6_dev_mc_inc+0x44f/0xa50 [ 250.783108][T12276] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 250.783126][T12276] ipv6_add_dev+0xe34/0x13a0 [ 250.783157][T12276] addrconf_notify+0x771/0x1050 [ 250.783174][T12276] notifier_call_chain+0x1be/0x400 [ 250.783202][T12276] register_netdevice+0x173a/0x1cf0 [ 250.783227][T12276] ? __pfx_register_netdevice+0x10/0x10 [ 250.783244][T12276] ? alloc_netdev_mqs+0xc89/0x11b0 [ 250.783264][T12276] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 250.783284][T12276] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 250.783305][T12276] br_add_bridge+0xa3/0xf0 [ 250.783326][T12276] br_ioctl_stub+0x588/0xd60 [ 250.783348][T12276] ? do_vfs_ioctl+0x1166/0x1530 [ 250.783367][T12276] ? __pfx_br_ioctl_stub+0x10/0x10 [ 250.783388][T12276] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 250.783407][T12276] ? sock_ioctl+0x4fa/0x7f0 [ 250.783429][T12276] ? do_futex+0x333/0x420 [ 250.783453][T12276] ? __pfx_br_ioctl_stub+0x10/0x10 [ 250.783474][T12276] sock_ioctl+0x523/0x7f0 [ 250.783494][T12276] ? __pfx_sock_ioctl+0x10/0x10 [ 250.783513][T12276] ? __fget_files+0x2a/0x420 [ 250.783535][T12276] ? __fget_files+0x3a0/0x420 [ 250.783557][T12276] ? __fget_files+0x2a/0x420 [ 250.783580][T12276] ? bpf_lsm_file_ioctl+0x9/0x20 [ 250.783601][T12276] ? __pfx_sock_ioctl+0x10/0x10 [ 250.783620][T12276] __se_sys_ioctl+0xfc/0x170 [ 250.783638][T12276] do_syscall_64+0x14d/0xf80 [ 250.783655][T12276] ? trace_irq_disable+0x3b/0x150 [ 250.783677][T12276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.783693][T12276] ? clear_bhb_loop+0x40/0x90 [ 250.783711][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.783726][T12276] RIP: 0033:0x7f2d5b19c799 [ 250.783741][T12276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.783755][T12276] RSP: 002b:00007f2d5c10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.783771][T12276] RAX: ffffffffffffffda RBX: 00007f2d5b415fa0 RCX: 00007f2d5b19c799 [ 250.783783][T12276] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000005 [ 250.783794][T12276] RBP: 00007f2d5b232c99 R08: 0000000000000000 R09: 0000000000000000 [ 250.783804][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.783813][T12276] R13: 00007f2d5b416038 R14: 00007f2d5b415fa0 R15: 00007ffc74631488 [ 250.783830][T12276] SYZFAIL: failed to send rpc fd=3 want=368 sent=0 n=-1 (errno 32: Broken pipe) [ 251.198378][T12276] syzkaller0: entered allmulticast mode [ 251.261118][T12276] syzkaller0 (unregistering): left allmulticast mode [ 251.558449][ T5822] syz_tun (unregistering): left allmulticast mode [ 251.564942][ T5822] syz_tun (unregistering): left promiscuous mode [ 251.578141][ T5822] bridge0: port 2(syz_tun) entered disabled state [ 251.804921][T12276] bridge0: port 3(syz_tun) entered disabled state [ 251.820898][T12276] syz_tun (unregistering): left allmulticast mode [ 251.827708][T12276] syz_tun (unregistering): left promiscuous mode [ 251.834088][T12276] bridge0: port 3(syz_tun) entered disabled state [ 252.083962][T11248] bridge_slave_1: left allmulticast mode [ 252.098081][T11248] bridge_slave_1: left promiscuous mode [ 252.104066][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.116418][T11248] bridge_slave_0: left allmulticast mode [ 252.123197][T11248] bridge_slave_0: left promiscuous mode [ 252.129443][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.217539][T11248] .` (unregistering): (slave bridge0): Releasing backup interface [ 252.289281][T11248] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 252.490308][T11248] bond4 (unregistering): (slave .`): Releasing active interface [ 252.499930][T11248] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.509319][T11248] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.518565][T11248] .` (unregistering): Released all slaves [ 252.526147][T11248] bond1 (unregistering): Released all slaves [ 252.538399][T11248] bond2 (unregistering): Released all slaves [ 252.547945][T11248] bond3 (unregistering): Released all slaves [ 252.556783][T11248] bond4 (unregistering): Released all slaves [ 252.567779][T11248] bond0 (unregistering): Released all slaves [ 252.919449][T11248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.928628][T11248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.936579][T11248] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 252.944023][T11248] batman_adv: batadv0: Removing interface: ipvlan3 [ 252.982320][T11248] pimreg3 (unregistering): left allmulticast mode [ 253.119153][T11248] team0 (unregistering): Port device team_slave_1 removed [ 253.132348][T11248] team0 (unregistering): Port device team_slave_0 removed [ 253.454658][T11248] IPVS: stop unused estimator thread 0... [ 255.818995][ T1299] ieee802154 phy1 wpan1: encryption failed: -22