last executing test programs: 2.646810498s ago: executing program 0 (id=2037): r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @remote}, &(0x7f00000000c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r1, 0x4000) 2.276001313s ago: executing program 0 (id=2042): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.019874211s ago: executing program 0 (id=2045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x909}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0xace4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0xcf, &(0x7f0000000440)=""/207, 0x0, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x3, 0x8001}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x3, 0x4}, {0x2, 0x2, 0xd, 0x5}, {0x0, 0x1, 0x6, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0xf3, 0x29, &(0x7f0000000780)="513d4f3c2e7ee1620682a004a47875f4791830ecdc8b958e4a9489eb86c50bbc6b61196676617fdec032df29407741bc702db0f21061617537aca18123f0e34e4098b2944169eb2872d2a7bb05d8c7773e91e6c6694f3c046c38c2e3c9bf7620ddcde899a285fbdd67f96115a00b858d8534907063f5fb45c0123333a58c7e0875b60248e2addaf3315c2c29a18445ac1f1be9edc388a35f8f31b11037a3861196c390b90775039878ae42bb9f9469d9919ca1f2a39c53e801f639e3b1b45e370cbb50fdae5b68642beb3e1408c8b8b7c36f5182e431b663b50fba37cbf830c516be4cf24423b4b7c2eb0aa6a73311bca3b030", &(0x7f0000000880)=""/41, 0x40, 0x0, 0xb2, 0xb9, &(0x7f00000008c0)="a86b0c5c7757f01438ab35c100c3feffbdfc058d04672ddda852dda8940015b2084df36edfa6871af1814a956d40a46b76a3331fe5c0d38eded631b34496bee4a890ef46da0923740162ea4012a2c59aa046c1b9ce9589be35a251aa2c16284bbd765060d0820deba7991c8c672088a9955d5a66c1daac56b2235e5d816c2f6e2ad35a83247d24a278ab9bca7b99242c7db1f749b138cecb764a4337cd7bf6ec8c18a44dbadefe0ab2c36cd3ff4ac91f076d", &(0x7f0000000980)="520bfc38d01c9fa8496db7ded65de961adf20fd172204a46ed345800ace21015d7577483e7fb99aa64ebb26f5c9e88a04e5d55294f83e6d10cfcd3ea81d776f9bbd0d293761a793d26d313b43aa07df12fb6b01860d9a0d0823ce09fa673d5c9ddfd00bc2d25325dd376148b41bf41262fd70a22414460734d83edf48cb83328e6bbfe52a04805e01cbf72223063ed39a25b3a0cdb6feb312b40fbd82137a91796fafdd1471742708324b8ecdd96fde84d76ebc4b842564ea4", 0x0, 0x0, 0xe}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1.748528262s ago: executing program 3 (id=2050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572ad50372615d30b1c00000000000000000000000000000000000004"], 0x68) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1008000, 0x7fffffff, 0x8000, 0x6, 0x0, 0x1}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 1.743761799s ago: executing program 1 (id=2051): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x4040010) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) ioctl$XFS_IOC_GETPARENTS(r2, 0xc028583e, &(0x7f00000001c0)={{[0x4f3, 0x0, 0xdb2, 0xa]}, 0x0, 0x0, 0xb0, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x0, 0x1]}, {0x8, 0x7, 0x7ff, 0x10000}}, 0x1, 0x0, '-){\x00'}, {{@align=0x70000000000, {0x6, 0xe86e, 0x9, 0x8}}, 0x10, 0x0, '-$!):.%\'(*(\x00'}, {{@align=0x7fff, {0x1, 0x7, 0x0, 0x10000000000}}, 0x46c11381, 0x0, ':\x00'}, {{@_ha_fsid={[0x4, 0x4257]}, {0x1000, 0x7, 0xe, 0x7f}}, 0x6, 0x0, '##,:@\x00'}, {{@align=0x100, {0x4, 0xf7bc, 0x4, 0x5}}, 0x7, 0x0, '!\x00'}, {{@_ha_fsid={[0x1, 0x200]}, {0x800, 0x9, 0x7, 0x40}}, 0x9, 0x0, '\x00'}, {{@_ha_fsid={[0x81, 0x8]}, {0x81, 0x2, 0x3ff, 0x6b0f84cb}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x1, 0x2]}, {0x0, 0xe, 0x0, 0x9}}, 0x5, 0x0, '-\x00'}]}) 1.676395393s ago: executing program 4 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x9, 0xa}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001900010000000000000000001c140000fe000001000000000c00120002000000d717068042c520e186085e48f53de3c286ed70465e416036f40423518f783fbbefb3996b06bafbe8c124e1d442b0eb4ed997b322962290c670ea91edaf55e5b9254edb63e65e5122acab037dfa7cf5021d91e8cda26e77ea6a2a9475c110abbeeece65c94d1d26a148f1e41779e865d299b88ac2b5d58a53f832bc6b442ddd04ff7ec3b5603be9f4830f4882913a79734607934a33b56c50541cefccf1bbdb83595d13aa2a62be3124b317310a6ab9433c1b3fb6bac64ef56744b88aeec7cc02126573f081fd37c0c06b494b66f45112aca8a5ab06", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x941, 0xd}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x296}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 1.675814381s ago: executing program 0 (id=2053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1242f}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x4, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448d0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r4, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x75f81c1d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe8d4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.588138914s ago: executing program 2 (id=2054): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010001000fffffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000020000000240012800e00010069703665727370616e0000001000028006000f000e00000004001200"], 0x44}}, 0x40) 1.550637867s ago: executing program 3 (id=2055): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000), 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xa96) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xa6030a80) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) unshare(0x10041000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.35578143s ago: executing program 2 (id=2056): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x35, 0xffffffffffffffff}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x6) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1.225706125s ago: executing program 1 (id=2057): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.207194491s ago: executing program 4 (id=2058): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto(r0, 0x0, 0x0, 0x4854, &(0x7f0000000780)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffd88) (async) r1 = socket$inet6(0xa, 0xa, 0x3) (async) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0xfffffffa}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5, 0x5}, 0x8) (async) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x0, 0x2}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xd}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000680)={'caif0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) (async) setsockopt$inet_int(r14, 0x0, 0xe, &(0x7f0000000000)=0x6, 0x4) 1.080097968s ago: executing program 2 (id=2059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x200, 0x3, 0xfffffff8}) 957.856021ms ago: executing program 4 (id=2060): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9febff00180000000000000024000000240000000600000004000000000000070000000000000000010000850000000000000000010000000000000000000000da00"], 0x0, 0x42}, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000000000b00000000000000000100000d00000000ba3a47c2bb74b69483a0"], 0x0, 0x3a}, 0x20) 940.592398ms ago: executing program 3 (id=2061): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x800, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0xd0f}, 0x8) 775.732924ms ago: executing program 1 (id=2062): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048001}, 0x2000c000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'geneve1\x00', {0xffffffc0}, 0x9}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000140000000010800014000000009080001400000000b0800014000000015080001400000001508000240000080"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) 775.513601ms ago: executing program 2 (id=2063): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) socketpair(0x27, 0x800, 0x2, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 684.999619ms ago: executing program 4 (id=2064): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000066c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x64}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4488d}, 0x801) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000001) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc009, 0x20000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4a}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev, @mcast2, {[@routing={0x0, 0x0, 0xf5}]}}}}}, 0x0) 680.203043ms ago: executing program 3 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x9, 0xa, 0x6, 0x10, @mcast2, @mcast2, 0x7800, 0x7, 0x5, 0x4c}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@ipv4_newroute={0xe4, 0x18, 0x2, 0x70bd2c, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x4, 0xfc, 0x4, 0xfd, 0x4, 0x3300}, [@RTA_METRICS={0x96, 0x8, 0x0, 0x1, "3bb3c78f8b946dcce73821d3aef8e38f542d04230649200ff0227918e239da554792dde89b18b9966ba04a81caa5fbedeb54dbc34867dc29a4ef1bfcab4263a125d3c47a2422d8ffd963b655c461fc0d61e32507333793e7b75198d5e6f86b93d2f15d466d1673ddee6b4c9e5d39e90c9dd3e41d349b17ddc7ff5866e96ecf1e9fb53b45ce48f5d545ac194ffc368292fd28"}, @RTA_IP_PROTO={0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_MARK={0x8}, @RTA_OIF={0x8, 0x4, r1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x3, 0x3, 0xf, &(0x7f0000000280)=""/15}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='syztnl2\x00', 0x440000, &(0x7f0000000340)={@_ha_fsid={[0x4, 0x2]}, {0x7ff, 0xd, 0x400, 0x9}}, 0x80000001, &(0x7f0000000380), &(0x7f00000003c0)=0x10000}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x110, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6d}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xba0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3be}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x28c, 0x87]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x8, 0xf]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8842}, 0x4010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8211009}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x40841) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r5, 0x7fb9ce6771f466e7, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd5a4, 0x63}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x40000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000000c40)=0x3, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20084001) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xbc, r7, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x9c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}]}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20040041) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@fallback=r0, 0x3, 0x1, 0x3529, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={r2, r1, 0x25, 0x11, @val=@tcx={@void, @value, @void, @void, r12}}, 0x1c) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x405) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x6c, r5, 0x501, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc9a4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) connect$phonet_pipe(r11, &(0x7f0000001300)={0x23, 0xb, 0x2, 0x3}, 0x10) sendfile(r4, r9, 0x0, 0x9) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001380), r10) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, r13, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x24000050) 554.432042ms ago: executing program 2 (id=2066): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000048cdda7aeb0ffc02c6a6623d6900000005000000000000000108000f"], 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x38, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x24000000) 423.151028ms ago: executing program 1 (id=2067): socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r1, &(0x7f00000011c0)={0xa, 0x3ffd, 0x0, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 422.525608ms ago: executing program 3 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = epoll_create(0x3ff) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x40000162) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 421.981901ms ago: executing program 4 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x873}], 0x1}, 0x84) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt(r4, 0x84, 0x81, &(0x7f0000000240)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000002c0)={0x2}, 0x1) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000540)=""/231}, 0x20) 356.340624ms ago: executing program 0 (id=2070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x55) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x55) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000040)) (async) 248.20166ms ago: executing program 1 (id=2071): syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x42, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}, @nop]}}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1d, 0x4, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r0, 0x0, 0x8, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 132.468348ms ago: executing program 3 (id=2072): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ffb7261d7098a0209ab4cfdc00", 'i}oz', "96083e3263ae7725"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) recvfrom(r1, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 121.027119ms ago: executing program 2 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000440)=0xed) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x10c, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xfa, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x0, 0xe9}]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x48000}, 0x41) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r8, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x1400c000) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r7, 0xb) r10 = openat$cgroup(r5, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r11, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r12, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x4004085) 72.100322ms ago: executing program 0 (id=2074): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f00000007c0)="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", 0xfc) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0x0, 0x4, 0x4, 0xc, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x6}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x80000000}, &(0x7f0000000680)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00030006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r13], 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x148, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) 68.654884ms ago: executing program 1 (id=2075): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) r5 = socket(0x10, 0x803, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r7 = socket(0x11, 0x4e1cd492398427f7, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="310ba7ec", @ANYRES16=r8, @ANYBLOB="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"], 0x300}}, 0x20000000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x400c895}, 0x440b0) 0s ago: executing program 4 (id=2076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@any, 0xffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa030000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x2, 0x2, 0x1002, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): led state [ 77.199743][ T5633] bridge_slave_0: entered allmulticast mode [ 77.207018][ T5633] bridge_slave_0: entered promiscuous mode [ 77.228388][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.249025][ T5623] team0: Port device team_slave_1 added [ 77.255174][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.262484][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.269677][ T5633] bridge_slave_1: entered allmulticast mode [ 77.276994][ T5633] bridge_slave_1: entered promiscuous mode [ 77.294548][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.341976][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.348959][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.375141][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.399521][ T5632] team0: Port device team_slave_0 added [ 77.425906][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.433022][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.459266][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.472243][ T5635] team0: Port device team_slave_0 added [ 77.479754][ T5632] team0: Port device team_slave_1 added [ 77.498048][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.505124][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.531350][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.543505][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.551314][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.577467][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.591712][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.610647][ T5635] team0: Port device team_slave_1 added [ 77.634884][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.662568][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.669641][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.695794][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.708203][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.715239][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.741425][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.788563][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.795605][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.821993][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.835926][ T5633] team0: Port device team_slave_0 added [ 77.858832][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.865883][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.892180][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.905595][ T5633] team0: Port device team_slave_1 added [ 77.916377][ T5624] hsr_slave_0: entered promiscuous mode [ 77.922796][ T5624] hsr_slave_1: entered promiscuous mode [ 77.976969][ T5623] hsr_slave_0: entered promiscuous mode [ 77.983318][ T5623] hsr_slave_1: entered promiscuous mode [ 77.989814][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 77.995698][ T5623] Cannot create hsr debugfs directory [ 78.012548][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.019686][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.045645][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.057823][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.064825][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.090747][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.122681][ T5632] hsr_slave_0: entered promiscuous mode [ 78.128885][ T5632] hsr_slave_1: entered promiscuous mode [ 78.135294][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 78.141068][ T5632] Cannot create hsr debugfs directory [ 78.180222][ T5635] hsr_slave_0: entered promiscuous mode [ 78.186719][ T5635] hsr_slave_1: entered promiscuous mode [ 78.192980][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 78.198711][ T5635] Cannot create hsr debugfs directory [ 78.309120][ T5633] hsr_slave_0: entered promiscuous mode [ 78.316046][ T5633] hsr_slave_1: entered promiscuous mode [ 78.322309][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 78.328076][ T5633] Cannot create hsr debugfs directory [ 78.754008][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.771491][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.781696][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.793239][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.802077][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.813116][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.836252][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.848052][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.907359][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.917640][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.924964][ T4944] Bluetooth: hci1: command tx timeout [ 78.925002][ T4944] Bluetooth: hci0: command tx timeout [ 78.937283][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.946388][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.954247][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.963948][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.972536][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.982082][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.063162][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.076917][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.084327][ T50] Bluetooth: hci3: command tx timeout [ 79.090137][ T4944] Bluetooth: hci2: command tx timeout [ 79.090189][ T5640] Bluetooth: hci4: command tx timeout [ 79.099045][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.112814][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.126299][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.137260][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.145209][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.154421][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.273556][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.284008][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.300334][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.311425][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.319247][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.329539][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.347635][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.356586][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.395750][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.469816][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.490009][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.497793][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.506986][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.518638][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.526583][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.540095][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.549453][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.565567][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.577047][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.585408][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.598418][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.609313][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.616487][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.682382][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.700263][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.726277][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.733395][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.769013][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.776139][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.797580][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.829143][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.836497][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.862162][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.869291][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.919133][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.993891][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.029651][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.036881][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.077532][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.084777][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.204112][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.299200][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.345205][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.352463][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.416388][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.423609][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.875855][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.002143][ T5640] Bluetooth: hci0: command tx timeout [ 81.005377][ T4944] Bluetooth: hci1: command tx timeout [ 81.088077][ T5623] veth0_vlan: entered promiscuous mode [ 81.136023][ T5623] veth1_vlan: entered promiscuous mode [ 81.161186][ T4944] Bluetooth: hci2: command tx timeout [ 81.161699][ T5640] Bluetooth: hci3: command tx timeout [ 81.167492][ T50] Bluetooth: hci4: command tx timeout [ 81.197777][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.307224][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.363415][ T5623] veth0_macvtap: entered promiscuous mode [ 81.399708][ T5623] veth1_macvtap: entered promiscuous mode [ 81.429381][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.464394][ T5624] veth0_vlan: entered promiscuous mode [ 81.493334][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.522903][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.547927][ T5624] veth1_vlan: entered promiscuous mode [ 81.575537][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.585912][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609426][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.616582][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.626450][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.652026][ T5635] veth0_vlan: entered promiscuous mode [ 81.745482][ T5635] veth1_vlan: entered promiscuous mode [ 81.767109][ T5624] veth0_macvtap: entered promiscuous mode [ 81.786114][ T5624] veth1_macvtap: entered promiscuous mode [ 81.797115][ T5632] veth0_vlan: entered promiscuous mode [ 81.864908][ T5632] veth1_vlan: entered promiscuous mode [ 81.893960][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.930176][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.950050][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.958024][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.985484][ T5635] veth0_macvtap: entered promiscuous mode [ 82.014131][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.023858][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.039428][ T5635] veth1_macvtap: entered promiscuous mode [ 82.054363][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.063341][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.079741][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.088660][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.135220][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.156509][ T5632] veth0_macvtap: entered promiscuous mode [ 82.183964][ T5632] veth1_macvtap: entered promiscuous mode [ 82.219998][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.230483][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.316621][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.325593][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.351671][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.360482][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.374398][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.391180][ T5820] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 82.417141][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.425735][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.437596][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.457505][ T5633] veth0_vlan: entered promiscuous mode [ 82.498485][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.503778][ T5823] netlink: 'syz.3.4': attribute type 8 has an invalid length. [ 82.516144][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.553439][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.580440][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.599593][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.610021][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.618130][ T5633] veth1_vlan: entered promiscuous mode [ 82.719686][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.738351][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.880169][ T5633] veth0_macvtap: entered promiscuous mode [ 82.906574][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.925106][ T5633] veth1_macvtap: entered promiscuous mode [ 82.944423][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.954444][ T5827] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 82.999569][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.019763][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.053156][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.073616][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.078003][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.081193][ T4944] Bluetooth: hci1: command tx timeout [ 83.081737][ T50] Bluetooth: hci0: command tx timeout [ 83.142749][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.204459][ T5837] netlink: 'syz.0.7': attribute type 2 has an invalid length. [ 83.225463][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.227102][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 83.245891][ T50] Bluetooth: hci2: command tx timeout [ 83.252662][ T4944] Bluetooth: hci3: command tx timeout [ 83.253099][ T50] Bluetooth: hci4: command tx timeout [ 83.266430][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.267993][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 83.308109][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 83.335896][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.371658][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.387343][ T5841] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 83.438078][ T5840] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 83.583445][ T5848] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.615172][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.630533][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.658195][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.799234][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 83.845162][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.876931][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.947565][ T5859] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 83.996090][ T5860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 84.144550][ T5868] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 84.356881][ T5872] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 84.366031][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.389531][ T5864] Zero length message leads to an empty skb [ 84.421523][ T5872] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20003 [ 84.671521][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 85.209524][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 85.594674][ T5942] vcan0: entered allmulticast mode [ 85.929954][ T5964] netlink: 'syz.2.40': attribute type 32 has an invalid length. [ 85.944665][ T5951] veth3: entered promiscuous mode [ 86.331096][ T5986] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 86.355826][ T5986] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 86.788382][ T24] cfg80211: failed to load regulatory.db [ 86.879368][ T6006] netlink: 'syz.1.55': attribute type 8 has an invalid length. [ 86.909712][ T6006] sch_fq: defrate 0 ignored. [ 86.939604][ T6010] netlink: 'syz.3.56': attribute type 5 has an invalid length. [ 87.219263][ T6022] netlink: 'syz.0.61': attribute type 2 has an invalid length. [ 87.380449][ T6022] : entered promiscuous mode [ 87.464971][ T6031] syzkaller0: entered promiscuous mode [ 87.485989][ T6031] syzkaller0: entered allmulticast mode [ 87.531631][ T6037] pim6reg: entered allmulticast mode [ 87.544447][ T6039] pim6reg: left allmulticast mode [ 87.716984][ T6051] netlink: 'syz.4.68': attribute type 5 has an invalid length. [ 88.298019][ T6083] netlink: 'syz.3.79': attribute type 2 has an invalid length. [ 88.353866][ T6083] : entered promiscuous mode [ 88.376923][ T6086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.256261][ T6141] __nla_validate_parse: 8 callbacks suppressed [ 89.256279][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 89.306069][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 89.307713][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'. [ 89.603583][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 89.804538][ T6176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.951214][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 90.134018][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 90.228029][ T6185] macvtap1: entered promiscuous mode [ 90.245403][ T6185] vlan0: entered promiscuous mode [ 90.263175][ T6185] macvtap1: entered allmulticast mode [ 90.277179][ T6185] vlan0: entered allmulticast mode [ 90.295100][ T6185] veth0_vlan: entered allmulticast mode [ 90.687685][ T6220] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 90.697190][ T6220] batman_adv: batadv0: Adding interface: netdevsim0 [ 90.712948][ T6220] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.741038][ T6220] batman_adv: batadv0: Interface activated: netdevsim0 [ 90.787499][ T6223] ip6gre1: entered promiscuous mode [ 90.800665][ T6223] ip6gre1: entered allmulticast mode [ 90.880239][ T6242] netlink: 'syz.3.119': attribute type 5 has an invalid length. [ 91.256875][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 91.416380][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.127'. [ 91.488771][ T6267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 91.594627][ T6269] warning: `syz.3.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.714573][ T6273] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 91.725890][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 92.175015][ T6290] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 92.183075][ T6290] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 92.284081][ T6296] netlink: 'syz.3.139': attribute type 2 has an invalid length. [ 92.619178][ T6308] netlink: 52 bytes leftover after parsing attributes in process `syz.2.142'. [ 93.139296][ T6322] x_tables: duplicate underflow at hook 4 [ 93.796301][ T6347] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 93.847391][ T6347] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 94.139857][ T6358] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 94.311657][ T6363] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 94.341000][ T6363] __nla_validate_parse: 15 callbacks suppressed [ 94.341030][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.160'. [ 94.530470][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 94.541121][ T6363] team0: Port device geneve1 added [ 94.676837][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 94.686930][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 94.699321][ T6376] netlink: 176 bytes leftover after parsing attributes in process `syz.0.164'. [ 94.713308][ T6376] netlink: 'syz.0.164': attribute type 5 has an invalid length. [ 94.979972][ T6381] netlink: 'syz.3.166': attribute type 23 has an invalid length. [ 95.659448][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.766298][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 95.826277][ T6411] netlink: 176 bytes leftover after parsing attributes in process `syz.0.175'. [ 95.857495][ T6411] netlink: 'syz.0.175': attribute type 5 has an invalid length. [ 95.899330][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 95.938592][ T6415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.176'. [ 96.822177][ T6453] netlink: 'syz.2.188': attribute type 5 has an invalid length. [ 97.258891][ T6471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.334681][ T6469] bridge_slave_0: left allmulticast mode [ 97.392793][ T6469] bridge_slave_0: left promiscuous mode [ 97.427062][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.516368][ T6469] bridge_slave_1: left allmulticast mode [ 97.543416][ T6469] bridge_slave_1: left promiscuous mode [ 97.552819][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.614790][ T6469] bond0: (slave bond_slave_0): Releasing backup interface [ 97.689852][ T6469] bond0: (slave bond_slave_1): Releasing backup interface [ 97.807670][ T6469] team0: Port device team_slave_0 removed [ 97.879079][ T6469] team0: Port device team_slave_1 removed [ 97.901484][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.919720][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.976658][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.001313][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.058865][ T6469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.678753][ T6510] netlink: 'syz.0.204': attribute type 5 has an invalid length. [ 98.681448][ T6513] netlink: 'syz.2.206': attribute type 4 has an invalid length. [ 99.611068][ T6540] netlink: 'syz.0.214': attribute type 12 has an invalid length. [ 99.646094][ T6534] __nla_validate_parse: 18 callbacks suppressed [ 99.646122][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 99.755476][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.215'. [ 100.717139][ T5289] veth0_vlan: left promiscuous mode [ 100.839924][ T5818] veth0_vlan: entered promiscuous mode [ 101.010278][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 101.134394][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 101.165550][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 101.188302][ T6591] netlink: 176 bytes leftover after parsing attributes in process `syz.4.225'. [ 101.199308][ T6591] netlink: 'syz.4.225': attribute type 5 has an invalid length. [ 102.438766][ T6644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.237'. [ 102.501200][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 102.538261][ T6649] netlink: 176 bytes leftover after parsing attributes in process `syz.1.239'. [ 102.562599][ T6642] geneve2: entered promiscuous mode [ 102.602667][ T6649] netlink: 'syz.1.239': attribute type 5 has an invalid length. [ 102.629854][ T1024] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 55726 - 0 [ 102.721145][ T1024] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 55726 - 0 [ 102.751619][ T1024] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 55726 - 0 [ 102.794743][ T1024] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 55726 - 0 [ 103.643645][ T6678] block nbd0: Unsupported socket: should be TCP or UNIX. [ 103.913187][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 104.866414][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 104.944447][ T6674] infiniband syz2: set active [ 104.964872][ T6674] infiniband syz2: added bridge_slave_1 [ 105.038615][ T6674] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 105.056771][ T6674] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 105.075280][ T6674] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 105.128285][ T6674] RDS/IB: syz2: added [ 105.133301][ T6674] smc: adding ib device syz2 with port count 1 [ 105.145854][ T6674] smc: ib device syz2 port 1 has no pnetid [ 105.354410][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.259'. [ 105.376258][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.259'. [ 105.760794][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'. [ 106.098984][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.238953][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 106.318264][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 106.763599][ T6489] Set syz1 is full, maxelem 65536 reached [ 107.248694][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 107.310063][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 107.632959][ T6810] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 107.805483][ T6821] netlink: 'syz.3.281': attribute type 5 has an invalid length. [ 107.826974][ T6811] bond1 (unregistering): Released all slaves [ 107.874065][ T6819] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 108.115371][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.123252][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.138581][ T6831] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 108.195181][ T6828] netlink: 666 bytes leftover after parsing attributes in process `syz.2.282'. [ 108.276014][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.293217][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.435579][ T6825] vlan0: left allmulticast mode [ 108.442074][ T6825] veth0_vlan: left allmulticast mode [ 108.447423][ T6825] vlan0: left promiscuous mode [ 108.463255][ T6831] team0: entered promiscuous mode [ 108.473771][ T6831] team_slave_0: entered promiscuous mode [ 108.486377][ T6831] team_slave_1: entered promiscuous mode [ 108.543839][ T743] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.595061][ T743] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.628289][ T743] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.652699][ T743] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.709455][ T6839] openvswitch: netlink: Missing valid actions attribute. [ 108.725916][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.976848][ T6847] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 109.093023][ T6847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.167580][ T6850] bond1: (slave gretap1): making interface the new active one [ 109.198507][ T6850] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.839572][ T6878] syzkaller1: entered promiscuous mode [ 109.861812][ T6878] syzkaller1: entered allmulticast mode [ 109.993796][ T6885] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 110.385405][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 110.637446][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 110.743001][ T6918] netlink: 80 bytes leftover after parsing attributes in process `syz.1.303'. [ 111.137504][ T6933] syzkaller0: entered promiscuous mode [ 111.157228][ T6933] syzkaller0: entered allmulticast mode [ 111.204618][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 111.504312][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 111.674725][ T6962] syzkaller1: entered promiscuous mode [ 111.706064][ T6962] syzkaller1: entered allmulticast mode [ 111.732708][ T6971] netlink: 'syz.0.319': attribute type 3 has an invalid length. [ 111.770363][ T6973] netlink: 'syz.0.319': attribute type 3 has an invalid length. [ 111.981607][ T6981] netlink: 'syz.2.321': attribute type 7 has an invalid length. [ 111.996593][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 112.013547][ T6980] netlink: 176 bytes leftover after parsing attributes in process `syz.0.322'. [ 112.060450][ T6980] netlink: 'syz.0.322': attribute type 5 has an invalid length. [ 112.128318][ T6989] netlink: 80 bytes leftover after parsing attributes in process `syz.1.325'. [ 112.147638][ T14] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.151112][ T6981] netlink: 'syz.2.321': attribute type 7 has an invalid length. [ 112.177509][ T14] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.222082][ T14] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.244364][ T14] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.923982][ T7017] x_tables: duplicate underflow at hook 1 [ 112.942790][ T7016] trusted_key: syz.0.333 sent an empty control message without MSG_MORE. [ 113.226954][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 113.244717][ T7030] netlink: 176 bytes leftover after parsing attributes in process `syz.1.337'. [ 113.255573][ T7030] netlink: 'syz.1.337': attribute type 5 has an invalid length. [ 114.239940][ T7060] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 114.285883][ T7060] bond2 (unregistering): Released all slaves [ 114.405825][ T7070] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 114.442098][ T7063] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 114.566994][ T7074] netlink: 'syz.3.350': attribute type 5 has an invalid length. [ 114.843050][ T187] IPVS: starting estimator thread 0... [ 114.859372][ T7083] netlink: 'syz.2.354': attribute type 11 has an invalid length. [ 114.972502][ T7085] IPVS: using max 36 ests per chain, 86400 per kthread [ 115.827040][ T7129] __nla_validate_parse: 6 callbacks suppressed [ 115.827074][ T7129] netlink: 232 bytes leftover after parsing attributes in process `syz.1.364'. [ 115.933636][ T7127] syzkaller0: entered promiscuous mode [ 115.969542][ T7127] syzkaller0: entered allmulticast mode [ 116.300881][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.368'. [ 116.364552][ T7156] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.411776][ T7158] netlink: zone id is out of range [ 116.447382][ T7158] netlink: zone id is out of range [ 116.471379][ T7158] netlink: zone id is out of range [ 116.490524][ T7158] netlink: zone id is out of range [ 116.508834][ T7158] netlink: zone id is out of range [ 116.528204][ T7158] netlink: zone id is out of range [ 116.548320][ T7158] netlink: zone id is out of range [ 116.570764][ T7158] netlink: zone id is out of range [ 116.584722][ T7158] netlink: zone id is out of range [ 116.594580][ T7158] netlink: zone id is out of range [ 118.361653][ T7166] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 118.637471][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.374'. [ 118.734375][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.374'. [ 119.326527][ T7207] netlink: 232 bytes leftover after parsing attributes in process `syz.0.383'. [ 119.368843][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 119.407846][ T7213] syzkaller0: entered promiscuous mode [ 119.449430][ T7213] syzkaller0: entered allmulticast mode [ 119.838928][ T7225] syzkaller0: entered promiscuous mode [ 119.858463][ T7225] syzkaller0: entered allmulticast mode [ 120.619972][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 120.634681][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 120.735641][ T7261] bridge0: entered promiscuous mode [ 120.759879][ T7268] netlink: 96 bytes leftover after parsing attributes in process `syz.3.398'. [ 120.779787][ T7261] ip6gretap0: entered promiscuous mode [ 120.792997][ T7261] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 120.815836][ T7268] vlan2: entered allmulticast mode [ 120.821811][ T7268] gretap0: entered allmulticast mode [ 120.840389][ T7266] netlink: 666 bytes leftover after parsing attributes in process `syz.4.397'. [ 121.185423][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 121.281414][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 121.534982][ T7286] IPVS: Scheduler module ip_vs_sip not found [ 121.577117][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 121.598851][ T7294] netlink: 176 bytes leftover after parsing attributes in process `syz.0.405'. [ 121.610648][ T7294] netlink: 'syz.0.405': attribute type 5 has an invalid length. [ 121.668473][ T7297] netlink: 'syz.4.406': attribute type 12 has an invalid length. [ 121.886727][ T7300] macsec0: entered promiscuous mode [ 121.916396][ T7300] macsec0: entered allmulticast mode [ 122.308400][ T7328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.415'. [ 122.382935][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.392036][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.673753][ T7335] xt_hashlimit: size too large, truncated to 1048576 [ 122.719269][ T7337] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 122.767666][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.418'. [ 122.879928][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 122.957905][ T7342] netlink: 176 bytes leftover after parsing attributes in process `syz.4.419'. [ 122.988955][ T7350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.421'. [ 123.031080][ T7342] netlink: 'syz.4.419': attribute type 5 has an invalid length. [ 123.922033][ T7362] bond1: entered promiscuous mode [ 123.934467][ T7371] macvlan2: entered promiscuous mode [ 123.939806][ T7371] macvlan2: entered allmulticast mode [ 123.948488][ T7371] bond1: (slave macvlan2): Opening slave failed [ 123.967381][ T7375] syzkaller0: entered promiscuous mode [ 123.973008][ T7375] syzkaller0: entered allmulticast mode [ 124.064133][ T5289] veth1_macvtap: entered allmulticast mode [ 124.574999][ T7398] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.672468][ T7402] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 125.044975][ T7421] netlink: 'syz.0.434': attribute type 5 has an invalid length. [ 126.134871][ T7473] __nla_validate_parse: 9 callbacks suppressed [ 126.134889][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 126.195375][ T7473] netlink: 176 bytes leftover after parsing attributes in process `syz.0.448'. [ 126.246716][ T7473] netlink: 'syz.0.448': attribute type 5 has an invalid length. [ 126.270373][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 126.284381][ T7469] tipc: Started in network mode [ 126.317722][ T7469] tipc: Node identity caa3d444118a, cluster identity 4711 [ 126.368044][ T7469] tipc: Enabled bearer , priority 0 [ 126.398695][ T7476] syzkaller0: entered promiscuous mode [ 126.437587][ T7476] syzkaller0: entered allmulticast mode [ 126.477957][ T7469] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 126.654434][ T7467] tipc: Resetting bearer [ 126.761626][ T7467] tipc: Disabling bearer [ 127.114759][ T7504] syzkaller0: entered promiscuous mode [ 127.144087][ T7504] syzkaller0: entered allmulticast mode [ 127.733092][ T7528] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 127.885052][ T7528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.894373][ T7532] xt_nat: multiple ranges no longer supported [ 127.907930][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 127.929384][ T7533] bond2: (slave geneve2): making interface the new active one [ 127.943016][ T7533] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 127.994664][ T1024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.017798][ T1024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.028753][ T7537] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 128.040150][ T1024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.073543][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 128.115999][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 128.125682][ T7540] syzkaller0: entered promiscuous mode [ 128.153675][ T7540] syzkaller0: entered allmulticast mode [ 128.183878][ T7550] lo: entered allmulticast mode [ 128.411938][ T7556] netlink: 'syz.0.470': attribute type 28 has an invalid length. [ 128.425368][ T7556] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 128.446828][ T7556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.470'. [ 128.510866][ T7556] xt_TCPMSS: Only works on TCP SYN packets [ 128.782250][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 128.900888][ T7577] netlink: 596 bytes leftover after parsing attributes in process `syz.4.479'. [ 129.303522][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 129.664294][ T7617] gretap0: entered allmulticast mode [ 129.811414][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 130.168946][ T7634] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 130.275338][ T7639] gretap1: entered promiscuous mode [ 130.292915][ T7639] gretap1: entered allmulticast mode [ 130.896631][ T7664] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 131.256658][ T7678] IPv6: sit1: Disabled Multicast RS [ 131.321926][ T7678] sit1: entered allmulticast mode [ 131.341936][ T7683] __nla_validate_parse: 7 callbacks suppressed [ 131.341953][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 131.380926][ T7683] netlink: 11 bytes leftover after parsing attributes in process `syz.1.508'. [ 131.773515][ T7704] netlink: 288 bytes leftover after parsing attributes in process `syz.4.513'. [ 132.363520][ T7729] netlink: 96 bytes leftover after parsing attributes in process `syz.0.519'. [ 132.847486][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.855332][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.507837][ T7780] syzkaller0: entered promiscuous mode [ 133.534247][ T7780] syzkaller0: entered allmulticast mode [ 133.720415][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 134.000186][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 134.162277][ T7811] Bluetooth: MGMT ver 1.23 [ 134.303326][ T7816] net_ratelimit: 70 callbacks suppressed [ 134.303348][ T7816] openvswitch: netlink: Missing key (keys=40, expected=100) [ 134.330777][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 134.366891][ T7806] tipc: Invalid UDP bearer configuration [ 134.366998][ T7806] tipc: Enabling of bearer rejected, failed to enable media [ 134.587035][ T7825] netlink: 220 bytes leftover after parsing attributes in process `syz.2.543'. [ 134.878844][ T7836] netlink: 128 bytes leftover after parsing attributes in process `syz.0.546'. [ 134.946830][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'. [ 135.352988][ T7855] geneve2: entered promiscuous mode [ 136.897489][ T7935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.571'. [ 136.954034][ T7935] netlink: 43 bytes leftover after parsing attributes in process `syz.0.571'. [ 137.022131][ T7935] netlink: 'syz.0.571': attribute type 5 has an invalid length. [ 137.066708][ T7935] netlink: 43 bytes leftover after parsing attributes in process `syz.0.571'. [ 137.119752][ T7926] syzkaller0: entered promiscuous mode [ 137.143963][ T7926] syzkaller0: entered allmulticast mode [ 137.633860][ T7955] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 137.769730][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 137.801024][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 139.764422][ T7955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.828079][ T7958] bond1: (slave geneve2): making interface the new active one [ 139.848158][ T7958] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 140.065259][ T7974] netlink: 'syz.3.582': attribute type 4 has an invalid length. [ 140.158771][ T7978] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 140.316028][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 140.392264][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 140.543037][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 140.552686][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 140.656113][ T8003] xt_time: unknown flags 0xf4 [ 140.715274][ T7992] bond3: entered promiscuous mode [ 140.736574][ T7992] bond3: entered allmulticast mode [ 140.747909][ T7992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.796035][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 140.951093][ T8020] IPVS: set_ctl: invalid protocol: 44 172.20.20.14:20004 [ 140.966777][ T8022] IPVS: set_ctl: invalid protocol: 44 172.20.20.14:20004 [ 141.554056][ T8035] syzkaller0: entered promiscuous mode [ 141.588958][ T8035] syzkaller0: entered allmulticast mode [ 142.837672][ T8094] pim6reg527: entered allmulticast mode [ 142.964103][ T8108] netlink: 'syz.1.616': attribute type 12 has an invalid length. [ 142.981895][ T8108] netlink: 'syz.1.616': attribute type 29 has an invalid length. [ 143.047201][ T8108] __nla_validate_parse: 2 callbacks suppressed [ 143.047234][ T8108] netlink: 148 bytes leftover after parsing attributes in process `syz.1.616'. [ 143.110692][ T8108] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 143.133457][ T8108] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 143.153660][ T8108] netlink: 11 bytes leftover after parsing attributes in process `syz.1.616'. [ 143.236055][ T8117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.357558][ T8122] netlink: 'syz.2.621': attribute type 3 has an invalid length. [ 143.367269][ T8123] netlink: 'syz.4.620': attribute type 4 has an invalid length. [ 143.468236][ T8122] netlink: 'syz.2.621': attribute type 2 has an invalid length. [ 143.690185][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 143.764380][ T8151] xt_nfacct: accounting object `syz1' does not exist [ 143.828215][ T8145] bond2: entered promiscuous mode [ 143.835543][ T8145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.871581][ C1] syz_tun: tun_net_xmit 54 [ 143.980775][ C1] syz_tun: tun_net_xmit 54 [ 144.200917][ C1] syz_tun: tun_net_xmit 54 [ 144.494766][ T8179] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 144.677560][ T8179] bond2: entered promiscuous mode [ 144.689661][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.743877][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 144.768332][ T8179] xt_l2tp: unknown flags: 10 [ 144.801761][ T8191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.862454][ T8191] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 144.890746][ T8191] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 144.935386][ T8191] bond2: (slave vti0): making interface the new active one [ 144.949988][ T8191] vti0: entered promiscuous mode [ 144.957218][ T8191] bond2: (slave vti0): Enslaving as an active interface with an up link [ 144.978123][ T8208] netlink: 'syz.2.642': attribute type 39 has an invalid length. [ 145.164373][ T8210] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.327510][ T8214] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.369398][ T8214] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 146.167410][ T8264] vlan1: entered allmulticast mode [ 146.202824][ T8264] veth0_vlan: entered allmulticast mode [ 146.716752][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 146.774268][ T8291] netlink: 'syz.3.666': attribute type 23 has an invalid length. [ 147.178694][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.672'. [ 147.230205][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.672'. [ 147.308979][ T8320] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 167772160, id = 0 [ 147.416878][ T8316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.513535][ T8326] FAULT_INJECTION: forcing a failure. [ 147.513535][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.537093][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.3.675 Not tainted syzkaller #0 PREEMPT(full) [ 147.537117][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.537135][ T8326] Call Trace: [ 147.537143][ T8326] [ 147.537150][ T8326] dump_stack_lvl+0xe8/0x150 [ 147.537183][ T8326] should_fail_ex+0x40c/0x560 [ 147.537207][ T8326] _copy_from_iter+0x1d3/0x1660 [ 147.537242][ T8326] ? __pfx__copy_from_iter+0x10/0x10 [ 147.537273][ T8326] ? skb_put+0x112/0x210 [ 147.537300][ T8326] hci_sock_sendmsg+0x42a/0xf50 [ 147.537326][ T8326] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.537351][ T8326] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 147.537374][ T8326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.537396][ T8326] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 147.537415][ T8326] sock_sendmsg_nosec+0x13a/0x180 [ 147.537438][ T8326] sock_write_iter+0x2de/0x3e0 [ 147.537459][ T8326] ? __pfx_sock_write_iter+0x10/0x10 [ 147.537483][ T8326] ? bpf_lsm_file_permission+0x9/0x20 [ 147.537507][ T8326] ? security_file_permission+0x75/0x260 [ 147.537538][ T8326] vfs_write+0x612/0xba0 [ 147.537571][ T8326] ? __pfx_vfs_write+0x10/0x10 [ 147.537605][ T8326] ? __fget_files+0x2a/0x420 [ 147.537636][ T8326] ksys_write+0x150/0x270 [ 147.537666][ T8326] ? __pfx_ksys_write+0x10/0x10 [ 147.537701][ T8326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.537722][ T8326] do_syscall_64+0x174/0x580 [ 147.537745][ T8326] ? trace_irq_disable+0x3b/0x140 [ 147.537767][ T8326] ? clear_bhb_loop+0x40/0x90 [ 147.537789][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.537808][ T8326] RIP: 0033:0x7f984a59de59 [ 147.537832][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.537847][ T8326] RSP: 002b:00007f984b4d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.537871][ T8326] RAX: ffffffffffffffda RBX: 00007f984a825fa0 RCX: 00007f984a59de59 [ 147.537885][ T8326] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 147.537896][ T8326] RBP: 00007f984b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.537907][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.537939][ T8326] R13: 00007f984a826038 R14: 00007f984a825fa0 R15: 00007ffebe736b78 [ 147.537969][ T8326] [ 148.066782][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'. [ 148.633074][ T8359] netlink: 'syz.4.684': attribute type 10 has an invalid length. [ 148.810522][ T8365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.686'. [ 148.853822][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 148.908154][ T8365] netlink: 31 bytes leftover after parsing attributes in process `syz.1.686'. [ 148.957569][ T8365] netlink: 'syz.1.686': attribute type 2 has an invalid length. [ 148.993047][ T8365] netlink: 31 bytes leftover after parsing attributes in process `syz.1.686'. [ 149.335315][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 149.742323][ T8403] netlink: 256 bytes leftover after parsing attributes in process `syz.0.697'. [ 150.216640][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 150.307052][ T8435] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 150.315871][ T8436] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 150.330932][ T8426] bond4: (slave ip6gretap1): making interface the new active one [ 150.341955][ T8426] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 150.382719][ T8435] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 150.567191][ T8436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.994444][ T8465] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 151.128577][ T8465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.217440][ T8470] netlink: 'syz.0.715': attribute type 49 has an invalid length. [ 151.240143][ T8463] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 151.432440][ T8475] syzkaller0: entered promiscuous mode [ 151.453319][ T8492] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.719'. [ 151.462549][ T8475] syzkaller0: entered allmulticast mode [ 151.535884][ T8470] ip6gretap0: left promiscuous mode [ 151.597655][ T8470] ip6gretap0: entered promiscuous mode [ 151.608564][ T8470] ip6gretap0: entered allmulticast mode [ 151.663516][ T8491] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 152.418833][ T8528] only policy match revision 0 supported [ 152.418866][ T8528] unable to load match [ 152.472673][ T8528] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 152.481112][ T8528] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 152.632959][ T8544] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 152.831224][ T8549] syzkaller0: entered promiscuous mode [ 152.843798][ T8549] syzkaller0: entered allmulticast mode [ 153.209650][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 153.258898][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 153.309042][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 153.369460][ T8564] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 153.433072][ T8564] bond4 (unregistering): Released all slaves [ 153.592032][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 153.665635][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 153.715500][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 153.747400][ T8589] 8021q: VLANs not supported on vxcan1 [ 153.790052][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.945611][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.982977][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.008591][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.187905][ T8608] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 155.131477][ T8651] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 155.254286][ T8652] syzkaller0: entered promiscuous mode [ 155.272175][ T8652] syzkaller0: entered allmulticast mode [ 155.302943][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 155.523967][ T8667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.686945][ T8673] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 155.725696][ T8673] bond5 (unregistering): Released all slaves [ 155.839965][ T8669] netlink: 'syz.0.772': attribute type 2 has an invalid length. [ 155.881674][ T8669] netlink: 'syz.0.772': attribute type 2 has an invalid length. [ 156.031619][ T8687] netlink: 256 bytes leftover after parsing attributes in process `syz.4.776'. [ 156.187298][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.779'. [ 156.200191][ T8684] syzkaller0: entered promiscuous mode [ 156.206843][ T8684] syzkaller0: entered allmulticast mode [ 156.210118][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 156.235282][ T8693] bond0: entered promiscuous mode [ 156.253277][ T8693] bond_slave_0: entered promiscuous mode [ 156.272290][ T8693] bond_slave_1: entered promiscuous mode [ 156.727904][ T8700] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 159.103390][ T8731] netlink: 44 bytes leftover after parsing attributes in process `syz.4.788'. [ 159.148038][ T8731] netlink: 43 bytes leftover after parsing attributes in process `syz.4.788'. [ 159.196092][ T8731] netlink: 'syz.4.788': attribute type 6 has an invalid length. [ 159.249836][ T8731] netlink: 'syz.4.788': attribute type 5 has an invalid length. [ 159.275733][ T8738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.790'. [ 159.290860][ T8731] netlink: 43 bytes leftover after parsing attributes in process `syz.4.788'. [ 159.662288][ T8757] netlink: 'syz.3.797': attribute type 11 has an invalid length. [ 159.706335][ T8757] netlink: 244 bytes leftover after parsing attributes in process `syz.3.797'. [ 159.716757][ T8762] netlink: 'syz.1.798': attribute type 11 has an invalid length. [ 160.138245][ T8776] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 160.217061][ T8776] : entered promiscuous mode [ 160.283301][ T8785] netlink: 'syz.1.804': attribute type 8 has an invalid length. [ 160.324174][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 160.363189][ T8787] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.708455][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 161.168491][ T8825] netlink: 'syz.2.817': attribute type 21 has an invalid length. [ 161.193827][ T8825] netlink: 128 bytes leftover after parsing attributes in process `syz.2.817'. [ 161.232035][ T8825] netlink: 'syz.2.817': attribute type 5 has an invalid length. [ 161.254063][ T8825] netlink: 3 bytes leftover after parsing attributes in process `syz.2.817'. [ 161.324744][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 161.515655][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.523054][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.567388][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.575886][ T8848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.584247][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.591469][ T8848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.651293][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.658622][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.743863][ T8861] netlink: 'syz.0.826': attribute type 9 has an invalid length. [ 161.916749][ T8869] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 163.345740][ T8929] veth3: entered promiscuous mode [ 163.774331][ T8948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.810370][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.971299][ T8963] bridge_slave_1: left allmulticast mode [ 163.977784][ T8963] bridge_slave_1: left promiscuous mode [ 163.985418][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.998202][ T8963] bridge_slave_0: left allmulticast mode [ 164.006908][ T8963] bridge_slave_0: left promiscuous mode [ 164.013246][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.112281][ T8972] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 164.328234][ T8979] __nla_validate_parse: 13 callbacks suppressed [ 164.328251][ T8979] netlink: 144 bytes leftover after parsing attributes in process `syz.1.860'. [ 164.697086][ T8990] scsi_nl_rcv_msg: discarding partial skb [ 164.738365][ T8994] tipc: Started in network mode [ 164.751390][ T8994] tipc: Node identity e0000001, cluster identity 4711 [ 164.776269][ T8994] tipc: Enabling of bearer rejected, failed to enable media [ 165.144380][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 165.197183][ T9014] netlink: 100 bytes leftover after parsing attributes in process `syz.2.868'. [ 165.490004][ T9030] netlink: 72 bytes leftover after parsing attributes in process `syz.4.872'. [ 165.774619][ T9041] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 165.864195][ T9045] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 166.095777][ T9054] x_tables: duplicate underflow at hook 2 [ 166.218524][ T9057] bond5: option fail_over_mac: invalid value (16) [ 166.243086][ T9057] bond5 (unregistering): Released all slaves [ 166.574431][ T9056] bond5: option fail_over_mac: invalid value (16) [ 166.621419][ T9056] bond5 (unregistering): Released all slaves [ 166.818112][ T9062] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 166.821524][ T9072] syzkaller0: entered promiscuous mode [ 166.848480][ T9072] syzkaller0: entered allmulticast mode [ 167.066173][ T9105] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 167.145464][ T9114] netlink: 256 bytes leftover after parsing attributes in process `syz.3.887'. [ 167.278805][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'. [ 167.391588][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 167.408346][ T9115] bond3: (slave geneve4): making interface the new active one [ 167.430715][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 167.482463][ T9115] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 167.506183][ T6300] netdevsim netdevsim0 : set [1, 2] type 2 family 0 port 20000 - 0 [ 167.532147][ T6300] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 167.570506][ T6300] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 167.605442][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 167.616024][ T6300] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 167.747982][ T9127] bridge4: port 1(erspan0) entered blocking state [ 167.757254][ T9127] bridge4: port 1(erspan0) entered disabled state [ 167.775971][ T9127] erspan0: entered allmulticast mode [ 167.793305][ T9127] erspan0: entered promiscuous mode [ 167.813189][ T9127] bridge4: port 1(erspan0) entered blocking state [ 167.819814][ T9127] bridge4: port 1(erspan0) entered forwarding state [ 168.035197][ T9158] syz.3.899 (9158) used obsolete PPPIOCDETACH ioctl [ 168.229362][ T9162] ªªªªªª: renamed from bond_slave_0 (while UP) [ 168.559341][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.906'. [ 168.939289][ T50] block nbd0: Receive control failed (result -107) [ 169.357424][ T9208] syzkaller1: entered promiscuous mode [ 169.372990][ T9208] syzkaller1: entered allmulticast mode [ 169.408830][ T9208] __nla_validate_parse: 1 callbacks suppressed [ 169.408847][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 169.433519][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 169.772436][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 170.305682][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 170.357782][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 170.381727][ T9247] netlink: 'syz.4.926': attribute type 49 has an invalid length. [ 170.431405][ T9247] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 170.544474][ T9247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.185116][ T9266] syzkaller0: entered promiscuous mode [ 171.203905][ T9266] syzkaller0: entered allmulticast mode [ 171.449498][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.000707][ T9305] vlan2: entered promiscuous mode [ 174.029097][ T9305] gretap0: entered promiscuous mode [ 174.085735][ T9308] openvswitch: netlink: IP tunnel TTL not specified. [ 174.122974][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.201577][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 174.219552][ T9309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 174.302249][ T9319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.946'. [ 174.362286][ T9314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.395174][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 174.430382][ T9326] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 174.581376][ T9314] bond0: entered promiscuous mode [ 174.588073][ T9314] bond0: left promiscuous mode [ 175.817883][ T9396] IPVS: set_ctl: invalid protocol: 22 172.20.20.35:20000 [ 176.559456][ T9426] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 176.613759][ T9426] netlink: 224 bytes leftover after parsing attributes in process `syz.0.974'. [ 176.665054][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 176.910771][ T9438] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20002 [ 177.007697][ T9445] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 177.937488][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.986'. [ 178.176290][ T9441] syzkaller0: entered promiscuous mode [ 178.182688][ T9441] syzkaller0: entered allmulticast mode [ 178.969688][ T9536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.989'. [ 178.980216][ T9534] vxcan1: tx drop: invalid da for name 0x4000000000000000 [ 179.293574][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 180.155058][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054976000: rx timeout, send abort [ 180.171044][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888054976000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 180.283453][ T9464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.476906][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056549400: rx timeout, send abort [ 180.977171][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805654a400: rx timeout, send abort [ 180.989619][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888056549400: abort rx timeout. Force session deactivation [ 181.486680][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805654a400: abort rx timeout. Force session deactivation [ 182.011577][ T9644] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1016'. [ 182.254925][ T9647] IPv6: sit1: Disabled Multicast RS [ 182.329738][ T9655] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 182.590856][ T9667] netlink: 'syz.3.1023': attribute type 61 has an invalid length. [ 182.656664][ T9674] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1024'. [ 182.677965][ T9674] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1024'. [ 182.692292][ T9674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1024'. [ 182.925071][ T9685] syzkaller0: entered promiscuous mode [ 182.931438][ T9685] syzkaller0: entered allmulticast mode [ 182.986447][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 182.997848][ T9687] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1027'. [ 183.167993][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 183.706926][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 183.749922][ T9721] gre0: entered promiscuous mode [ 183.775896][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'. [ 183.812375][ T9721] gre0: entered allmulticast mode [ 184.041867][ T9737] tipc: Enabling of bearer rejected, failed to enable media [ 184.482272][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 189.094095][ T9819] syzkaller0: entered promiscuous mode [ 189.099647][ T9819] syzkaller0: entered allmulticast mode [ 189.451803][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.500150][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.529112][ T9851] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 189.595049][ T9836] veth0_vlan: left promiscuous mode [ 189.680515][ T9836] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 189.780221][ T9837] geneve2: entered promiscuous mode [ 189.811782][ T9837] geneve2: entered allmulticast mode [ 189.959622][ T9851] bond6: entered promiscuous mode [ 189.998527][ T9851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.040305][ T1227] syz2: Port: 1 Link DOWN [ 190.072736][ T9855] ipvlan1: entered allmulticast mode [ 190.086760][ T9855] bond6: entered allmulticast mode [ 190.135253][ T9856] bond6: (slave bridge6): making interface the new active one [ 190.154396][ T9856] bridge6: entered promiscuous mode [ 190.167046][ T9856] bridge6: entered allmulticast mode [ 190.193999][ T9856] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 190.219368][ T9461] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.255681][ T9461] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.346375][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.358087][ T9461] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.405451][ T9461] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.468812][ T9468] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.529038][ T9468] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.577945][ T9468] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.648283][ T9468] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 190.725885][ T9893] __nla_validate_parse: 3 callbacks suppressed [ 190.725905][ T9893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1074'. [ 190.994680][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 191.330285][ T9927] netlink: 'syz.2.1082': attribute type 11 has an invalid length. [ 191.412122][ T9927] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1082'. [ 191.483196][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 191.748322][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 191.799319][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 191.995180][ T9953] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1089'. [ 192.022187][ T9949] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 192.034554][ T9949] bond5 (unregistering): Released all slaves [ 192.067195][ T9952] syzkaller0: entered promiscuous mode [ 192.085694][ T9952] syzkaller0: entered allmulticast mode [ 192.226441][ T9953] bond2 (unregistering): Released all slaves [ 192.344344][ T30] audit: type=1800 audit(1783301682.020:2): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1091" name="memory.events" dev="tmpfs" ino=1113 res=0 errno=0 [ 192.724106][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 192.894610][ T9964] gre0: left promiscuous mode [ 192.899664][ T9964] gre0: left allmulticast mode [ 193.307886][ T9964] ip6gre1: left promiscuous mode [ 193.323306][ T9964] ip6gre1: left allmulticast mode [ 193.346595][ T9964] geneve2: left promiscuous mode [ 193.377439][ T9964] gretap1: left promiscuous mode [ 193.385811][ T9964] gretap1: left allmulticast mode [ 193.395596][ T9964] bond2: left promiscuous mode [ 193.400467][ T9964] vti0: left promiscuous mode [ 193.421813][ T9967] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 193.441259][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.579414][ T1016] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.609020][ T1016] netdevsim netdevsim0 : unset [1, 1] type 2 family 0 port 55726 - 0 [ 193.648324][ T1016] netdevsim netdevsim0 : unset [1, 2] type 2 family 0 port 20000 - 0 [ 193.699174][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.750511][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 55726 - 0 [ 193.770543][ T1016] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 193.796679][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.830383][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 55726 - 0 [ 193.850529][ T1016] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 193.947339][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.977291][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 55726 - 0 [ 193.979550][T10024] IPVS: set_ctl: invalid protocol: 25 0.0.0.0:20004 [ 193.997455][ T1016] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 194.161625][T10032] nftables ruleset with unbound set [ 194.284258][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.295705][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.217941][T10104] x_tables: duplicate entry at hook 3 [ 195.369612][T10114] netlink: 'syz.2.1123': attribute type 3 has an invalid length. [ 195.434567][T10114] ipvlan2: entered promiscuous mode [ 195.597313][T10132] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 1, id = 0 [ 195.936123][T10144] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 195.953405][T10144] netlink: 'syz.4.1130': attribute type 2 has an invalid length. [ 196.186419][T10156] vlan0: entered allmulticast mode [ 196.204158][T10156] bridge_slave_0: entered allmulticast mode [ 196.359439][T10155] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 196.422787][T10155] bond2 (unregistering): Released all slaves [ 196.673216][T10144] netlink: 'syz.4.1130': attribute type 4 has an invalid length. [ 196.995975][T10191] pim6reg: entered allmulticast mode [ 197.309379][T10205] SET target dimension over the limit! [ 197.559603][T10222] veth0: entered promiscuous mode [ 197.596602][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 197.607602][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 197.652720][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 197.694496][T10221] veth0: left promiscuous mode [ 197.809855][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 198.028272][T10200] syz.4.1141 (10200) used greatest stack depth: 19136 bytes left [ 198.179023][T10257] veth0_to_bridge: entered promiscuous mode [ 198.193463][T10256] veth0_to_bridge: left promiscuous mode [ 198.407320][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 198.418478][T10267] syzkaller0: entered promiscuous mode [ 198.424592][T10267] syzkaller0: entered allmulticast mode [ 198.670715][T10287] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 198.694451][T10288] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 198.865546][T10299] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 198.913275][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1164'. [ 199.140139][T10315] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 199.248338][T10321] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1171'. [ 199.378796][T10327] netlink: 'syz.4.1174': attribute type 2 has an invalid length. [ 199.397362][T10328] syzkaller0: entered promiscuous mode [ 199.423272][T10328] syzkaller0: entered allmulticast mode [ 200.341569][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 200.389949][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1186'. [ 201.051060][T10409] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1197'. [ 201.413896][T10426] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 201.493933][T10331] Bluetooth: hci1: command 0x0406 tx timeout [ 201.500026][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 201.506215][T10331] Bluetooth: hci4: command 0x0405 tx timeout [ 201.512682][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 201.518761][T10331] Bluetooth: hci2: command 0x0406 tx timeout [ 201.722310][T10440] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 202.075231][T10464] ipt_REJECT: TCP_RESET invalid for non-tcp [ 202.530023][T10494] syzkaller0: entered promiscuous mode [ 202.555714][T10494] syzkaller0: entered allmulticast mode [ 202.623475][T10498] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.855294][T10512] __nla_validate_parse: 5 callbacks suppressed [ 202.855313][T10512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1226'. [ 203.071207][T10526] xt_time: unknown flags 0xf4 [ 203.364187][T10542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.648289][ T5289] veth1_vlan: left promiscuous mode [ 203.803634][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1240'. [ 203.848085][T10568] netlink: 'syz.4.1242': attribute type 4 has an invalid length. [ 203.856627][T10568] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1242'. [ 203.868484][T10556] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 203.887969][T10556] bond5 (unregistering): Released all slaves [ 204.177582][T10581] netlink: 'syz.3.1245': attribute type 5 has an invalid length. [ 204.227850][T10585] vlan2: entered allmulticast mode [ 204.238321][T10591] netlink: 'syz.0.1249': attribute type 23 has an invalid length. [ 204.449574][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'. [ 204.600244][T10611] netlink: 'syz.3.1252': attribute type 17 has an invalid length. [ 204.608718][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 204.618097][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1252'. [ 204.722543][T10611] gretap0: entered promiscuous mode [ 204.767434][T10611] gretap0: left promiscuous mode [ 205.156066][T10642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1260'. [ 205.202206][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 205.222417][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 205.283539][T10653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'. [ 205.682112][T10675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 205.779499][T10675] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 205.836776][T10675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.890088][ T30] audit: type=1800 audit(1783301695.560:3): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1267" name="memory.events" dev="tmpfs" ino=1374 res=0 errno=0 [ 205.923016][ T30] audit: type=1804 audit(1783301695.590:4): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1267" name="/newroot/265/memory.events" dev="tmpfs" ino=1374 res=1 errno=0 [ 205.960052][T10677] bond5: (slave veth7): Enslaving as an active interface with a down link [ 206.051440][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.060173][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.073526][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.117798][T10675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.128766][T10675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.143537][T10675] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 206.164924][T10684] bond2: (slave syz_tun): Removing an active aggregator [ 206.174264][T10684] bond2: (slave syz_tun): Releasing backup interface [ 206.184943][T10684] bridge_slave_0: left allmulticast mode [ 206.190732][T10684] bridge_slave_0: left promiscuous mode [ 206.196573][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.206402][T10684] bridge_slave_1: left allmulticast mode [ 206.213401][T10684] bridge_slave_1: left promiscuous mode [ 206.219218][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.232476][T10684] bond0: (slave bond_slave_0): Releasing backup interface [ 206.240216][T10684] bond_slave_0: left promiscuous mode [ 206.248730][T10684] bond0: (slave bond_slave_1): Releasing backup interface [ 206.258684][T10684] bond_slave_1: left promiscuous mode [ 206.266145][T10684] team0: Port device team_slave_0 removed [ 206.273636][T10684] team0: Port device team_slave_1 removed [ 206.279650][T10684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.287963][T10684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.296103][T10684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.312555][T10677] veth0_virt_wifi: entered promiscuous mode [ 206.325969][T10677] bond5: (slave veth0_virt_wifi): making interface the new active one [ 206.337029][T10677] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 206.349931][T10693] team0: Device xfrm0 is of different type [ 206.434625][T10697] tipc: Enabled bearer , priority 0 [ 207.064611][T10727] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 207.092507][T10729] syz_tun: tun_net_xmit 86 [ 207.124177][T10729] netlink: 'syz.4.1283': attribute type 4 has an invalid length. [ 207.221272][T10710] netlink: 'syz.0.1277': attribute type 1 has an invalid length. [ 207.375350][T10710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.422566][T10732] bond6: (slave gretap3): making interface the new active one [ 207.432954][T10732] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 207.478576][T10748] syz_tun: tun_net_xmit 42 [ 207.626038][ T5812] tipc: Node number set to 3758096385 [ 207.876411][T10766] bond2: entered allmulticast mode [ 207.883218][T10766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.894620][T10771] __nla_validate_parse: 5 callbacks suppressed [ 207.894636][T10771] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1296'. [ 207.912309][T10771] xt_policy: neither incoming nor outgoing policy selected [ 207.938450][T10766] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.006941][T10766] macvlan2: entered allmulticast mode [ 208.048472][T10766] bond0: entered allmulticast mode [ 208.067185][T10781] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1298'. [ 208.068593][T10766] ªªªªªª: entered allmulticast mode [ 208.092048][T10766] bond_slave_1: entered allmulticast mode [ 208.111202][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1298'. [ 208.121004][ C0] syz_tun: tun_net_xmit 86 [ 208.121132][T10766] ªªªªªª: entered promiscuous mode [ 208.132806][T10766] bond_slave_1: entered promiscuous mode [ 208.148600][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1298'. [ 208.192659][T10766] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 208.279589][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 208.303379][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 208.399755][T10802] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 208.439294][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1301'. [ 208.495304][T10790] veth1_macvtap (unregistering): left allmulticast mode [ 208.523188][ C1] syz_tun: tun_net_xmit 42 [ 208.616535][T10815] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 208.724566][T10791] hsr_slave_1 (unregistering): left promiscuous mode [ 208.845661][T10802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.886922][T10807] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.914167][T10813] bond0: Error: CAN devices cannot be enslaved [ 208.968685][T10812] macvlan2: entered promiscuous mode [ 208.989791][T10812] macvlan2: entered allmulticast mode [ 209.064955][T10837] syzkaller0: entered promiscuous mode [ 209.087291][T10837] syzkaller0: entered allmulticast mode [ 209.160819][ C0] syz_tun: tun_net_xmit 86 [ 209.306547][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1313'. [ 209.359030][T10851] x_tables: ip_tables: udp match: only valid for protocol 17 [ 209.526465][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 209.560785][ C1] syz_tun: tun_net_xmit 42 [ 209.599980][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 210.617054][T10911] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 210.648837][T10911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.835175][T10921] raw_sendmsg: syz.0.1330 forgot to set AF_INET. Fix it! [ 211.100165][T10931] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 211.429772][T10918] bond3 (unregistering): Released all slaves [ 211.764264][T10965] openvswitch: netlink: IP tunnel dst address not specified [ 211.779862][T10967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.082767][T10979] bridge6: entered promiscuous mode [ 212.112178][T10979] bridge6: entered allmulticast mode [ 214.668927][T11046] __nla_validate_parse: 3 callbacks suppressed [ 214.668945][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1346'. [ 214.772491][T11051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1347'. [ 217.077643][T11047] syzkaller1: entered promiscuous mode [ 217.083616][T11047] syzkaller1: entered allmulticast mode [ 217.320242][T11067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.337977][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 217.420285][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 217.647180][T11079] syzkaller1: entered promiscuous mode [ 217.682229][T11079] syzkaller1: entered allmulticast mode [ 218.370230][T11133] x_tables: duplicate underflow at hook 2 [ 218.559934][T11149] x_tables: unsorted entry at hook 1 [ 218.815653][T11155] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 218.846033][T11155] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 218.879502][T11155] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 218.895827][T11155] netlink: 'syz.1.1366': attribute type 2 has an invalid length. [ 218.936782][T11155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1366'. [ 219.025421][T11169] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.186773][T11180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1371'. [ 219.313784][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 219.382952][T11183] netlink: 'syz.0.1372': attribute type 3 has an invalid length. [ 219.571451][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 220.081149][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 220.497616][T11224] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1382'. [ 220.705115][T11233] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 221.075973][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.091410][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.277976][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.329262][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.370166][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.406248][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.524964][T11261] batadv1: entered allmulticast mode [ 221.577007][T11267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.589116][T11262] gre0: entered promiscuous mode [ 221.602239][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1394'. [ 221.606744][T11262] gre0: entered allmulticast mode [ 221.649377][T11268] netlink: 'syz.3.1392': attribute type 3 has an invalid length. [ 221.687051][T11268] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1392'. [ 222.020180][T11291] netlink: 'syz.1.1398': attribute type 4 has an invalid length. [ 222.037669][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 222.094123][T11281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.123327][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 222.359550][T11305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1403'. [ 222.826515][T11325] syzkaller0: entered promiscuous mode [ 222.842395][T11325] syzkaller0: entered allmulticast mode [ 223.221722][T11340] netlink: 'syz.3.1413': attribute type 2 has an invalid length. [ 223.233388][T11341] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1412'. [ 223.281614][T11344] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1412'. [ 223.302471][T11344] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1412'. [ 223.350020][T11344] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1412'. [ 223.553473][T11351] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 223.828210][T11359] bond3: left promiscuous mode [ 223.863455][T11359] bond3: left allmulticast mode [ 223.979900][T11359] bond6: left promiscuous mode [ 224.008485][T11359] bridge6: left promiscuous mode [ 224.024673][T11359] ipvlan1: left allmulticast mode [ 224.058424][T11359] bond6: left allmulticast mode [ 224.085852][T11359] bridge6: left allmulticast mode [ 224.217253][ T9469] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.234237][ T9469] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 224.302469][ T9469] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.332193][ T9469] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 224.369990][ T9469] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.391484][ T9469] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 224.423410][ T9469] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.456286][ T9469] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 225.168848][T11413] validate_nla: 2 callbacks suppressed [ 225.168867][T11413] netlink: 'syz.3.1428': attribute type 23 has an invalid length. [ 225.248946][T11417] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 225.263865][T11417] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 225.291296][T11417] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 225.491215][T11431] __nla_validate_parse: 64 callbacks suppressed [ 225.491231][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 225.536274][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 225.563292][T11434] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 225.756606][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 225.892315][T11444] team1: entered promiscuous mode [ 225.900986][T11444] team1: entered allmulticast mode [ 225.964235][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 226.122066][T11444] team2: entered promiscuous mode [ 226.138144][T11444] team2: entered allmulticast mode [ 227.078148][T11494] openvswitch: netlink: Missing key (keys=40, expected=100) [ 227.109858][T11494] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 227.387345][T11503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.484752][T11503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.576341][ T5741] IPVS: starting estimator thread 0... [ 227.715244][T11512] siw: device registration error -23 [ 227.781556][T11510] IPVS: using max 29 ests per chain, 69600 per kthread [ 228.472631][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 228.774437][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1461'. [ 228.962955][T11553] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1464'. [ 228.988160][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1465'. [ 229.161423][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 229.163439][T11551] bond7: entered promiscuous mode [ 229.247439][T11560] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1466'. [ 229.291530][T11570] sctp: [Deprecated]: syz.3.1468 (pid 11570) Use of int in max_burst socket option deprecated. [ 229.291530][T11570] Use struct sctp_assoc_value instead [ 229.488247][T11573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.712980][T11634] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 231.704888][T11672] __nla_validate_parse: 5 callbacks suppressed [ 231.704908][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'. [ 231.814641][T11678] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.119130][T11687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1501'. [ 232.224766][T11690] bond3: option fail_over_mac: invalid value (16) [ 232.246173][T11690] bond3 (unregistering): Released all slaves [ 232.277515][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 232.719155][T11723] netlink: 'syz.1.1512': attribute type 1 has an invalid length. [ 232.742428][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 232.770141][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 233.286391][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 233.344859][T11758] Set syz1 is full, maxelem 14 reached [ 233.384517][T11764] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 233.405423][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 233.441527][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 233.626562][T11764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 233.728210][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 233.877201][T11781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1529'. [ 233.900499][T11788] openvswitch: netlink: Missing key (keys=40, expected=100) [ 233.946128][T11791] ÿ: renamed from veth1 [ 234.470412][T11822] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 235.039545][T11861] Cannot find add_set index 2 as target [ 235.201367][T11872] netlink: 'syz.4.1550': attribute type 4 has an invalid length. [ 235.418935][T11879] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 235.467106][T11883] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 235.623215][T11844] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 235.853318][T11897] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 235.890174][T11905] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 236.078859][T11905] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.119093][T11908] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 236.177825][T11908] bond6: entered allmulticast mode [ 236.243883][T11922] sctp: [Deprecated]: syz.3.1562 (pid 11922) Use of int in max_burst socket option deprecated. [ 236.243883][T11922] Use struct sctp_assoc_value instead [ 236.851554][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 238.881856][T11944] __nla_validate_parse: 7 callbacks suppressed [ 238.881874][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1567'. [ 238.897203][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1567'. [ 239.086602][T11966] syzkaller0: entered promiscuous mode [ 239.116367][T11966] syzkaller0: entered allmulticast mode [ 239.233611][T11983] xt_hashlimit: size too large, truncated to 1048576 [ 239.251232][T11982] xt_hashlimit: size too large, truncated to 1048576 [ 239.346086][T11987] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.1575'. [ 239.374470][T11993] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 239.459313][T11999] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 241.444060][T11987] 0ªX¹¦Dö»: renamed from gretap0 [ 241.684357][T12015] netlink: 'syz.4.1583': attribute type 3 has an invalid length. [ 241.734256][T12015] Cannot find add_set index 0 as target [ 241.835029][T12022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1586'. [ 241.897373][T12027] netlink: 'syz.4.1588': attribute type 14 has an invalid length. [ 241.937086][T12028] netlink: 'syz.4.1588': attribute type 14 has an invalid length. [ 241.947599][T12025] syzkaller0: entered promiscuous mode [ 241.953214][T12025] syzkaller0: entered allmulticast mode [ 241.976953][T12028] sctp: [Deprecated]: syz.4.1588 (pid 12028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.976953][T12028] Use struct sctp_sack_info instead [ 241.997936][T12027] sctp: [Deprecated]: syz.4.1588 (pid 12027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.997936][T12027] Use struct sctp_sack_info instead [ 242.015957][T12032] veth0_to_bridge: entered promiscuous mode [ 242.300348][T12054] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 242.387689][T12030] veth0_to_bridge: left promiscuous mode [ 242.436581][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1595'. [ 242.471513][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 242.636065][T12069] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 242.673942][T12069] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1598'. [ 242.721002][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 242.787692][T12078] netlink: 'syz.3.1599': attribute type 7 has an invalid length. [ 242.790826][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 242.860835][T12076] sctp: [Deprecated]: syz.1.1598 (pid 12076) Use of int in maxseg socket option. [ 242.860835][T12076] Use struct sctp_assoc_value instead [ 242.948265][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 242.962765][T12069] netlink: 'syz.1.1598': attribute type 49 has an invalid length. [ 243.638000][T12119] syzkaller1: entered promiscuous mode [ 243.657370][T12119] syzkaller1: entered allmulticast mode [ 244.619145][T12151] __nla_validate_parse: 2 callbacks suppressed [ 244.619162][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 245.035971][T12170] syzkaller0: entered promiscuous mode [ 245.074966][T12170] syzkaller0: entered allmulticast mode [ 245.093820][T12180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1631'. [ 245.527772][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1636'. [ 245.858342][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 246.297159][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 247.028254][T12254] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.1649'. [ 247.074550][T12254] netlink: 'syz.0.1649': attribute type 2 has an invalid length. [ 247.299822][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1653'. [ 247.318160][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1653'. [ 247.340086][T12268] syzkaller0: entered promiscuous mode [ 247.359429][T12268] syzkaller0: entered allmulticast mode [ 247.480539][T12276] netlink: 'syz.1.1654': attribute type 11 has an invalid length. [ 247.509467][T12276] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1654'. [ 247.607764][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1656'. [ 247.728911][T12290] gtp0: entered promiscuous mode [ 247.745282][T12290] gtp0: entered allmulticast mode [ 248.642289][T12325] netlink: 'syz.3.1665': attribute type 1 has an invalid length. [ 248.842615][T12339] x_tables: unsorted underflow at hook 3 [ 248.888179][T12325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.971660][T12346] macvlan0: entered promiscuous mode [ 249.032178][T12346] macvlan0: entered allmulticast mode [ 249.078426][T12346] bond7: entered promiscuous mode [ 249.108463][T12346] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 249.167251][T12346] bond7: left promiscuous mode [ 249.378691][T12328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 249.410183][T12328] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 249.435506][T12384] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 249.514994][T12328] bond7: (slave gre1): Error -95 calling set_mac_address [ 249.720395][T12333] gretap0: entered promiscuous mode [ 249.736051][T12333] bond7: (slave gretap0): making interface the new active one [ 249.745837][T12333] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 250.057742][T12399] syzkaller0: entered promiscuous mode [ 250.094684][T12399] syzkaller0: entered allmulticast mode [ 250.129309][T12402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.148002][T12405] __nla_validate_parse: 3 callbacks suppressed [ 250.148019][T12405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1681'. [ 250.431856][ T3339] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 250.444463][ T3339] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 250.497695][ T3339] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 250.532728][ T3339] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 250.596533][T12422] vlan2: entered allmulticast mode [ 250.617617][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1687'. [ 250.634713][T12427] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1688'. [ 250.780207][T12427] netlink: 'syz.3.1688': attribute type 16 has an invalid length. [ 250.868224][T12427] netlink: 'syz.3.1688': attribute type 17 has an invalid length. [ 250.997222][T12445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1692'. [ 251.079786][T12427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.126473][T12427] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.144347][T12453] netlink: 'syz.2.1695': attribute type 83 has an invalid length. [ 251.177291][T12427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.189519][T12454] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1696'. [ 251.215190][T12459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.227545][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 251.359948][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1700'. [ 251.405562][T12427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.462535][T12427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.491014][T12427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.504879][T12427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.531368][T12427] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 251.904686][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 252.181707][T12493] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1708'. [ 252.199965][T12495] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.222127][T12493] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1708'. [ 252.236976][T12495] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 252.273011][T12500] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 252.405319][T12495] bond7: entered promiscuous mode [ 252.421376][T12495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.589004][T12500] bond4: entered promiscuous mode [ 252.595363][T12500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.635385][T12502] bond7: (slave bridge5): making interface the new active one [ 252.643507][T12502] bridge5: entered promiscuous mode [ 252.649877][T12502] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 253.043051][T12524] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 253.085748][T12524] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 254.329414][ T30] audit: type=1804 audit(1783301744.000:5): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1739" name="/newroot/356/cgroup.controllers" dev="tmpfs" ino=1844 res=1 errno=0 [ 254.401640][ T30] audit: type=1800 audit(1783301744.040:6): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1739" name="cgroup.controllers" dev="tmpfs" ino=1844 res=0 errno=0 [ 254.739234][T12606] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 254.779740][T12608] nbd: must specify a device to reconfigure [ 254.821961][T12609] tc action pedit 'at' offset 3 out of bounds [ 254.858582][T12609] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 254.858582][T12609] Please contact the netfilter-devel mailing list or update your nftables rules. [ 254.969348][T12615] netlink: 'syz.0.1752': attribute type 15 has an invalid length. [ 255.015256][T12613] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.022963][ T11] IPVS: starting estimator thread 0... [ 255.069637][T12620] sit1: entered promiscuous mode [ 255.082513][T12620] sit1: entered allmulticast mode [ 255.131361][T12620] tipc: Enabling of bearer rejected, failed to enable media [ 255.141615][T12620] syzkaller0: entered promiscuous mode [ 255.147189][T12620] syzkaller0: entered allmulticast mode [ 255.153387][T12619] IPVS: using max 29 ests per chain, 69600 per kthread [ 255.256736][T12625] __nla_validate_parse: 13 callbacks suppressed [ 255.256753][T12625] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1754'. [ 255.293517][T12626] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1754'. [ 255.558318][T12634] netlink: 'syz.0.1757': attribute type 83 has an invalid length. [ 255.627035][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1759'. [ 255.659952][T12638] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 255.675888][T12638] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 255.723092][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.729464][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806231][T12648] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1761'. [ 255.948424][T12638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.989057][T12641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 256.006808][T12656] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1763'. [ 256.393050][T12677] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 256.628499][T12687] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 256.703211][T12689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.801869][T12693] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 256.890309][T12692] gre0: left promiscuous mode [ 256.901099][T12692] gre0: left allmulticast mode [ 256.903452][T12698] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 257.482823][T12692] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 257.509724][T12693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.519985][T12693] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 257.535152][T12698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.551351][T12698] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 257.585215][T12711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.600068][T12711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.610430][T12711] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 257.628622][T12711] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 257.648026][T12711] bond0 (unregistering): Released all slaves [ 257.847458][T12729] netlink: 'syz.1.1786': attribute type 10 has an invalid length. [ 257.880456][T12729] batman_adv: batadv0: Removing interface: netdevsim0 [ 258.285750][T12753] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1792'. [ 258.313329][T12754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1791'. [ 258.447646][T12757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1793'. [ 258.493311][T12757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1793'. [ 258.680220][T12766] netlink: 'syz.1.1795': attribute type 13 has an invalid length. [ 258.728554][T12766] netlink: 'syz.1.1795': attribute type 27 has an invalid length. [ 258.754187][T12772] netlink: 'syz.2.1797': attribute type 2 has an invalid length. [ 258.780742][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 259.174246][T12793] netlink: 'syz.0.1802': attribute type 2 has an invalid length. [ 259.185400][T12793] netlink: 'syz.0.1802': attribute type 11 has an invalid length. [ 259.449016][T12809] netlink: 'syz.0.1805': attribute type 5 has an invalid length. [ 259.686305][T12822] netlink: 'syz.2.1807': attribute type 4 has an invalid length. [ 260.510794][T12852] netlink: 'syz.4.1819': attribute type 10 has an invalid length. [ 260.555823][T12852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.593576][T12854] netlink: 'syz.3.1820': attribute type 8 has an invalid length. [ 260.607762][T12852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.748148][T12860] __nla_validate_parse: 6 callbacks suppressed [ 260.748167][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 260.912867][ T743] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 260.963211][ T743] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.004718][T12878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1825'. [ 261.017398][ T743] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.039349][ T743] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.167015][T12886] IPVS: ip_vs_add_dest(): server weight less than zero [ 261.174627][ T5726] IPVS: starting estimator thread 0... [ 261.271712][T12888] IPVS: using max 27 ests per chain, 64800 per kthread [ 261.390720][T12897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1829'. [ 261.473146][T12904] sit3: entered allmulticast mode [ 261.718692][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1835'. [ 261.751109][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 261.932189][T12925] xt_TCPMSS: Only works on TCP SYN packets [ 262.279330][T12942] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1842'. [ 262.494159][T12947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1845'. [ 262.554912][T12958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1849'. [ 262.800940][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1852'. [ 262.838140][T12976] erspan0: entered allmulticast mode [ 263.043794][T12986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.237680][T13004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1862'. [ 263.579972][T12997] syzkaller1: entered promiscuous mode [ 263.632896][T12997] syzkaller1: entered allmulticast mode [ 264.704505][T13076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.815170][T13085] netlink: 'syz.4.1885': attribute type 3 has an invalid length. [ 264.824227][T13085] netlink: 'syz.4.1885': attribute type 1 has an invalid length. [ 265.139795][T13099] netlink: 'syz.2.1890': attribute type 4 has an invalid length. [ 265.183308][T13100] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 265.576227][T13117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.758397][T13122] syzkaller0: entered promiscuous mode [ 265.778652][T13126] __nla_validate_parse: 7 callbacks suppressed [ 265.778672][T13126] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1900'. [ 265.795021][T13122] syzkaller0: entered allmulticast mode [ 265.829833][T13126] SET target dimension over the limit! [ 265.852699][T13131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.929113][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1901'. [ 266.051382][T13140] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1901'. [ 266.075595][T13144] netlink: 'syz.4.1904': attribute type 58 has an invalid length. [ 266.085961][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1904'. [ 266.700711][T13170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 267.106992][T13199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.139024][T13199] batadv_slave_0: entered promiscuous mode [ 267.207010][T13208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.050846][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 268.340680][T13246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.587969][T13263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1942'. [ 268.744922][T13270] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1943'. [ 268.991698][T13288] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 269.039849][T13288] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 269.329288][T13306] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 269.390011][T13306] bond0: entered promiscuous mode [ 269.431457][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.789228][T13286] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 270.027489][T13345] bond8: option all_slaves_active: invalid value (222) [ 270.043169][T13345] bond8 (unregistering): Released all slaves [ 270.093523][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'. [ 270.148883][T13353] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1963'. [ 270.361364][T13359] syzkaller0: entered promiscuous mode [ 270.380755][T13359] syzkaller0: entered allmulticast mode [ 270.395127][T13359] netlink: 'syz.3.1966': attribute type 3 has an invalid length. [ 270.533234][ T5628] block nbd1: Receive control failed (result -107) [ 270.573292][T13350] nbd1: detected capacity change from 0 to 63 [ 270.611539][ T5638] block nbd1: Receive control failed (result -104) [ 270.927501][T13352] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.322460][T13398] __nla_validate_parse: 1 callbacks suppressed [ 271.322480][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 271.543010][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 271.802386][T13414] netlink: 'syz.1.1982': attribute type 2 has an invalid length. [ 271.846209][T13414] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1982'. [ 272.245239][T13431] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 272.257110][T13431] bond6 (unregistering): Released all slaves [ 272.267048][T13434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 272.349341][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 272.485947][T13449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1993'. [ 272.785350][T13467] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 272.998073][T13472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2000'. [ 273.035786][T13472] unsupported nlmsg_type 40 [ 273.153533][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 273.183161][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2003'. [ 273.227139][T13472] syzkaller0: entered promiscuous mode [ 273.239791][T13472] syzkaller0: entered allmulticast mode [ 273.286335][T13472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2000'. [ 273.622542][T13518] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 273.636003][T13518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2012'. [ 274.046498][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 275.988764][T13523] macvlan0: entered promiscuous mode [ 276.459509][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'. [ 276.504625][T13554] netlink: 'syz.1.2023': attribute type 58 has an invalid length. [ 276.547218][T13554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2023'. [ 276.818988][T13570] syzkaller0: entered promiscuous mode [ 276.850667][T13570] syzkaller0: entered allmulticast mode [ 276.904737][T13570] tipc: Started in network mode [ 276.916551][T13570] tipc: Node identity e69916413d87, cluster identity 4711 [ 276.933115][T13570] tipc: Enabled bearer , priority 0 [ 276.955549][T13570] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 277.075766][T13569] tipc: Resetting bearer [ 277.158376][T13569] tipc: Disabling bearer [ 277.191572][T13580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2031'. [ 277.434157][T13595] netlink: 'syz.4.2035': attribute type 49 has an invalid length. [ 277.453105][T13603] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2038'. [ 277.889817][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 278.146091][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2048'. [ 278.155698][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 278.352061][T13641] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 278.458855][T13640] bond6: option fail_over_mac: invalid value (16) [ 278.474405][T13640] bond6 (unregistering): Released all slaves [ 278.688401][T13662] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2056'. [ 278.722269][T13652] team0 (unregistering): Port device team_slave_0 removed [ 278.789355][T13652] team0 (unregistering): Port device team_slave_1 removed [ 278.848020][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 278.891114][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2057'. [ 279.019393][ T9461] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.078064][ T9461] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.140916][ T6299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.196135][ T6299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.288267][T13683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.531303][T13690] netlink: 'syz.2.2066': attribute type 5 has an invalid length. [ 279.643887][T13690] geneve2: entered promiscuous mode [ 279.673332][T13690] geneve2: entered allmulticast mode [ 279.688543][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 279.698100][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 279.725540][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 279.768125][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 280.011408][T13715] netlink: 'syz.0.2074': attribute type 12 has an invalid length. [ 280.063413][T13715] [ 280.065777][T13715] ====================================================== [ 280.072796][T13715] WARNING: possible circular locking dependency detected [ 280.079828][T13715] syzkaller #0 Not tainted [ 280.084243][T13715] ------------------------------------------------------ [ 280.091263][T13715] syz.0.2074/13715 is trying to acquire lock: [ 280.097330][T13715] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 280.106660][T13715] [ 280.106660][T13715] but task is already holding lock: [ 280.114102][T13715] ffff8880789bc530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 280.123353][T13715] [ 280.123353][T13715] which lock already depends on the new lock. [ 280.123353][T13715] [ 280.133758][T13715] [ 280.133758][T13715] the existing dependency chain (in reverse order) is: [ 280.142772][T13715] [ 280.142772][T13715] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 280.150312][T13715] __mutex_lock+0x19d/0x1550 [ 280.155437][T13715] __ipv6_dev_mc_inc+0x4e/0xa40 [ 280.160812][T13715] __ipv6_sock_mc_join+0x4f7/0x740 [ 280.166470][T13715] ipv6_mcast_join_leave+0x1a2/0x240 [ 280.172274][T13715] do_ipv6_setsockopt+0x1990/0x3180 [ 280.177999][T13715] ipv6_setsockopt+0x59/0x170 [ 280.183191][T13715] do_sock_setsockopt+0x17c/0x1b0 [ 280.188728][T13715] __x64_sys_setsockopt+0x13d/0x1b0 [ 280.194441][T13715] do_syscall_64+0x174/0x580 [ 280.199546][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.205947][T13715] [ 280.205947][T13715] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 280.213675][T13715] lock_sock_nested+0x41/0x100 [ 280.218956][T13715] inet_shutdown+0x6a/0x390 [ 280.223988][T13715] nbd_mark_nsock_dead+0x2cb/0x550 [ 280.229618][T13715] recv_work+0x1cee/0x1e10 [ 280.234537][T13715] process_scheduled_works+0xa8e/0x14e0 [ 280.240593][T13715] worker_thread+0xa47/0xfb0 [ 280.245698][T13715] kthread+0x388/0x470 [ 280.250287][T13715] ret_from_fork+0x514/0xb70 [ 280.255389][T13715] ret_from_fork_asm+0x1a/0x30 [ 280.260659][T13715] [ 280.260659][T13715] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 280.268323][T13715] __mutex_lock+0x19d/0x1550 [ 280.273439][T13715] nbd_queue_rq+0x373/0x1150 [ 280.278554][T13715] blk_mq_dispatch_rq_list+0x499/0x1990 [ 280.284644][T13715] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 280.291492][T13715] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 280.298018][T13715] blk_mq_run_work_fn+0x16c/0x300 [ 280.303554][T13715] process_scheduled_works+0xa8e/0x14e0 [ 280.309607][T13715] worker_thread+0xa47/0xfb0 [ 280.314707][T13715] kthread+0x388/0x470 [ 280.319373][T13715] ret_from_fork+0x514/0xb70 [ 280.324562][T13715] ret_from_fork_asm+0x1a/0x30 [ 280.329833][T13715] [ 280.329833][T13715] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 280.337030][T13715] __mutex_lock+0x19d/0x1550 [ 280.342131][T13715] nbd_queue_rq+0xc1/0x1150 [ 280.347148][T13715] blk_mq_dispatch_rq_list+0x499/0x1990 [ 280.353207][T13715] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 280.360049][T13715] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 280.366540][T13715] blk_mq_run_work_fn+0x16c/0x300 [ 280.372071][T13715] process_scheduled_works+0xa8e/0x14e0 [ 280.378129][T13715] worker_thread+0xa47/0xfb0 [ 280.383229][T13715] kthread+0x388/0x470 [ 280.387812][T13715] ret_from_fork+0x514/0xb70 [ 280.393004][T13715] ret_from_fork_asm+0x1a/0x30 [ 280.398275][T13715] [ 280.398275][T13715] -> #3 (set->srcu){.+.+}-{0:0}: [ 280.405385][T13715] __synchronize_srcu+0xc9/0x2f0 [ 280.410833][T13715] elevator_switch+0x1e8/0x7b0 [ 280.416201][T13715] elevator_change+0x2fa/0x480 [ 280.421481][T13715] elevator_set_default+0x375/0x440 [ 280.427202][T13715] blk_register_queue+0x3f3/0x4e0 [ 280.432754][T13715] __add_disk+0x6cb/0xe30 [ 280.437598][T13715] add_disk_fwnode+0xfb/0x4b0 [ 280.442784][T13715] nbd_dev_add+0x733/0xb60 [ 280.447717][T13715] nbd_init+0x15f/0x1e0 [ 280.452418][T13715] do_one_initcall+0x250/0x870 [ 280.457694][T13715] do_initcall_level+0x10a/0x1a0 [ 280.463141][T13715] do_initcalls+0x59/0xa0 [ 280.467979][T13715] kernel_init_freeable+0x29d/0x3e0 [ 280.473685][T13715] kernel_init+0x1d/0x1d0 [ 280.478519][T13715] ret_from_fork+0x514/0xb70 [ 280.483620][T13715] ret_from_fork_asm+0x1a/0x30 [ 280.488978][T13715] [ 280.488978][T13715] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 280.496955][T13715] __mutex_lock+0x19d/0x1550 [ 280.502056][T13715] elevator_change+0x1af/0x480 [ 280.507328][T13715] elevator_set_none+0xb5/0x140 [ 280.512686][T13715] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 280.519003][T13715] nbd_start_device+0x189/0xb30 [ 280.524364][T13715] nbd_genl_connect+0x1597/0x1c10 [ 280.529906][T13715] genl_family_rcv_msg_doit+0x233/0x340 [ 280.535957][T13715] genl_rcv_msg+0x614/0x7a0 [ 280.540968][T13715] netlink_rcv_skb+0x226/0x4a0 [ 280.546244][T13715] genl_rcv+0x28/0x40 [ 280.550737][T13715] netlink_unicast+0x7bb/0x940 [ 280.556032][T13715] netlink_sendmsg+0x813/0xb40 [ 280.561327][T13715] sock_sendmsg_nosec+0x13a/0x180 [ 280.566869][T13715] ____sys_sendmsg+0x54e/0x850 [ 280.572152][T13715] ___sys_sendmsg+0x2a5/0x360 [ 280.577345][T13715] __x64_sys_sendmsg+0x1b1/0x290 [ 280.582797][T13715] do_syscall_64+0x174/0x580 [ 280.587900][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.594301][T13715] [ 280.594301][T13715] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 280.602892][T13715] blk_alloc_queue+0x544/0x690 [ 280.608166][T13715] __blk_mq_alloc_disk+0x194/0x390 [ 280.613962][T13715] nbd_dev_add+0x494/0xb60 [ 280.618892][T13715] nbd_init+0x15f/0x1e0 [ 280.623558][T13715] do_one_initcall+0x250/0x870 [ 280.628834][T13715] do_initcall_level+0x10a/0x1a0 [ 280.634278][T13715] do_initcalls+0x59/0xa0 [ 280.639115][T13715] kernel_init_freeable+0x29d/0x3e0 [ 280.644820][T13715] kernel_init+0x1d/0x1d0 [ 280.649651][T13715] ret_from_fork+0x514/0xb70 [ 280.654751][T13715] ret_from_fork_asm+0x1a/0x30 [ 280.660017][T13715] [ 280.660017][T13715] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 280.667214][T13715] __lock_acquire+0x1520/0x2cf0 [ 280.672661][T13715] lock_acquire+0x106/0x350 [ 280.677673][T13715] fs_reclaim_acquire+0x71/0x100 [ 280.683120][T13715] __kmalloc_cache_noprof+0x61/0x660 [ 280.688921][T13715] __ipv6_dev_mc_inc+0x447/0xa40 [ 280.694455][T13715] pndisc_constructor+0xe0/0x150 [ 280.699900][T13715] pneigh_create+0x237/0x4a0 [ 280.704998][T13715] neigh_add+0x6ea/0xf60 [ 280.709751][T13715] rtnetlink_rcv_msg+0x7b9/0xc00 [ 280.715196][T13715] netlink_rcv_skb+0x226/0x4a0 [ 280.720473][T13715] netlink_unicast+0x7bb/0x940 [ 280.725746][T13715] netlink_sendmsg+0x813/0xb40 [ 280.731019][T13715] sock_sendmsg_nosec+0x13a/0x180 [ 280.736550][T13715] sock_write_iter+0x2de/0x3e0 [ 280.741820][T13715] vfs_write+0x612/0xba0 [ 280.746573][T13715] ksys_write+0x150/0x270 [ 280.751412][T13715] do_syscall_64+0x174/0x580 [ 280.756511][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.762908][T13715] [ 280.762908][T13715] other info that might help us debug this: [ 280.762908][T13715] [ 280.773115][T13715] Chain exists of: [ 280.773115][T13715] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 280.773115][T13715] [ 280.785702][T13715] Possible unsafe locking scenario: [ 280.785702][T13715] [ 280.793131][T13715] CPU0 CPU1 [ 280.798475][T13715] ---- ---- [ 280.803820][T13715] lock(&idev->mc_lock); [ 280.808140][T13715] lock(sk_lock-AF_INET6); [ 280.815148][T13715] lock(&idev->mc_lock); [ 280.821978][T13715] lock(fs_reclaim); [ 280.825942][T13715] [ 280.825942][T13715] *** DEADLOCK *** [ 280.825942][T13715] [ 280.834066][T13715] 3 locks held by syz.0.2074/13715: [ 280.839246][T13715] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 280.848635][T13715] #1: ffffffff9015b538 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4a0 [ 280.858108][T13715] #2: ffff8880789bc530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 280.867761][T13715] [ 280.867761][T13715] stack backtrace: [ 280.873645][T13715] CPU: 1 UID: 0 PID: 13715 Comm: syz.0.2074 Not tainted syzkaller #0 PREEMPT(full) [ 280.873674][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.873692][T13715] Call Trace: [ 280.873699][T13715] [ 280.873707][T13715] dump_stack_lvl+0xe8/0x150 [ 280.873732][T13715] print_circular_bug+0x2e1/0x300 [ 280.873749][T13715] check_noncircular+0x12e/0x150 [ 280.873773][T13715] __lock_acquire+0x1520/0x2cf0 [ 280.873795][T13715] ? rcu_is_watching+0x15/0xb0 [ 280.873816][T13715] ? trace_contention_end+0x3d/0x140 [ 280.873831][T13715] ? __mutex_lock+0x30d/0x1550 [ 280.873851][T13715] ? __kmalloc_cache_noprof+0x61/0x660 [ 280.873868][T13715] lock_acquire+0x106/0x350 [ 280.873886][T13715] ? __kmalloc_cache_noprof+0x61/0x660 [ 280.873904][T13715] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 280.873925][T13715] ? __pfx___mutex_lock+0x10/0x10 [ 280.873945][T13715] fs_reclaim_acquire+0x71/0x100 [ 280.873962][T13715] ? __kmalloc_cache_noprof+0x61/0x660 [ 280.873980][T13715] __kmalloc_cache_noprof+0x61/0x660 [ 280.873997][T13715] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 280.874017][T13715] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 280.874040][T13715] __ipv6_dev_mc_inc+0x447/0xa40 [ 280.874064][T13715] pndisc_constructor+0xe0/0x150 [ 280.874083][T13715] ? __pfx_pndisc_constructor+0x10/0x10 [ 280.874101][T13715] ? __kmalloc_noprof+0x1ad/0x720 [ 280.874118][T13715] ? pneigh_create+0x11c/0x4a0 [ 280.874133][T13715] ? pneigh_create+0x15b/0x4a0 [ 280.874151][T13715] pneigh_create+0x237/0x4a0 [ 280.874168][T13715] neigh_add+0x6ea/0xf60 [ 280.874192][T13715] ? __pfx_neigh_add+0x10/0x10 [ 280.874221][T13715] ? __pfx_neigh_add+0x10/0x10 [ 280.874240][T13715] rtnetlink_rcv_msg+0x7b9/0xc00 [ 280.874257][T13715] ? netlink_sendmsg+0x5d4/0xb40 [ 280.874280][T13715] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 280.874297][T13715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.874315][T13715] ? __lock_acquire+0x683/0x2cf0 [ 280.874338][T13715] netlink_rcv_skb+0x226/0x4a0 [ 280.874364][T13715] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.874382][T13715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.874406][T13715] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.874426][T13715] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.874448][T13715] netlink_unicast+0x7bb/0x940 [ 280.874471][T13715] netlink_sendmsg+0x813/0xb40 [ 280.874494][T13715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.874516][T13715] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.874532][T13715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.874552][T13715] sock_sendmsg_nosec+0x13a/0x180 [ 280.874569][T13715] sock_write_iter+0x2de/0x3e0 [ 280.874584][T13715] ? __pfx_sock_write_iter+0x10/0x10 [ 280.874600][T13715] ? bpf_lsm_file_permission+0x9/0x20 [ 280.874616][T13715] ? security_file_permission+0x75/0x260 [ 280.874637][T13715] vfs_write+0x612/0xba0 [ 280.874661][T13715] ? __pfx_vfs_write+0x10/0x10 [ 280.874684][T13715] ? __fget_files+0x2a/0x420 [ 280.874705][T13715] ksys_write+0x150/0x270 [ 280.874726][T13715] ? __pfx_ksys_write+0x10/0x10 [ 280.874749][T13715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.874765][T13715] do_syscall_64+0x174/0x580 [ 280.874783][T13715] ? trace_irq_disable+0x3b/0x140 [ 280.874800][T13715] ? clear_bhb_loop+0x40/0x90 [ 280.874816][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.874831][T13715] RIP: 0033:0x7f1656b9de59 [ 280.874847][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.874860][T13715] RSP: 002b:00007f16579b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.874875][T13715] RAX: ffffffffffffffda RBX: 00007f1656e26090 RCX: 00007f1656b9de59 [ 280.874886][T13715] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000006 [ 280.874895][T13715] RBP: 00007f1656c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 280.874905][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.874914][T13715] R13: 00007f1656e26128 R14: 00007f1656e26090 R15: 00007fff46d4a618 [ 280.874931][T13715] [ 281.297344][T13721] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1