last executing test programs: 10.377807079s ago: executing program 1 (id=1399): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x48, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x38, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04ab"]}]}, 0xf5}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 9.601308725s ago: executing program 1 (id=1406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9.469662335s ago: executing program 1 (id=1408): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.252744794s ago: executing program 1 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 7.306923763s ago: executing program 1 (id=1422): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x8, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$IMGETCOUNT(r0, 0x61d9, &(0x7f0000000000)) 6.516595019s ago: executing program 1 (id=1430): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 4.108573264s ago: executing program 2 (id=1447): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 3.935998561s ago: executing program 2 (id=1448): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f00000000c0)={'wlan0\x00', 0xf41b, 0x7fff}) 3.239534193s ago: executing program 0 (id=1452): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x8, 0x1, 0x1, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x8000101, 0x1000, 0x9, 0x3, 0x83, 0x1, 0xfffffffa, 0x6, 0x6, 0xd, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x7, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xfffffffa, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0xd, 0x752, 0x0, 0x9, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0xbde, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x3, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x7, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.371407052s ago: executing program 0 (id=1455): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2.368877249s ago: executing program 2 (id=1456): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x2f, 0x0, @void}, 0x10) unshare(0x22020600) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r0, 0x4}, 0x9) 2.147928363s ago: executing program 0 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.127471283s ago: executing program 2 (id=1458): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.3836988s ago: executing program 2 (id=1460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x38}}, 0x60040050) 1.186881606s ago: executing program 0 (id=1463): pipe(&(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x4) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.072500415s ago: executing program 4 (id=1465): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 951.614496ms ago: executing program 3 (id=1466): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 833.588556ms ago: executing program 4 (id=1467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 657.723416ms ago: executing program 3 (id=1468): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000003c0)=0xa, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x2, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x540, 0x4) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000ed"], 0x10}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002100) 636.462359ms ago: executing program 4 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) 607.335305ms ago: executing program 3 (id=1470): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 558.134357ms ago: executing program 2 (id=1471): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) 497.849276ms ago: executing program 4 (id=1472): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfffd}, &(0x7f0000000000)=0x90) 425.791413ms ago: executing program 3 (id=1473): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r5, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 369.562713ms ago: executing program 4 (id=1474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0xc0e, 0x1, 0x529, 0x8, 0x3, 0x4be0, 0x8, 0x401, 0x9, 0x100, 0x1966, 0x2bb, 0xda1d, 0x2b6d, 0x8, 0x0, 0x7, 0x7ff, 0x6, 0x9, 0xec8, 0x3, 0x3c, 0x392f, 0x7, 0x1, 0x7, 0x4, 0x7, 0x10000, 0x5, 0x3, 0x400, 0xfffffff5, 0xfd, 0x1ce0, 0x7fff, 0x5, 0xf56, 0x8, 0xec, 0x0, 0xd925, 0x8, 0x5, 0x1ff, 0xe, 0x3, 0x0, 0x5, 0x10001, 0x0, 0x4, 0x5, 0x2, 0x5, 0x2c449a71, 0x3ff, 0x0, 0x1ff, 0x7, 0x2c8c, 0x1000, 0x8, 0x5, 0x0, 0xc42, 0x0, 0xb, 0x0, 0x0, 0xe252, 0x4, 0x8, 0x1, 0x0, 0x4, 0x7, 0x1, 0xc, 0x5, 0x9, 0x6, 0x0, 0x5, 0x8, 0x8, 0x0, 0xb9ab, 0xf015, 0x3, 0xe, 0x6, 0xc, 0x4, 0x63, 0x7ff, 0xa47, 0x200, 0x1, 0x401, 0x7, 0x400, 0x0, 0x3, 0x800, 0xde, 0x6, 0xed, 0x3, 0x1ff, 0x8, 0xa1, 0x80000000, 0xb, 0xf, 0x7fff, 0x8, 0x9, 0x8000, 0x2, 0x6, 0xe, 0x4f, 0x6, 0xa, 0x0, 0x1, 0x6, 0x88, 0x2d0, 0x8, 0x86b5, 0x5, 0x10000, 0x6, 0xffffff01, 0x67, 0x6, 0x9, 0x533, 0x22, 0xb, 0x4, 0x8, 0xfffffffd, 0x2, 0xffffffff, 0x9, 0x2, 0x3, 0x7, 0x200, 0x101, 0x3, 0x5, 0x7, 0x8, 0xffffffd9, 0x1, 0x4, 0x73, 0x63c, 0x40a615ce, 0x6, 0x0, 0xba, 0x715, 0x32f, 0xfffffff9, 0x66c5b28c, 0x8, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, 0x2, 0xffffffff, 0x9, 0x9, 0xfffffff8, 0x3, 0x4, 0xff, 0x8251, 0x1, 0x80000001, 0x80000000, 0x5f, 0x391e9c0c, 0x1, 0x4, 0x400, 0x9, 0x1, 0x7, 0x4ef1, 0x7, 0x42d3, 0x5, 0xaf, 0x80000000, 0x9, 0x2, 0x1, 0xf3, 0x4, 0x0, 0xb597, 0x9f, 0x0, 0x200, 0x1000, 0x5, 0x7, 0x5, 0xe79, 0x1, 0xffff, 0x9, 0x8, 0x8a0, 0x5, 0x4, 0x8000, 0x6, 0x401f, 0x0, 0x80000001, 0x8, 0x7, 0x8, 0x1, 0x976, 0x0, 0x3, 0x4, 0x5, 0x1, 0x2, 0x8, 0x6, 0x5, 0xfb9d, 0x2, 0x0, 0x40, 0x7fffffff, 0x2, 0x8, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 326.874419ms ago: executing program 0 (id=1475): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 197.516762ms ago: executing program 3 (id=1476): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 151.651471ms ago: executing program 0 (id=1477): unshare(0x62000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffff800, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) connect$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 72.684853ms ago: executing program 3 (id=1478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 0s ago: executing program 4 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r2, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 75.410388][ T5814] cgroup: Unknown subsys name 'net' [ 75.523464][ T5814] cgroup: Unknown subsys name 'cpuset' [ 75.533109][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.146276][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.855828][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.864517][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.876156][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.884533][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.900025][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.908036][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.917114][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.924364][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.932419][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.940819][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.948541][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.955923][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.964238][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.971643][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.979509][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.986974][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.991495][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.006128][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.014264][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.050995][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.058406][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.066172][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.075166][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.082419][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.091261][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.574438][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 81.727566][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 81.829994][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.837841][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.845323][ T5827] bridge_slave_0: entered allmulticast mode [ 81.853590][ T5827] bridge_slave_0: entered promiscuous mode [ 81.884724][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 81.923918][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.931175][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.938390][ T5827] bridge_slave_1: entered allmulticast mode [ 81.945744][ T5827] bridge_slave_1: entered promiscuous mode [ 81.974941][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 82.041827][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.049031][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.056449][ T5833] bridge_slave_0: entered allmulticast mode [ 82.063678][ T5833] bridge_slave_0: entered promiscuous mode [ 82.081213][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.094985][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.135030][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.142449][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.149788][ T5833] bridge_slave_1: entered allmulticast mode [ 82.157003][ T5833] bridge_slave_1: entered promiscuous mode [ 82.220110][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.253339][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 82.266536][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.287600][ T5827] team0: Port device team_slave_0 added [ 82.345208][ T5827] team0: Port device team_slave_1 added [ 82.352541][ T5833] team0: Port device team_slave_0 added [ 82.367765][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.375151][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.383018][ T5826] bridge_slave_0: entered allmulticast mode [ 82.390225][ T5826] bridge_slave_0: entered promiscuous mode [ 82.420132][ T5833] team0: Port device team_slave_1 added [ 82.439074][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.446281][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.453755][ T5841] bridge_slave_0: entered allmulticast mode [ 82.460852][ T5841] bridge_slave_0: entered promiscuous mode [ 82.468303][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.476199][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.483465][ T5826] bridge_slave_1: entered allmulticast mode [ 82.490774][ T5826] bridge_slave_1: entered promiscuous mode [ 82.536635][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.544648][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.552747][ T5841] bridge_slave_1: entered allmulticast mode [ 82.560121][ T5841] bridge_slave_1: entered promiscuous mode [ 82.577476][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.584779][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.610762][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.628819][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.636032][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.662023][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.696306][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.704546][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.730911][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.748395][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.755422][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.786400][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.811240][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.862287][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.873835][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.911166][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.918368][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.925944][ T5842] bridge_slave_0: entered allmulticast mode [ 82.933194][ T5842] bridge_slave_0: entered promiscuous mode [ 82.943387][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.994693][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.002389][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.009800][ T5842] bridge_slave_1: entered allmulticast mode [ 83.016958][ T5842] bridge_slave_1: entered promiscuous mode [ 83.023757][ T5834] Bluetooth: hci1: command tx timeout [ 83.047821][ T5826] team0: Port device team_slave_0 added [ 83.070411][ T5827] hsr_slave_0: entered promiscuous mode [ 83.076815][ T5827] hsr_slave_1: entered promiscuous mode [ 83.096040][ T5841] team0: Port device team_slave_0 added [ 83.100207][ T5834] Bluetooth: hci2: command tx timeout [ 83.102019][ T5839] Bluetooth: hci0: command tx timeout [ 83.111083][ T5841] team0: Port device team_slave_1 added [ 83.129993][ T5826] team0: Port device team_slave_1 added [ 83.151490][ T5833] hsr_slave_0: entered promiscuous mode [ 83.157841][ T5833] hsr_slave_1: entered promiscuous mode [ 83.164145][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 83.170043][ T5833] Cannot create hsr debugfs directory [ 83.179945][ T5839] Bluetooth: hci4: command tx timeout [ 83.179954][ T5834] Bluetooth: hci3: command tx timeout [ 83.180663][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.211327][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.218315][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.244644][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.257405][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.264516][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.290643][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.304652][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.373178][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.380283][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.406547][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.457885][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.465272][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.491733][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.537892][ T5842] team0: Port device team_slave_0 added [ 83.585756][ T5842] team0: Port device team_slave_1 added [ 83.614040][ T5841] hsr_slave_0: entered promiscuous mode [ 83.620787][ T5841] hsr_slave_1: entered promiscuous mode [ 83.626818][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 83.632802][ T5841] Cannot create hsr debugfs directory [ 83.661298][ T5826] hsr_slave_0: entered promiscuous mode [ 83.668095][ T5826] hsr_slave_1: entered promiscuous mode [ 83.674368][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 83.680487][ T5826] Cannot create hsr debugfs directory [ 83.717598][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.724945][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.751490][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.806386][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.813825][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.840816][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.051462][ T5842] hsr_slave_0: entered promiscuous mode [ 84.057934][ T5842] hsr_slave_1: entered promiscuous mode [ 84.064572][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 84.070873][ T5842] Cannot create hsr debugfs directory [ 84.258227][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.277449][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.295050][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.325423][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.420609][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.434963][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.455609][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.478059][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.547762][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.560828][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.572217][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.588475][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.694546][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.704769][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.716560][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.727849][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.757209][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.814259][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.848699][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.856118][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.899324][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.906517][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.929225][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.943780][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.994258][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.005196][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.067867][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.100311][ T5839] Bluetooth: hci1: command tx timeout [ 85.134703][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.146973][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.158519][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.179814][ T5839] Bluetooth: hci2: command tx timeout [ 85.187316][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.194502][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.202059][ T5839] Bluetooth: hci0: command tx timeout [ 85.236651][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.243810][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.260999][ T5839] Bluetooth: hci3: command tx timeout [ 85.270206][ T5839] Bluetooth: hci4: command tx timeout [ 85.288640][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.314287][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.328335][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.335546][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.349760][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.356894][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.409158][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.416382][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.426540][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.433862][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.623052][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.717519][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.743913][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.788753][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.795961][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.844750][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.852005][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.967732][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.048486][ T5827] veth0_vlan: entered promiscuous mode [ 86.135432][ T5827] veth1_vlan: entered promiscuous mode [ 86.206202][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.242786][ T5833] veth0_vlan: entered promiscuous mode [ 86.284628][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.295893][ T5833] veth1_vlan: entered promiscuous mode [ 86.306529][ T5827] veth0_macvtap: entered promiscuous mode [ 86.351472][ T5827] veth1_macvtap: entered promiscuous mode [ 86.454648][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.473385][ T5842] veth0_vlan: entered promiscuous mode [ 86.487804][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.537313][ T5833] veth0_macvtap: entered promiscuous mode [ 86.552266][ T1330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.563794][ T1330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.579204][ T5833] veth1_macvtap: entered promiscuous mode [ 86.587810][ T5826] veth0_vlan: entered promiscuous mode [ 86.595961][ T1330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.605642][ T1330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.626485][ T5842] veth1_vlan: entered promiscuous mode [ 86.648068][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.674364][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.686446][ T5826] veth1_vlan: entered promiscuous mode [ 86.724110][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.807280][ T107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.817460][ T107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.872587][ T107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.882572][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.915885][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.928917][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.019072][ T5826] veth0_macvtap: entered promiscuous mode [ 87.045947][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.070187][ T5842] veth0_macvtap: entered promiscuous mode [ 87.073223][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.081004][ T5826] veth1_macvtap: entered promiscuous mode [ 87.135028][ T5842] veth1_macvtap: entered promiscuous mode [ 87.180195][ T5839] Bluetooth: hci1: command tx timeout [ 87.214207][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.259900][ T5839] Bluetooth: hci0: command tx timeout [ 87.265834][ T5834] Bluetooth: hci2: command tx timeout [ 87.270542][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.338532][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.339651][ T5834] Bluetooth: hci4: command tx timeout [ 87.351892][ T5839] Bluetooth: hci3: command tx timeout [ 87.376353][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.428722][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.436732][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.452088][ T107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.464425][ T107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.493170][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.523631][ T107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.576095][ T107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.593096][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.619051][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.628157][ T5841] veth0_vlan: entered promiscuous mode [ 87.664389][ T107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687736][ T107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.761075][ T107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.785728][ T107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.810944][ T5841] veth1_vlan: entered promiscuous mode [ 87.976410][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.009866][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.134230][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.153589][ T5841] veth0_macvtap: entered promiscuous mode [ 88.171704][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.244087][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.245884][ T5841] veth1_macvtap: entered promiscuous mode [ 88.272837][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.359374][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.427116][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.439824][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.448130][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.553143][ T2991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.576756][ T2991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.598647][ T2991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617316][ T2991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.635730][ T5965] hsr0: entered promiscuous mode [ 88.646547][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.706342][ T5965] hsr_slave_0: left promiscuous mode [ 88.749630][ T5965] hsr_slave_1: left promiscuous mode [ 89.259926][ T5834] Bluetooth: hci1: command tx timeout [ 89.340494][ T5834] Bluetooth: hci2: command tx timeout [ 89.346052][ T5839] Bluetooth: hci0: command tx timeout [ 89.352389][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.380550][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.419556][ T5834] Bluetooth: hci4: command tx timeout [ 89.425019][ T5834] Bluetooth: hci3: command tx timeout [ 89.654435][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.681854][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.850248][ T5983] trusted_key: syz.1.12 sent an empty control message without MSG_MORE. [ 90.321746][ T24] IPVS: starting estimator thread 0... [ 90.351155][ T5998] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 90.420194][ T5999] IPVS: using max 30 ests per chain, 72000 per kthread [ 90.598104][ T6006] syzkaller1: entered promiscuous mode [ 90.638033][ T6006] syzkaller1: entered allmulticast mode [ 92.064203][ T9] cfg80211: failed to load regulatory.db [ 92.178900][ T6050] netlink: 'syz.3.34': attribute type 8 has an invalid length. [ 92.196086][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 92.216854][ T6050] bond0: entered promiscuous mode [ 92.224460][ T6050] bond_slave_0: entered promiscuous mode [ 92.233646][ T6050] bond_slave_1: entered promiscuous mode [ 92.250068][ T6050] gretap0: entered promiscuous mode [ 92.290274][ T6050] bond0: left promiscuous mode [ 92.295130][ T6050] bond_slave_0: left promiscuous mode [ 92.344271][ T6050] bond_slave_1: left promiscuous mode [ 92.388732][ T6050] gretap0: left promiscuous mode [ 92.709865][ T6067] sctp: [Deprecated]: syz.0.41 (pid 6067) Use of int in maxseg socket option. [ 92.709865][ T6067] Use struct sctp_assoc_value instead [ 96.480220][ T6139] warning: `syz.0.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.256159][ T6190] nbd0: detected capacity change from 0 to 63 [ 98.294662][ T6193] block nbd0: NBD_DISCONNECT [ 98.320520][ T6193] block nbd0: Disconnected due to user request. [ 98.335345][ T6193] block nbd0: shutting down sockets [ 98.350702][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.360480][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.368322][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.377877][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.385785][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.395336][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 98.403208][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.412743][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 98.431251][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.444884][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.452860][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.472241][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.480160][ T5840] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.489803][ T5840] Buffer I/O error on dev nbd0, logical block 2, async page read [ 98.497625][ T5840] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.507252][ T5840] Buffer I/O error on dev nbd0, logical block 3, async page read [ 98.516363][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.526252][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.566022][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.586416][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.630377][ T5840] ldm_validate_partition_table(): Disk read failed. [ 98.651976][ T5840] Dev nbd0: unable to read RDB block 0 [ 98.678179][ T5840] nbd0: unable to read partition table [ 98.715820][ T5840] ldm_validate_partition_table(): Disk read failed. [ 98.869767][ T5840] Dev nbd0: unable to read RDB block 0 [ 98.875984][ T5840] nbd0: unable to read partition table [ 100.683282][ T6243] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 100.735702][ T6244] xt_hashlimit: size too large, truncated to 1048576 [ 100.779828][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 105.243339][ T6318] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 107.088775][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.155135][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 107.177581][ T6346] : entered promiscuous mode [ 107.195331][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.240898][ T6350] openvswitch: : Dropping previously announced user features [ 107.662840][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 107.679698][ T6360] netlink: 121 bytes leftover after parsing attributes in process `syz.4.128'. [ 108.116532][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.125042][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.281944][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.296353][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.490092][ T6159] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.516131][ T6159] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.567633][ T6159] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.589592][ T6159] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.847737][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.855563][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.053553][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.066678][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.277545][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.309825][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.318812][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.357223][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.888720][ T6400] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.142'. [ 110.072471][ T6404] netlink: 'syz.4.145': attribute type 21 has an invalid length. [ 110.094041][ T6404] netlink: 'syz.4.145': attribute type 21 has an invalid length. [ 110.102698][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.114881][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.133578][ T6404] Zero length message leads to an empty skb [ 110.142493][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.169583][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.537763][ T6414] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 110.638392][ T6414] bond1: entered promiscuous mode [ 110.709883][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.111694][ T6421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.118954][ T6421] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 111.133278][ T6421] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 111.174465][ T6421] bond1: (slave ip6gre1): making interface the new active one [ 111.205006][ T6421] ip6gre1: entered promiscuous mode [ 111.280122][ T6421] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 112.512797][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.620578][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.870071][ T6450] block nbd0: server does not support multiple connections per device. [ 112.883560][ T6450] block nbd0: shutting down sockets [ 115.566360][ T6550] netlink: 'syz.0.190': attribute type 3 has an invalid length. [ 115.805437][ T6558] netlink: 3 bytes leftover after parsing attributes in process `syz.3.191'. [ 115.953529][ T6564] xt_connbytes: Forcing CT accounting to be enabled [ 116.418950][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 116.542332][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 116.560790][ T6582] team1: entered promiscuous mode [ 116.565897][ T6582] team1: entered allmulticast mode [ 116.601191][ T6582] 8021q: adding VLAN 0 to HW filter on device team1 [ 116.724463][ T6590] team2: entered promiscuous mode [ 116.732395][ T6590] team2: entered allmulticast mode [ 116.755939][ T6590] 8021q: adding VLAN 0 to HW filter on device team2 [ 117.238776][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'. [ 117.270463][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 117.887689][ T6636] syzkaller1: entered promiscuous mode [ 117.913806][ T6636] syzkaller1: entered allmulticast mode [ 119.672399][ T6704] netlink: 'syz.2.230': attribute type 83 has an invalid length. [ 119.692660][ T6705] netlink: 'syz.0.231': attribute type 4 has an invalid length. [ 119.806834][ T6706] netlink: 'syz.0.231': attribute type 4 has an invalid length. [ 120.116484][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 122.094573][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.172733][ T6759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.359662][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.250'. [ 122.583096][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 122.798677][ T6790] netlink: 220 bytes leftover after parsing attributes in process `syz.2.259'. [ 122.832138][ T6790] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 123.805512][ T6815] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 123.889557][ T6815] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 124.945893][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 124.966317][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 125.205011][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 125.714882][ T6882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.293'. [ 126.522001][ T6880] vlan2: entered allmulticast mode [ 126.527191][ T6880] bond0: entered allmulticast mode [ 126.540274][ T6880] bond_slave_0: entered allmulticast mode [ 126.546125][ T6880] bond_slave_1: entered allmulticast mode [ 126.638218][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.661332][ T6882] bond_slave_0: left allmulticast mode [ 126.668361][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 126.690744][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.707236][ T6882] bond_slave_1: left allmulticast mode [ 126.727861][ T6882] bond0 (unregistering): Released all slaves [ 126.731778][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 126.753155][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 126.968162][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 127.046401][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 127.195433][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 127.530373][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 127.942279][ T6944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.157089][ T6954] syzkaller1: entered promiscuous mode [ 128.182412][ T6954] syzkaller1: entered allmulticast mode [ 128.342007][ T6965] Illegal XDP return value 4294967274 on prog (id 42) dev syz_tun, expect packet loss! [ 129.513214][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.330'. [ 130.537177][ T7025] syzkaller1: entered promiscuous mode [ 130.554720][ T7025] syzkaller1: entered allmulticast mode [ 130.833736][ T7040] __nla_validate_parse: 3 callbacks suppressed [ 130.833759][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 131.322340][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.355'. [ 131.766690][ T7074] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 131.915724][ T7074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.947663][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.360'. [ 132.018860][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.037555][ T7081] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 132.058811][ T7081] bond1: (slave vcan1): Error -95 calling set_mac_address [ 132.457725][ T7110] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 132.466075][ T7110] netlink: 'syz.2.368': attribute type 4 has an invalid length. [ 132.473942][ T7110] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.368'. [ 132.486168][ T7110] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 132.494407][ T7110] netlink: 'syz.2.368': attribute type 4 has an invalid length. [ 132.502212][ T7110] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.368'. [ 132.676161][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 133.032099][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038740][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.063037][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 133.107682][ T7100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.278858][ T7134] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.376'. [ 133.508991][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 133.552977][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 133.781924][ T5899] IPVS: starting estimator thread 0... [ 133.871650][ T7159] IPVS: using max 35 ests per chain, 84000 per kthread [ 134.115537][ T7177] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 134.165942][ T7173] netlink: 'syz.0.393': attribute type 4 has an invalid length. [ 134.519677][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.527455][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.687165][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.724353][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.979910][ T6159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.016946][ T6159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.110767][ T6159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.128910][ T6159] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.731131][ T7242] syzkaller1: entered promiscuous mode [ 135.736841][ T7242] syzkaller1: entered allmulticast mode [ 136.046696][ T7223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.150399][ T7257] __nla_validate_parse: 6 callbacks suppressed [ 136.150425][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 136.221013][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 136.231151][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 136.350893][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 137.383100][ T7298] team0 (unregistering): Port device team_slave_0 removed [ 137.434484][ T7298] team0 (unregistering): Port device team_slave_1 removed [ 137.749126][ T7314] netlink: 'syz.0.441': attribute type 10 has an invalid length. [ 137.790146][ T7314] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.441'. [ 137.934014][ T7322] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 137.947707][ T7322] team0: Port device dummy0 added [ 137.959845][ T7322] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 137.985308][ T7322] team0: Port device dummy0 removed [ 138.028202][ T7300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.456593][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 138.575784][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 139.994658][ T7397] syzkaller0: entered promiscuous mode [ 140.000433][ T7397] syzkaller0: entered allmulticast mode [ 140.285790][ T7402] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.471'. [ 141.855309][ T7353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.034455][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 142.096590][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 142.225098][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.233424][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.241482][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.249502][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.257559][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.265581][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.273684][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.281768][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.289791][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.297757][ T7418] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 142.405543][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 142.415706][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.425478][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.961937][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 143.489206][ T7475] netlink: 76 bytes leftover after parsing attributes in process `syz.1.501'. [ 143.525763][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 144.024045][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 144.807471][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 145.111369][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 145.209996][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 146.016107][ T7560] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 146.097511][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.146728][ T7568] bond0: (slave dummy0): making interface the new active one [ 146.163310][ T7568] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.199297][ T7560] bond0 (unregistering): (slave dummy0): Releasing active interface [ 146.211453][ T7560] bond0 (unregistering): Released all slaves [ 146.236167][ T7567] syzkaller1: entered promiscuous mode [ 146.242409][ T7567] syzkaller1: entered allmulticast mode [ 146.525568][ T7586] netlink: 'syz.4.541': attribute type 27 has an invalid length. [ 146.661686][ T7592] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 147.005851][ T7605] xfrm0: entered promiscuous mode [ 147.011746][ T7605] xfrm0: entered allmulticast mode [ 147.274342][ T7617] syzkaller1: entered promiscuous mode [ 147.292072][ T7617] syzkaller1: entered allmulticast mode [ 147.710764][ T7637] __nla_validate_parse: 3 callbacks suppressed [ 147.710788][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 147.924928][ T7613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.931740][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 148.012215][ T7647] bond2: entered promiscuous mode [ 148.036422][ T7647] bond2: entered allmulticast mode [ 148.071432][ T7647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.817516][ T7667] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 148.833900][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 148.875519][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 148.905786][ T7667] bond1: entered promiscuous mode [ 148.926988][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.964194][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 149.047421][ T7671] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.116478][ T7671] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.147781][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.571'. [ 149.160069][ T7671] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 149.182218][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 149.513497][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 149.526153][ T7689] syzkaller1: entered promiscuous mode [ 149.540225][ T7689] syzkaller1: entered allmulticast mode [ 149.873103][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 150.039665][ T7714] netlink: 'syz.4.584': attribute type 27 has an invalid length. [ 150.122961][ T7717] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 150.188119][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.195912][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.424918][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.438490][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.583704][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 150.597842][ T7714] bond1: left promiscuous mode [ 150.678072][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.691062][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.702557][ T7716] net_ratelimit: 44 callbacks suppressed [ 150.702568][ T7716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.761522][ T7717] bond2: entered promiscuous mode [ 150.767028][ T7717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.781499][ T7724] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.794019][ T7724] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 150.804544][ T7724] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 150.829220][ T7737] lo: entered allmulticast mode [ 150.834513][ T3542] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.843488][ T3542] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.852565][ T3542] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.863446][ T3542] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.872587][ T7740] lo: left allmulticast mode [ 150.983289][ T3542] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.008877][ T3542] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.054744][ T638] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.070854][ T638] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.869135][ T7776] netlink: 'syz.2.604': attribute type 27 has an invalid length. [ 152.066646][ T7776] bond2: left promiscuous mode [ 152.288824][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.319326][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.338712][ T7777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.833777][ T7782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.897481][ T7809] syzkaller1: entered promiscuous mode [ 152.919839][ T7809] syzkaller1: entered allmulticast mode [ 153.361853][ T1317] nci: nci_rx_work: unknown MT 0x7 [ 153.928460][ T7843] __nla_validate_parse: 7 callbacks suppressed [ 153.928481][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'. [ 154.266954][ T7853] Bluetooth: MGMT ver 1.23 [ 154.883982][ T7868] sctp: [Deprecated]: syz.0.632 (pid 7868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.883982][ T7868] Use struct sctp_sack_info instead [ 156.268899][ T7824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.473781][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.636'. [ 156.987009][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 157.082692][ T7908] netlink: 'syz.1.647': attribute type 27 has an invalid length. [ 157.216467][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.224050][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.318605][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.330748][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.345362][ T7908] xfrm0: left promiscuous mode [ 157.350402][ T7908] xfrm0: left allmulticast mode [ 157.447487][ T7908] bond1: left promiscuous mode [ 157.453466][ T7908] ip6gre1: left promiscuous mode [ 157.462203][ T7908] team1: left promiscuous mode [ 157.467011][ T7908] team1: left allmulticast mode [ 157.472926][ T7908] team2: left promiscuous mode [ 157.477711][ T7908] team2: left allmulticast mode [ 157.489144][ T7908] bond2: left promiscuous mode [ 157.494099][ T7908] bond2: left allmulticast mode [ 157.545147][ T7911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.556078][ T7911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.617740][ T3542] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.629524][ T3542] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.690778][ T3542] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.744968][ T3542] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.836141][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 157.923319][ T7925] syzkaller1: entered promiscuous mode [ 157.929063][ T7925] syzkaller1: entered allmulticast mode [ 158.225487][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.655'. [ 158.446844][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'. [ 158.533500][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 158.621515][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 158.693166][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 158.708658][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 158.992726][ T7965] syzkaller0: entered promiscuous mode [ 158.998303][ T7965] syzkaller0: entered allmulticast mode [ 159.010788][ T7965] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 159.041079][ T7970] team0 (unregistering): Port device team_slave_0 removed [ 159.051305][ T7970] team0 (unregistering): Port device team_slave_1 removed [ 159.302763][ T7980] __nla_validate_parse: 1 callbacks suppressed [ 159.302785][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 159.372732][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 159.485988][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 159.699290][ T7991] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 159.742866][ T7991] : entered promiscuous mode [ 159.948021][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 160.471366][ T8013] dummy0: entered promiscuous mode [ 160.477106][ T8013] dummy0: entered allmulticast mode [ 161.050446][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 161.557500][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 164.005996][ T8091] netlink: 'syz.3.707': attribute type 3 has an invalid length. [ 164.130858][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 164.589662][ T8097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.694583][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.703446][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.632922][ T8138] netlink: 'syz.0.712': attribute type 27 has an invalid length. [ 166.084782][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 166.100783][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 166.110109][ T8139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.134198][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 166.823554][ T8168] Bluetooth: MGMT ver 1.23 [ 166.839064][ T8168] tipc: Started in network mode [ 166.856482][ T8168] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 166.881394][ T8168] tipc: Enabling of bearer rejected, failed to enable media [ 167.711132][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.735'. [ 167.919768][ T8209] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 167.992681][ T8212] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 168.605420][ T8225] syzkaller0: entered allmulticast mode [ 168.610104][ T8224] netlink: 'syz.3.744': attribute type 9 has an invalid length. [ 168.641974][ T8224] netlink: 'syz.3.744': attribute type 7 has an invalid length. [ 168.656753][ T8222] syzkaller0: entered promiscuous mode [ 168.683177][ T8224] netlink: 'syz.3.744': attribute type 8 has an invalid length. [ 168.753860][ T8222] syzkaller0 (unregistering): left promiscuous mode [ 168.769645][ T8222] syzkaller0 (unregistering): left allmulticast mode [ 170.435320][ T8271] xt_hashlimit: size too large, truncated to 1048576 [ 170.657556][ T8277] syzkaller1: entered promiscuous mode [ 170.733440][ T8277] syzkaller1: entered allmulticast mode [ 172.131381][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 172.813936][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.833995][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.906355][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.919620][ T6159] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.948721][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.958366][ T6159] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.026268][ T6159] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.079619][ T6159] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.338484][ T8332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.356313][ T6159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.378777][ T6159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.778700][ T1330] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 174.195796][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.791'. [ 174.248607][ T8357] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.793'. [ 174.284289][ T8354] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 174.497848][ T8338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.741155][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'. [ 175.101543][ T6159] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 175.580332][ T8419] bridge0: port 3(syz_tun) entered blocking state [ 175.587154][ T8419] bridge0: port 3(syz_tun) entered disabled state [ 175.600802][ T8419] syz_tun: entered allmulticast mode [ 175.609066][ T8419] syz_tun: entered promiscuous mode [ 175.798949][ T8424] netlink: 'syz.0.814': attribute type 4 has an invalid length. [ 175.806912][ T8390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.205977][ T8468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.827'. [ 177.258865][ T8470] netlink: 52 bytes leftover after parsing attributes in process `syz.4.827'. [ 177.401683][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 177.439433][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 177.464513][ T8472] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 178.244109][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 178.388884][ T8503] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 178.868630][ T8518] bridge0: port 3(syz_tun) entered blocking state [ 178.886733][ T8518] bridge0: port 3(syz_tun) entered disabled state [ 178.902872][ T8518] syz_tun: entered allmulticast mode [ 178.912615][ T8518] syz_tun: entered promiscuous mode [ 179.423455][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.843'. [ 179.723731][ T8550] syzkaller1: entered promiscuous mode [ 179.732846][ T8550] syzkaller1: entered allmulticast mode [ 179.923686][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 180.085433][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 180.363665][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 180.481454][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 181.556878][ T8629] sctp: [Deprecated]: syz.1.874 (pid 8629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.556878][ T8629] Use struct sctp_sack_info instead [ 182.813599][ T8676] __nla_validate_parse: 4 callbacks suppressed [ 182.813622][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.889'. [ 183.473793][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x629 [ 184.033945][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 184.048794][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 184.325303][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'. [ 184.674037][ T8743] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 184.842615][ T8743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.932503][ T8747] bond3: (slave veth9): Enslaving as an active interface with a down link [ 184.963699][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.981231][ T8748] bond3: (slave batadv0): making interface the new active one [ 185.032382][ T8748] batadv0: entered promiscuous mode [ 185.038204][ T8748] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 185.062298][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 185.684763][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.928'. [ 185.696927][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 185.714571][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.929'. [ 185.997074][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.934'. [ 186.291905][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'. [ 186.341097][ T8690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.639875][ T8818] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 186.708093][ T8818] bond4: entered promiscuous mode [ 186.721998][ T8818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.933184][ T8818] bond4: (slave bridge7): making interface the new active one [ 186.941434][ T8818] bridge7: entered promiscuous mode [ 186.950129][ T8818] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 187.126879][ T8834] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 187.551947][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.617503][ T8851] netlink: 'syz.0.953': attribute type 1 has an invalid length. [ 187.702148][ T8851] vxlan0: entered promiscuous mode [ 187.732910][ T8851] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 187.740169][ T8858] netlink: 'syz.3.957': attribute type 7 has an invalid length. [ 187.759792][ T8858] netlink: 'syz.3.957': attribute type 8 has an invalid length. [ 187.761771][ T1330] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.788510][ T1330] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.865793][ T1330] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.902471][ T1330] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.130377][ T8870] __nla_validate_parse: 6 callbacks suppressed [ 188.130397][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 188.326203][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 188.921436][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.972'. [ 189.604148][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'. [ 189.801975][ T8907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.951565][ T8924] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 189.956230][ T8913] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 189.983102][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.979'. [ 190.058769][ T8916] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 190.100864][ T8916] bond1 (unregistering): Released all slaves [ 190.270287][ T8932] netlink: 32 bytes leftover after parsing attributes in process `syz.4.979'. [ 190.745403][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 190.760383][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 190.987329][ T8958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 191.361898][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 193.479825][ T8939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.914797][ T9040] __nla_validate_parse: 1 callbacks suppressed [ 193.914818][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 194.468553][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.618021][ T5839] Bluetooth: hci4: link tx timeout [ 194.624716][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.072580][ T5834] Bluetooth: hci4: link tx timeout [ 195.077892][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.118201][ T5834] Bluetooth: hci4: link tx timeout [ 195.123559][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.178047][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 195.222486][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 195.737994][ T5834] Bluetooth: hci4: link tx timeout [ 195.743296][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.083653][ T5834] Bluetooth: hci4: link tx timeout [ 196.088858][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.126820][ T12] batadv0: left promiscuous mode [ 196.258645][ T9138] xt_hashlimit: size too large, truncated to 1048576 [ 196.358490][ T9139] syzkaller1: entered promiscuous mode [ 196.384482][ T9139] syzkaller1: entered allmulticast mode [ 196.510054][ T5834] Bluetooth: hci4: link tx timeout [ 196.518679][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.699799][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 198.378707][ T9204] tipc: Failed to remove unknown binding: 66,1,1/0:767985345/767985347 [ 198.414976][ T9204] tipc: Failed to remove unknown binding: 66,1,1/0:767985345/767985347 [ 198.435215][ T9204] tipc: Failed to remove unknown binding: 66,1,1/0:767985345/767985347 [ 198.714900][ T9211] netlink: 'syz.3.1067': attribute type 1 has an invalid length. [ 198.874550][ T9211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.017581][ T9217] veth23: entered promiscuous mode [ 199.028145][ T9217] bond2: (slave veth23): Enslaving as an active interface with an up link [ 199.082082][ T9228] tipc: Started in network mode [ 199.095137][ T9228] tipc: Node identity d289fdf76228, cluster identity 4711 [ 199.126077][ T9228] tipc: Enabled bearer , priority 0 [ 199.257865][ T9224] syzkaller0: entered promiscuous mode [ 199.264019][ T9224] syzkaller0: entered allmulticast mode [ 199.271178][ T9224] tipc: Resetting bearer [ 199.329710][ T9222] tipc: Resetting bearer [ 199.526432][ T9240] Bluetooth: MGMT ver 1.23 [ 201.015667][ T9222] tipc: Disabling bearer [ 201.029301][ T9240] tc_dump_action: action bad kind [ 201.068575][ T42] tipc: Node number set to 2963406327 [ 201.616439][ T7213] IPVS: starting estimator thread 0... [ 201.710075][ T9289] IPVS: using max 26 ests per chain, 62400 per kthread [ 201.996159][ T9306] syzkaller1: entered promiscuous mode [ 202.012030][ T9306] syzkaller1: entered allmulticast mode [ 202.057347][ T9309] lec:lec_atm_send: lec0: Unknown message type -129671631 [ 202.285734][ T9263] lec:lec_atm_close: lec0: Shut down! [ 203.666308][ T9347] bond3: entered allmulticast mode [ 203.719080][ T9354] macvlan2: entered promiscuous mode [ 203.743868][ T9354] macvlan2: entered allmulticast mode [ 203.751735][ T9354] bond3: (slave macvlan2): Opening slave failed [ 203.797407][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 204.009815][ T42] lec:lec_start_xmit: lec0:No lecd attached [ 204.330357][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 204.375501][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 204.629196][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 205.052460][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 205.968418][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 206.248648][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 206.781835][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 206.787947][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 206.794185][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 206.799508][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 206.812475][ T9496] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 206.835295][ T9496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1145'. [ 207.063445][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 207.604792][ T9527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1153'. [ 209.030507][ T6159] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 209.039484][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 209.049125][ C0] lec:lec_tx_timeout: lec0 [ 209.053861][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 209.081777][ T9580] syz.1.1167 uses old SIOCAX25GETINFO [ 209.174863][ T9585] : entered promiscuous mode [ 209.276548][ T9586] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 209.471882][ T9596] __nla_validate_parse: 1 callbacks suppressed [ 209.471906][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'. [ 209.567671][ T9599] syzkaller0: entered promiscuous mode [ 209.573773][ T9599] syzkaller0: entered allmulticast mode [ 209.704277][ T9572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.606963][ T9649] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 212.840732][ T9649] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 213.233055][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 213.465873][ T9681] tipc: Enabled bearer , priority 0 [ 213.625823][ T9681] syzkaller0: entered promiscuous mode [ 213.634981][ T9681] syzkaller0: entered allmulticast mode [ 213.653462][ T9681] tipc: Resetting bearer [ 213.704494][ T9693] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 213.719337][ T9680] tipc: Resetting bearer [ 213.764567][ T9695] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 214.069401][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 214.077527][ C0] lec:lec_tx_timeout: lec0 [ 214.082171][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 215.247870][ T9680] tipc: Disabling bearer [ 215.264252][ T9693] team0: Port device dummy0 added [ 215.277141][ T9695] team0: Port device dummy0 removed [ 215.286865][ T9695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 215.357829][ T5946] tipc: Node number set to 4227858433 [ 216.754506][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 216.766336][ T9776] tipc: Enabled bearer , priority 0 [ 216.858910][ T9776] syzkaller0: entered promiscuous mode [ 216.883154][ T9776] syzkaller0: entered allmulticast mode [ 216.896532][ T9776] tipc: Resetting bearer [ 216.993306][ T9775] tipc: Resetting bearer [ 217.200416][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 217.210559][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 217.372271][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 217.393669][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 217.416769][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 217.427296][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 217.836646][ T9826] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1235'. [ 218.761773][ T9775] tipc: Disabling bearer [ 218.979104][ T9838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.098440][ T9842] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 219.109433][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 219.117521][ C0] lec:lec_tx_timeout: lec0 [ 219.122513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 219.170372][ T1317] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 219.291117][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 219.891998][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 219.973465][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 220.315661][ T9885] team1: entered promiscuous mode [ 220.325491][ T9885] team1: entered allmulticast mode [ 220.351825][ T9885] 8021q: adding VLAN 0 to HW filter on device team1 [ 220.478735][ T9890] team2: entered promiscuous mode [ 220.533474][ T9890] team2: entered allmulticast mode [ 220.561374][ T9890] 8021q: adding VLAN 0 to HW filter on device team2 [ 220.732376][ T9898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.834982][ T9902] macsec1: entered promiscuous mode [ 220.853592][ T9902] bond3: entered promiscuous mode [ 220.881061][ T9902] bond3: left promiscuous mode [ 222.306386][ T9949] __nla_validate_parse: 2 callbacks suppressed [ 222.306411][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1267'. [ 222.330570][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1268'. [ 222.355904][ T9949] geneve2: entered promiscuous mode [ 222.362440][ T9952] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 222.376403][ T6161] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.386413][ T6161] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.407903][ T6161] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.428091][ T6161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.238203][ T9987] netlink: 'syz.2.1278': attribute type 3 has an invalid length. [ 223.271691][ T9987] netlink: 'syz.2.1278': attribute type 3 has an invalid length. [ 224.129422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 224.137495][ C0] lec:lec_tx_timeout: lec0 [ 224.142301][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 225.473233][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 225.499525][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 225.529213][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 225.569652][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 226.246830][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 226.260010][T10080] syzkaller0: entered promiscuous mode [ 226.265613][T10080] syzkaller0: entered allmulticast mode [ 226.543540][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 226.569510][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 226.765292][T10094] netlink: 'syz.0.1314': attribute type 13 has an invalid length. [ 226.783427][T10094] netlink: 'syz.0.1314': attribute type 17 has an invalid length. [ 228.804867][T10094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.878436][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 228.941311][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 228.959858][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 229.049875][T10124] netlink: 'syz.0.1325': attribute type 11 has an invalid length. [ 229.149439][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 229.157669][ C0] lec:lec_tx_timeout: lec0 [ 229.163235][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 229.356438][T10131] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 229.481017][T10131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.544005][T10138] bond1: (slave gretap1): making interface the new active one [ 229.592899][T10138] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 229.712219][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 229.888011][T10148] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1335'. [ 230.159609][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 230.170299][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 230.325871][T10164] tipc: Started in network mode [ 230.349812][T10164] tipc: Node identity e23ad264136d, cluster identity 4711 [ 230.369816][T10164] tipc: Enabled bearer , priority 0 [ 230.519954][T10167] syzkaller0: entered promiscuous mode [ 230.525588][T10167] syzkaller0: entered allmulticast mode [ 230.532028][T10167] tipc: Resetting bearer [ 230.609959][T10163] tipc: Resetting bearer [ 230.650617][T10179] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1343'. [ 230.659997][T10179] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1343'. [ 232.271842][T10163] tipc: Disabling bearer [ 232.285492][ T5946] tipc: Node number set to 4049064548 [ 232.526678][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 233.086539][T10234] syzkaller1: entered promiscuous mode [ 233.109513][T10234] syzkaller1: entered allmulticast mode [ 233.734795][T10256] netlink: 'syz.3.1362': attribute type 3 has an invalid length. [ 234.169431][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 234.177497][ C0] lec:lec_tx_timeout: lec0 [ 234.182182][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 235.885254][T10346] __nla_validate_parse: 4 callbacks suppressed [ 235.885275][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 235.943324][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 236.101054][T10351] tipc: Started in network mode [ 236.105996][T10351] tipc: Node identity 5e6f96d77f67, cluster identity 4711 [ 236.125272][T10351] tipc: Enabled bearer , priority 0 [ 236.363806][T10351] tipc: Resetting bearer [ 236.468659][ T49] tipc: Resetting bearer [ 236.487526][T10350] tipc: Resetting bearer [ 237.792748][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'. [ 238.700545][T10350] tipc: Disabling bearer [ 238.726953][ T5946] tipc: Node number set to 554211031 [ 238.767444][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'. [ 238.767595][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1409'. [ 238.867806][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.889458][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.952081][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.986868][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.089242][T10437] atomic_op ffff8880571e9998 conn xmit_atomic 0000000000000000 [ 239.189417][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 239.197538][ C0] lec:lec_tx_timeout: lec0 [ 239.202537][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 239.708017][T10464] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 239.846683][T10464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.885324][T10465] vlan3: entered allmulticast mode [ 239.897497][T10465] veth0_to_bond: entered allmulticast mode [ 239.918387][T10465] bond2: (slave vlan3): Opening slave failed [ 239.998638][T10476] netlink: 'syz.2.1423': attribute type 13 has an invalid length. [ 240.364994][T10485] bridge0: port 3(vlan3) entered blocking state [ 240.379827][T10485] bridge0: port 3(vlan3) entered disabled state [ 240.393101][T10485] vlan3: entered allmulticast mode [ 240.404132][T10485] geneve0: entered allmulticast mode [ 240.441858][T10485] vlan3: entered promiscuous mode [ 240.446963][T10485] geneve0: entered promiscuous mode [ 240.534693][T10494] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1427'. [ 241.057371][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 241.553812][T10522] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 242.731728][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 242.806814][T10549] hsr_slave_0: left promiscuous mode [ 242.821392][T10549] hsr_slave_1: left promiscuous mode [ 244.209424][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 244.217557][ C0] lec:lec_tx_timeout: lec0 [ 244.223083][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.770336][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 245.009587][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 246.055206][T10621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.068527][T10621] netlink: 'syz.4.1464': attribute type 10 has an invalid length. [ 246.077504][T10621] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.650106][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 247.291724][T10660] ================================================================== [ 247.299860][T10660] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 247.307619][T10660] Read of size 8 at addr ffff888055ed28a0 by task syz.3.1478/10660 [ 247.315542][T10660] [ 247.317897][T10660] CPU: 0 UID: 0 PID: 10660 Comm: syz.3.1478 Not tainted syzkaller #0 PREEMPT(full) [ 247.317923][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.317935][T10660] Call Trace: [ 247.317943][T10660] [ 247.317952][T10660] dump_stack_lvl+0xe8/0x150 [ 247.317985][T10660] print_report+0xba/0x230 [ 247.318010][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 247.318030][T10660] kasan_report+0x117/0x150 [ 247.318057][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 247.318080][T10660] af_alg_pull_tsgl+0x1c6/0x740 [ 247.318106][T10660] skcipher_recvmsg+0x5df/0x1140 [ 247.318139][T10660] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 247.318162][T10660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.318183][T10660] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 247.318215][T10660] ? security_socket_recvmsg+0x7e/0x2c0 [ 247.318240][T10660] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 247.318263][T10660] sock_recvmsg+0x172/0x1b0 [ 247.318290][T10660] ____sys_recvmsg+0x1e6/0x4a0 [ 247.318324][T10660] ? __pfx_____sys_recvmsg+0x10/0x10 [ 247.318361][T10660] ? import_iovec+0x73/0xa0 [ 247.318388][T10660] ___sys_recvmsg+0x215/0x590 [ 247.318422][T10660] ? __pfx____sys_recvmsg+0x10/0x10 [ 247.318463][T10660] ? __fget_files+0x3a0/0x420 [ 247.318487][T10660] __x64_sys_recvmsg+0x1ba/0x2a0 [ 247.318519][T10660] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 247.318548][T10660] ? rcu_is_watching+0x15/0xb0 [ 247.318582][T10660] ? __pfx_kcov_ioctl+0x10/0x10 [ 247.318617][T10660] do_syscall_64+0x14d/0xf80 [ 247.318636][T10660] ? trace_irq_disable+0x3b/0x150 [ 247.318653][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.318690][T10660] ? clear_bhb_loop+0x40/0x90 [ 247.318714][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.318734][T10660] RIP: 0033:0x7ffb5179c819 [ 247.318753][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.318771][T10660] RSP: 002b:00007ffb52677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 247.318793][T10660] RAX: ffffffffffffffda RBX: 00007ffb51a16090 RCX: 00007ffb5179c819 [ 247.318808][T10660] RDX: 0000000040000003 RSI: 0000200000000600 RDI: 0000000000000004 [ 247.318822][T10660] RBP: 00007ffb51832c91 R08: 0000000000000000 R09: 0000000000000000 [ 247.318834][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.318846][T10660] R13: 00007ffb51a16128 R14: 00007ffb51a16090 R15: 00007ffff23ce878 [ 247.318868][T10660] [ 247.318875][T10660] [ 247.341648][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'. [ 247.341703][T10660] Allocated by task 10660: [ 247.575518][T10660] kasan_save_track+0x3e/0x80 [ 247.580305][T10660] __kasan_kmalloc+0x93/0xb0 [ 247.584908][T10660] __kmalloc_noprof+0x35c/0x760 [ 247.589766][T10660] sock_kmalloc+0xd6/0x160 [ 247.594203][T10660] skcipher_recvmsg+0x54d/0x1140 [ 247.599150][T10660] sock_recvmsg+0x172/0x1b0 [ 247.603656][T10660] ____sys_recvmsg+0x1e6/0x4a0 [ 247.608431][T10660] ___sys_recvmsg+0x215/0x590 [ 247.613127][T10660] __x64_sys_recvmsg+0x1ba/0x2a0 [ 247.618073][T10660] do_syscall_64+0x14d/0xf80 [ 247.622668][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.628563][T10660] [ 247.630891][T10660] The buggy address belongs to the object at ffff888055ed2880 [ 247.630891][T10660] which belongs to the cache kmalloc-32 of size 32 [ 247.644862][T10660] The buggy address is located 0 bytes to the right of [ 247.644862][T10660] allocated 32-byte region [ffff888055ed2880, ffff888055ed28a0) [ 247.659269][T10660] [ 247.661595][T10660] The buggy address belongs to the physical page: [ 247.668008][T10660] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55ed2 [ 247.676772][T10660] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 247.683882][T10660] page_type: f5(slab) [ 247.687868][T10660] raw: 00fff00000000000 ffff88813fea7780 dead000000000100 dead000000000122 [ 247.696473][T10660] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 247.705068][T10660] page dumped because: kasan: bad access detected [ 247.711486][T10660] page_owner tracks the page as allocated [ 247.717202][T10660] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5197, tgid 5197 (udevd), ts 151522834634, free_ts 151460400560 [ 247.737369][T10660] post_alloc_hook+0x231/0x280 [ 247.742151][T10660] get_page_from_freelist+0x24dc/0x2580 [ 247.747792][T10660] __alloc_frozen_pages_noprof+0x18d/0x380 [ 247.753607][T10660] allocate_slab+0x77/0x660 [ 247.758122][T10660] refill_objects+0x331/0x3c0 [ 247.762825][T10660] __pcs_replace_empty_main+0x2e6/0x730 [ 247.768394][T10660] __kmalloc_noprof+0x474/0x760 [ 247.773247][T10660] tomoyo_encode+0x28b/0x550 [ 247.777846][T10660] tomoyo_realpath_from_path+0x58d/0x5d0 [ 247.783480][T10660] tomoyo_check_open_permission+0x229/0x470 [ 247.789394][T10660] security_file_open+0xa9/0x240 [ 247.794345][T10660] do_dentry_open+0x384/0x14e0 [ 247.799126][T10660] vfs_open+0x3b/0x340 [ 247.803204][T10660] path_openat+0x2e08/0x3860 [ 247.807799][T10660] do_file_open+0x23e/0x4a0 [ 247.812395][T10660] do_sys_openat2+0x113/0x200 [ 247.817084][T10660] page last free pid 7758 tgid 7753 stack trace: [ 247.823406][T10660] __free_frozen_pages+0xc2b/0xdb0 [ 247.828608][T10660] tlb_remove_table_rcu+0x85/0x100 [ 247.833732][T10660] rcu_core+0x7cd/0x1070 [ 247.837981][T10660] handle_softirqs+0x22a/0x870 [ 247.842755][T10660] __irq_exit_rcu+0x5f/0x150 [ 247.847374][T10660] irq_exit_rcu+0x9/0x30 [ 247.851623][T10660] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 247.857271][T10660] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.863256][T10660] [ 247.865578][T10660] Memory state around the buggy address: [ 247.871208][T10660] ffff888055ed2780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 247.879442][T10660] ffff888055ed2800: 00 00 04 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 247.887502][T10660] >ffff888055ed2880: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 247.895558][T10660] ^ [ 247.900682][T10660] ffff888055ed2900: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 247.908756][T10660] ffff888055ed2980: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 247.916903][T10660] ================================================================== [ 247.935693][T10660] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.942960][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.3.1478 Not tainted syzkaller #0 PREEMPT(full) [ 247.952357][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.962434][T10660] Call Trace: [ 247.965735][T10660] [ 247.968682][T10660] vpanic+0x56c/0xa60 [ 247.972699][T10660] ? __pfx_vpanic+0x10/0x10 [ 247.977234][T10660] ? __pfx___schedule+0x10/0x10 [ 247.982125][T10660] panic+0xc5/0xd0 [ 247.985879][T10660] ? __pfx_panic+0x10/0x10 [ 247.990334][T10660] ? preempt_schedule_common+0x82/0xd0 [ 247.995828][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 248.000873][T10660] check_panic_on_warn+0x89/0xb0 [ 248.005842][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 248.010888][T10660] end_report+0x73/0x180 [ 248.015148][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 248.020175][T10660] kasan_report+0x128/0x150 [ 248.024684][T10660] ? af_alg_pull_tsgl+0x1c6/0x740 [ 248.029713][T10660] af_alg_pull_tsgl+0x1c6/0x740 [ 248.034578][T10660] skcipher_recvmsg+0x5df/0x1140 [ 248.039530][T10660] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 248.044916][T10660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 248.049858][T10660] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 248.055153][T10660] ? security_socket_recvmsg+0x7e/0x2c0 [ 248.060701][T10660] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 248.066078][T10660] sock_recvmsg+0x172/0x1b0 [ 248.070615][T10660] ____sys_recvmsg+0x1e6/0x4a0 [ 248.075408][T10660] ? __pfx_____sys_recvmsg+0x10/0x10 [ 248.080739][T10660] ? import_iovec+0x73/0xa0 [ 248.085279][T10660] ___sys_recvmsg+0x215/0x590 [ 248.090006][T10660] ? __pfx____sys_recvmsg+0x10/0x10 [ 248.095323][T10660] ? __fget_files+0x3a0/0x420 [ 248.100023][T10660] __x64_sys_recvmsg+0x1ba/0x2a0 [ 248.104977][T10660] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 248.110461][T10660] ? rcu_is_watching+0x15/0xb0 [ 248.115241][T10660] ? __pfx_kcov_ioctl+0x10/0x10 [ 248.120222][T10660] do_syscall_64+0x14d/0xf80 [ 248.124903][T10660] ? trace_irq_disable+0x3b/0x150 [ 248.129932][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.136024][T10660] ? clear_bhb_loop+0x40/0x90 [ 248.140707][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.146606][T10660] RIP: 0033:0x7ffb5179c819 [ 248.151041][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.170921][T10660] RSP: 002b:00007ffb52677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 248.179344][T10660] RAX: ffffffffffffffda RBX: 00007ffb51a16090 RCX: 00007ffb5179c819 [ 248.187338][T10660] RDX: 0000000040000003 RSI: 0000200000000600 RDI: 0000000000000004 [ 248.195322][T10660] RBP: 00007ffb51832c91 R08: 0000000000000000 R09: 0000000000000000 [ 248.203313][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.211379][T10660] R13: 00007ffb51a16128 R14: 00007ffb51a16090 R15: 00007ffff23ce878 [ 248.219372][T10660] [ 248.222779][T10660] Kernel Offset: disabled [ 248.227109][T10660] Rebooting in 86400 seconds..