last executing test programs: 5.265748766s ago: executing program 1 (id=6343): r0 = socket(0x23, 0x0, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x100000000, 0x401, 0x1, 0xc1, 0x0, [0x6, 0xf, 0x668, 0xcc6]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x11c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in6=@mcast1, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @lifetime_val={0x24, 0x9, {0x3ff, 0x3, 0x10000, 0x56c0}}]}, 0x11c}}, 0x4810) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.203703492s ago: executing program 1 (id=6344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3800006, 0x12, r2, 0x7c23c000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x1}, 0x9}) 4.252127326s ago: executing program 1 (id=6353): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010103, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250201022820bd7000fddbdf250c004c00"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x2}) 4.081201781s ago: executing program 1 (id=6355): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x100, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0xcc6d5313b4b83288, 0xa1}}, 0x69}, 0x1, 0x2, 0x0, 0x800}, 0x0) 4.003353263s ago: executing program 1 (id=6356): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) 3.749176109s ago: executing program 1 (id=6363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r4, r3, 0x0, 0xbdc4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x4, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10081}}, 0x20}}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r7, @ANYBLOB="e600003a010000001400040074"], 0x54}}, 0x0) 3.233541499s ago: executing program 0 (id=6371): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee0200ffff02f687100000", @ANYRES32=r0, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x1, 'veth0_to_bridge\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)="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", 0x124, 0x880, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) close(r6) 2.720708577s ago: executing program 3 (id=6375): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x8000000000000001, [0x1, 0x6, 0x80000000, 0x5, 0x5, 0x5308]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in6=@private0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000026000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x2, 0x2000, {0x0, 0x0, 0x0, r11, {0x1}, {0xfff2, 0xffff}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x7, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) 2.496446951s ago: executing program 3 (id=6377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = getgid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r4, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.246912073s ago: executing program 0 (id=6380): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x2408c8d1) 2.172788129s ago: executing program 3 (id=6381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) 2.172024953s ago: executing program 4 (id=6382): r0 = socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000010c5000061118d00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) sendto$inet6(r1, &(0x7f0000000340)="88325d", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x9}, 0x1c) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700", 0x12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0x7, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x5c}, {0x0, 0x7, 0x5c554c82, 0x1000, 0x8, 0x1, 0x2, 0x3}, {0xfd, 0x401, 0x6, 0xfffffffffffffff7}, 0xfffffffa, 0x6e6bb4, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3507, 0x2, 0x2, 0x3, 0x3, 0x73f, 0xfff}}, 0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) shutdown(r1, 0x1) connect$inet6(r1, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000010c5000061118d00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) sendto$inet6(r1, &(0x7f0000000340)="88325d", 0x3, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffff7, @loopback, 0x9}, 0x1c) (async) write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700", 0x12) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e21, 0x7, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x5c}, {0x0, 0x7, 0x5c554c82, 0x1000, 0x8, 0x1, 0x2, 0x3}, {0xfd, 0x401, 0x6, 0xfffffffffffffff7}, 0xfffffffa, 0x6e6bb4, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3507, 0x2, 0x2, 0x3, 0x3, 0x73f, 0xfff}}, 0xe8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) (async) shutdown(r1, 0x1) (async) connect$inet6(r1, 0x0, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) (async) 2.066288099s ago: executing program 2 (id=6383): socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) socket$kcm(0xa, 0x2, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) (async) 2.054942054s ago: executing program 4 (id=6384): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r1 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000084) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) 2.004288574s ago: executing program 0 (id=6385): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004807}, 0x4000010) socket$inet6(0xa, 0x3, 0xc) 1.851045105s ago: executing program 2 (id=6386): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c8d1}, 0x0) (async, rerun: 32) r8 = accept4$alg(r0, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000240)="a92e81d0991808e3199f42e64cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b, 0xe8e74153ac98d420}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async, rerun: 64) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r10, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r11, 0x0, 0x1d, 0x5, &(0x7f0000000240)="14202e1f4390e407cae8adb9ae2165aa923bc58e484f16a027966d995f", &(0x7f0000000280)=""/5, 0x8000, 0x0, 0xe8, 0x89, &(0x7f0000000400)="31b5c61588016faef3f4495ccefe66aab585e7e58ab85dcd7c73648e7313a5f6235152a4afcbbb3d9e7973b29a7c46a2720c1fa3c4a5e4d5dfa288c128f60d4d746012359cb08de557f7f43d299d66f355d93b31e68eeca2a76b994601dc9775711d673e5dde2b890da2a0c780aa6ad6c2dd58465028696af2ae918ddc58e40a4f3ed86aa5cee39a8780b8f54bc9622270bc7d7bfbc88e616f02382f1466ef5dd6cc3981b05739d374a8a303d4ccff639ef349329837a3febbdb47e9df6872ec1dd10bc1a49c4e52574307462a91a530647a66c2e5f6b195bb10a401fcf5adcedf12066c1dd03cd7", &(0x7f0000000500)="73ad9267c4912b4b67c6316599df1cd85e530c3fc46ab1e836ab54a3b48b0307c02e57a29c715591e0f07d03411175d1b701c5910f4611d3b5681b990e753fd194d1e987d82f7d98ca3f6b1d51b96786d7f02b36fcb7fcc17f6e141bc61e22cfdd97a15b88f06d9f83836b856945cf7c9471c2c69bb7de2d694ca7f309d29788ebd431d7a4af2ac488", 0x2, 0x0, 0x54}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}}, 0x0) (async, rerun: 32) write$cgroup_devices(r9, &(0x7f0000000880)={'c', ' *:* ', 'r\x00'}, 0x8) (rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r13, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r12, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.747571633s ago: executing program 3 (id=6387): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000700)=ANY=[], 0xfe33) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x0, 0x110, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x28}, @loopback, 0x0, 0xff, 0xe, 0x3, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x7, 0x7fff, 0x7, 0x7, 0x1, 'geneve1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x94}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2, 0x1}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x551d17cb, 'system_u:object_r:semanage_exec_t:s0\x00'}}}, {{@arp={@multicast2, @local, 0xffffffff, 0xffffffff, 0x0, 0x6, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x0, 0x6, 0xfff, 0x2, 0x7, 'veth1_to_team\x00', 'vcan0\x00', {0x7f}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.67992844s ago: executing program 0 (id=6388): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x2010, 0xffffffffffffffff, 0x17b72000) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001f40)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x98) r3 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000000c0)) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x54, 0xa9, @random="4876f991e6aefb739f776b84721478bd6d7b464ca15e9a29ebda57108625fdd106bfd540dbcc1389ceead29063313e82c9f7ba2af605671eb2227b673a35d9ccb3562d5d18f8cd737bec07d2bbd97bf3"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x81}]}, 0xc8}, 0x1, 0x0, 0x0, 0x28002000}, 0x1) 1.636076438s ago: executing program 4 (id=6389): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a", @ANYRESDEC], 0xc0}}, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x2, @empty, 0x1}, @in6={0xa, 0x4e22, 0x8, @mcast1, 0xaf}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x6, @empty, 0x7}, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}], 0x90) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-ce\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000fbdbdf253800000008000300", @ANYRES32=r9, @ANYBLOB='\f\x00X\x00X\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x24040840) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r10 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) (rerun: 32) sendto$packet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r11, 0x1, 0xda, 0x6, @remote}, 0x14) (async) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) write(r12, &(0x7f00000000c0)="19474d8dc5c3d9e30a02834d2e5ce4b2dc0345a6a71753082fca7e974693106260232c96796c343415b48021be705117cdbde8d403051f3eade8beb1fcaa59b15d119b318e2a90e0bd77ee9817cd2db8aee971133d92fd850e1252560ba665c3d9a1344e571cceb9c81ede33e6118e2631c1d4f5f9651bbee9612c07442d8e378b00aa40cb80e1d46f77dd5f1d03239e1697", 0x92) 1.628778498s ago: executing program 2 (id=6390): setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) 1.540441536s ago: executing program 0 (id=6391): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) sendto$inet6(r1, &(0x7f0000000480)="4147601725a40d1277ccf6bbd43100ddfb76d3ab314ff299a5813867917fbba298e0a0b2f1ea3f7444967769d9a2dfcec0989fd958c566c6f0b6", 0x3a, 0x20001, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x22, &(0x7f0000000140)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x4}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "f7d3f7f7cc434220"}}}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x9, 0x8, 0x20007, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) (async, rerun: 32) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x1e, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000a900000007000000005d35af1022b8f397a7391ce3cc00"/42, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.510548931s ago: executing program 3 (id=6392): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x1, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffc}}}, 0x3a) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x8}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0xa0, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5d}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1d6325e5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffe743}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.14141454s ago: executing program 2 (id=6393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 290.900544ms ago: executing program 4 (id=6394): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x40, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 290.31695ms ago: executing program 3 (id=6395): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x16, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3"}}, 0x24) 229.164512ms ago: executing program 2 (id=6396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820faeb705000092ea54c7be", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r8, 0x400448e7, &(0x7f0000000000)) (async) write$bt_hci(r8, &(0x7f00000001c0)={0x1, @accept_phy_link={{0x436, 0x12}, {0xc8, 0x9f, 0x80, "daec2ca914e6c8fae82f69526113ca"}}}, 0x16) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 225.69088ms ago: executing program 0 (id=6397): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x13c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7c}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x2, 0x45, 0x2, 0x6, 0x12, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x2}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x44050}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)={0x1d, 0xa, 0x0, 0xdc, 0x0, [@private0, @private1, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0xa}]}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x5, 0x5, 0x7}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 152.886404ms ago: executing program 4 (id=6398): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x1e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xb6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xb3a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x2, 0xa, 0x6, 0x6, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf}, 0x94) 8.037846ms ago: executing program 2 (id=6399): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) accept4(r4, 0x0, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={r1, 0x39, 0x9, 0x7, 0x800, 0xfffffffc}, &(0x7f0000000080)=0x14) (async, rerun: 64) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) (async, rerun: 64) shutdown(r0, 0x2) 0s ago: executing program 4 (id=6400): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r1, 0x0, 0xc, 0x0, &(0x7f0000000780)) epoll_create1(0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): icast mode [ 415.037383][T22992] tipc: Started in network mode [ 415.045394][T22992] tipc: Node identity 2eb5a8439f2, cluster identity 4711 [ 415.056102][T22992] tipc: Enabled bearer , priority 0 [ 415.091661][T22992] team_slave_0: entered allmulticast mode [ 415.113367][T22992] team_slave_0: entered promiscuous mode [ 415.126223][T22996] syzkaller0: entered promiscuous mode [ 415.132034][T22996] syzkaller0: entered allmulticast mode [ 415.160402][T22996] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 415.160472][T22990] tipc: Disabling bearer [ 415.337964][T23009] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4650'. [ 415.357131][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4650'. [ 415.386057][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4650'. [ 415.491527][T23018] netlink: 'syz.3.4652': attribute type 9 has an invalid length. [ 415.524946][T23018] netlink: 'syz.3.4652': attribute type 11 has an invalid length. [ 415.532807][T23018] netlink: 'syz.3.4652': attribute type 12 has an invalid length. [ 415.592141][T23025] siw: device registration error -23 [ 415.635841][T23026] netlink: 'syz.4.4655': attribute type 26 has an invalid length. [ 415.899420][T23047] vcan0: entered allmulticast mode [ 416.001881][T23049] vxcan1 speed is unknown, defaulting to 1000 [ 416.079679][T23053] __nla_validate_parse: 4 callbacks suppressed [ 416.079699][T23053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4661'. [ 416.126816][T23053] syzkaller0: entered promiscuous mode [ 416.139705][T23055] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4662'. [ 416.143944][T23053] syzkaller0: entered allmulticast mode [ 416.174448][T23053] xt_hashlimit: invalid rate [ 416.200266][T23053] tc action pedit offset must be on 32 bit boundaries [ 416.334611][T22295] Bluetooth: hci1: command 0x0406 tx timeout [ 416.625862][T23069] team0: No ports can be present during mode change [ 416.659251][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4666'. [ 416.956430][T23084] netlink: 'syz.4.4672': attribute type 11 has an invalid length. [ 416.981219][T23084] netlink: 'syz.4.4672': attribute type 11 has an invalid length. [ 417.011355][T23084] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4672'. [ 417.072557][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 417.220694][T23093] syz_tun: entered allmulticast mode [ 417.433044][T23106] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4679'. [ 417.468025][T23110] #ÿ: renamed from bond_slave_0 (while UP) [ 417.668076][T23123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4681'. [ 417.739754][T23125] delete_channel: no stack [ 418.017261][T23092] syz_tun: left allmulticast mode [ 418.032129][T23136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.268362][T23145] IPVS: Scheduler module ip_vs_sip not found [ 418.523379][T23156] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4693'. [ 418.571724][T23156] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4693'. [ 418.619804][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4695'. [ 418.671362][T23151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.699596][T23151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.000693][T23151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.021415][T23151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.221712][T23151] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 419.267180][T23151] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 419.307373][T23151] bridge0: port 3(netdevsim1) entered disabled state [ 419.367566][T23151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.408592][T23151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.408642][T23200] block nbd4: Unsupported socket: should be TCP or UNIX. [ 419.571208][T23151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.592262][T23151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.804091][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.818924][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.835335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 419.843923][ C1] lec:lec_tx_timeout: lec0 [ 419.847510][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.848576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.859457][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.991679][ T147] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.008722][ T147] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.090283][ T6398] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.114076][ T6398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.357234][T23224] netlink: 'syz.1.4715': attribute type 1 has an invalid length. [ 420.628991][T23229] bond6: (slave veth3): Enslaving as an active interface with a down link [ 420.666634][T23230] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.351298][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805caff800: rx timeout, send abort [ 421.576133][T23272] netlink: 'syz.1.4726': attribute type 10 has an invalid length. [ 421.622582][T23272] veth0_macvtap: left promiscuous mode [ 421.851428][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cafdc00: rx timeout, send abort [ 421.861982][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805caff800: abort rx timeout. Force session deactivation [ 422.137809][T23292] tipc: Enabled bearer , priority 0 [ 422.162952][T23294] __nla_validate_parse: 3 callbacks suppressed [ 422.162971][T23294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4734'. [ 422.182279][T23292] syzkaller0: entered promiscuous mode [ 422.194615][T23292] syzkaller0: entered allmulticast mode [ 422.217212][T23299] block nbd4: Unsupported socket: should be TCP or UNIX. [ 422.227728][T23292] tipc: Resetting bearer [ 422.294934][T23289] tipc: Resetting bearer [ 422.359722][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cafdc00: abort rx timeout. Force session deactivation [ 422.402789][T23289] tipc: Disabling bearer [ 422.573201][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4740'. [ 422.590614][T23314] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 422.767894][T23320] syzkaller1: entered promiscuous mode [ 422.792160][T23320] syzkaller1: entered allmulticast mode [ 422.809198][T23333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4746'. [ 422.824691][T22295] Bluetooth: hci3: command 0x0419 tx timeout [ 422.931837][T23329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4744'. [ 423.215200][T23351] xt_hashlimit: size too large, truncated to 1048576 [ 423.427415][T23366] netlink: 'syz.4.4755': attribute type 1 has an invalid length. [ 423.549931][T23369] netlink: 'syz.1.4751': attribute type 3 has an invalid length. [ 423.581486][T23369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4751'. [ 423.595769][T23374] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4756'. [ 423.605992][T23374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4756'. [ 423.853693][T23366] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.878159][T23371] bond5: (slave veth3): Enslaving as an active interface with a down link [ 423.887410][T23372] batadv_slave_0: entered allmulticast mode [ 423.900724][T23373] bond5: (slave veth0_to_bond): making interface the new active one [ 423.910113][T23373] veth0_to_bond: entered promiscuous mode [ 423.921058][T23373] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 423.948131][T23375] bond5: (slave veth5): Enslaving as an active interface with a down link [ 424.048923][T23384] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4759'. [ 424.086431][T23387] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4760'. [ 424.101553][T23387] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4760'. [ 424.119128][T23384] bond0 (unregistering): (slave 7#ÿ): Releasing backup interface [ 424.139240][T23384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.156792][T23384] bond0 (unregistering): Released all slaves [ 424.258781][ T1168] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 424.290330][ T1168] veth0_to_bond: left promiscuous mode [ 424.317564][ T1168] bond5: now running without any active interface! [ 424.339789][T23390] bond1: option mode: unable to set because the bond device has slaves [ 424.431500][T23396] syzkaller1: entered promiscuous mode [ 424.439338][T23396] syzkaller1: entered allmulticast mode [ 424.505981][T23396] dvmrp0: left allmulticast mode [ 424.875715][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 424.883774][ C1] lec:lec_tx_timeout: lec0 [ 424.888465][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.895239][T22295] Bluetooth: hci3: command 0x0419 tx timeout [ 424.958319][T23433] netlink: 'syz.3.4774': attribute type 1 has an invalid length. [ 424.998003][T23436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.017473][T23437] Cannot find map_set index 65533 as target [ 425.537600][T23444] syzkaller0: entered allmulticast mode [ 425.838110][T23460] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 425.890019][T23462] xt_l2tp: invalid flags combination: 8 [ 426.276138][T23481] netlink: 'syz.1.4785': attribute type 1 has an invalid length. [ 426.287217][T23481] netlink: 'syz.1.4785': attribute type 2 has an invalid length. [ 426.331595][T23481] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 426.371357][T23487] tipc: Enabling of bearer rejected, media not registered [ 427.401620][ T30] audit: type=1800 audit(1773608528.239:3): pid=23550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4802" name="memory.events" dev="tmpfs" ino=1871 res=0 errno=0 [ 427.457850][ T30] audit: type=1804 audit(1773608528.269:4): pid=23550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4802" name="/newroot/366/memory.events" dev="tmpfs" ino=1871 res=1 errno=0 [ 427.556828][ T30] audit: type=1804 audit(1773608528.279:5): pid=23553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4802" name="/newroot/366/memory.events" dev="tmpfs" ino=1871 res=1 errno=0 [ 427.621017][ T30] audit: type=1800 audit(1773608528.279:6): pid=23553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4802" name="memory.events" dev="tmpfs" ino=1871 res=0 errno=0 [ 427.639205][T23564] netlink: 'syz.2.4803': attribute type 1 has an invalid length. [ 427.658352][T23565] __nla_validate_parse: 46 callbacks suppressed [ 427.658371][T23565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4804'. [ 427.858570][T23570] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 427.962184][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 427.977795][T23564] veth3: entered promiscuous mode [ 428.029501][T23578] syzkaller0: entered promiscuous mode [ 428.035910][T23578] syzkaller0: entered allmulticast mode [ 428.044960][T23578] 0: reclassify loop, rule prio 0, protocol 800 [ 428.369520][T23588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4810'. [ 428.410094][T23593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4812'. [ 428.966199][T23620] mac80211_hwsim hwsim33 ÿ: renamed from wlan1 [ 428.993936][ T2661] block nbd2: Possible stuck request ffff888026940000: control (read@0,1024B). Runtime 270 seconds [ 429.006371][ T25] block nbd1: Possible stuck request ffff888026898000: control (read@0,1024B). Runtime 270 seconds [ 429.017252][ T25] block nbd1: Possible stuck request ffff888026898200: control (read@1024,1024B). Runtime 270 seconds [ 429.028643][ T2661] block nbd2: Possible stuck request ffff888026940200: control (read@1024,1024B). Runtime 270 seconds [ 429.042688][ T25] block nbd1: Possible stuck request ffff888026898400: control (read@2048,1024B). Runtime 270 seconds [ 429.053874][ T25] block nbd1: Possible stuck request ffff888026898600: control (read@3072,1024B). Runtime 270 seconds [ 429.066845][ T2661] block nbd2: Possible stuck request ffff888026940400: control (read@2048,1024B). Runtime 270 seconds [ 429.077963][ T2661] block nbd2: Possible stuck request ffff888026940600: control (read@3072,1024B). Runtime 270 seconds [ 429.165342][T23630] syzkaller0: entered promiscuous mode [ 429.180774][T23630] syzkaller0: entered allmulticast mode [ 429.251372][T23630] syz_tun: entered allmulticast mode [ 429.277890][T23638] netlink: 'syz.2.4826': attribute type 1 has an invalid length. [ 429.298424][T23639] netlink: 'syz.0.4827': attribute type 2 has an invalid length. [ 429.336541][T23641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4828'. [ 429.353358][T23638] 8021q: adding VLAN 0 to HW filter on device bond9 [ 429.412246][T23638] bond9: (slave veth0_to_bond): making interface the new active one [ 429.423947][T23638] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.434137][T23627] syz_tun: left allmulticast mode [ 429.467533][T23645] 8021q: adding VLAN 0 to HW filter on device bond10 [ 429.477960][T23645] bond9: (slave bond10): Enslaving as an active interface with a down link [ 429.616460][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.739624][T23656] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 429.848106][T23663] syzkaller0: entered promiscuous mode [ 429.876519][T23663] syzkaller0: entered allmulticast mode [ 429.905817][T23662] syzkaller0: entered promiscuous mode [ 429.913637][T23662] syzkaller0: entered allmulticast mode [ 429.948093][T23673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.960808][T23673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.971509][T23673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.022589][T23665] netlink: 'syz.4.4835': attribute type 1 has an invalid length. [ 430.151253][T23685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4839'. [ 430.171239][T23686] pim6reg: entered allmulticast mode [ 430.219798][T23686] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 430.241911][T23686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4840'. [ 430.259160][T23683] netlink: 'syz.1.4838': attribute type 3 has an invalid length. [ 430.276952][T23683] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4838'. [ 430.287181][T23686] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4840'. [ 430.298807][T23686] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 430.322530][T23687] pim6reg: left allmulticast mode [ 430.338619][T23687] vcan0: left allmulticast mode [ 430.389101][T23691] vxcan1 speed is unknown, defaulting to 1000 [ 430.610986][T23711] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4847'. [ 430.768036][T23685] vxcan1 speed is unknown, defaulting to 1000 [ 430.774453][T23706] syzkaller0: entered allmulticast mode [ 430.894629][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 430.902700][ C1] lec:lec_tx_timeout: lec0 [ 430.907314][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.292011][T23742] netlink: 'syz.1.4853': attribute type 8 has an invalid length. [ 431.699619][T22295] Bluetooth: hci0: command 0x080f tx timeout [ 432.206656][T23787] netlink: 'syz.1.4867': attribute type 1 has an invalid length. [ 432.794422][T23820] __nla_validate_parse: 7 callbacks suppressed [ 432.794440][T23820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4875'. [ 432.821391][T23820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.856729][T23820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.215814][T23845] syzkaller0: entered promiscuous mode [ 433.222943][T23845] syzkaller0: entered allmulticast mode [ 433.465406][T23859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4884'. [ 433.852603][T23875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4889'. [ 434.407666][T23926] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 434.416640][T23926] netlink: 16159 bytes leftover after parsing attributes in process `syz.2.4903'. [ 434.640812][T23945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4910'. [ 434.766212][T23951] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4913'. [ 434.784453][T23949] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4912'. [ 434.899897][T23959] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 434.941915][T23960] vcan1: entered promiscuous mode [ 434.948489][T23960] vcan1: entered allmulticast mode [ 434.990789][T23965] ip6gre0: Master is either lo or non-ether device [ 435.008480][T23962] vxcan1 speed is unknown, defaulting to 1000 [ 435.027611][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'. [ 435.047316][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'. [ 435.153484][T23973] nbd: couldn't find a device at index 0 [ 435.189875][T23977] netem: incorrect gi model size [ 435.196491][T23977] netem: change failed [ 435.785383][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4930'. [ 436.577343][T24051] vcan0 (unregistering): left allmulticast mode [ 436.654563][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 436.662641][ C1] lec:lec_tx_timeout: lec0 [ 436.669263][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.840964][T24065] netlink: 'syz.2.4942': attribute type 1 has an invalid length. [ 437.012974][T24077] netlink: 'syz.2.4946': attribute type 4 has an invalid length. [ 437.469654][T24106] netlink: 'syz.2.4950': attribute type 1 has an invalid length. [ 437.491564][T24111] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 437.576919][T24106] 8021q: adding VLAN 0 to HW filter on device bond11 [ 437.601313][T24113] pim6reg1: entered promiscuous mode [ 437.607585][T24113] pim6reg1: entered allmulticast mode [ 437.971151][T24138] __nla_validate_parse: 6 callbacks suppressed [ 437.971170][T24138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4959'. [ 437.993411][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4959'. [ 438.011057][T24138] vlan3: entered allmulticast mode [ 438.020357][T24138] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 438.203735][T24149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4963'. [ 438.469071][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4968'. [ 438.541627][T24169] hsr_slave_0 (unregistering): left promiscuous mode [ 441.281536][T24155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.445166][T24211] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4978'. [ 441.678001][T24224] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4984'. [ 441.694662][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 441.702732][ C1] lec:lec_tx_timeout: lec0 [ 441.707816][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.780396][T24239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4989'. [ 441.821458][T24245] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 441.947689][T22295] Bluetooth: hci2: command 0x0406 tx timeout [ 441.958971][T24250] syzkaller0: entered promiscuous mode [ 441.964502][T24250] syzkaller0: entered allmulticast mode [ 442.542587][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4999'. [ 442.692197][T24290] netlink: 'syz.4.5000': attribute type 4 has an invalid length. [ 442.965889][T24317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5008'. [ 443.009174][T24318] netlink: 'syz.1.5007': attribute type 5 has an invalid length. [ 443.022573][T24318] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5007'. [ 443.046203][T24320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5010'. [ 443.066698][T24318] ±ÿ: renamed from team_slave_1 (while UP) [ 443.133523][T24323] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 443.260179][T24337] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5013'. [ 443.359380][T24348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.379180][T24348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.423375][T24352] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5015'. [ 443.471606][T24356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5019'. [ 443.480739][ T30] audit: type=1800 audit(1773608544.309:7): pid=24356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5019" name="memory.events" dev="tmpfs" ino=2098 res=0 errno=0 [ 443.612472][T24360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5018'. [ 443.664282][ T51] block nbd4: Receive control failed (result -32) [ 443.826417][T24375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5025'. [ 444.361390][T24387] bridge_slave_0 (unregistering): left allmulticast mode [ 444.404973][T24399] netlink: 'syz.3.5033': attribute type 1 has an invalid length. [ 444.406509][T24387] bridge_slave_0 (unregistering): left promiscuous mode [ 444.413071][T24399] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5033'. [ 444.444743][T24387] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.749687][T24418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5039'. [ 444.775278][T24418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.800095][T24418] team0: Port device batadv0 added [ 444.850306][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 444.882999][T24435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.139099][T24454] xt_hashlimit: size too large, truncated to 1048576 [ 445.318227][T24456] syzkaller1: entered promiscuous mode [ 445.346879][T24456] syzkaller1: entered allmulticast mode [ 445.472022][T24469] vxcan1 speed is unknown, defaulting to 1000 [ 445.683092][ T6405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.691813][ T6405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.705394][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.899329][ T6598] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.576964][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.714772][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 446.722891][ C1] lec:lec_tx_timeout: lec0 [ 446.727670][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 446.895587][T24550] syzkaller1: entered promiscuous mode [ 446.901110][T24550] syzkaller1: entered allmulticast mode [ 446.969986][T24560] xt_hashlimit: size too large, truncated to 1048576 [ 447.071830][T24564] –: renamed from vxcan1 [ 447.118392][T24566] netlink: 'syz.1.5078': attribute type 1 has an invalid length. [ 447.211710][T24571] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 447.490398][T24592] netlink: 'syz.1.5086': attribute type 33 has an invalid length. [ 448.083578][T24635] openvswitch: netlink: IP tunnel dst address not specified [ 448.566514][T24676] syzkaller0: entered promiscuous mode [ 448.592612][T24676] __nla_validate_parse: 13 callbacks suppressed [ 448.592633][T24676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5106'. [ 448.622872][T24676] netlink: 'syz.1.5106': attribute type 1 has an invalid length. [ 448.653111][T24687] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 448.691059][T24677] netlink: 'syz.2.5105': attribute type 10 has an invalid length. [ 448.812415][T24693] netlink: 'syz.1.5112': attribute type 11 has an invalid length. [ 448.836681][T24693] netlink: 'syz.1.5112': attribute type 11 has an invalid length. [ 448.851253][T24693] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5112'. [ 449.218005][T24725] bond0: entered allmulticast mode [ 449.223349][T24725] bond_slave_0: entered allmulticast mode [ 449.230872][T24725] bond_slave_1: entered allmulticast mode [ 449.241771][T24725] bridge0: entered allmulticast mode [ 449.308639][T24733] netlink: 'syz.0.5120': attribute type 1 has an invalid length. [ 449.317677][T24733] netlink: 'syz.0.5120': attribute type 2 has an invalid length. [ 449.341420][T24733] xt_addrtype: ipv6 does not support BROADCAST matching [ 449.384781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.412002][T24740] netlink: 'syz.3.5121': attribute type 6 has an invalid length. [ 449.425418][T24739] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5123'. [ 449.661486][T24752] team0: Device gtp0 is up. Set it down before adding it as a team port [ 449.799481][T24757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5129'. [ 449.909762][T24766] netlink: 'syz.4.5132': attribute type 1 has an invalid length. [ 449.936211][T24762] vxcan1 speed is unknown, defaulting to 1000 [ 450.281321][T24790] netlink: 35628 bytes leftover after parsing attributes in process `syz.4.5138'. [ 451.076322][T24840] netlink: 'syz.1.5150': attribute type 64 has an invalid length. [ 451.084364][T24840] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5150'. [ 451.120024][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5146'. [ 451.138149][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5150'. [ 451.306816][T24850] delete_channel: no stack [ 451.419036][T24853] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5156'. [ 451.453374][T24853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5156'. [ 451.590768][T24873] netlink: 'syz.2.5163': attribute type 1 has an invalid length. [ 451.593588][T24871] : entered promiscuous mode [ 451.673913][T24877] netlink: 'syz.1.5165': attribute type 9 has an invalid length. [ 451.734872][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 451.742902][ C1] lec:lec_tx_timeout: lec0 [ 451.748364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 451.771014][T24880] syzkaller0: entered promiscuous mode [ 451.777796][T24880] syzkaller0: entered allmulticast mode [ 451.898380][T24891] veth1_macvtap: left promiscuous mode [ 452.104099][T24905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 452.146464][T24905] input: failed to attach handler evdev to device input6, error: -4 [ 452.626666][T24946] netlink: 'syz.3.5188': attribute type 17 has an invalid length. [ 452.662270][T24946] gretap0: entered promiscuous mode [ 452.711242][T24946] gretap0: left promiscuous mode [ 453.741845][T25033] tipc: Trying to set illegal importance in message [ 453.758414][T25032] tipc: Trying to set illegal importance in message [ 453.872639][T25039] syzkaller0: entered promiscuous mode [ 453.879010][T25039] syzkaller0: entered allmulticast mode [ 453.961562][T25049] validate_nla: 1 callbacks suppressed [ 453.961579][T25049] netlink: 'syz.2.5217': attribute type 4 has an invalid length. [ 453.978399][T25049] __nla_validate_parse: 20 callbacks suppressed [ 453.978414][T25049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5217'. [ 454.009976][T25049] .`: renamed from bond0 (while UP) [ 454.129752][T25060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5220'. [ 454.141272][T25060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.221881][T25064] geneve5: entered promiscuous mode [ 454.230404][ T13] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 33126 - 0 [ 454.241324][ T13] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 33126 - 0 [ 454.253020][ T13] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 33126 - 0 [ 454.262450][ T13] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 33126 - 0 [ 454.377605][T25064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.399718][T25064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.415775][T25064] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 33126 - 0 [ 454.432020][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5226'. [ 454.565863][T25064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.578460][T25064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.591011][T25064] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 33126 - 0 [ 454.678261][T25088] netlink: 512 bytes leftover after parsing attributes in process `syz.3.5229'. [ 454.728215][T25064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.742192][T25064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.753539][T25064] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 33126 - 0 [ 454.911882][T25064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.934640][T25064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.945617][T25064] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 33126 - 0 [ 455.039551][ T6405] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33126 - 0 [ 455.050852][ T6405] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 455.069094][ T6405] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 455.088936][T25107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5232'. [ 455.104871][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'. [ 455.113996][ T6405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33126 - 0 [ 455.117039][T25107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5232'. [ 455.123623][ T6405] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 455.143307][ T6405] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 455.160995][ T6405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33126 - 0 [ 455.169497][ T6405] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 455.178134][ T6405] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 455.198592][ T6405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33126 - 0 [ 455.207570][ T6405] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 455.220248][ T6405] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 455.307743][T25117] IPv6: sit2: Disabled Multicast RS [ 455.314103][T25117] sit2: entered allmulticast mode [ 456.439950][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 456.454178][T25127] : entered promiscuous mode [ 456.754661][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 456.762691][ C1] lec:lec_tx_timeout: lec0 [ 456.767529][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.144866][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.719120][T25092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.897104][T25129] syzkaller0: entered allmulticast mode [ 457.908715][T25129] syzkaller0 (unregistering): left allmulticast mode [ 458.067517][T25134] SET target dimension over the limit! [ 458.116462][T25150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5246'. [ 458.178775][T25151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5246'. [ 459.056527][ T25] block nbd2: Possible stuck request ffff888026940000: control (read@0,1024B). Runtime 300 seconds [ 459.068387][ T25] block nbd2: Possible stuck request ffff888026940200: control (read@1024,1024B). Runtime 300 seconds [ 459.080073][ T2661] block nbd1: Possible stuck request ffff888026898000: control (read@0,1024B). Runtime 300 seconds [ 459.092005][ T2661] block nbd1: Possible stuck request ffff888026898200: control (read@1024,1024B). Runtime 300 seconds [ 459.103442][ T2661] block nbd1: Possible stuck request ffff888026898400: control (read@2048,1024B). Runtime 300 seconds [ 459.116398][ T25] block nbd2: Possible stuck request ffff888026940400: control (read@2048,1024B). Runtime 300 seconds [ 459.128181][ T25] block nbd2: Possible stuck request ffff888026940600: control (read@3072,1024B). Runtime 300 seconds [ 459.147111][ T25] block nbd1: Possible stuck request ffff888026898600: control (read@3072,1024B). Runtime 300 seconds [ 460.889865][T25136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.093638][T25188] __nla_validate_parse: 2 callbacks suppressed [ 461.093686][T25188] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5255'. [ 461.176401][T25192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5251'. [ 461.419551][T25211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5259'. [ 461.760392][T25238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.774617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 461.782657][ C1] lec:lec_tx_timeout: lec0 [ 461.788958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.229948][T25277] netlink: 'syz.4.5281': attribute type 1 has an invalid length. [ 462.314445][T25281] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 462.331043][T25281] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 462.344159][T25281] bond0: (slave ip6gre1): making interface the new active one [ 462.353730][T25281] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 462.370442][T25283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5283'. [ 462.411001][T25285] vcan0: tx drop: invalid sa for name 0x0000000000004000 [ 462.422223][T25286] openvswitch: netlink: Missing key (keys=40, expected=80) [ 462.633884][T25302] netlink: 'syz.3.5288': attribute type 1 has an invalid length. [ 462.657020][T25302] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 462.736753][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.777976][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.793701][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.912591][T25323] netlink: 'syz.0.5294': attribute type 1 has an invalid length. [ 462.986541][T25323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.094195][T25344] bridge0: port 3(syz_tun) entered blocking state [ 463.115039][T25344] bridge0: port 3(syz_tun) entered disabled state [ 463.122615][T25344] syz_tun: entered allmulticast mode [ 463.130365][T25344] syz_tun: entered promiscuous mode [ 463.140066][T25344] bridge0: port 3(syz_tun) entered blocking state [ 463.146654][T25344] bridge0: port 3(syz_tun) entered forwarding state [ 463.288887][T25355] syzkaller0: entered promiscuous mode [ 463.324642][T25355] syzkaller0: entered allmulticast mode [ 463.351166][T25358] bond1: (slave ip6gretap1): making interface the new active one [ 463.361215][T25358] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 463.385389][T25357] netlink: 'syz.3.5303': attribute type 21 has an invalid length. [ 463.393737][T25357] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5303'. [ 463.437992][T25357] netlink: 'syz.3.5303': attribute type 4 has an invalid length. [ 463.455795][T25357] netlink: 'syz.3.5303': attribute type 5 has an invalid length. [ 463.463778][T25357] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5303'. [ 463.536897][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.590074][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'. [ 463.631005][T25376] netlink: 'syz.1.5307': attribute type 11 has an invalid length. [ 463.650757][T25378] syzkaller1: entered promiscuous mode [ 463.666943][T25378] syzkaller1: entered allmulticast mode [ 463.711902][T25378] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5308'. [ 463.754237][T25380] IPv6: sit1: Disabled Multicast RS [ 463.771566][T25385] netlink: 'syz.2.5311': attribute type 21 has an invalid length. [ 463.786529][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.797064][T25388] netlink: 'syz.1.5312': attribute type 1 has an invalid length. [ 463.798292][T25389] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5313'. [ 463.834964][T25385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5311'. [ 463.876192][T25388] bond0: (slave rose0): Enslaving as an active interface with an up link [ 464.029930][T25403] geneve2: entered promiscuous mode [ 464.037222][T25403] geneve2: entered allmulticast mode [ 464.067631][T25407] netlink: 'syz.3.5319': attribute type 3 has an invalid length. [ 464.108641][T25411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.256360][T25418] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 464.282534][T25422] netlink: 'syz.0.5324': attribute type 1 has an invalid length. [ 464.749810][T25444] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 464.949735][T25455] macvtap1: entered allmulticast mode [ 464.956671][T25455] veth0_macvtap: entered allmulticast mode [ 465.241411][T25485] syzkaller0: entered promiscuous mode [ 465.247312][T25485] syzkaller0: entered allmulticast mode [ 465.451025][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880762b5c00: rx timeout, send abort [ 465.502017][T25497] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 2, id = 0 [ 465.549065][T25496] team0: Device gtp1 is up. Set it down before adding it as a team port [ 465.757707][T25507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.766863][T25506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.951158][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880762b4400: rx timeout, send abort [ 465.960263][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880762b5c00: abort rx timeout. Force session deactivation [ 466.091387][T25543] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 466.399611][T25560] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 466.447044][T25565] __nla_validate_parse: 10 callbacks suppressed [ 466.447061][T25565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5370'. [ 466.463413][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880762b4400: abort rx timeout. Force session deactivation [ 466.491467][T25565] vlan0: entered allmulticast mode [ 466.497880][T25565] gretap0: entered allmulticast mode [ 466.664814][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.804613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 466.812691][ C1] lec:lec_tx_timeout: lec0 [ 466.819039][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 466.884004][T25570] delete_channel: no stack [ 467.248696][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5385'. [ 467.346182][T25625] syzkaller1: entered promiscuous mode [ 467.371309][T25625] syzkaller1: entered allmulticast mode [ 467.421030][T25634] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5390'. [ 467.545207][T25639] validate_nla: 5 callbacks suppressed [ 467.545233][T25639] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 467.597753][T25639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 467.639552][T25645] bond8: (slave geneve3): making interface the new active one [ 467.649634][T25645] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 467.863222][T25658] netlink: 'syz.0.5399': attribute type 8 has an invalid length. [ 467.882796][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5399'. [ 467.907557][T25658] bond0: entered promiscuous mode [ 467.912731][T25658] bond_slave_0: entered promiscuous mode [ 467.919245][T25658] bond_slave_1: entered promiscuous mode [ 467.931785][T25658] gretap0: entered promiscuous mode [ 467.940006][T25658] bond0: left promiscuous mode [ 467.947634][T25658] bond_slave_0: left promiscuous mode [ 467.953340][T25658] bond_slave_1: left promiscuous mode [ 467.960775][T25658] gretap0: left promiscuous mode [ 467.994989][T25666] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 468.017700][T25669] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 468.043956][T25672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5402'. [ 468.305484][T25693] Cannot find del_set index 4 as target [ 468.326148][T25693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.353008][T25693] syzkaller0: entered promiscuous mode [ 468.364616][T25693] syzkaller0: entered allmulticast mode [ 468.525559][T25715] netlink: 'syz.1.5415': attribute type 1 has an invalid length. [ 468.580787][T25716] tap0: tun_chr_ioctl cmd 2148553947 [ 468.687593][T25724] syzkaller0: entered promiscuous mode [ 468.693106][T25724] syzkaller0: entered allmulticast mode [ 470.374154][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 471.410863][T25708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.681300][T25774] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.688529][T25774] bridge0: port 1(bridge_slave_0) entered listening state [ 471.835411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 471.843503][ C1] lec:lec_tx_timeout: lec0 [ 471.848638][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 471.867386][T25791] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5435'. [ 471.984467][T25802] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.998818][T25805] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5437'. [ 472.016530][T25806] netlink: 'syz.4.5439': attribute type 1 has an invalid length. [ 472.024473][T25806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 472.113735][T25814] netlink: 'syz.2.5441': attribute type 23 has an invalid length. [ 472.186397][T25817] syzkaller1: entered promiscuous mode [ 472.193301][T25817] syzkaller1: entered allmulticast mode [ 472.504812][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.558469][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5451'. [ 472.653922][T25855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5455'. [ 472.894160][T25858] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5453'. [ 474.414941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.270231][T25824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.383647][T25865] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5456'. [ 475.457792][T25872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5459'. [ 475.482503][T25873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5456'. [ 475.524872][T25873] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5456'. [ 475.625028][T25883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.669004][T25881] tipc: Enabled bearer , priority 0 [ 475.773396][T25881] syzkaller0: entered promiscuous mode [ 475.793549][T25881] syzkaller0: entered allmulticast mode [ 475.804324][T25881] tipc: Resetting bearer [ 475.889993][T25879] tipc: Resetting bearer [ 476.868428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 476.876462][ C1] lec:lec_tx_timeout: lec0 [ 476.881784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 477.555314][T25879] tipc: Disabling bearer [ 477.585296][ T10] tipc: Node number set to 2271208637 [ 478.094072][T25960] vxcan1 speed is unknown, defaulting to 1000 [ 478.249021][T25976] openvswitch: netlink: IPv4 tunnel dst address is zero [ 478.408382][T25982] netlink: 15 bytes leftover after parsing attributes in process `syz.3.5490'. [ 478.599114][T25994] netlink: 'syz.0.5493': attribute type 4 has an invalid length. [ 478.608143][T25994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5493'. [ 478.651740][T25999] ip6tnl0: Caught tx_queue_len zero misconfig [ 479.127371][T26020] syzkaller1: entered promiscuous mode [ 479.133324][T26020] syzkaller1: entered allmulticast mode [ 479.368513][T26036] netlink: 83 bytes leftover after parsing attributes in process `syz.2.5505'. [ 479.369928][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5503'. [ 479.387549][T26039] sctp: [Deprecated]: syz.0.5506 (pid 26039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.387549][T26039] Use struct sctp_sack_info instead [ 479.411906][T26040] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 479.485706][T26040] team1: entered promiscuous mode [ 479.495919][T26040] team1: entered allmulticast mode [ 479.503772][T26047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5508'. [ 479.522075][T26042] Can't find ip_set type hash:ip [ 479.610479][T26054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5510'. [ 479.621003][T26054] openvswitch: netlink: Flow actions attr not present in new flow. [ 479.751940][T26059] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 479.789286][T26059] netlink: 'syz.3.5512': attribute type 1 has an invalid length. [ 479.799768][T26059] netlink: 'syz.3.5512': attribute type 2 has an invalid length. [ 480.084342][ T6598] IPVS: starting estimator thread 0... [ 480.094231][T26080] IPVS: ip_vs_edit_dest(): server weight less than zero [ 480.215256][T26082] IPVS: using max 27 ests per chain, 64800 per kthread [ 480.259317][T26080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.298174][T26091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.381094][T26100] syzkaller0: entered promiscuous mode [ 480.387076][T26100] syzkaller0: entered allmulticast mode [ 480.638737][T26115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5527'. [ 480.682556][T26119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5528'. [ 480.728916][T26119] netlink: 'syz.0.5528': attribute type 2 has an invalid length. [ 480.761510][T26119] 9: entered promiscuous mode [ 480.856456][T26126] netlink: 'syz.3.5529': attribute type 1 has an invalid length. [ 480.882862][T26126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5529'. [ 480.948520][T26136] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5531'. [ 481.081396][T26144] openvswitch: netlink: Missing valid actions attribute. [ 481.090132][T26144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.269711][T26155] Cannot find set identified by id 65534 to match [ 481.347882][T26162] netlink: 'syz.0.5538': attribute type 2 has an invalid length. [ 481.520323][T26178] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 481.812245][T26191] vxcan1 speed is unknown, defaulting to 1000 [ 481.849118][T26199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.873760][T26198] bridge7: entered promiscuous mode [ 481.883022][T26198] bridge7: entered allmulticast mode [ 481.891856][T26194] syzkaller0: entered promiscuous mode [ 481.905661][T26194] syzkaller0: entered allmulticast mode [ 482.619782][T26258] openvswitch: netlink: IP tunnel dst address not specified [ 482.654583][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 482.662654][ C1] lec:lec_tx_timeout: lec0 [ 482.668301][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 482.910143][T26278] netlink: 'syz.1.5575': attribute type 12 has an invalid length. [ 483.059587][T26278] bond7: option primary_reselect: invalid value (255) [ 483.091794][T26278] bond7 (unregistering): Released all slaves [ 483.537025][T26305] __nla_validate_parse: 12 callbacks suppressed [ 483.537044][T26305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5581'. [ 483.558311][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5580'. [ 483.577906][T26306] hsr_slave_0: left promiscuous mode [ 483.595068][T26306] hsr_slave_1: left promiscuous mode [ 484.110652][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5589'. [ 484.183296][T26341] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 484.218850][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5592'. [ 484.415936][T26359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5597'. [ 484.484048][T26369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5599'. [ 484.561393][T26373] Bluetooth: MGMT ver 1.23 [ 484.617722][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5604'. [ 484.708149][T26385] netlink: 'syz.1.5603': attribute type 16 has an invalid length. [ 484.718621][T26385] netlink: 'syz.1.5603': attribute type 23 has an invalid length. [ 484.738230][T26384] pim6reg: entered allmulticast mode [ 484.755788][T26385] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.766124][T26384] pim6reg: left allmulticast mode [ 484.777649][T26387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5610'. [ 484.810321][T26391] netlink: 'syz.0.5610': attribute type 23 has an invalid length. [ 484.818560][T26390] netlink: 'syz.2.5609': attribute type 17 has an invalid length. [ 484.818584][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'. [ 484.818612][T26390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5609'. [ 485.142599][T26419] netlink: 'syz.2.5618': attribute type 1 has an invalid length. [ 485.426362][T26429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.432836][T26429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 485.538728][T26441] ipt_REJECT: TCP_RESET invalid for non-tcp [ 485.572981][T26438] syzkaller0: entered promiscuous mode [ 485.601917][T26438] syzkaller0: entered allmulticast mode [ 485.772623][T26447] can: request_module (can-proto-0) failed. [ 486.019166][T26465] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.052618][T26465] bridge_slave_0 (unregistering): left allmulticast mode [ 486.061195][T26465] bridge_slave_0 (unregistering): left promiscuous mode [ 486.070002][T26465] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.376822][T26483] netlink: 'syz.2.5633': attribute type 1 has an invalid length. [ 486.385012][T26483] netlink: 'syz.2.5633': attribute type 1 has an invalid length. [ 486.392817][T26483] netlink: 'syz.2.5633': attribute type 8 has an invalid length. [ 487.694713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 487.702822][ C1] lec:lec_tx_timeout: lec0 [ 487.709160][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 487.895145][ T5195] udevd[5195]: worker [5814] /devices/virtual/block/nbd1 timeout; kill it [ 487.903810][ T5195] udevd[5195]: seq 15238 '/devices/virtual/block/nbd1' killed [ 487.920426][ T5195] udevd[5195]: worker [7398] /devices/virtual/block/nbd2 timeout; kill it [ 487.942633][ T5195] udevd[5195]: seq 15242 '/devices/virtual/block/nbd2' killed [ 488.204152][T26511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.229006][T26513] netlink: 'syz.0.5643': attribute type 1 has an invalid length. [ 488.249542][T26511] IPVS: ip_vs_add_dest(): server weight less than zero [ 488.264816][ T6604] IPVS: starting estimator thread 0... [ 488.271694][T26513] netlink: 'syz.0.5643': attribute type 1 has an invalid length. [ 488.311609][T26517] tipc: Enabling of bearer rejected, media not registered [ 488.375345][T26516] IPVS: using max 38 ests per chain, 91200 per kthread [ 488.443459][T26526] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 488.508516][T26526] team1: entered promiscuous mode [ 488.513842][T26526] team1: entered allmulticast mode [ 488.631053][T26539] __nla_validate_parse: 26 callbacks suppressed [ 488.631073][T26539] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5650'. [ 488.857655][T26561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5655'. [ 489.050967][T26573] syzkaller0: entered promiscuous mode [ 489.074050][T26573] syzkaller0: entered allmulticast mode [ 489.143143][ T2661] block nbd2: Possible stuck request ffff888026940000: control (read@0,1024B). Runtime 330 seconds [ 489.155389][ T2661] block nbd2: Possible stuck request ffff888026940200: control (read@1024,1024B). Runtime 330 seconds [ 489.168325][ T25] block nbd1: Possible stuck request ffff888026898000: control (read@0,1024B). Runtime 330 seconds [ 489.189382][ T25] block nbd1: Possible stuck request ffff888026898200: control (read@1024,1024B). Runtime 330 seconds [ 489.200600][ T2661] block nbd2: Possible stuck request ffff888026940400: control (read@2048,1024B). Runtime 330 seconds [ 489.212267][ T25] block nbd1: Possible stuck request ffff888026898400: control (read@2048,1024B). Runtime 330 seconds [ 489.223804][ T2661] block nbd2: Possible stuck request ffff888026940600: control (read@3072,1024B). Runtime 330 seconds [ 489.245754][ T2661] block nbd1: Possible stuck request ffff888026898600: control (read@3072,1024B). Runtime 330 seconds [ 489.265826][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'. [ 489.777068][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.067078][T26613] bond9: (slave veth0_to_bond): Releasing active interface [ 491.074923][T26613] bond9: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 491.126792][T26618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5673'. [ 491.212151][T26618] bridge0: port 3(syz_tun) entered disabled state [ 491.219201][T26618] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.226962][T26618] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.239154][T26620] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5675'. [ 491.282729][T26618] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 491.315266][T26618] 8021q: VLANs not supported on sit0 [ 491.409739][T26631] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5677'. [ 491.421378][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5677'. [ 491.431780][T26631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5677'. [ 491.506345][T26639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5684'. [ 491.567938][T26645] x_tables: unsorted entry at hook 2 [ 492.020915][T26677] xt_bpf: check failed: parse error [ 492.100858][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 492.456260][T26705] x_tables: duplicate underflow at hook 1 [ 492.479130][T26706] x_tables: duplicate underflow at hook 1 [ 492.724877][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 492.732949][ C1] lec:lec_tx_timeout: lec0 [ 492.738867][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 492.822823][T26723] syzkaller0: entered promiscuous mode [ 492.832904][T26723] syzkaller0: entered allmulticast mode [ 494.932200][T26764] validate_nla: 3 callbacks suppressed [ 494.932221][T26764] netlink: 'syz.2.5722': attribute type 1 has an invalid length. [ 495.162944][T26785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.228871][T26799] __nla_validate_parse: 3 callbacks suppressed [ 495.228890][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5728'. [ 495.420764][T26815] netlink: 'syz.0.5735': attribute type 64 has an invalid length. [ 495.510177][ T6604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 495.568987][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5738'. [ 495.581036][T26816] vxcan1 speed is unknown, defaulting to 1000 [ 495.612408][T26827] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5739'. [ 495.741503][T26838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5742'. [ 495.865953][T26838] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5742'. [ 496.255753][ T6604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.755303][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 497.763370][ C1] lec:lec_tx_timeout: lec0 [ 497.768158][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 498.680196][T26830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.698494][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5740'. [ 498.716017][T26842] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5740'. [ 498.745728][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5740'. [ 498.941389][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5750'. [ 499.038644][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'. [ 499.920470][T26941] xt_hashlimit: size too large, truncated to 1048576 [ 500.540073][T26983] netlink: 'syz.0.5778': attribute type 33 has an invalid length. [ 500.615887][T26992] __nla_validate_parse: 6 callbacks suppressed [ 500.615905][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5779'. [ 500.633826][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5778'. [ 500.726417][T26983] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 500.788980][T26983] bond6 (unregistering): Released all slaves [ 501.025425][T27015] rdma_op ffff8880786529f0 conn xmit_rdma 0000000000000000 [ 501.043145][T27015] rdma_op ffff8880786531f0 conn xmit_rdma 0000000000000000 [ 501.066493][T27015] rdma_op ffff88807febe1f0 conn xmit_rdma 0000000000000000 [ 501.090770][T27015] rdma_op ffff888029a421f0 conn xmit_rdma 0000000000000000 [ 501.099969][T27015] rdma_op ffff88803570e9f0 conn xmit_rdma 0000000000000000 [ 501.108712][T27015] rdma_op ffff88803570b9f0 conn xmit_rdma 0000000000000000 [ 501.117552][T27015] rdma_op ffff88803570b1f0 conn xmit_rdma 0000000000000000 [ 501.130517][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5786'. [ 501.132674][T27015] rdma_op ffff88803570c9f0 conn xmit_rdma 0000000000000000 [ 501.160946][T27015] rdma_op ffff8880357099f0 conn xmit_rdma 0000000000000000 [ 501.168865][T27015] rdma_op ffff88803570f9f0 conn xmit_rdma 0000000000000000 [ 501.178892][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5786'. [ 501.256761][T27024] netlink: 'syz.2.5787': attribute type 2 has an invalid length. [ 501.403086][T27031] netlink: 'syz.1.5790': attribute type 10 has an invalid length. [ 501.440759][T27045] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.5788'. [ 501.452309][T27045] netlink: 5192 bytes leftover after parsing attributes in process `syz.3.5788'. [ 501.598615][ T30] audit: type=1800 audit(1773608602.439:8): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5797" name="memory.events" dev="tmpfs" ino=2648 res=0 errno=0 [ 501.627997][T27060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5798'. [ 501.655442][ T30] audit: type=1804 audit(1773608602.469:9): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5797" name="/newroot/518/memory.events" dev="tmpfs" ino=2648 res=1 errno=0 [ 501.805166][T27071] ksmbd: Unknown IPC event: 3, ignore. [ 501.848821][T27069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5801'. [ 502.093018][T27092] netlink: 'syz.3.5806': attribute type 12 has an invalid length. [ 502.516320][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5810'. [ 502.534757][T27113] openvswitch: netlink: Flow actions attr not present in new flow. [ 502.568815][T27117] netlink: 'syz.2.5812': attribute type 4 has an invalid length. [ 502.634307][T27122] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5812'. [ 502.683900][T27131] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 502.711905][T27129] erspan0: entered promiscuous mode [ 502.718963][T27129] vlan4: entered promiscuous mode [ 502.774617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 502.782672][ C1] lec:lec_tx_timeout: lec0 [ 502.788007][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 502.793880][T27135] syzkaller0: entered promiscuous mode [ 502.801173][T27135] syzkaller0: entered allmulticast mode [ 502.853870][T27139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.027998][T27149] veth7: entered promiscuous mode [ 503.033091][T27149] veth7: entered allmulticast mode [ 503.123953][T27159] netlink: 'syz.4.5827': attribute type 4 has an invalid length. [ 503.215976][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.266842][T27167] IPv6: sit3: Disabled Multicast RS [ 503.359275][T27166] bond7: option all_slaves_active: invalid value (222) [ 503.369059][T27166] bond7 (unregistering): Released all slaves [ 503.617488][T27193] nftables ruleset with unbound set [ 503.758164][T27201] Unknown options in mask b7f2 [ 504.210348][T27221] syzkaller0: entered promiscuous mode [ 504.225968][T27221] syzkaller0: entered allmulticast mode [ 504.749032][T27266] tipc: Started in network mode [ 504.785488][T27266] tipc: Node identity ac14140f, cluster identity 4711 [ 504.792546][T27266] tipc: New replicast peer: 255.255.255.255 [ 504.833937][T27266] tipc: Enabled bearer , priority 10 [ 505.107326][T27293] netlink: 'syz.1.5861': attribute type 3 has an invalid length. [ 505.830796][T27340] __nla_validate_parse: 22 callbacks suppressed [ 505.830817][T27340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5874'. [ 505.955173][ T6604] tipc: Node number set to 2886997007 [ 506.049303][T27346] netlink: 'syz.3.5876': attribute type 1 has an invalid length. [ 507.057563][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.615403][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.794902][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 507.803011][ C1] lec:lec_tx_timeout: lec0 [ 507.808715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 508.551673][T27385] ipvlan0: mtu less than device minimum [ 508.719507][T27400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5894'. [ 508.906242][T27407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5896'. [ 509.623878][T27455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5906'. [ 509.856930][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5912'. [ 509.885534][T27470] syzkaller0: entered promiscuous mode [ 509.891257][T27470] syzkaller0: entered allmulticast mode [ 509.924084][T27470] pim6reg: entered allmulticast mode [ 510.141213][T27479] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5916'. [ 510.167809][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5915'. [ 510.196461][T27481] netlink: 'syz.3.5915': attribute type 21 has an invalid length. [ 510.205460][T27481] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5915'. [ 510.241391][T27486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5919'. [ 510.369775][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5922'. [ 510.383625][T27493] bridge0: port 3(syz_tun) entered blocking state [ 510.390232][T27493] bridge0: port 3(syz_tun) entered listening state [ 510.397014][T27493] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.404194][T27493] bridge0: port 2(bridge_slave_1) entered listening state [ 510.411512][T27493] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.418709][T27493] bridge0: port 1(bridge_slave_0) entered listening state [ 510.462987][T27493] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.475898][T27493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.586827][T27509] gre0: entered promiscuous mode [ 510.591825][T27509] gre0: entered allmulticast mode [ 510.913646][T27540] __nla_validate_parse: 2 callbacks suppressed [ 510.913666][T27540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5932'. [ 510.916772][T27538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5933'. [ 510.928670][T27543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5929'. [ 510.949594][T27543] openvswitch: netlink: Flow key attr not present in new flow. [ 510.985529][T27541] erspan0: entered allmulticast mode [ 511.242656][T27558] ipt_REJECT: TCP_RESET invalid for non-tcp [ 511.263815][T27563] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 511.276699][T27562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5940'. [ 511.773815][T27558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5938'. [ 511.783877][T27559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5938'. [ 511.812113][T27587] bond7: option all_slaves_active: invalid value (222) [ 511.821119][T27587] bond7 (unregistering): Released all slaves [ 511.830247][T27598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.017826][T27602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5951'. [ 512.166425][T27598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.506049][T27598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.541325][T27598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.815735][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.824392][ T6395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.824616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 512.840585][ C1] lec:lec_tx_timeout: lec0 [ 512.846113][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 512.878925][T27653] netlink: 'syz.1.5964': attribute type 1 has an invalid length. [ 512.915680][T27653] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.929267][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5964'. [ 512.938879][T27653] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 512.957994][T27653] bond8: entered allmulticast mode [ 512.975048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.304508][T27677] bond6: option miimon: invalid value (18446744073709548001) [ 513.313882][T27677] bond6: option miimon: allowed values 0 - 2147483647 [ 513.322778][T27677] bond6 (unregistering): Released all slaves [ 513.472058][T27684] xt_CT: No such helper "syz1" [ 514.013235][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5984'. [ 514.127859][T22295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.140011][T22295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.143715][T27723] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.161729][T22295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.170567][T22295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.181767][T22295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.392363][T27718] vxcan1 speed is unknown, defaulting to 1000 [ 514.400287][T27734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.406883][T27736] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5990'. [ 514.497882][T27740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.620450][T27751] netlink: 'syz.4.5994': attribute type 10 has an invalid length. [ 514.717925][T27751] team0: Port device dummy0 added [ 515.099034][T27718] chnl_net:caif_netlink_parms(): no params data found [ 515.160370][T27770] atomic_op ffff88803c9ea198 conn xmit_atomic 0000000000000000 [ 515.330349][T27718] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.339456][T27718] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.353536][T27718] bridge_slave_0: entered allmulticast mode [ 515.371253][T27718] bridge_slave_0: entered promiscuous mode [ 515.395776][T27718] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.404456][T27718] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.412913][T27718] bridge_slave_1: entered allmulticast mode [ 515.420931][T27718] bridge_slave_1: entered promiscuous mode [ 515.481184][T27718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.519766][T27718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.602142][T27718] team0: Port device team_slave_0 added [ 515.627519][T27718] team0: Port device team_slave_1 added [ 515.679966][T27718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.694112][T27718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.721691][T27718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.721855][T27796] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.770549][T27796] bond6: (slave bond_slave_1): Device is not bonding slave [ 515.778636][T27796] bond6: option active_slave: invalid value (bond_slave_1) [ 515.780432][T27802] netlink: 'syz.2.6010': attribute type 1 has an invalid length. [ 515.795353][T27796] bond6 (unregistering): Released all slaves [ 515.816446][T27718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.823529][T27718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.850906][T27718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.893476][T27802] bond0: entered promiscuous mode [ 515.901150][T27802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.929700][T27804] bond0: (slave bridge7): making interface the new active one [ 515.948938][T27804] bridge7: entered promiscuous mode [ 515.955853][T27804] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 516.093703][T27718] hsr_slave_0: entered promiscuous mode [ 516.101473][T27718] hsr_slave_1: entered promiscuous mode [ 516.128516][T27718] debugfs: 'hsr0' already exists in 'hsr' [ 516.159559][T27718] Cannot create hsr debugfs directory [ 516.265460][T22295] Bluetooth: hci4: command tx timeout [ 516.275571][T27812] delete_channel: no stack [ 516.518433][T27839] __nla_validate_parse: 3 callbacks suppressed [ 516.518453][T27839] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6018'. [ 516.648341][T27718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.752631][T27718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.863367][T27718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.940253][T27853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.017340][T27718] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.082497][T27853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.191272][T27853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.213969][T27865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6025'. [ 517.273016][T27865] netlink: 'syz.4.6025': attribute type 1 has an invalid length. [ 517.295135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.306852][T27853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.392321][T27718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 517.424511][T27718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.456402][T27718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 517.480892][T27718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 517.526019][ T6379] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.542153][T27877] nbd: must specify an index to disconnect [ 517.553821][ T1168] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.578504][T27884] netlink: 'syz.3.6029': attribute type 64 has an invalid length. [ 517.588219][ T6395] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.608539][ T6395] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.622752][T27884] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6029'. [ 517.742803][T27718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.766608][T27718] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.810955][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.818180][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.855240][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 517.863340][ C1] lec:lec_tx_timeout: lec0 [ 517.868881][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 517.925438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.932680][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.954490][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.055725][T27718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.249715][T27919] netlink: 'syz.2.6039': attribute type 1 has an invalid length. [ 518.285477][T27919] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6039'. [ 518.330318][T27926] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.6043'. [ 518.341102][T22295] Bluetooth: hci4: command tx timeout [ 518.386130][T27928] nbd: nbd4 already in use [ 518.397065][T27928] block nbd4: NBD_DISCONNECT [ 518.401717][T27928] block nbd4: Send disconnect failed -32 [ 518.420094][T27927] netlink: 'syz.1.6042': attribute type 16 has an invalid length. [ 518.447362][T27927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6042'. [ 518.460273][T27928] block nbd4: shutting down sockets [ 518.467101][T27933] xt_hashlimit: overflow, rate too high: 0 [ 518.538390][T27718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.578653][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.643843][T27718] veth0_vlan: entered promiscuous mode [ 518.692543][T27718] veth1_vlan: entered promiscuous mode [ 518.798467][T27718] veth0_macvtap: entered promiscuous mode [ 518.828504][T27718] veth1_macvtap: entered promiscuous mode [ 518.880955][T27718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.902893][T27718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.928582][ T6407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.939142][ T6407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.967651][ T6407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.979168][T27958] xt_ecn: cannot match TCP bits for non-tcp packets [ 518.986635][ T6407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.033372][T27965] netlink: 'syz.2.6055': attribute type 4 has an invalid length. [ 519.148678][T27969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6056'. [ 519.191670][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.208393][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.217805][ T2661] block nbd2: Possible stuck request ffff888026940000: control (read@0,1024B). Runtime 360 seconds [ 519.224831][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.229059][ T2661] block nbd2: Possible stuck request ffff888026940200: control (read@1024,1024B). Runtime 360 seconds [ 519.250882][ T25] block nbd1: Possible stuck request ffff888026898000: control (read@0,1024B). Runtime 360 seconds [ 519.261773][ T25] block nbd1: Possible stuck request ffff888026898200: control (read@1024,1024B). Runtime 360 seconds [ 519.272710][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6058'. [ 519.283558][ T2661] block nbd2: Possible stuck request ffff888026940400: control (read@2048,1024B). Runtime 360 seconds [ 519.305421][ T25] block nbd1: Possible stuck request ffff888026898400: control (read@2048,1024B). Runtime 360 seconds [ 519.318795][ T2661] block nbd2: Possible stuck request ffff888026940600: control (read@3072,1024B). Runtime 360 seconds [ 519.330454][ T25] block nbd1: Possible stuck request ffff888026898600: control (read@3072,1024B). Runtime 360 seconds [ 519.345160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.375287][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.383934][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.445144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.653337][T27996] netlink: 'syz.1.6062': attribute type 10 has an invalid length. [ 519.743881][T28002] netlink: 'syz.0.6064': attribute type 2 has an invalid length. [ 519.957500][T28009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6067'. [ 519.998062][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.006249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.022320][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.031166][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.047028][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.058461][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.223665][T28010] vxcan1 speed is unknown, defaulting to 1000 [ 520.421154][ T51] Bluetooth: hci4: command tx timeout [ 520.467232][T28037] netlink: 'syz.1.6077': attribute type 2 has an invalid length. [ 520.467232][T28038] netlink: 'syz.1.6077': attribute type 2 has an invalid length. [ 520.492421][T28041] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6078'. [ 520.585815][ T6395] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33126 - 0 [ 520.647243][ T6395] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 520.666990][ T6395] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 520.787578][ T6395] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33126 - 0 [ 520.819531][ T6395] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 520.836642][ T6395] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 520.942019][ T6395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33126 - 0 [ 520.971178][ T6395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 520.987889][ T6395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 521.096724][ T6395] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33126 - 0 [ 521.120452][ T6395] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 521.127756][T28070] delete_channel: no stack [ 521.155216][ T6395] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 521.278401][T28071] delete_channel: no stack [ 521.380212][T28088] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.387913][T28088] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.396832][T28088] bridge0: entered allmulticast mode [ 521.562177][T28010] chnl_net:caif_netlink_parms(): no params data found [ 521.632230][ T6395] bridge_slave_1: left allmulticast mode [ 521.659255][ T6395] bridge_slave_1: left promiscuous mode [ 521.681760][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.782389][T28107] __nla_validate_parse: 6 callbacks suppressed [ 521.782410][T28107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6095'. [ 522.097522][ T51] Bluetooth: hci5: command tx timeout [ 522.147895][ T6395] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 522.323189][ T6395] bond3 (unregistering): (slave geneve3): Releasing active interface [ 522.428732][ T6395] bond2 (unregistering): (slave bridge2): Releasing active interface [ 522.494757][ T51] Bluetooth: hci4: command tx timeout [ 522.508685][ T6395] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 522.517579][ T6395] bridge4 (unregistering): left promiscuous mode [ 522.647870][ T6395] bond0 (unregistering): (slave bridge7): Releasing backup interface [ 522.656981][ T6395] bridge7 (unregistering): left promiscuous mode [ 522.699492][ T6395] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.708362][ T6395] bond_slave_0: left allmulticast mode [ 522.716326][ T6395] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.725675][ T6395] bond_slave_1: left allmulticast mode [ 522.732123][ T6395] .` (unregistering): Released all slaves [ 522.743980][ T6395] bond1 (unregistering): (slave lo): Releasing backup interface [ 522.752357][ T6395] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 522.765926][ T6395] bond1 (unregistering): Released all slaves [ 522.779691][ T6395] bond2 (unregistering): Released all slaves [ 522.793337][ T6395] bond3 (unregistering): Released all slaves [ 522.806715][ T6395] bond4 (unregistering): Released all slaves [ 522.822461][ T6395] bond5 (unregistering): Released all slaves [ 522.841711][ T6395] bond6 (unregistering): Released all slaves [ 522.854956][ T6395] bond7 (unregistering): Released all slaves [ 522.868668][ T6395] bond8 (unregistering): Released all slaves [ 522.881683][ T6395] bond9 (unregistering): (slave bond10): Releasing active interface [ 522.900334][ T6395] bond9 (unregistering): Released all slaves [ 522.913414][ T6395] bond10 (unregistering): Released all slaves [ 522.926826][ T6395] bond11 (unregistering): Released all slaves [ 522.940234][ T6395] bond0 (unregistering): Released all slaves [ 523.195686][ T6395] : left promiscuous mode [ 523.236953][T28135] netlink: 'syz.3.6100': attribute type 5 has an invalid length. [ 523.351828][ T6395] tipc: Left network mode [ 523.352251][T28010] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.394403][T28010] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.422075][T28010] bridge_slave_0: entered allmulticast mode [ 523.459764][T28010] bridge_slave_0: entered promiscuous mode [ 523.487573][T28010] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.502336][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6102'. [ 523.505911][T28010] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.535669][T28010] bridge_slave_1: entered allmulticast mode [ 523.543529][T28010] bridge_slave_1: entered promiscuous mode [ 523.677820][T28010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.695006][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 523.703044][ C1] lec:lec_tx_timeout: lec0 [ 523.708656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 523.796830][T28010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.979070][T28169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.994175][T28010] team0: Port device team_slave_0 added [ 524.041267][T28010] team0: Port device team_slave_1 added [ 524.051741][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6105'. [ 524.175667][T22295] Bluetooth: hci5: command tx timeout [ 524.229381][T28161] gtp0: entered promiscuous mode [ 524.250376][T28161] gtp0: entered allmulticast mode [ 524.326426][T28169] syzkaller1: entered promiscuous mode [ 524.332422][T28169] syzkaller1: entered allmulticast mode [ 524.393985][T28010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.424252][T28010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.488734][T28201] netlink: 'syz.1.6111': attribute type 16 has an invalid length. [ 524.512115][T28010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.515994][T28201] netlink: 'syz.1.6111': attribute type 17 has an invalid length. [ 524.525799][T28010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.538734][T28010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.567857][T28010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.620650][T28210] netlink: 'syz.3.6112': attribute type 21 has an invalid length. [ 524.668141][T28201] gre0: left promiscuous mode [ 524.676773][T28201] gre0: left allmulticast mode [ 524.699651][T28201] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.706891][T28201] bridge0: port 2(bridge_slave_1) entered listening state [ 524.719139][T28201] bond0: left allmulticast mode [ 524.724012][T28201] bond_slave_0: left allmulticast mode [ 524.731315][T28201] bond_slave_1: left allmulticast mode [ 524.737986][T28201] bridge0: left allmulticast mode [ 524.745106][T28201] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.756859][T28201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.781322][T28215] netlink: 'syz.4.6114': attribute type 13 has an invalid length. [ 524.795859][T28210] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6112'. [ 524.891537][T28215] macvtap0: entered allmulticast mode [ 524.910557][T28215] macvtap0: refused to change device tx_queue_len [ 524.925681][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6116'. [ 524.941509][T28220] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6116'. [ 525.092726][T28010] hsr_slave_0: entered promiscuous mode [ 525.103430][T28010] hsr_slave_1: entered promiscuous mode [ 525.103449][T28231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6117'. [ 525.168091][T28010] debugfs: 'hsr0' already exists in 'hsr' [ 525.173867][T28010] Cannot create hsr debugfs directory [ 525.200260][T28227] netlink: 716 bytes leftover after parsing attributes in process `syz.3.6117'. [ 525.213472][T28236] digital: digital_start_poll: Unknown protocol [ 525.223029][ T6395] hsr_slave_0: left promiscuous mode [ 525.241401][ T6395] hsr_slave_1: left promiscuous mode [ 525.271399][ T6395] veth0_macvtap: left allmulticast mode [ 525.284803][ T6395] veth0_macvtap: left promiscuous mode [ 525.427834][T28218] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 525.493588][ T6395] pim6reg (unregistering): left allmulticast mode [ 525.510785][T28253] netlink: 'syz.4.6123': attribute type 1 has an invalid length. [ 525.542363][T28253] netlink: 'syz.4.6123': attribute type 3 has an invalid length. [ 525.579909][T28253] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6123'. [ 525.660250][T28262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.774233][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 525.810199][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 526.131329][T28260] netlink: 'syz.1.6124': attribute type 4 has an invalid length. [ 526.210121][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 526.227352][T28267] vlan2: entered allmulticast mode [ 526.241641][T28267] veth0_to_bond: entered allmulticast mode [ 526.255320][T22295] Bluetooth: hci5: command 0x040f tx timeout [ 526.785616][T28307] __nla_validate_parse: 10 callbacks suppressed [ 526.785636][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 526.814719][ T51] Bluetooth: hci4: command 0x0401 tx timeout [ 526.815220][T28305] netlink: zone id is out of range [ 526.828240][T28305] netlink: zone id is out of range [ 526.837417][T28305] netlink: zone id is out of range [ 526.858922][T28305] netlink: zone id is out of range [ 526.885327][T28305] netlink: zone id is out of range [ 526.890500][T28305] netlink: zone id is out of range [ 526.926540][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 526.959787][T28305] netlink: zone id is out of range [ 526.968950][T28305] netlink: zone id is out of range [ 526.978883][T28305] netlink: zone id is out of range [ 526.989242][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.005595][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.035847][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.068915][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.086909][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.098405][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.113818][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.135149][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6132'. [ 527.482732][T28348] netlink: 'syz.3.6139': attribute type 2 has an invalid length. [ 527.592754][T28010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.630326][T28010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.658559][T28010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.684924][T28010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.912303][T28380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.021712][T28010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.096713][T28010] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.128600][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.135843][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.179484][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.186711][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.338111][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 528.359357][T28401] vxcan1 speed is unknown, defaulting to 1000 [ 528.724934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 528.733003][ C1] lec:lec_tx_timeout: lec0 [ 528.740097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 528.790126][T28010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.920814][T28010] veth0_vlan: entered promiscuous mode [ 528.949474][T28010] veth1_vlan: entered promiscuous mode [ 529.141670][T28443] bridge7: port 1(veth5) entered blocking state [ 529.154930][T28443] bridge7: port 1(veth5) entered disabled state [ 529.161445][T28443] veth5: entered allmulticast mode [ 529.186592][T28443] veth5: entered promiscuous mode [ 529.212510][T28442] bond2: (slave veth0_to_bond): Releasing active interface [ 529.221679][T28447] netlink: 'syz.4.6166': attribute type 2 has an invalid length. [ 529.232255][T28442] bridge7: port 2(veth0_to_bond) entered blocking state [ 529.241107][T28442] bridge7: port 2(veth0_to_bond) entered disabled state [ 529.248948][T28442] veth0_to_bond: entered allmulticast mode [ 529.257466][T28442] veth0_to_bond: entered promiscuous mode [ 529.369678][T28010] veth0_macvtap: entered promiscuous mode [ 529.390675][T28010] veth1_macvtap: entered promiscuous mode [ 529.501314][T28463] 8021q: VLANs not supported on sit0 [ 529.548701][T28010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.605861][T28010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.647214][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.675241][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.700515][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.777352][ T6383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.098686][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.128302][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.199004][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.229462][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.421035][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 530.543759][T28512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.926832][T28548] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 530.946106][ T30] audit: type=1800 audit(1773608631.779:10): pid=28546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6191" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3080 res=0 errno=0 [ 531.153836][T28557] netlink: 'syz.1.6193': attribute type 25 has an invalid length. [ 531.208292][T22295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.219156][T22295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.236158][T22295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.258734][T22295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.268854][T22295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.314175][ T6383] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.337962][ T6383] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.390177][ T6383] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.416960][T28565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.424258][T28565] IPv6: NLM_F_CREATE should be set when creating new route [ 531.442230][ T6383] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.576692][T28565] bridge0: left allmulticast mode [ 531.703085][T28565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.720265][T28565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.854311][T28565] gtp0: left promiscuous mode [ 531.862816][T28565] gtp0: left allmulticast mode [ 531.910217][T28566] syzkaller0: entered promiscuous mode [ 531.916229][T28566] syzkaller0: entered allmulticast mode [ 531.931601][T28559] vxcan1 speed is unknown, defaulting to 1000 [ 531.950040][T16913] bridge0: port 3(syz_tun) entered disabled state [ 531.977371][T16913] syz_tun (unregistering): left allmulticast mode [ 531.988446][T16913] syz_tun (unregistering): left promiscuous mode [ 531.995689][T16913] bridge0: port 3(syz_tun) entered disabled state [ 532.026218][ T6398] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.035729][ T6398] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.254021][T28592] ip6t_srh: unknown srh invflags 4000 [ 532.620817][T28598] __nla_validate_parse: 60 callbacks suppressed [ 532.620838][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6202'. [ 533.306779][ T51] Bluetooth: hci0: command tx timeout [ 533.755112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 533.763211][ C1] lec:lec_tx_timeout: lec0 [ 533.768246][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 533.848756][ T6398] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.858941][ T6398] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.137056][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 534.161702][T28619] netlink: 'syz.0.6208': attribute type 1 has an invalid length. [ 534.182031][T28616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6205'. [ 534.189319][T28606] netlink: 'syz.4.6204': attribute type 16 has an invalid length. [ 534.199313][T28606] netlink: 'syz.4.6204': attribute type 17 has an invalid length. [ 534.227268][T28559] chnl_net:caif_netlink_parms(): no params data found [ 534.259983][T28606] erspan0: left allmulticast mode [ 534.281375][T28606] net_ratelimit: 3 callbacks suppressed [ 534.281386][T28606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.290788][T28626] netlink: 'syz.1.6209': attribute type 1 has an invalid length. [ 534.312413][T28626] netlink: 'syz.1.6209': attribute type 4 has an invalid length. [ 534.313802][T28618] bond1: entered promiscuous mode [ 534.321863][T28626] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6209'. [ 534.341826][T28618] bond1: entered allmulticast mode [ 534.357795][T28618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.539740][T28559] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.548693][T28559] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.556633][T28559] bridge_slave_0: entered allmulticast mode [ 534.568589][T28559] bridge_slave_0: entered promiscuous mode [ 534.578280][T28559] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.585799][T28559] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.593140][T28559] bridge_slave_1: entered allmulticast mode [ 534.601700][T28559] bridge_slave_1: entered promiscuous mode [ 534.760679][T28640] vcan1: entered promiscuous mode [ 534.765868][T28640] vcan1: entered allmulticast mode [ 534.780929][T28654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6215'. [ 534.783853][T28559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.806365][T28559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.826885][T28657] x_tables: duplicate underflow at hook 3 [ 534.851196][T28559] team0: Port device team_slave_0 added [ 534.884162][T28559] team0: Port device team_slave_1 added [ 534.962360][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 534.974513][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 535.013859][T28559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.021789][T28559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.050604][T28559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.067515][T28559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.074493][T28559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.101973][T28559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.116071][T28669] tipc: Started in network mode [ 535.124814][T28669] tipc: Node identity cac4704268ab, cluster identity 4711 [ 535.132227][T28669] tipc: Enabled bearer , priority 0 [ 535.149988][T28661] syzkaller0: entered promiscuous mode [ 535.157765][T28661] syzkaller0: entered allmulticast mode [ 535.170217][T28662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6218'. [ 535.180198][T28662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 535.229176][T28665] syzkaller0: entered promiscuous mode [ 535.235663][T28665] syzkaller0: entered allmulticast mode [ 535.242167][T28665] tipc: Resetting bearer [ 535.341312][T28664] tipc: Resetting bearer [ 535.389875][ T51] Bluetooth: hci0: command tx timeout [ 535.676932][T28682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.847640][T28695] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6227'. [ 537.126719][T28664] tipc: Disabling bearer [ 537.226272][ T6598] tipc: Node number set to 2725212226 [ 537.280637][T28559] hsr_slave_0: entered promiscuous mode [ 537.296678][T28559] hsr_slave_1: entered promiscuous mode [ 537.310733][T28559] debugfs: 'hsr0' already exists in 'hsr' [ 537.327639][T28710] netlink: 'syz.2.6230': attribute type 20 has an invalid length. [ 537.329116][T28559] Cannot create hsr debugfs directory [ 537.350519][T28710] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.455018][ T51] Bluetooth: hci0: command tx timeout [ 537.691541][T28559] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.707770][T28559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.720275][T28559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 537.737822][T28732] vcan0: tx drop: invalid sa for name 0x0000000000004000 [ 537.764639][T28734] xt_recent: Unsupported userspace flags (000000b1) [ 537.809169][T28732] __nla_validate_parse: 4 callbacks suppressed [ 537.809191][T28732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6238'. [ 537.910201][T28559] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.959923][T28559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.995036][T28559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 538.087774][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6242'. [ 538.106807][T28559] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.117749][T28559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.130194][T28559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 538.237853][T28559] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.253973][T28559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.286151][T28559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 538.615881][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6250'. [ 538.737508][T28787] netlink: 'syz.0.6254': attribute type 1 has an invalid length. [ 538.774686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 538.782772][ C1] lec:lec_tx_timeout: lec0 [ 538.787423][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 538.815906][T28789] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6253'. [ 538.816808][T28795] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6253'. [ 538.852827][T28559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.912774][T28789] 8021q: VLANs not supported on ip6tnl0 [ 538.927753][T28795] 8021q: VLANs not supported on ip6tnl0 [ 538.954928][T28559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.990322][T28559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.012822][T28559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.095324][T28815] syzkaller0: entered promiscuous mode [ 539.111167][T28815] syzkaller0: entered allmulticast mode [ 539.174267][T28827] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.349222][T28559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.419974][T28559] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.467638][T28194] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.474824][T28194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.532695][T28194] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.539923][T28194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.548787][ T51] Bluetooth: hci0: command tx timeout [ 539.828239][T28861] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6273'. [ 539.848573][T28861] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6273'. [ 540.001166][T28876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6276'. [ 540.067408][T28876] netlink: 'syz.4.6276': attribute type 8 has an invalid length. [ 540.227250][T28559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.285555][T28890] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 540.336296][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 540.368962][T28559] veth0_vlan: entered promiscuous mode [ 540.408663][T28559] veth1_vlan: entered promiscuous mode [ 540.459096][T28900] netlink: 'syz.4.6287': attribute type 1 has an invalid length. [ 540.493189][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6286'. [ 540.519511][T28900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.531146][T28559] veth0_macvtap: entered promiscuous mode [ 540.556718][T28900] bond6: entered allmulticast mode [ 540.593796][T28900] bond6: (slave ip6gretap1): making interface the new active one [ 540.629134][T28900] ip6gretap1: entered allmulticast mode [ 540.669478][T28900] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 540.682384][T28559] veth1_macvtap: entered promiscuous mode [ 540.719457][T28559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.762716][T28559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.816700][T28194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.838035][T28194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.868908][T28923] syz_tun: entered allmulticast mode [ 540.886977][T28194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.959158][T28923] bridge_slave_0: left allmulticast mode [ 540.966504][T28923] bridge_slave_0: left promiscuous mode [ 540.972285][T28923] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.980123][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 540.987337][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 541.038504][T28923] bridge_slave_1: left allmulticast mode [ 541.044200][T28923] bridge_slave_1: left promiscuous mode [ 541.051726][T28923] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.068147][T28923] bond0: (slave bond_slave_0): Releasing backup interface [ 541.079831][T28923] bond0: (slave bond_slave_1): Releasing backup interface [ 541.108580][T28923] team0: Port device team_slave_0 removed [ 541.117829][T28923] team0: Port device team_slave_1 removed [ 541.124080][T28923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.153556][T28923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.173391][T28944] netlink: 'syz.2.6295': attribute type 1 has an invalid length. [ 541.183246][T28923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.203232][T28194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.228313][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6296'. [ 541.267550][T28944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.477571][ T6398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.488993][ T6398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.584185][T28917] syz_tun: left allmulticast mode [ 541.628106][T28970] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 541.669466][ T6395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.684877][ T6395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.753246][T28971] bond7: (slave bridge11): making interface the new active one [ 541.768196][T28971] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 541.840174][T28975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 542.230483][T29003] netem: change failed [ 542.270631][T29003] syzkaller1: entered promiscuous mode [ 542.280091][T29003] syzkaller1: entered allmulticast mode [ 542.302773][T29006] netlink: 'syz.1.6313': attribute type 32 has an invalid length. [ 542.329029][T22295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.347276][T22295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.358326][T22295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.366886][T22295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.375027][T22295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.701974][T29007] vxcan1 speed is unknown, defaulting to 1000 [ 543.182989][T29007] chnl_net:caif_netlink_parms(): no params data found [ 543.308621][T29007] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.316562][T29007] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.323855][T29007] bridge_slave_0: entered allmulticast mode [ 543.331968][T29007] bridge_slave_0: entered promiscuous mode [ 543.340552][T29007] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.348475][T29007] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.357106][T29007] bridge_slave_1: entered allmulticast mode [ 543.364275][T29007] bridge_slave_1: entered promiscuous mode [ 543.396499][T29007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.410232][T29007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.463807][T29007] team0: Port device team_slave_0 added [ 543.472958][T29007] team0: Port device team_slave_1 added [ 543.498932][T29007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.506453][T29007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.533801][T29007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.549258][T29007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.557232][T29007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.583739][T29007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.627325][T29007] hsr_slave_0: entered promiscuous mode [ 543.633835][T29007] hsr_slave_1: entered promiscuous mode [ 543.640942][T29007] debugfs: 'hsr0' already exists in 'hsr' [ 543.647110][T29007] Cannot create hsr debugfs directory [ 543.748734][T29007] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.760715][T29007] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.794652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 543.802758][ C1] lec:lec_tx_timeout: lec0 [ 543.808148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.831276][T29007] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.841980][T29007] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.900895][T29007] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.910874][T29007] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.968649][T29007] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.979519][T29007] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.416655][ T51] Bluetooth: hci1: command tx timeout [ 545.552337][T29016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.578594][T29007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.643595][T29007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.681858][T29007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 545.699773][T29007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.845378][T29085] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.851868][T29085] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.877792][T29087] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 545.975280][T29007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.032991][T29007] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.053252][T28184] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.060498][T28184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.092710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.099920][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.125567][T29096] xt_l2tp: missing protocol rule (udp|l2tpip) [ 546.158432][T29096] bridge_slave_0: left allmulticast mode [ 546.164333][T29096] bridge_slave_0: left promiscuous mode [ 546.173743][T29096] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.197940][T29096] bridge_slave_1: left allmulticast mode [ 546.214002][T29096] bridge_slave_1: left promiscuous mode [ 546.227723][T29096] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.279748][T29096] bond0: (slave bond_slave_0): Releasing backup interface [ 546.308708][T29096] bond0: (slave bond_slave_1): Releasing backup interface [ 546.329970][T29105] __nla_validate_parse: 1 callbacks suppressed [ 546.329988][T29105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6330'. [ 546.350668][T29096] team0: Port device team_slave_0 removed [ 546.359680][T29105] netlink: zone id is out of range [ 546.366085][T29105] netlink: zone id is out of range [ 546.372728][T29105] netlink: zone id is out of range [ 546.380287][T29105] netlink: zone id is out of range [ 546.382014][T29096] team0: Port device team_slave_1 removed [ 546.386078][T29105] netlink: zone id is out of range [ 546.386089][T29105] netlink: zone id is out of range [ 546.386099][T29105] netlink: zone id is out of range [ 546.386108][T29105] netlink: zone id is out of range [ 546.426931][T29096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.444914][T29096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.460204][T29096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.472849][T29096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.499885][ T51] Bluetooth: hci1: command tx timeout [ 546.622586][T29119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6335'. [ 546.664002][T29119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.719503][T29119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 546.729950][T29119] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 546.742942][T29119] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 546.787855][T29007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.971409][T29146] netlink: 'syz.1.6341': attribute type 1 has an invalid length. [ 546.997626][T29146] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 547.003253][T29151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.064918][T29007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.082204][T29149] vxcan1 speed is unknown, defaulting to 1000 [ 547.319828][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6344'. [ 547.418588][T29007] veth0_vlan: entered promiscuous mode [ 547.433112][T29007] veth1_vlan: entered promiscuous mode [ 547.547471][T29007] veth0_macvtap: entered promiscuous mode [ 547.639020][T29007] veth1_macvtap: entered promiscuous mode [ 547.686955][T29174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6347'. [ 547.687537][T29007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.724498][T29007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.780837][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6348'. [ 547.787302][T29174] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 547.807774][T29174] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 547.817924][T29174] gretap1: entered promiscuous mode [ 547.823172][T29174] gretap1: entered allmulticast mode [ 547.838085][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 547.961622][T29185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6350'. [ 547.980064][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.001224][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.031114][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.078661][T29163] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 548.096884][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.263073][T29197] netlink: 'syz.3.6352': attribute type 1 has an invalid length. [ 548.362708][T29197] netlink: 'syz.3.6352': attribute type 1 has an invalid length. [ 548.426159][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.474261][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.577227][ T51] Bluetooth: hci1: command tx timeout [ 548.610150][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.638047][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.698986][T29225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6361'. [ 548.729966][T29223] syzkaller1: entered promiscuous mode [ 548.737289][T29223] syzkaller1: entered allmulticast mode [ 548.815298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 548.823346][ C1] lec:lec_tx_timeout: lec0 [ 548.828398][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 549.106850][T29251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6367'. [ 549.259601][T29259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 549.316165][ T2661] block nbd2: Possible stuck request ffff888026940000: control (read@0,1024B). Runtime 390 seconds [ 549.327893][ T2661] block nbd2: Possible stuck request ffff888026940200: control (read@1024,1024B). Runtime 390 seconds [ 549.339538][ T25] block nbd1: Possible stuck request ffff888026898000: control (read@0,1024B). Runtime 390 seconds [ 549.352133][ T2661] block nbd2: Possible stuck request ffff888026940400: control (read@2048,1024B). Runtime 390 seconds [ 549.363402][ T25] block nbd1: Possible stuck request ffff888026898200: control (read@1024,1024B). Runtime 390 seconds [ 549.387029][ T2661] block nbd2: Possible stuck request ffff888026940600: control (read@3072,1024B). Runtime 390 seconds [ 549.400060][ T25] block nbd1: Possible stuck request ffff888026898400: control (read@2048,1024B). Runtime 390 seconds [ 549.411151][ T25] block nbd1: Possible stuck request ffff888026898600: control (read@3072,1024B). Runtime 390 seconds [ 549.476290][T29266] IPVS: set_ctl: invalid protocol: 92 172.20.20.61:20004 [ 549.613785][T22295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.638053][T22295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.650909][T22295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.659235][T29273] netlink: 'syz.3.6374': attribute type 7 has an invalid length. [ 549.697602][T22295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.708067][T22295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.931257][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.957126][ T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.982072][T29270] vxcan1 speed is unknown, defaulting to 1000 [ 550.038185][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.067673][ T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.132362][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.143867][ T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.250336][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.278155][T29291] netlink: 'syz.0.6380': attribute type 21 has an invalid length. [ 550.295154][ T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.656873][ T51] Bluetooth: hci1: command tx timeout [ 550.836624][ T13] bridge_slave_1: left allmulticast mode [ 550.842314][ T13] bridge_slave_1: left promiscuous mode [ 550.866056][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.404292][ T13] erspan0 (unregistering): left promiscuous mode [ 551.430988][ T13] gretap0 (unregistering): left promiscuous mode [ 551.457676][ T13] dvmrp0 (unregistering): left allmulticast mode [ 551.489165][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 551.785243][ T51] Bluetooth: hci2: command tx timeout [ 551.809605][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.820802][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.832133][ T13] bond0 (unregistering): Released all slaves [ 551.843225][ T13] bond1 (unregistering): Released all slaves [ 551.860028][ T13] bond2 (unregistering): Released all slaves [ 551.873860][ T13] bond3 (unregistering): Released all slaves [ 551.889615][ T13] bond4 (unregistering): Released all slaves [ 551.902914][ T13] bond5 (unregistering): Released all slaves [ 551.919799][ T13] bond6 (unregistering): (slave veth3): Releasing active interface [ 551.931500][ T13] bond6 (unregistering): Released all slaves [ 551.948447][ T13] bond7 (unregistering): Released all slaves [ 551.963035][ T13] bond8 (unregistering): Released all slaves [ 551.977505][ T13] bond9 (unregistering): Released all slaves [ 552.013277][T29336] net_ratelimit: 137 callbacks suppressed [ 552.013296][T29336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.041800][T29357] __nla_validate_parse: 6 callbacks suppressed [ 552.041819][T29357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6393'. [ 552.319939][ T13] : left promiscuous mode [ 552.490623][T29385] netlink: 'syz.4.6400': attribute type 2 has an invalid length. [ 552.502151][ C0] ------------[ cut here ]------------ [ 552.502221][ C0] ODEBUG: free active (active state 0) object: ffff8880764b1c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 552.502406][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz-executor/29270 [ 552.502510][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.502576][ C0] CPU: 0 UID: 0 PID: 29270 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 552.502601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.502629][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 552.502658][ C0] Code: 89 44 24 20 e8 27 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 bb 27 8c 48 c7 c2 40 c1 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 552.502676][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 552.502697][ C0] RAX: ffffffff8a95ffe0 RBX: ffffffff9a4b2bd0 RCX: 0000000000000000 [ 552.502713][ C0] RDX: ffffffff8c27c140 RSI: ffffffff8c27bbc0 RDI: ffffffff901c58a0 [ 552.502729][ C0] RBP: ffffffff8bcf3ce0 R08: ffff8880764b1c90 R09: ffffffff8bcf5000 [ 552.502742][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff8880764b1e00 [ 552.502758][ C0] R13: ffffffff901c58a0 R14: ffff8880764b1000 R15: ffff8880764b1c90 [ 552.502775][ C0] FS: 000055555657b500(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 552.502794][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.502810][ C0] CR2: 00007fa28c1bb6b0 CR3: 00000000a0bf2000 CR4: 00000000003526f0 [ 552.502829][ C0] Call Trace: [ 552.502838][ C0] [ 552.502847][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 552.502893][ C0] kfree+0x13a/0x630 [ 552.502973][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 552.503033][ C0] rose_timer_expiry+0x4cb/0x600 [ 552.503056][ C0] ? call_timer_fn+0x178/0x640 [ 552.503111][ C0] call_timer_fn+0x192/0x640 [ 552.503137][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 552.503158][ C0] ? call_timer_fn+0xd4/0x640 [ 552.503184][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 552.503223][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.503304][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 552.503331][ C0] __run_timer_base+0x652/0x8b0 [ 552.503356][ C0] ? ktime_get+0x45/0x200 [ 552.503389][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 552.503421][ C0] ? sched_clock_cpu+0x74/0x440 [ 552.503476][ C0] run_timer_softirq+0xb7/0x170 [ 552.503503][ C0] handle_softirqs+0x22a/0x870 [ 552.503548][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 552.503585][ C0] __irq_exit_rcu+0x5f/0x150 [ 552.503612][ C0] irq_exit_rcu+0x9/0x30 [ 552.503642][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 552.503723][ C0] [ 552.503732][ C0] [ 552.503742][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.503783][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 552.503816][ C0] Code: e9 30 ff ff ff e8 35 79 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 76 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 5f 0f 0a cc 48 8d 3d 6e 60 73 [ 552.503834][ C0] RSP: 0018:ffffc90004836678 EFLAGS: 00000286 [ 552.503855][ C0] RAX: d9b09838f3279e00 RBX: 0000000000000246 RCX: 0000000000000046 [ 552.503871][ C0] RDX: 0000000081349f55 RSI: ffffffff8e16654c RDI: ffffffff8c27b580 [ 552.503887][ C0] RBP: 0000000000000000 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 552.503902][ C0] R10: ffffc900048367d8 R11: ffffffff81b0bfa0 R12: 0000000000000002 [ 552.503964][ C0] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000 [ 552.503984][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.504017][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 552.504068][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.504092][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 552.504119][ C0] unwind_next_frame+0xc2/0x23c0 [ 552.504149][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 552.504185][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 552.504214][ C0] ? do_syscall_64+0x14d/0xf80 [ 552.504233][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.504258][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.504282][ C0] arch_stack_walk+0x11b/0x150 [ 552.504322][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.504350][ C0] stack_trace_save+0xa9/0x100 [ 552.504374][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 552.504395][ C0] ? kmem_cache_free+0x187/0x630 [ 552.504421][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 552.504514][ C0] ? inet6_ifmcaddr_notify+0x143/0x1e0 [ 552.504665][ C0] ? __ipv6_dev_mc_inc+0x8a9/0xa50 [ 552.504693][ C0] ? ipv6_add_dev+0xe43/0x13a0 [ 552.504754][ C0] ? addrconf_notify+0x771/0x1050 [ 552.504808][ C0] ? notifier_call_chain+0x1be/0x400 [ 552.504840][ C0] ? register_netdevice+0x173a/0x1cf0 [ 552.504936][ C0] ? rtnl_newlink_create+0x338/0xb70 [ 552.505025][ C0] kasan_save_track+0x3e/0x80 [ 552.505053][ C0] ? kasan_save_track+0x3e/0x80 [ 552.505073][ C0] ? kasan_save_free_info+0x46/0x50 [ 552.505101][ C0] ? __kasan_slab_free+0x5c/0x80 [ 552.505121][ C0] ? kmem_cache_free+0x187/0x630 [ 552.505142][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 552.505167][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 552.505192][ C0] ? inet6_ifmcaddr_notify+0x143/0x1e0 [ 552.505218][ C0] ? __ipv6_dev_mc_inc+0x8a9/0xa50 [ 552.505244][ C0] ? ipv6_add_dev+0xe43/0x13a0 [ 552.505268][ C0] ? addrconf_notify+0x771/0x1050 [ 552.505297][ C0] ? notifier_call_chain+0x1be/0x400 [ 552.505327][ C0] ? register_netdevice+0x173a/0x1cf0 [ 552.505348][ C0] ? rtnl_newlink_create+0x338/0xb70 [ 552.505378][ C0] ? rtnl_newlink+0x1666/0x1be0 [ 552.505405][ C0] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 552.505432][ C0] ? netlink_rcv_skb+0x232/0x4b0 [ 552.505457][ C0] ? netlink_unicast+0x80f/0x9b0 [ 552.505480][ C0] ? netlink_sendmsg+0x813/0xb40 [ 552.505507][ C0] ? __sys_sendto+0x672/0x710 [ 553.069802][ C0] ? __x64_sys_sendto+0xde/0x100 [ 553.074830][ C0] ? do_syscall_64+0x14d/0xf80 [ 553.079614][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.085784][ C0] kasan_save_free_info+0x46/0x50 [ 553.090923][ C0] __kasan_slab_free+0x5c/0x80 [ 553.095771][ C0] kmem_cache_free+0x187/0x630 [ 553.100562][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 553.106638][ C0] netlink_broadcast_filtered+0xee4/0x1020 [ 553.112503][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 553.118856][ C0] ? __pfx_inet6_fill_ifmcaddr+0x10/0x10 [ 553.124584][ C0] nlmsg_notify+0xf0/0x1a0 [ 553.129044][ C0] inet6_ifmcaddr_notify+0x143/0x1e0 [ 553.134374][ C0] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 553.140294][ C0] __ipv6_dev_mc_inc+0x8a9/0xa50 [ 553.145298][ C0] ipv6_add_dev+0xe43/0x13a0 [ 553.149936][ C0] addrconf_notify+0x771/0x1050 [ 553.154874][ C0] notifier_call_chain+0x1be/0x400 [ 553.160030][ C0] register_netdevice+0x173a/0x1cf0 [ 553.165337][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 553.170904][ C0] ? validate_linkmsg+0x765/0x950 [ 553.176027][ C0] rtnl_newlink_create+0x338/0xb70 [ 553.181182][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 553.187122][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 553.192789][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 553.197922][ C0] ? full_name_hash+0x92/0xe0 [ 553.202679][ C0] rtnl_newlink+0x1666/0x1be0 [ 553.207475][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.212553][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 553.217590][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 553.222567][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 553.227769][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 553.232736][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 553.238059][ C0] ? kernel_text_address+0xa5/0xe0 [ 553.243199][ C0] ? __kernel_text_address+0xd/0x30 [ 553.248497][ C0] ? unwind_get_return_address+0x4d/0x90 [ 553.254182][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 553.259315][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 553.264289][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 553.269508][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.275031][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 553.280018][ C0] netlink_rcv_skb+0x232/0x4b0 [ 553.284872][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 553.290356][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.295712][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.300954][ C0] netlink_unicast+0x80f/0x9b0 [ 553.305816][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 553.311246][ C0] ? netlink_sendmsg+0x650/0xb40 [ 553.316281][ C0] ? skb_put+0x11b/0x210 [ 553.320675][ C0] netlink_sendmsg+0x813/0xb40 [ 553.325543][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.330860][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 553.336028][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.341376][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.346762][ C0] __sys_sendto+0x672/0x710 [ 553.351297][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 553.356425][ C0] ? exc_page_fault+0x6a/0xc0 [ 553.361139][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 553.366509][ C0] __x64_sys_sendto+0xde/0x100 [ 553.371303][ C0] do_syscall_64+0x14d/0xf80 [ 553.375956][ C0] ? trace_irq_disable+0x3b/0x150 [ 553.380998][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.387116][ C0] ? clear_bhb_loop+0x40/0x90 [ 553.391786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.397705][ C0] RIP: 0033:0x7fb08d75cfce [ 553.402137][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 553.421785][ C0] RSP: 002b:00007ffeb83cf3e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 553.430248][ C0] RAX: ffffffffffffffda RBX: 000055555657b500 RCX: 00007fb08d75cfce [ 553.438251][ C0] RDX: 000000000000004c RSI: 00007fb08e544670 RDI: 0000000000000003 [ 553.446265][ C0] RBP: 0000000000000001 R08: 00007ffeb83cf464 R09: 000000000000000c [ 553.454223][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 553.462231][ C0] R13: 0000000000000000 R14: 00007fb08e544670 R15: 0000000000000000 [ 553.470260][ C0] [ 553.473280][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 553.480545][ C0] CPU: 0 UID: 0 PID: 29270 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 553.490074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.500117][ C0] Call Trace: [ 553.503384][ C0] [ 553.506218][ C0] vpanic+0x56c/0xa60 [ 553.510226][ C0] ? __pfx__printk+0x10/0x10 [ 553.514801][ C0] ? __pfx_vpanic+0x10/0x10 [ 553.519286][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 553.524556][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 553.529766][ C0] panic+0xc5/0xd0 [ 553.533500][ C0] ? __pfx_panic+0x10/0x10 [ 553.537927][ C0] __warn+0x315/0x4f0 [ 553.541905][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 553.547622][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 553.553337][ C0] __report_bug+0x29a/0x540 [ 553.557953][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 553.563785][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 553.569541][ C0] ? __pfx___report_bug+0x10/0x10 [ 553.574573][ C0] ? run_timer_softirq+0xb7/0x170 [ 553.579613][ C0] ? handle_softirqs+0x22a/0x870 [ 553.584581][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 553.589348][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 553.595156][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.601303][ C0] ? lock_acquire+0x20b/0x2e0 [ 553.605980][ C0] ? unwind_next_frame+0xc2/0x23c0 [ 553.611090][ C0] ? arch_stack_walk+0x11b/0x150 [ 553.616029][ C0] report_bug_entry+0x19a/0x290 [ 553.620880][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 553.626603][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 553.632320][ C0] handle_bug+0xce/0x200 [ 553.636556][ C0] exc_invalid_op+0x1a/0x50 [ 553.641052][ C0] asm_exc_invalid_op+0x1a/0x20 [ 553.645891][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 553.652220][ C0] Code: 89 44 24 20 e8 27 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 c0 bb 27 8c 48 c7 c2 40 c1 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 553.671816][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 553.677880][ C0] RAX: ffffffff8a95ffe0 RBX: ffffffff9a4b2bd0 RCX: 0000000000000000 [ 553.685850][ C0] RDX: ffffffff8c27c140 RSI: ffffffff8c27bbc0 RDI: ffffffff901c58a0 [ 553.693811][ C0] RBP: ffffffff8bcf3ce0 R08: ffff8880764b1c90 R09: ffffffff8bcf5000 [ 553.701775][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff8880764b1e00 [ 553.709738][ C0] R13: ffffffff901c58a0 R14: ffff8880764b1000 R15: ffff8880764b1c90 [ 553.717708][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 553.723080][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 553.728721][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 553.734368][ C0] kfree+0x13a/0x630 [ 553.738289][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 553.743430][ C0] rose_timer_expiry+0x4cb/0x600 [ 553.748375][ C0] ? call_timer_fn+0x178/0x640 [ 553.753147][ C0] call_timer_fn+0x192/0x640 [ 553.757731][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 553.763181][ C0] ? call_timer_fn+0xd4/0x640 [ 553.767850][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 553.772983][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.778211][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 553.783691][ C0] __run_timer_base+0x652/0x8b0 [ 553.788550][ C0] ? ktime_get+0x45/0x200 [ 553.792888][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 553.798266][ C0] ? sched_clock_cpu+0x74/0x440 [ 553.803125][ C0] run_timer_softirq+0xb7/0x170 [ 553.807972][ C0] handle_softirqs+0x22a/0x870 [ 553.812735][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 553.817498][ C0] __irq_exit_rcu+0x5f/0x150 [ 553.822083][ C0] irq_exit_rcu+0x9/0x30 [ 553.826324][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 553.831962][ C0] [ 553.834885][ C0] [ 553.837807][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.843781][ C0] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 553.849067][ C0] Code: e9 30 ff ff ff e8 35 79 0c 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b1 76 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 16 5f 0f 0a cc 48 8d 3d 6e 60 73 [ 553.868685][ C0] RSP: 0018:ffffc90004836678 EFLAGS: 00000286 [ 553.874751][ C0] RAX: d9b09838f3279e00 RBX: 0000000000000246 RCX: 0000000000000046 [ 553.882721][ C0] RDX: 0000000081349f55 RSI: ffffffff8e16654c RDI: ffffffff8c27b580 [ 553.890687][ C0] RBP: 0000000000000000 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 553.898650][ C0] R10: ffffc900048367d8 R11: ffffffff81b0bfa0 R12: 0000000000000002 [ 553.906616][ C0] R13: ffffffff8e75e420 R14: 0000000000000000 R15: 0000000000000000 [ 553.914582][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.920733][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 553.925853][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.931919][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 553.937032][ C0] unwind_next_frame+0xc2/0x23c0 [ 553.941970][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 553.947087][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 553.952196][ C0] ? do_syscall_64+0x14d/0xf80 [ 553.956949][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.963010][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.969156][ C0] arch_stack_walk+0x11b/0x150 [ 553.973929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.979995][ C0] stack_trace_save+0xa9/0x100 [ 553.984757][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 553.990116][ C0] ? kmem_cache_free+0x187/0x630 [ 553.995049][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 553.999637][ C0] ? inet6_ifmcaddr_notify+0x143/0x1e0 [ 554.005093][ C0] ? __ipv6_dev_mc_inc+0x8a9/0xa50 [ 554.010205][ C0] ? ipv6_add_dev+0xe43/0x13a0 [ 554.014962][ C0] ? addrconf_notify+0x771/0x1050 [ 554.019985][ C0] ? notifier_call_chain+0x1be/0x400 [ 554.025271][ C0] ? register_netdevice+0x173a/0x1cf0 [ 554.030651][ C0] ? rtnl_newlink_create+0x338/0xb70 [ 554.035945][ C0] kasan_save_track+0x3e/0x80 [ 554.040614][ C0] ? kasan_save_track+0x3e/0x80 [ 554.045453][ C0] ? kasan_save_free_info+0x46/0x50 [ 554.050645][ C0] ? __kasan_slab_free+0x5c/0x80 [ 554.055574][ C0] ? kmem_cache_free+0x187/0x630 [ 554.060505][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 554.066478][ C0] ? nlmsg_notify+0xf0/0x1a0 [ 554.071065][ C0] ? inet6_ifmcaddr_notify+0x143/0x1e0 [ 554.076520][ C0] ? __ipv6_dev_mc_inc+0x8a9/0xa50 [ 554.081627][ C0] ? ipv6_add_dev+0xe43/0x13a0 [ 554.086383][ C0] ? addrconf_notify+0x771/0x1050 [ 554.091408][ C0] ? notifier_call_chain+0x1be/0x400 [ 554.096696][ C0] ? register_netdevice+0x173a/0x1cf0 [ 554.102061][ C0] ? rtnl_newlink_create+0x338/0xb70 [ 554.107346][ C0] ? rtnl_newlink+0x1666/0x1be0 [ 554.112197][ C0] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 554.117303][ C0] ? netlink_rcv_skb+0x232/0x4b0 [ 554.122236][ C0] ? netlink_unicast+0x80f/0x9b0 [ 554.127168][ C0] ? netlink_sendmsg+0x813/0xb40 [ 554.132103][ C0] ? __sys_sendto+0x672/0x710 [ 554.136775][ C0] ? __x64_sys_sendto+0xde/0x100 [ 554.141710][ C0] ? do_syscall_64+0x14d/0xf80 [ 554.146464][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.152552][ C0] kasan_save_free_info+0x46/0x50 [ 554.157580][ C0] __kasan_slab_free+0x5c/0x80 [ 554.162341][ C0] kmem_cache_free+0x187/0x630 [ 554.167097][ C0] ? netlink_broadcast_filtered+0xee4/0x1020 [ 554.173077][ C0] netlink_broadcast_filtered+0xee4/0x1020 [ 554.178898][ C0] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 554.185145][ C0] ? __pfx_inet6_fill_ifmcaddr+0x10/0x10 [ 554.190787][ C0] nlmsg_notify+0xf0/0x1a0 [ 554.195201][ C0] inet6_ifmcaddr_notify+0x143/0x1e0 [ 554.200485][ C0] ? __pfx_inet6_ifmcaddr_notify+0x10/0x10 [ 554.206299][ C0] __ipv6_dev_mc_inc+0x8a9/0xa50 [ 554.211242][ C0] ipv6_add_dev+0xe43/0x13a0 [ 554.215832][ C0] addrconf_notify+0x771/0x1050 [ 554.220685][ C0] notifier_call_chain+0x1be/0x400 [ 554.225813][ C0] register_netdevice+0x173a/0x1cf0 [ 554.231021][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 554.236556][ C0] ? validate_linkmsg+0x765/0x950 [ 554.241588][ C0] rtnl_newlink_create+0x338/0xb70 [ 554.246700][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 554.252424][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 554.258063][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 554.263084][ C0] ? full_name_hash+0x92/0xe0 [ 554.267769][ C0] rtnl_newlink+0x1666/0x1be0 [ 554.272466][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 554.277503][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 554.282441][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 554.287381][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 554.292508][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 554.297443][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 554.302654][ C0] ? kernel_text_address+0xa5/0xe0 [ 554.307949][ C0] ? __kernel_text_address+0xd/0x30 [ 554.313144][ C0] ? unwind_get_return_address+0x4d/0x90 [ 554.318818][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 554.323844][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 554.328789][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 554.333909][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 554.339367][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 554.344311][ C0] netlink_rcv_skb+0x232/0x4b0 [ 554.349073][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 554.354534][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.359837][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 554.365060][ C0] netlink_unicast+0x80f/0x9b0 [ 554.369852][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 554.375148][ C0] ? netlink_sendmsg+0x650/0xb40 [ 554.380100][ C0] ? skb_put+0x11b/0x210 [ 554.384347][ C0] netlink_sendmsg+0x813/0xb40 [ 554.389116][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.394403][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 554.399341][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.404619][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.409901][ C0] __sys_sendto+0x672/0x710 [ 554.414411][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 554.419455][ C0] ? exc_page_fault+0x6a/0xc0 [ 554.424140][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 554.429433][ C0] __x64_sys_sendto+0xde/0x100 [ 554.434214][ C0] do_syscall_64+0x14d/0xf80 [ 554.438791][ C0] ? trace_irq_disable+0x3b/0x150 [ 554.443815][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.449873][ C0] ? clear_bhb_loop+0x40/0x90 [ 554.454547][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.460436][ C0] RIP: 0033:0x7fb08d75cfce [ 554.464842][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.484438][ C0] RSP: 002b:00007ffeb83cf3e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 554.492854][ C0] RAX: ffffffffffffffda RBX: 000055555657b500 RCX: 00007fb08d75cfce [ 554.500815][ C0] RDX: 000000000000004c RSI: 00007fb08e544670 RDI: 0000000000000003 [ 554.508779][ C0] RBP: 0000000000000001 R08: 00007ffeb83cf464 R09: 000000000000000c [ 554.516749][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 554.524713][ C0] R13: 0000000000000000 R14: 00007fb08e544670 R15: 0000000000000000 [ 554.532701][ C0] [ 554.536006][ C0] Kernel Offset: disabled [ 554.540376][ C0] Rebooting in 86400 seconds..