last executing test programs: 2.621611488s ago: executing program 1 (id=3803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x1, 0x40000, 0x8000000009ffffc}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.006480402s ago: executing program 1 (id=3812): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4a, 0x365, 0x1, 0x40, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@generic={0x6, 0x4, 0x5, 0xf, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.006275303s ago: executing program 3 (id=3813): pipe(&(0x7f0000000100)={0xffffffffffffffff}) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000a00)=""/174, 0xae}], 0x1) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) syz_emit_ethernet(0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="fffffff87fffaaaa0000aa1c001142bc36"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) r10 = syz_open_procfs$namespace(r9, &(0x7f0000000140)='ns/pid_for_children\x00') read(r10, &(0x7f0000000200)=""/196, 0xc4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000008000000700f82800"], 0x48) 1.965863832s ago: executing program 1 (id=3814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x140c4}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r3, 0xabf34bdd027fea1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r4, 0x613, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80d0}, 0x84) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) 1.807547515s ago: executing program 1 (id=3816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @bpq0, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 1.68741047s ago: executing program 1 (id=3818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.621805293s ago: executing program 1 (id=3819): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000780)=ANY=[@ANYBLOB="e904a20000000180c200000e08"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x1a, 0xc31, 0x726f24aaae8fa102, @private0, @mcast1, 0x8707, 0x40, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1a, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="9908d049eb71236e98d42dbc4226c4754d6212f20e9f8d9926b4a16cc34a38effce013cf5be4b2e12a77f7412b4f1b6458f4ef833125f0588464918b150979f1e6817dea04354f83a42f8ab8c1501c304882726294e77abab88a535ecf0b4683f09c22d1e698b6dcea4593b6c440d57d0c38fa03155fffe59434494d82923906ca177545421a9cc42e90ba595c234538124521220a852b100bb57c2e7f46975d86c7040e357db3bbab8e812d9835c3d5075a7417d616fdcc83308b397ba65613a31354105a16f7eef5f7a0561756346b4cb46eb48c35ef108d69c24113db054e5f32286cc260000000", 0xe9}], 0x1}}], 0x1, 0x81) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.543730306s ago: executing program 0 (id=3820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"b8281ff2d8aa0660f6982ed215e7277f", r1, r2, {0xfffffffffffffffb, 0x7}, {0xe3, 0x3ea8}, 0x7, [0x8, 0x7, 0x0, 0x7, 0x73a3, 0x4, 0x6, 0x6, 0xfd, 0xa329, 0x2, 0x1ce080000000000, 0x1, 0xc, 0x0, 0xf]}) 1.430666641s ago: executing program 2 (id=3821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = accept4$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@rose, @default, @bcast, @remote, @null, @netrom, @remote, @default]}, &(0x7f00000002c0)=0x48, 0x800) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000800)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @default, 0x0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) connect$netrom(r1, &(0x7f0000000880)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$MRT_DEL_VIF(r2, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x128, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x2c}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80, 0x10000}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x690}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb6, 0xbe, "68af4f96baef0990e7e8ddb1a96d3ce74e917c688b1deb1bec4f5047665f82d761aa64b90387f14beedb9d8698c57e80b325f06b664b1a87ff731a03a6e3d0ec262c833c3e61197656685dda5733d8838636f02f1d327eca4ebb8689997fe91360c88666ac662e68786c0264786bead0b85a6e96e4404d96c6163f7828aebc202e4f9e391010947046647990083045122d089056ec33fd1de42b7b640e7610a090dd1bc4b3a137faff4221d53c3ec0e504fa"}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=@newae={0x38c, 0x1e, 0x100, 0x70bd2a, 0x25dfdbff, {{@in6=@local, 0x4d6, 0x2, 0xff}, @in6=@local, 0x3, 0x3501}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0xd2, 0x14, {{'blake2b-256\x00'}, 0x430, 0x60, "dccba62a4eca5b514d3e7a7231c32d1cced99fdbe9150738317e1935490278eb1572b8028c274181601efe9837beec5536997df94ee9b3d0b41f908549ffbe903545352b974050a53a212ac0216bea67abee64cb5480a9c6fe21dc7cde45f5ae7c9bc44f93b54c7091fedc056629a360a6e49de2f558f5b1434625f2de14112d65bca0207095"}}, @algo_comp={0xf2, 0x3, {{'lzjh\x00'}, 0x550, "e35b2deadcc3ebb9d3e4bad3e4f6077c7e669fb508b8c3c837c1119cbf00853c1cb674cd59d45de4338616391a325ac7e3ccb87e875ba0d7efd345ba48fa2b3dce7045fc815bb6529921e9f71a3f0ea9a292c6290e3a803d3ac749e5878a1b2d4ec019f499f54d284b9f16ea6dd5a48b843f4cff1f5d2ef3506e1cfa9f1bd4ddba94d89c5f16c699033d40c82269c33158d6bad2f0d5ce455c11eadd9ad5d550aac299efdeef411d0494"}}, @extra_flags={0x8, 0x18, 0x37}, @sec_ctx={0x9c, 0x8, {0x98, 0x8, 0x1, 0x8, 0x90, "50712350d1681aba12d42fb62afbe9df32a414b813f35104dd912c9953580d559aa8ddb08256ae6f0258311aab27c9c61034fc185a6ea1f37813c44106fb319c4dbc988abca7dcaf700ae1e28c80a6c89e4c60f6bc7312259629825d411fb0c9153a5d9b1918b63d4ca08bcd29409013ffbe22b4cf04d95a4d8a53e2ff8fe8a1dbc5e02e6306c66cc906b9d7eafe0f48"}}, @replay_thresh={0x8, 0xb, 0x7f}, @algo_crypt={0xcf, 0x2, {{'ecb-serpent-avx\x00'}, 0x438, "64d77b871b4d0455377817821e020eebcf5692b862b1a8dbd20515f1f5fe6d5f00ef2a6eaa6576873fa5d5b7b596f0754bdff154c6067b971919f6c8c800b49642d97406717aecc539a4bf7e6b29638a7ac081542a9f806873af6a96d6a240e5d539f9f0e1fbc96ff378ee923806295cf79c721a2cb968f98c4761795818b8b9d27ffdcd1a2c83"}}]}, 0x38c}, 0x1, 0x0, 0x0, 0xc804}, 0x48002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) accept4$netrom(r0, &(0x7f0000000240)={{0x3, @default}, [@rose, @default, @bcast, @remote, @null, @netrom, @remote, @default]}, &(0x7f00000002c0)=0x48, 0x800) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000800)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @default, 0x0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) connect$netrom(r1, &(0x7f0000000880)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) setsockopt$MRT_DEL_VIF(r2, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x128, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x2c}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80, 0x10000}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x690}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb6, 0xbe, "68af4f96baef0990e7e8ddb1a96d3ce74e917c688b1deb1bec4f5047665f82d761aa64b90387f14beedb9d8698c57e80b325f06b664b1a87ff731a03a6e3d0ec262c833c3e61197656685dda5733d8838636f02f1d327eca4ebb8689997fe91360c88666ac662e68786c0264786bead0b85a6e96e4404d96c6163f7828aebc202e4f9e391010947046647990083045122d089056ec33fd1de42b7b640e7610a090dd1bc4b3a137faff4221d53c3ec0e504fa"}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4f}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=@newae={0x38c, 0x1e, 0x100, 0x70bd2a, 0x25dfdbff, {{@in6=@local, 0x4d6, 0x2, 0xff}, @in6=@local, 0x3, 0x3501}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0xd2, 0x14, {{'blake2b-256\x00'}, 0x430, 0x60, "dccba62a4eca5b514d3e7a7231c32d1cced99fdbe9150738317e1935490278eb1572b8028c274181601efe9837beec5536997df94ee9b3d0b41f908549ffbe903545352b974050a53a212ac0216bea67abee64cb5480a9c6fe21dc7cde45f5ae7c9bc44f93b54c7091fedc056629a360a6e49de2f558f5b1434625f2de14112d65bca0207095"}}, @algo_comp={0xf2, 0x3, {{'lzjh\x00'}, 0x550, "e35b2deadcc3ebb9d3e4bad3e4f6077c7e669fb508b8c3c837c1119cbf00853c1cb674cd59d45de4338616391a325ac7e3ccb87e875ba0d7efd345ba48fa2b3dce7045fc815bb6529921e9f71a3f0ea9a292c6290e3a803d3ac749e5878a1b2d4ec019f499f54d284b9f16ea6dd5a48b843f4cff1f5d2ef3506e1cfa9f1bd4ddba94d89c5f16c699033d40c82269c33158d6bad2f0d5ce455c11eadd9ad5d550aac299efdeef411d0494"}}, @extra_flags={0x8, 0x18, 0x37}, @sec_ctx={0x9c, 0x8, {0x98, 0x8, 0x1, 0x8, 0x90, "50712350d1681aba12d42fb62afbe9df32a414b813f35104dd912c9953580d559aa8ddb08256ae6f0258311aab27c9c61034fc185a6ea1f37813c44106fb319c4dbc988abca7dcaf700ae1e28c80a6c89e4c60f6bc7312259629825d411fb0c9153a5d9b1918b63d4ca08bcd29409013ffbe22b4cf04d95a4d8a53e2ff8fe8a1dbc5e02e6306c66cc906b9d7eafe0f48"}}, @replay_thresh={0x8, 0xb, 0x7f}, @algo_crypt={0xcf, 0x2, {{'ecb-serpent-avx\x00'}, 0x438, "64d77b871b4d0455377817821e020eebcf5692b862b1a8dbd20515f1f5fe6d5f00ef2a6eaa6576873fa5d5b7b596f0754bdff154c6067b971919f6c8c800b49642d97406717aecc539a4bf7e6b29638a7ac081542a9f806873af6a96d6a240e5d539f9f0e1fbc96ff378ee923806295cf79c721a2cb968f98c4761795818b8b9d27ffdcd1a2c83"}}]}, 0x38c}, 0x1, 0x0, 0x0, 0xc804}, 0x48002) (async) 1.411308806s ago: executing program 0 (id=3822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) 1.316002161s ago: executing program 0 (id=3823): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async, rerun: 32) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0xe) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) (async) syz_emit_ethernet(0xb2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x1, 0x2, 0x4f03419ba515d32a, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 1.266644428s ago: executing program 2 (id=3824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000b800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040091) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000040)={0x6, 0xd, 0x80000000, 0xfff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f000000b800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040091) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000040)={0x6, 0xd, 0x80000000, 0xfff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) (async) 1.266101199s ago: executing program 4 (id=3825): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0xa, 0x1000001) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x8000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r4, 0x4) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r5, 0x11, 0x0, 0x3}, 0x14}}, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000008700)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24004000, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.157888188s ago: executing program 4 (id=3826): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x5, 0x0) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x29, 0x5, 0x0) (async) close(0x4) (async) 1.088268476s ago: executing program 2 (id=3827): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 990.617661ms ago: executing program 0 (id=3828): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x3, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r15, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 961.517746ms ago: executing program 4 (id=3829): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@can_newroute={0x1ac, 0x18, 0x100, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_LIM_HOPS={0x5, 0xd, 0xb}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "9f72126ab81f0458"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x3d, 0x23, 0x7d, 0x7, 0x5, "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", 0x1, "a3d4943c9a79fb4657e67ec5a415f48c4c34da77"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "5a4c5d1ce74db100"}}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0x1, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3}, 0x5, 0x2, 0x0, 0x0, "bc7b76faf9b82a29"}, 0x4}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "7c3d61d35594c36b"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x1ac}}, 0x0) syz_emit_ethernet(0x88, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0xffff, 0xb, 0x3e]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 935.213604ms ago: executing program 3 (id=3830): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 802.82802ms ago: executing program 4 (id=3831): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000000140)=@framed={{}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}], {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 801.248469ms ago: executing program 3 (id=3832): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000200000007000000890b"], 0x40}, 0x20000000) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r1, &(0x7f0000000100)}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c2d115b218a6453", 0xfe48}], 0x1}, 0x4000841) 794.064591ms ago: executing program 2 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r2) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x41) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x4140) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000080)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x39}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 764.317088ms ago: executing program 3 (id=3834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendto$inet6(r0, &(0x7f0000000840)="a6", 0xfdef, 0x200080c0, &(0x7f0000000000)={0xa, 0x2, 0x8, @loopback, 0x4}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r5, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 547.82907ms ago: executing program 4 (id=3835): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xd6, 0x5, 0x47, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xb}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) (async) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="88420000000000001400030046"], 0x44}}, 0x40080) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) (async) socket(0x1e, 0x800, 0xe) 547.216066ms ago: executing program 0 (id=3836): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13b, 0x13b, 0x3, [@datasec={0xf, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x34084000, 0x4}, {0x5, 0x3, 0xb2b}, {0x5, 0x0, 0x3}, {0x4, 0x1, 0x9a8a}, {0x5, 0x3, 0x3}], "f2a00d"}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0xf, 0xfff}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @var={0x6, 0x0, 0x0, 0xe, 0x1}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3, 0x8b3}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @struct={0xe, 0xa, 0x0, 0x4, 0x1, 0x8, [{0x9, 0x1}, {0x4, 0x5}, {0x6, 0x4, 0x1}, {0x6, 0x6, 0x1}, {0x3, 0x1, 0x683f}, {0x6, 0x3, 0x1}, {0x6, 0x4, 0x6}, {0xa, 0x1, 0x1ff}, {0xc, 0x0, 0x2}, {0x1, 0x1, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/40, 0x157, 0x28, 0x0, 0xdd9d, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x34, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @exit, @generic={0x5c, 0x5, 0x5, 0x9, 0x9}, @generic={0x1d, 0x0, 0xe, 0xbcdd, 0xffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3ff, 0xe5, &(0x7f0000000300)=""/229, 0x40f00, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0xf, 0x100, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x5, 0x1, 0x9, 0xc}, {0x0, 0x1, 0xc, 0x2}, {0x4, 0x2, 0xe, 0x1}, {0x3, 0x3, 0xf, 0x9}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0x6}, 0x94) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r1, 0x0) ioctl$sock_ifreq(r0, 0x891d, &(0x7f00000000c0)={'macvlan0\x00', @ifru_settings={0x80, 0x0, @sync=&(0x7f0000000040)={0x3, 0x25e4341f, 0x7ff}}}) 378.532135ms ago: executing program 3 (id=3837): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@union={0xc, 0x2, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x2, 0xd}, {0x10, 0x4, 0x80000001}]}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0xd, [{0x0, 0x3, 0x5}, {0x0, 0x5, 0xfffffff4}, {0xd, 0x2, 0x7ff}]}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f0000000780)=""/49, 0x71, 0x31, 0x0, 0x6bbb, 0x10000, @value=r0}, 0x28) write(r2, &(0x7f0000000000)="fc0000001d000724ab0180000000070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0x45) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r6, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) splice(r4, 0x0, r7, 0x0, 0x4000000007, 0x4) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) unshare(0x26020480) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x54, r9, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9898}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x8000) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r8, 0x37}, 0x20) close(r5) close(r0) (async, rerun: 64) unshare(0x80002c0) (rerun: 64) 304.452641ms ago: executing program 2 (id=3838): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) 291.318445ms ago: executing program 4 (id=3839): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 98.371077ms ago: executing program 3 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) 36.192216ms ago: executing program 2 (id=3841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r3, &(0x7f0000000040)=""/244, 0xf4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@mpls_getroute={0x54, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x10, 0x20, 0x8, 0xfd, 0x2, 0x0, 0x8, 0x800}, [@RTA_VIA={0x14, 0x12, {0x1e, "f9276272954eae08d651fe7d9781"}}, @RTA_DST={0x8, 0x1, {0x9}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x6, 0xf, r4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000440)={0x1d, r2}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x84}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6b5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40c9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8323}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}]}]}, 0x110}}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x9, 0x3}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=3842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delsa={0x304, 0x11, 0x300, 0x70bd25, 0x25dfdbfc, {@in=@loopback, 0x4d3, 0xa, 0x6c}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x0, 0x0, 0x3504, 0x2, 0xa}, {@in6=@private0, @in=@rand_addr=0x64010101, @in=@rand_addr=0x64010100, @in6=@local, 0x6c, 0x3, 0x0, 0x3504, 0xa, 0x2}]}, @tmpl={0x144, 0x5, [{{@in=@empty, 0x4d2, 0x5e}, 0x2, @in=@loopback, 0x3503, 0x3, 0x2, 0x8, 0x2, 0x2, 0x8}, {{@in6=@empty, 0x4d2, 0x32}, 0x2, @in=@private=0xa010101, 0x3501, 0x4, 0x1, 0x8, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0x2, @in6=@empty, 0x3505, 0x2, 0x3, 0xb1, 0xfe000000, 0x1, 0x2}, {{@in6=@local, 0x4d4}, 0x2, @in6=@remote, 0x3502, 0x4, 0x0, 0x7, 0x5, 0x6, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d4, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x3505, 0x4, 0x3, 0x4, 0x10, 0x80}]}, @mark={0xc, 0x15, {0x35075c, 0x7ff}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xef}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @algo_comp={0xdd, 0x3, {{'lzjh\x00'}, 0x4a8, "52877dc1fa3fc7ab1583cfc8a39467fe367ca52ac10a8684ff7e98bcced0bd1345e6cbda9d13869691cfaa864d20d35c7744d3be15bbe04f1fd974cbc047b097ac82c428adc396271292fda60d1070de5e18d48c818adcd1051353e2d6ffd46ea3a3712c1b1cc3c4bca6cbb182449d3121a6c1d787c954f10fcec3e2427666ccbe34070bcaced0052c20cb04add4f94495274f0a4e"}}]}, 0x304}}, 0x4) (async, rerun: 64) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @isdn={0x22, 0xa, 0x80, 0x2, 0x74}, @in={0x2, 0x4e21, @empty}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000040)='pim6reg\x00', 0x3, 0x3, 0x401}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): rsing attributes in process `syz.3.2468'. [ 530.468915][T14901] vlan1: entered allmulticast mode [ 530.482259][T14901] bridge11: entered allmulticast mode [ 530.568047][T14917] bridge11: port 1(bond13) entered blocking state [ 530.575736][T14917] bridge11: port 1(bond13) entered disabled state [ 530.582779][T14917] bond13: entered allmulticast mode [ 530.592298][T14917] bond13: entered promiscuous mode [ 530.638779][T14924] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.680973][T14924] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 530.747116][T14923] syzkaller0: entered promiscuous mode [ 530.764721][T14923] syzkaller0: entered allmulticast mode [ 530.838416][T14924] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.855386][T14924] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 530.943574][T14940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2475'. [ 530.996510][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2477'. [ 531.032686][T14924] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.042816][T14924] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 531.090626][T14934] netlink: 'syz.3.2475': attribute type 1 has an invalid length. [ 531.240709][T14938] bridge10: port 1(veth9) entered blocking state [ 531.250747][T14938] bridge10: port 1(veth9) entered disabled state [ 531.258225][T14938] veth9: entered allmulticast mode [ 531.267375][T14938] veth9: entered promiscuous mode [ 531.306253][T14934] bond5: entered promiscuous mode [ 531.311900][T14934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.335307][T14924] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.349208][T14924] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 531.372831][T14951] syzkaller0: entered promiscuous mode [ 531.379604][T14951] syzkaller0: entered allmulticast mode [ 531.528875][T14960] sctp: [Deprecated]: syz.3.2480 (pid 14960) Use of int in maxseg socket option. [ 531.528875][T14960] Use struct sctp_assoc_value instead [ 531.739250][T14970] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 531.752898][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.782701][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 531.947133][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.979827][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 531.997350][T14983] netlink: 'syz.3.2487': attribute type 1 has an invalid length. [ 532.018399][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.027579][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 532.076120][ T35] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.092602][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 532.261493][T14991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.286050][T14998] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 532.954636][T15015] openvswitch: netlink: Message has -2 unknown bytes. [ 533.547270][T15024] bond9: option fail_over_mac: invalid value (16) [ 533.580529][T15024] bond9 (unregistering): Released all slaves [ 533.775061][T15034] bond0: entered promiscuous mode [ 533.790594][T15034] bond_slave_0: entered promiscuous mode [ 533.815840][T15034] bond_slave_1: entered promiscuous mode [ 533.823082][T15034] bridge_slave_1: entered promiscuous mode [ 533.881507][T15034] batadv0: entered promiscuous mode [ 533.901217][T15034] debugfs: 'hsr1' already exists in 'hsr' [ 533.910311][T15034] Cannot create hsr debugfs directory [ 533.919280][T15034] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 533.930813][T15034] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 533.954762][T15034] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 533.992899][T15034] bond0: left promiscuous mode [ 534.015390][T15034] bond_slave_0: left promiscuous mode [ 534.033241][T15034] bond_slave_1: left promiscuous mode [ 534.055015][T15034] bridge_slave_1: left promiscuous mode [ 534.090805][T15034] batadv0: left promiscuous mode [ 534.338349][T15047] bond9 (unregistering): Released all slaves [ 534.373868][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 534.382264][ C1] lec:lec_tx_timeout: lec0 [ 535.061504][T15081] pim6reg1: entered promiscuous mode [ 535.082255][T15081] pim6reg1: entered allmulticast mode [ 535.532115][T15097] __nla_validate_parse: 4 callbacks suppressed [ 535.532138][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 535.863048][T15109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.131955][T15125] xt_ecn: cannot match TCP bits for non-tcp packets [ 536.245904][T15131] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2528'. [ 536.359235][T15136] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 536.412391][T15145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2529'. [ 536.418816][T15136] bond13: entered promiscuous mode [ 536.429457][T15136] 8021q: adding VLAN 0 to HW filter on device bond13 [ 536.672998][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 536.729820][T15167] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2537'. [ 536.740080][T15167] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2537'. [ 536.918418][T15175] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 536.943247][T15175] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2540'. [ 536.972911][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 537.232517][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2543'. [ 537.460485][T15201] netlink: 'syz.1.2546': attribute type 6 has an invalid length. [ 537.806993][T15211] netlink: 'syz.4.2550': attribute type 7 has an invalid length. [ 537.833977][T15211] netlink: 'syz.4.2550': attribute type 8 has an invalid length. [ 537.978628][T15213] tipc: Enabling of bearer rejected, failed to enable media [ 538.008191][T15213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2551'. [ 538.243506][T15226] netlink: 'syz.1.2554': attribute type 5 has an invalid length. [ 538.269352][T15226] netlink: 'syz.1.2554': attribute type 6 has an invalid length. [ 538.286912][T15226] netlink: 'syz.1.2554': attribute type 5 has an invalid length. [ 538.324792][T15226] netlink: 'syz.1.2554': attribute type 6 has an invalid length. [ 538.709221][T15239] tipc: Started in network mode [ 538.725656][T15239] tipc: Node identity ac14140f, cluster identity 4711 [ 538.753675][T15239] tipc: Enabled bearer , priority 10 [ 539.311411][T15258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.612298][T15298] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 2, id = 0 [ 539.767120][ T8537] tipc: Node number set to 2886997007 [ 539.838685][T15306] gretap4: entered promiscuous mode [ 539.866074][T15306] batman_adv: batadv0: Adding interface: gretap4 [ 539.885243][T15306] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 539.945429][T15306] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 539.985931][T15315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.733730][T15344] netlink: 'syz.4.2586': attribute type 5 has an invalid length. [ 541.143459][T15363] pim6reg: entered allmulticast mode [ 541.168802][T15363] pim6reg: left allmulticast mode [ 541.900127][T15398] __nla_validate_parse: 11 callbacks suppressed [ 541.900150][T15398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2602'. [ 541.942537][T15398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2602'. [ 542.290876][T15428] vcan0: entered allmulticast mode [ 542.441752][T15435] bond_slave_0: entered promiscuous mode [ 542.605098][T15445] validate_nla: 1 callbacks suppressed [ 542.605118][T15445] netlink: 'syz.3.2613': attribute type 4 has an invalid length. [ 542.687719][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 542.710289][T15449] syzkaller0: entered promiscuous mode [ 542.730564][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 542.747558][T15456] netlink: 'syz.1.2616': attribute type 13 has an invalid length. [ 542.761083][T15449] syzkaller0: entered allmulticast mode [ 542.774495][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2612'. [ 542.808806][T15456] erspan0: refused to change device tx_queue_len [ 542.829424][T15456] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 543.109921][T15466] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2617'. [ 543.268330][T15481] x_tables: ip_tables: ah match: only valid for protocol 51 [ 543.279722][T15479] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2622'. [ 543.307595][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2622'. [ 543.638383][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'. [ 543.664384][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2627'. [ 543.985720][T15510] syz_tun: Device is already in use. [ 544.026711][T15510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.079712][T15512] syzkaller0: entered promiscuous mode [ 544.098894][T15512] syzkaller0: entered allmulticast mode [ 544.336982][T15523] syzkaller0: entered promiscuous mode [ 544.358314][T15523] syzkaller0: entered allmulticast mode [ 544.399042][T15523] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 544.889200][T15557] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 545.050815][T15561] netlink: 'syz.2.2643': attribute type 7 has an invalid length. [ 545.108613][T15561] team0: entered promiscuous mode [ 545.119492][T15561] bridge5: entered promiscuous mode [ 545.126779][T15568] netlink: 'syz.0.2646': attribute type 1 has an invalid length. [ 545.137370][T15561] vlan0: entered promiscuous mode [ 545.146499][T15561] bond0: entered promiscuous mode [ 545.152158][T15561] netdevsim netdevsim2 : entered promiscuous mode [ 545.171652][T15561] debugfs: 'hsr1' already exists in 'hsr' [ 545.183433][T15561] Cannot create hsr debugfs directory [ 545.189443][T15561] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 545.206158][T15561] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 545.224820][T15575] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 545.238424][T15561] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 545.291934][T15566] netlink: 'syz.3.2645': attribute type 12 has an invalid length. [ 545.428102][T15568] 8021q: adding VLAN 0 to HW filter on device bond15 [ 545.522696][T15574] bond15: entered allmulticast mode [ 545.613249][T15594] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 545.878045][T15600] netlink: 'syz.2.2650': attribute type 3 has an invalid length. [ 545.972598][T15608] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 546.216791][T15619] tls_set_device_offload_rx: netdev not found [ 546.508797][T15632] sctp: [Deprecated]: syz.4.2659 (pid 15632) Use of int in max_burst socket option deprecated. [ 546.508797][T15632] Use struct sctp_assoc_value instead [ 546.778617][ T5206] block nbd1: Connection timed out, retrying (0/2 alive) [ 546.788774][ T5206] block nbd1: Connection timed out, retrying (0/2 alive) [ 546.797234][ T5206] block nbd1: Connection timed out, retrying (0/2 alive) [ 546.804699][ T5206] block nbd1: Connection timed out, retrying (0/2 alive) [ 546.814703][ T11] block nbd1: Dead connection, failed to find a fallback [ 546.834734][ T11] block nbd1: shutting down sockets [ 546.842819][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.854901][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 546.866150][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.875635][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 546.884437][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.893700][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 546.901704][ T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.908007][T15642] syzkaller0: entered promiscuous mode [ 546.911157][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 546.918059][T15642] syzkaller0: entered allmulticast mode [ 546.933518][T14056] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.945741][T14056] Buffer I/O error on dev nbd1, logical block 0, async page read [ 546.954901][T14056] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.959643][T15672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 546.965748][T14056] Buffer I/O error on dev nbd1, logical block 1, async page read [ 546.981825][T14056] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.991155][T14056] Buffer I/O error on dev nbd1, logical block 2, async page read [ 547.000166][T14056] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.009778][T14056] Buffer I/O error on dev nbd1, logical block 3, async page read [ 547.018195][T14056] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.027527][T14056] Buffer I/O error on dev nbd1, logical block 0, async page read [ 547.036764][T14056] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.046781][T14056] Buffer I/O error on dev nbd1, logical block 1, async page read [ 547.070643][T14056] ldm_validate_partition_table(): Disk read failed. [ 547.081903][T14056] Dev nbd1: unable to read RDB block 0 [ 547.090131][T14056] nbd1: unable to read partition table [ 547.106437][T14056] ldm_validate_partition_table(): Disk read failed. [ 547.117061][T14056] Dev nbd1: unable to read RDB block 0 [ 547.125595][T15673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.138038][T14056] nbd1: unable to read partition table [ 550.301469][T15650] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 550.303744][T15657] chnl_net:caif_netlink_parms(): no params data found [ 550.378619][T15672] __nla_validate_parse: 17 callbacks suppressed [ 550.378645][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2666'. [ 550.420332][T15673] ip6tnl0: entered promiscuous mode [ 550.445241][T15673] ip6tnl0: left promiscuous mode [ 550.485201][T15680] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2669'. [ 550.617927][T15685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2671'. [ 550.666310][T15685] bond0: entered allmulticast mode [ 550.677761][T15685] netdevsim netdevsim2 : entered allmulticast mode [ 550.686564][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2672'. [ 550.701499][T15685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.712239][T15691] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2673'. [ 550.742994][T15685] netlink: 'syz.2.2671': attribute type 4 has an invalid length. [ 550.766505][T15693] netlink: 'syz.0.2674': attribute type 4 has an invalid length. [ 551.225636][T15722] netlink: 'syz.1.2684': attribute type 1 has an invalid length. [ 551.309672][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 551.432495][T15733] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 551.474242][T15733] bond9 (unregistering): Released all slaves [ 551.508713][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 552.517756][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 552.567416][T15795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 552.758876][T15810] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2711'. [ 553.143650][T15830] IPVS: Error connecting to the multicast addr [ 554.180312][T15887] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 554.218906][T15887] xt_TCPMSS: Only works on TCP SYN packets [ 554.412435][T15899] netlink: 'syz.1.2740': attribute type 5 has an invalid length. [ 554.741744][T15912] netlink: 'syz.3.2742': attribute type 6 has an invalid length. [ 554.768343][T15912] netlink: 'syz.3.2742': attribute type 5 has an invalid length. [ 555.449973][T15961] veth1_macvtap: renamed from veth0_vlan [ 555.552973][T15969] __nla_validate_parse: 9 callbacks suppressed [ 555.552994][T15969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2760'. [ 555.835565][T15983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2763'. [ 556.508031][T16017] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 556.804780][T16031] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2776'. [ 556.879828][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 557.269551][T16057] macvtap1: entered promiscuous mode [ 557.308215][T16057] macvtap1: entered allmulticast mode [ 557.357171][T16057] veth1_vlan: entered allmulticast mode [ 557.646327][T16073] team0: Device vlan0 failed to change mtu [ 557.868923][T16079] IPVS: Scheduler module ip_vs_sip not found [ 559.230030][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.249832][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.260078][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.276016][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.318771][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.359635][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 559.368158][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 559.381982][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 559.394958][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 559.411658][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 559.844926][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.928233][T16133] veth7: entered promiscuous mode [ 560.175897][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.488482][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 560.763707][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.044605][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.178969][T16174] x_tables: unsorted underflow at hook 3 [ 561.186383][T16174] netlink: 'syz.2.2814': attribute type 30 has an invalid length. [ 561.195865][T16167] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2812'. [ 561.265344][T16174] bond9: option arp_missed_max: invalid value (0) [ 561.277677][T16174] bond9: option arp_missed_max: allowed values 1 - 255 [ 561.290326][T16174] bond9 (unregistering): Released all slaves [ 561.495143][ T5843] Bluetooth: hci5: command tx timeout [ 561.683672][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'. [ 561.846144][T16181] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2815'. [ 561.878659][T16181] TCP: TCP_TX_DELAY enabled [ 561.897216][T16181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.392762][T16202] x_tables: duplicate underflow at hook 3 [ 562.399362][ T12] bond13: left allmulticast mode [ 562.414568][ T12] bond13: left promiscuous mode [ 562.437460][ T12] bridge11: port 1(bond13) entered disabled state [ 562.789788][ T12] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 562.816652][ T12] ip6gretap1 (unregistering): left allmulticast mode [ 563.226103][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 563.264857][ T12] bond8 (unregistering): (slave gretap3): Releasing active interface [ 563.417176][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.428102][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.568300][ T12] team0: Port device bridge6 removed [ 563.574232][ T5843] Bluetooth: hci5: command tx timeout [ 563.849140][ T12] bond0 (unregistering): Released all slaves [ 563.860509][ T12] bond1 (unregistering): Released all slaves [ 563.875517][ T12] bond2 (unregistering): Released all slaves [ 563.891407][ T12] bond3 (unregistering): Released all slaves [ 563.907912][ T12] bond4 (unregistering): Released all slaves [ 563.924590][ T12] bond5 (unregistering): Released all slaves [ 563.953549][ T12] bond6 (unregistering): Released all slaves [ 563.971504][ T12] bond7 (unregistering): Released all slaves [ 563.987315][ T12] bond8 (unregistering): Released all slaves [ 564.004363][ T12] bond9 (unregistering): (slave veth5): Releasing active interface [ 564.017369][ T12] bond9 (unregistering): Released all slaves [ 564.031890][ T12] bond10 (unregistering): Released all slaves [ 564.046331][ T12] bond11 (unregistering): Released all slaves [ 564.061530][ T12] bond12 (unregistering): Released all slaves [ 564.077160][ T12] bond13 (unregistering): Released all slaves [ 564.093153][ T12] bond14 (unregistering): Released all slaves [ 564.123467][ T12] bond15 (unregistering): Released all slaves [ 564.229679][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 564.293009][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 564.408890][T16234] 8021q: VLANs not supported on vcan0 [ 564.605401][T16242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2826'. [ 564.673702][ T12] : left promiscuous mode [ 565.032877][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 565.072796][T16120] chnl_net:caif_netlink_parms(): no params data found [ 565.081168][T16261] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2832'. [ 565.178219][T16261] vlan2: entered allmulticast mode [ 565.191726][T16261] erspan0: entered allmulticast mode [ 565.269648][ T12] 9: left promiscuous mode [ 565.289411][T16268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2834'. [ 565.404118][ T12] tipc: Left network mode [ 565.628497][T16120] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.664261][T16120] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.664480][ T5843] Bluetooth: hci5: command tx timeout [ 565.673342][T16120] bridge_slave_0: entered allmulticast mode [ 565.760813][T16292] x_tables: duplicate underflow at hook 2 [ 565.765643][T16294] x_tables: duplicate underflow at hook 2 [ 565.786240][T16120] bridge_slave_0: entered promiscuous mode [ 565.922184][T16120] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.971556][T16120] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.985043][T16120] bridge_slave_1: entered allmulticast mode [ 565.997541][T16304] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 566.018658][T16120] bridge_slave_1: entered promiscuous mode [ 566.185583][T16306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.238451][T16312] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2843'. [ 566.299201][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.318875][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.699041][T16120] team0: Port device team_slave_0 added [ 566.815870][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 566.878365][T16120] team0: Port device team_slave_1 added [ 566.969212][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 567.160584][T16344] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 567.211010][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2849'. [ 567.226216][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.244228][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.306827][T16361] sctp: [Deprecated]: syz.1.2853 (pid 16361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.306827][T16361] Use struct sctp_sack_info instead [ 567.312812][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.420725][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.452780][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.510304][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.735596][ T5843] Bluetooth: hci5: command tx timeout [ 567.903367][T16120] hsr_slave_0: entered promiscuous mode [ 567.937796][T16120] hsr_slave_1: entered promiscuous mode [ 567.957812][T16120] debugfs: 'hsr0' already exists in 'hsr' [ 567.981560][T16120] Cannot create hsr debugfs directory [ 568.360067][T16400] x_tables: unsorted underflow at hook 2 [ 568.443912][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.452108][ C1] lec:lec_tx_timeout: lec0 [ 568.681703][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 568.753084][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 568.910064][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 569.015819][T16430] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 569.084366][T16430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.246538][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 569.271963][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 569.285062][T16438] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2871'. [ 569.307291][ T12] hsr_slave_0: left promiscuous mode [ 569.317452][ T12] hsr_slave_1: left promiscuous mode [ 569.330789][ T12] veth1_macvtap: left promiscuous mode [ 569.339795][ T12] veth0_macvtap: left promiscuous mode [ 569.345812][ T12] veth1_vlan: left promiscuous mode [ 569.901902][T16445] veth0_macvtap: left promiscuous mode [ 570.006244][T16447] veth0: entered promiscuous mode [ 570.013225][T16451] veth0: left promiscuous mode [ 570.019424][T16456] xt_HMARK: spi-set and port-set can't be combined [ 570.281648][T16460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2876'. [ 570.366573][T16467] lo: left promiscuous mode [ 570.392673][T16467] tunl0: left promiscuous mode [ 570.418286][T16467] gre0: left promiscuous mode [ 570.452294][T16467] gretap0: left promiscuous mode [ 570.483981][T16467] erspan0: left promiscuous mode [ 570.532384][T16467] ip_vti0: left promiscuous mode [ 570.555707][T16467] bond_slave_0: left promiscuous mode [ 570.584676][T16467] veth1_vlan: left allmulticast mode [ 570.632827][T16467] geneve2: left promiscuous mode [ 570.680697][T16467] bond3: left promiscuous mode [ 570.707481][T16467] bridge6: left promiscuous mode [ 570.769598][T16467] vlan3: left promiscuous mode [ 570.775922][T16467] bond8: left promiscuous mode [ 570.780945][T16467] gretap3: left promiscuous mode [ 570.791437][T16467] team1: left promiscuous mode [ 570.798396][T16467] vxcan5: left promiscuous mode [ 570.818614][T16467] bond10: left promiscuous mode [ 570.839569][T16467] bond13: left promiscuous mode [ 570.846900][T16467] gretap4: left promiscuous mode [ 571.008973][ T1094] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.030629][ T1094] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 571.183434][ T1094] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.200035][ T1094] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 571.219317][T16499] netlink: 'syz.4.2881': attribute type 3 has an invalid length. [ 571.227596][ T1094] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.237694][ T1094] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 571.262835][T16499] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 571.393874][ T1094] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.405466][ T1094] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 571.558179][ T12] IPVS: stop unused estimator thread 0... [ 571.889875][T16523] syzkaller0: entered promiscuous mode [ 571.913211][T16523] syzkaller0: entered allmulticast mode [ 571.990124][T16523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2885'. [ 572.125564][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 572.219147][T16538] xfrm1: entered promiscuous mode [ 572.229075][T16538] xfrm1: entered allmulticast mode [ 572.742190][T16555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2891'. [ 573.012462][T16563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2892'. [ 573.027798][T16563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2892'. [ 576.199002][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 576.261286][T16567] syzkaller0: entered promiscuous mode [ 576.282513][T16567] syzkaller0: entered allmulticast mode [ 576.447652][T16580] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 576.585665][T16120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 576.660013][T16120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.704831][T16120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 576.736967][T16120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.757979][T16120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 576.780769][T16120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.800747][T16120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 576.817611][T16120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.722547][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 580.736244][T16120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.755538][T16662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 580.765724][T16664] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2910'. [ 580.819821][T16120] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.876442][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.883856][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.962711][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.970290][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.746807][T16713] netlink: 'syz.2.2923': attribute type 21 has an invalid length. [ 581.764615][T16715] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2922'. [ 581.778984][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2923'. [ 581.925602][T16120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.031304][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 582.212189][T16735] x_tables: duplicate underflow at hook 3 [ 582.384578][T16120] veth0_vlan: entered promiscuous mode [ 582.449615][T16745] netlink: 192788 bytes leftover after parsing attributes in process `syz.2.2930'. [ 582.605706][T16120] veth1_vlan: entered promiscuous mode [ 582.758766][T16120] veth0_macvtap: entered promiscuous mode [ 582.820865][T16759] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2934'. [ 582.832747][T16120] veth1_macvtap: entered promiscuous mode [ 582.906833][T16120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.910508][T16767] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2937'. [ 582.969723][T16120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.033157][ T1094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.057817][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 583.067782][T14639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.179701][T16773] bond6: entered promiscuous mode [ 583.188116][T16773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.201172][T14639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.212373][T14639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.505755][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.523520][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.726366][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.775391][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.243236][T16813] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 584.243482][T16807] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 584.479112][T16838] bond14 (unregistering): Released all slaves [ 584.656216][T16855] ipt_REJECT: TCP_RESET invalid for non-tcp [ 585.324610][T16881] netlink: 'syz.2.2958': attribute type 2 has an invalid length. [ 585.739428][T16906] tipc: Started in network mode [ 585.756828][T16906] tipc: Node identity 5e2ffcdf5a2e, cluster identity 4711 [ 585.784123][T16906] tipc: Enabled bearer , priority 0 [ 585.877613][T16915] __nla_validate_parse: 4 callbacks suppressed [ 585.877636][T16915] netlink: 10356 bytes leftover after parsing attributes in process `syz.0.2967'. [ 586.068250][T16910] syzkaller0: entered promiscuous mode [ 586.094061][T16910] syzkaller0: entered allmulticast mode [ 586.129712][T16910] tipc: Resetting bearer [ 586.217608][T16905] tipc: Resetting bearer [ 586.368872][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.385946][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.401495][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.421932][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.431443][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.538928][ T5832] Bluetooth: hci0: command tx timeout [ 590.055405][T16905] tipc: Disabling bearer [ 590.089837][ T8537] tipc: Node number set to 67239135 [ 590.273655][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2973'. [ 590.285986][T16979] netlink: 'syz.3.2973': attribute type 5 has an invalid length. [ 590.299531][T16979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2973'. [ 590.416153][T16979] geneve2: entered promiscuous mode [ 590.429734][T16979] geneve2: entered allmulticast mode [ 590.447885][ T1094] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 590.491561][ T1094] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 590.611129][ T1094] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 590.621215][ T5832] Bluetooth: hci0: command tx timeout [ 590.623357][T16994] netlink: 'syz.4.2978': attribute type 32 has an invalid length. [ 590.627712][ T1094] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 590.649879][T16987] syzkaller0: entered promiscuous mode [ 590.664389][T16987] syzkaller0: entered allmulticast mode [ 590.700872][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 590.734007][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 590.754750][T16986] tipc: Enabled bearer , priority 0 [ 590.868149][T17006] xt_l2tp: invalid flags combination: 0 [ 591.188945][T16980] tipc: Resetting bearer [ 591.253117][T16980] tipc: Disabling bearer [ 591.781653][ T12] bridge_slave_0: left allmulticast mode [ 591.810866][ T12] bridge_slave_0: left promiscuous mode [ 591.833679][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.901902][ T12] dvmrp0: left allmulticast mode [ 591.909182][ T12] vlan1: left allmulticast mode [ 591.923675][ T12] veth0_vlan: left allmulticast mode [ 591.929874][ T12] pimreg1: left allmulticast mode [ 591.947306][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'. [ 591.957752][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'. [ 592.061475][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 592.172463][ T12] bond7 (unregistering): (slave gretap2): Releasing active interface [ 592.200561][ T12] bond8 (unregistering): (slave gretap3): Releasing active interface [ 592.208771][ T12] gretap3 (unregistering): left allmulticast mode [ 592.223362][ T12] batman_adv: batadv0: Removing interface: gretap4 [ 592.468714][ T12] bond2 (unregistering): (slave bridge4): Releasing active interface [ 592.638703][ T12] bond6 (unregistering): (slave bridge8): Releasing active interface [ 592.694291][ T5832] Bluetooth: hci0: command tx timeout [ 592.823056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.833259][ T12] bond_slave_0: left allmulticast mode [ 592.840247][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.850596][ T12] bond_slave_1: left allmulticast mode [ 592.860139][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 592.870181][ T12] bridge_slave_1: left allmulticast mode [ 592.876522][ T12] bond0 (unregistering): Released all slaves [ 592.888470][ T12] bond1 (unregistering): Released all slaves [ 592.902612][ T12] bond2 (unregistering): Released all slaves [ 592.917483][ T12] bond3 (unregistering): Released all slaves [ 592.932765][ T12] bond4 (unregistering): Released all slaves [ 592.951892][ T12] bond5 (unregistering): (slave lo): Releasing backup interface [ 592.962033][ T12] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 592.975904][ T12] bond5 (unregistering): Released all slaves [ 592.990904][ T12] bond6 (unregistering): Released all slaves [ 593.005361][ T12] bond7 (unregistering): Released all slaves [ 593.024510][ T12] bond8 (unregistering): Released all slaves [ 593.049838][ T12] bond9 (unregistering): Released all slaves [ 593.065243][ T12] bond10 (unregistering): Released all slaves [ 593.079613][ T12] bond11 (unregistering): Released all slaves [ 593.094450][ T12] bond12 (unregistering): Released all slaves [ 593.110233][ T12] bond13 (unregistering): Released all slaves [ 593.130593][T17024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.240604][T17057] netlink: 'syz.3.2991': attribute type 1 has an invalid length. [ 593.264399][T17057] netlink: 'syz.3.2991': attribute type 2 has an invalid length. [ 593.615158][ T12] : left promiscuous mode [ 593.747901][T17083] openvswitch: netlink: IP tunnel dst address not specified [ 593.822939][T16935] chnl_net:caif_netlink_parms(): no params data found [ 593.945996][ T12] tipc: Disabling bearer [ 593.961596][ T12] tipc: Left network mode [ 593.961885][T17072] syzkaller1: entered promiscuous mode [ 594.015524][T17072] syzkaller1: entered allmulticast mode [ 594.303684][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.777075][ T5832] Bluetooth: hci0: command tx timeout [ 594.803741][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.811226][T16935] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.819285][T16935] bridge_slave_0: entered allmulticast mode [ 594.829498][T16935] bridge_slave_0: entered promiscuous mode [ 594.887970][T17126] h: entered promiscuous mode [ 594.939202][T16935] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.978694][T16935] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.995658][T16935] bridge_slave_1: entered allmulticast mode [ 595.028933][T16935] bridge_slave_1: entered promiscuous mode [ 595.112641][T17137] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 595.146742][T17137] netlink: 'syz.4.3013': attribute type 2 has an invalid length. [ 595.278311][T17144] bridge_slave_0: left allmulticast mode [ 595.320856][T17144] bridge_slave_0: left promiscuous mode [ 595.337704][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.359668][T17144] bridge_slave_1: left allmulticast mode [ 595.368755][T17144] bridge_slave_1: left promiscuous mode [ 595.376172][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.382076][T17156] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.401285][T17144] bond0: (slave bond_slave_0): Releasing backup interface [ 595.430047][T17144] bond0: (slave bond_slave_1): Releasing backup interface [ 595.452683][T17144] team0: Port device team_slave_0 removed [ 595.480338][T17144] team0: Port device team_slave_1 removed [ 595.488253][T17144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.497836][T17144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.509930][T17144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.519370][T17144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.529561][T17144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.548584][T17147] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 595.560468][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.567433][T17147] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 595.667504][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 595.675048][T17156] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 595.675999][T10538] lec:lec_start_xmit: lec0:No lecd attached [ 595.709154][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.854694][T16935] team0: Port device team_slave_0 added [ 595.865170][T16935] team0: Port device team_slave_1 added [ 595.995058][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.002646][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.029909][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.051098][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.062220][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.089476][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.113555][ T12] hsr_slave_0: left promiscuous mode [ 596.127466][ T12] hsr_slave_1: left promiscuous mode [ 596.136979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.480954][ T12] team0 (unregistering): Port device team_slave_1 removed [ 596.504414][ T12] team0 (unregistering): Port device team_slave_0 removed [ 596.748672][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 596.782765][T16935] hsr_slave_0: entered promiscuous mode [ 596.790275][T16935] hsr_slave_1: entered promiscuous mode [ 597.170092][ T12] IPVS: stop unused estimator thread 0... [ 597.719803][T16935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 597.734738][T16935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.744443][T16935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 597.756394][T16935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.766567][T16935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 597.782649][T16935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.791434][T16935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.805005][T16935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.917943][T16935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.948137][T16935] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.963646][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.971056][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.999515][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.007293][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.324698][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.403233][T16935] veth0_vlan: entered promiscuous mode [ 598.419906][T16935] veth1_vlan: entered promiscuous mode [ 598.475635][T16935] veth0_macvtap: entered promiscuous mode [ 598.491040][T16935] veth1_macvtap: entered promiscuous mode [ 598.518560][T16935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.547694][T16935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.568158][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.587140][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.606623][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.631178][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.728924][T14642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.742759][T14642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.794579][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.804388][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.334072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 601.342121][ C1] lec:lec_tx_timeout: lec0 [ 619.664228][T17273] tipc: Enabling of bearer rejected, failed to enable media [ 619.713591][T17276] Dead loop on virtual device ip6_vti0 (net 301), fix it urgently! [ 619.810144][T17281] netlink: 'syz.1.3025': attribute type 5 has an invalid length. [ 619.933312][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 619.959108][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 619.970517][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 619.982538][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 619.991988][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.148049][T17290] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3028'. [ 620.460352][T17296] sctp: [Deprecated]: syz.4.3031 (pid 17296) Use of int in max_burst socket option. [ 620.460352][T17296] Use struct sctp_assoc_value instead [ 620.586597][T17302] netlink: 'syz.0.3032': attribute type 23 has an invalid length. [ 620.603093][T17303] netlink: 'syz.0.3032': attribute type 23 has an invalid length. [ 621.445582][T14642] bond0: (slave ): Releasing backup interface [ 621.507549][T14642] netdevsim netdevsim2  (unregistering): left promiscuous mode [ 621.528693][T14642] netdevsim netdevsim2  (unregistering): left allmulticast mode [ 621.803030][T17283] chnl_net:caif_netlink_parms(): no params data found [ 621.866728][T17329] nbd2: detected capacity change from 0 to 63 [ 621.900119][ T5843] block nbd2: Receive control failed (result -104) [ 621.909971][ T5832] block nbd2: Receive control failed (result -32) [ 621.910644][T17285] block nbd2: Send control failed (result -32) [ 621.963166][T17285] block nbd2: Request send failed, requeueing [ 622.006213][ T1620] block nbd2: Dead connection, failed to find a fallback [ 622.015478][ T1620] block nbd2: shutting down sockets [ 622.022295][ T1620] blk_print_req_error: 138 callbacks suppressed [ 622.022315][ T1620] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 622.040051][ T1620] buffer_io_error: 138 callbacks suppressed [ 622.040071][ T1620] Buffer I/O error on dev nbd2, logical block 3, async page read [ 622.054969][ T5832] Bluetooth: hci2: command tx timeout [ 622.276492][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 622.290646][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3045'. [ 622.300852][T17354] netlink: 'syz.1.3045': attribute type 14 has an invalid length. [ 622.309983][T17354] netlink: 'syz.1.3045': attribute type 13 has an invalid length. [ 622.346694][T17364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.533409][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.541029][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.552371][T17283] bridge_slave_0: entered allmulticast mode [ 622.560782][T17283] bridge_slave_0: entered promiscuous mode [ 622.608313][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 622.669354][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.685518][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.703184][T17283] bridge_slave_1: entered allmulticast mode [ 622.721218][T17283] bridge_slave_1: entered promiscuous mode [ 622.853385][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 622.931495][T17283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.944101][ T1094] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.964326][ T1094] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.984767][T17391] syzkaller0: entered promiscuous mode [ 622.993886][T17391] syzkaller0: entered allmulticast mode [ 623.105672][T17283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.170195][ T1094] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.191787][T14642] bond3: left allmulticast mode [ 623.197075][T14642] bond3: left promiscuous mode [ 623.202263][T14642] bridge0: port 3(bond3) entered disabled state [ 623.256198][T17384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.475356][T17425] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3059'. [ 624.018179][T14642] bridge5 (unregistering): left promiscuous mode [ 624.026220][T14642] team0: Port device bridge5 removed [ 624.134465][ T5832] Bluetooth: hci2: command tx timeout [ 624.150375][T14642] bond0 (unregistering): Released all slaves [ 624.163548][T14642] bond1 (unregistering): (slave veth3): Releasing active interface [ 624.172809][T14642] bond1 (unregistering): Released all slaves [ 624.190787][T14642] bond2 (unregistering): Released all slaves [ 624.210368][T14642] bond3 (unregistering): Released all slaves [ 624.228043][T14642] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 624.238718][T14642] bond4 (unregistering): (slave vxcan5): Releasing backup interface [ 624.247674][T14642] bond4 (unregistering): Released all slaves [ 624.281298][T14642] bond5 (unregistering): Released all slaves [ 624.307117][T14642] bond6 (unregistering): Released all slaves [ 624.333051][T14642] bond7 (unregistering): Released all slaves [ 624.349679][T14642] bond8 (unregistering): Released all slaves [ 624.378725][ T1094] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.398758][T17419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.553239][T17283] team0: Port device team_slave_0 added [ 624.589248][T17283] team0: Port device team_slave_1 added [ 624.614014][T14642] tipc: Left network mode [ 624.782817][T17283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.790316][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.819112][T17283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.861640][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.872116][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 624.917154][T17451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.965539][T17283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.988096][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.121206][T17283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.322336][T17460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3066'. [ 625.647048][T17480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3071'. [ 625.670033][T17481] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 625.715575][T17481] netlink: 'syz.0.3070': attribute type 4 has an invalid length. [ 625.760672][T17481] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.3070'. [ 625.766097][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 625.913338][T17283] hsr_slave_0: entered promiscuous mode [ 625.938751][T17283] hsr_slave_1: entered promiscuous mode [ 625.968312][T17283] debugfs: 'hsr0' already exists in 'hsr' [ 625.983413][T17283] Cannot create hsr debugfs directory [ 626.043868][T17484] hsr_slave_0 (unregistering): left promiscuous mode [ 626.211366][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 626.293898][ T5832] Bluetooth: hci2: command tx timeout [ 626.390439][T17495] nbd3: detected capacity change from 0 to 63 [ 626.410151][ T5832] block nbd3: Receive control failed (result -32) [ 626.425015][ T5843] block nbd3: Receive control failed (result -32) [ 626.450624][T17357] block nbd3: Dead connection, failed to find a fallback [ 626.479975][T17357] block nbd3: shutting down sockets [ 626.493944][T17357] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.521097][T17357] Buffer I/O error on dev nbd3, logical block 0, async page read [ 626.538925][T17357] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.569568][T17357] Buffer I/O error on dev nbd3, logical block 1, async page read [ 626.591339][T17357] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.632380][T17357] Buffer I/O error on dev nbd3, logical block 2, async page read [ 626.668056][T17357] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.712820][T17357] Buffer I/O error on dev nbd3, logical block 3, async page read [ 626.739933][T17357] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.749890][T17511] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 626.803535][T17357] Buffer I/O error on dev nbd3, logical block 0, async page read [ 626.836487][T17357] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.867843][T17357] Buffer I/O error on dev nbd3, logical block 1, async page read [ 626.879210][T17511] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 626.882939][T17513] mac80211_hwsim hwsim28 ÿ: renamed from wlan1 (while UP) [ 626.914044][T17357] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.936824][T17357] Buffer I/O error on dev nbd3, logical block 2, async page read [ 626.965879][T17357] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.988996][T17357] Buffer I/O error on dev nbd3, logical block 3, async page read [ 627.019033][T17357] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.062462][T17357] Buffer I/O error on dev nbd3, logical block 0, async page read [ 627.113263][T17357] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.152518][T17357] Buffer I/O error on dev nbd3, logical block 1, async page read [ 627.200324][T17357] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.229375][T17357] Buffer I/O error on dev nbd3, logical block 2, async page read [ 627.250568][T17357] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.277650][T17357] Buffer I/O error on dev nbd3, logical block 3, async page read [ 627.286434][T17357] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.301958][T17357] Buffer I/O error on dev nbd3, logical block 0, async page read [ 627.310999][T17357] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.322448][T17357] Buffer I/O error on dev nbd3, logical block 1, async page read [ 627.349864][T17521] C: renamed from lo [ 627.354882][T17357] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.365287][T17357] Buffer I/O error on dev nbd3, logical block 2, async page read [ 627.373357][T17357] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.390307][T17521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 627.423175][T17357] Buffer I/O error on dev nbd3, logical block 3, async page read [ 627.464387][T17357] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.496028][T17534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3083'. [ 627.517721][T17357] Buffer I/O error on dev nbd3, logical block 0, async page read [ 627.523109][T17534] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3083'. [ 627.541508][T14642] team0: left promiscuous mode [ 627.556645][T14642] vlan0: left promiscuous mode [ 627.567278][T17357] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.582284][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 627.608830][T17357] Buffer I/O error on dev nbd3, logical block 1, async page read [ 627.638196][T14642] hsr_slave_0: left promiscuous mode [ 627.654682][T17357] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 627.706032][T17357] ldm_validate_partition_table(): Disk read failed. [ 627.722719][T17545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3086'. [ 627.748963][T17357] Dev nbd3: unable to read RDB block 0 [ 627.751437][T17546] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 627.789726][T17357] nbd3: unable to read partition table [ 627.866376][T17357] ldm_validate_partition_table(): Disk read failed. [ 627.899762][T17357] Dev nbd3: unable to read RDB block 0 [ 627.910938][T17357] nbd3: unable to read partition table [ 628.241609][T14642] team0 (unregistering): Port device vlan0 removed [ 628.383949][ T5843] Bluetooth: hci2: command tx timeout [ 629.019258][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 629.780901][T14642] IPVS: stop unused estimator thread 0... [ 630.277310][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 630.295121][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 630.373851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 630.382443][ C1] lec:lec_tx_timeout: lec0 [ 630.421046][T17640] syzkaller1: entered promiscuous mode [ 630.444221][T17640] syzkaller1: entered allmulticast mode [ 630.515570][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3108'. [ 630.537232][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3108'. [ 630.827301][T17662] bond7: option all_slaves_active: invalid value (10) [ 630.849480][T17662] bond7 (unregistering): Released all slaves [ 630.929360][T17283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.022324][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.045453][T17283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.062319][T17680] netlink: 'syz.1.3114': attribute type 83 has an invalid length. [ 631.079032][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.096447][T17283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.112938][T17681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 631.152317][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.176830][T17283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 631.228152][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.670781][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.702435][T17699] syzkaller1: entered promiscuous mode [ 631.716963][T17699] syzkaller1: entered allmulticast mode [ 631.873663][T17723] syz.1.3121: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 631.937024][T17723] CPU: 0 UID: 0 PID: 17723 Comm: syz.1.3121 Not tainted syzkaller #0 PREEMPT(full) [ 631.937055][T17723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 631.937067][T17723] Call Trace: [ 631.937076][T17723] [ 631.937086][T17723] dump_stack_lvl+0xe8/0x150 [ 631.937123][T17723] warn_alloc+0x249/0x340 [ 631.937156][T17723] ? stack_trace_save+0xa9/0x100 [ 631.937182][T17723] ? __pfx_warn_alloc+0x10/0x10 [ 631.937219][T17723] ? kasan_save_track+0x4f/0x80 [ 631.937247][T17723] ? kasan_save_track+0x3e/0x80 [ 631.937272][T17723] ? __kasan_kmalloc+0x93/0xb0 [ 631.937290][T17723] ? __kmalloc_cache_noprof+0x31c/0x660 [ 631.937318][T17723] ? xskq_create+0x56/0x170 [ 631.937338][T17723] ? xsk_setsockopt+0x54c/0x990 [ 631.937355][T17723] ? do_sock_setsockopt+0x17c/0x1b0 [ 631.937383][T17723] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 631.937428][T17723] ? do_syscall_64+0x15f/0xf80 [ 631.937456][T17723] __vmalloc_node_range_noprof+0x132/0x1730 [ 631.937523][T17723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 631.937560][T17723] ? __kasan_kmalloc+0x93/0xb0 [ 631.937594][T17723] vmalloc_user_noprof+0xad/0xe0 [ 631.937623][T17723] ? xskq_create+0xbf/0x170 [ 631.937646][T17723] xskq_create+0xbf/0x170 [ 631.937670][T17723] xsk_init_queue+0x8a/0xe0 [ 631.937695][T17723] xsk_setsockopt+0x54c/0x990 [ 631.937719][T17723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 631.937739][T17723] ? __pfx_aa_sk_perm+0x10/0x10 [ 631.937771][T17723] ? aa_sock_opt_perm+0xff/0x1a0 [ 631.937801][T17723] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 631.937830][T17723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 631.937852][T17723] do_sock_setsockopt+0x17c/0x1b0 [ 631.937887][T17723] __x64_sys_setsockopt+0x13d/0x1b0 [ 631.937919][T17723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.937942][T17723] do_syscall_64+0x15f/0xf80 [ 631.937965][T17723] ? trace_irq_disable+0x3b/0x140 [ 631.937988][T17723] ? clear_bhb_loop+0x40/0x90 [ 631.938013][T17723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.938034][T17723] RIP: 0033:0x7fa8efd9c819 [ 631.938054][T17723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.938071][T17723] RSP: 002b:00007fa8f0cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 631.938094][T17723] RAX: ffffffffffffffda RBX: 00007fa8f0015fa0 RCX: 00007fa8efd9c819 [ 631.938109][T17723] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 631.938122][T17723] RBP: 00007fa8efe32c91 R08: 0000000000000004 R09: 0000000000000000 [ 631.938134][T17723] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.938146][T17723] R13: 00007fa8f0016038 R14: 00007fa8f0015fa0 R15: 00007ffed4521938 [ 631.938182][T17723] [ 631.938190][T17723] Mem-Info: [ 631.938907][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.000042][T17723] active_anon:6246 inactive_anon:0 isolated_anon:0 [ 632.000042][T17723] active_file:2889 inactive_file:40452 isolated_file:0 [ 632.000042][T17723] unevictable:768 dirty:49 writeback:0 [ 632.000042][T17723] slab_reclaimable:11219 slab_unreclaimable:102226 [ 632.000042][T17723] mapped:29520 shmem:1364 pagetables:1509 [ 632.000042][T17723] sec_pagetables:0 bounce:0 [ 632.000042][T17723] kernel_misc_reclaimable:0 [ 632.000042][T17723] free:1319326 free_pcp:10362 free_cma:0 [ 632.008291][T17725] netlink: 'syz.1.3121': attribute type 9 has an invalid length. [ 632.074952][T17723] Node 0 active_anon:24784kB inactive_anon:0kB active_file:11556kB inactive_file:161604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118080kB dirty:192kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12880kB pagetables:5912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 632.120284][T17283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.204983][T17723] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 632.211323][T17283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.288530][T17723] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.407934][T17723] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 632.464854][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.472222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.488236][T17723] Node 0 DMA32 free:1314584kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24892kB inactive_anon:0kB active_file:11556kB inactive_file:161612kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:41496kB local_pcp:21176kB free_cma:0kB [ 632.500841][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.529086][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.590927][T17723] lowmem_reserve[]: 0 0 0 0 0 [ 632.597075][T17723] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 632.656224][T17723] lowmem_reserve[]: 0 0 0 0 0 [ 632.662605][T17723] Node 1 Normal free:3947572kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 632.714493][T17723] lowmem_reserve[]: 0 0 0 0 0 [ 632.727430][T17723] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 632.732058][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3126'. [ 632.772335][T17723] Node 0 DMA32: 7966*4kB (UME) 4802*8kB (UM) 2468*16kB (UME) 569*32kB (UME) 674*64kB (UME) 768*128kB (UME) 691*256kB (UM) 436*512kB (UME) 253*1024kB (UE) 118*2048kB (UM) 35*4096kB (UM) = 1313640kB [ 632.845447][T17723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 632.899951][T17723] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 6*16kB (UM) 4*32kB (UM) 3*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947572kB [ 632.957640][T17723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.982017][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 632.996428][T17723] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.036540][T17723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.039030][T17751] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3127'. [ 633.072139][T17723] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.108091][T17723] 44706 total pagecache pages [ 633.132573][T17723] 0 pages in swap cache [ 633.145440][T17723] Free swap = 124996kB [ 633.152714][T17723] Total swap = 124996kB [ 633.173973][T17723] 2097051 pages RAM [ 633.179885][T17723] 0 pages HighMem/MovableOnly [ 633.194886][T17723] 427401 pages reserved [ 633.214694][T17723] 0 pages cma reserved [ 633.327222][T17761] tipc: Enabled bearer , priority 0 [ 633.533270][T17761] syzkaller0: entered promiscuous mode [ 633.544720][T17761] syzkaller0: entered allmulticast mode [ 633.572898][T17761] tipc: Resetting bearer [ 633.706962][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3135'. [ 633.774863][ T12] tipc: Resetting bearer [ 633.791959][T17759] tipc: Resetting bearer [ 633.987372][T17797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.371740][T17759] tipc: Disabling bearer [ 637.411570][T17283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.679269][T17824] netlink: 'syz.4.3147': attribute type 1 has an invalid length. [ 637.688979][T17283] veth0_vlan: entered promiscuous mode [ 637.711096][T17283] veth1_vlan: entered promiscuous mode [ 637.918939][T17837] SET target dimension over the limit! [ 637.926103][T17837] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3151'. [ 638.403077][T17283] veth0_macvtap: entered promiscuous mode [ 638.532751][T17283] veth1_macvtap: entered promiscuous mode [ 638.639854][T17283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.668347][T17873] rpfilter_check: 55 callbacks suppressed [ 638.668370][T17873] ip6t_rpfilter: unknown options [ 638.688815][T17283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.743395][T17875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3158'. [ 638.766401][T17875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3158'. [ 638.832843][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.863113][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.912482][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.978489][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.004537][T17888] nbd: nbd1 already in use [ 639.069494][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 639.086039][T17888] nbd: nbd1 already in use [ 639.330299][T17903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3166'. [ 639.381536][T17905] IPv6: sit3: Disabled Multicast RS [ 639.391284][T17905] sit3: entered allmulticast mode [ 639.438019][T14642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.460653][T14642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.542783][T17911] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 639.630397][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.665671][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.872876][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 639.909791][T17933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'. [ 640.044664][T17939] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 640.183634][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.203389][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.210459][T17939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.225392][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.243563][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.253175][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.274874][T17941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.311353][T17941] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 640.361137][T17941] bond1: (slave vcan1): Error -95 calling set_mac_address [ 640.467366][T17944] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 640.501297][T17950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3178'. [ 640.524274][T17950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3178'. [ 640.852942][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 640.964959][T17962] netlink: 'syz.0.3182': attribute type 29 has an invalid length. [ 640.994500][T17962] netlink: 'syz.0.3182': attribute type 29 has an invalid length. [ 641.109250][T17962] nbd: must specify at least one socket [ 641.114227][T17955] IPVS: Scheduler module ip_vs_sip not found [ 641.196327][T17967] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 641.325876][T17967] veth0_vlan: left promiscuous mode [ 641.379901][T17967] veth0_vlan: entered promiscuous mode [ 641.421909][T17967] team0: Device veth0_vlan failed to register rx_handler [ 642.296266][ T5832] Bluetooth: hci4: command tx timeout [ 642.442700][T17945] chnl_net:caif_netlink_parms(): no params data found [ 642.666788][T18041] bridge: RTM_NEWNEIGH with invalid ether address [ 642.682408][T18042] netlink: 'syz.0.3202': attribute type 5 has an invalid length. [ 642.752366][T18041] bridge: RTM_NEWNEIGH with invalid ether address [ 642.980454][T17945] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.985875][T18055] __nla_validate_parse: 11 callbacks suppressed [ 642.985893][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 642.991595][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 643.013735][T17945] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.022851][T17945] bridge_slave_0: entered allmulticast mode [ 643.047433][T17945] bridge_slave_0: entered promiscuous mode [ 643.077853][T17945] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.103590][T17945] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.125030][T17945] bridge_slave_1: entered allmulticast mode [ 643.138320][T18061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.161383][T17945] bridge_slave_1: entered promiscuous mode [ 643.185501][T18063] can: request_module (can-proto-5) failed. [ 643.199383][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'. [ 643.211627][T18067] netlink: 'syz.0.3209': attribute type 5 has an invalid length. [ 643.231976][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3209'. [ 643.314706][T18060] bridge_slave_0: invalid flags given to default FDB implementation [ 643.473593][T17945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.532700][T17945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.721926][T17945] team0: Port device team_slave_0 added [ 643.795463][T17945] team0: Port device team_slave_1 added [ 643.808144][T18100] openvswitch: netlink: Flow key attribute not present in set flow. [ 643.984395][T17945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.999029][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.030731][T17945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.074133][T18104] syzkaller0: entered promiscuous mode [ 644.084913][T18104] syzkaller0: entered allmulticast mode [ 644.116312][T17945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.139445][T17945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.219897][T17945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.374105][ T5832] Bluetooth: hci4: command tx timeout [ 644.551150][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 644.595809][T17945] hsr_slave_0: entered promiscuous mode [ 644.608324][T17945] hsr_slave_1: entered promiscuous mode [ 644.623334][T17945] debugfs: 'hsr0' already exists in 'hsr' [ 644.632623][T17945] Cannot create hsr debugfs directory [ 644.698538][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3223'. [ 644.709355][ T6145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.735465][ T6145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.780404][ T6145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.797663][ T6145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.972111][T18139] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 645.008766][T18141] Bluetooth: MGMT ver 1.23 [ 645.050215][T18141] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3229'. [ 645.445096][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3233'. [ 645.788861][T18165] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3237'. [ 645.837958][T18169] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3237'. [ 645.858692][T17945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.905006][T17945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.926056][T17945] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 646.050055][T18171] netlink: 'syz.4.3239': attribute type 2 has an invalid length. [ 646.229168][T17945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.262247][T17945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.308426][T17945] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 646.365160][T18180] netlink: 'syz.1.3241': attribute type 10 has an invalid length. [ 646.465627][ T5832] Bluetooth: hci4: command tx timeout [ 646.546779][T17945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.603868][T17945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.637833][T17945] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 646.880464][T17945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.896001][T18209] xt_cgroup: xt_cgroup: no path or classid specified [ 646.939757][T17945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.981529][T17945] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 647.094195][ T5832] Bluetooth: hci0: command tx timeout [ 647.118628][T18211] pim6reg: entered allmulticast mode [ 647.146568][T18211] netlink: 'syz.2.3247': attribute type 2 has an invalid length. [ 647.158664][T18214] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 647.187167][T18214] syzkaller0: entered promiscuous mode [ 647.205177][T18214] syzkaller0: entered allmulticast mode [ 647.209270][T18216] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 647.251508][T18217] netlink: 'syz.4.3249': attribute type 11 has an invalid length. [ 647.504047][T18220] xt_ipcomp: unknown flags 1D [ 647.702239][T17945] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.731630][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.751479][T17945] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.781912][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.810563][T17945] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.861160][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.891372][T17945] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 647.931391][T17945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.254909][T17945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.300570][T17945] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.334531][T14642] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.342120][T14642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.386856][T14642] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.394336][T14642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.535563][ T5832] Bluetooth: hci4: command tx timeout [ 648.873609][T17945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.890195][T18279] netlink: 'syz.2.3261': attribute type 11 has an invalid length. [ 648.898780][T18279] __nla_validate_parse: 4 callbacks suppressed [ 648.898799][T18279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3261'. [ 648.944843][T17945] veth0_vlan: entered promiscuous mode [ 648.962923][T17945] veth1_vlan: entered promiscuous mode [ 648.994539][T17945] veth0_macvtap: entered promiscuous mode [ 649.007153][T17945] veth1_macvtap: entered promiscuous mode [ 649.031794][T17945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.051976][T17945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.067412][ T6145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.079852][ T6145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.095770][ T6145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.105223][ T6145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.310481][T18282] x_tables: duplicate underflow at hook 3 [ 650.460564][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.330785][T18256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.537608][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.569594][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.182957][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.217588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.381675][ T1620] block nbd2: Connection timed out, retrying (0/2 alive) [ 652.390350][ T1620] block nbd2: Connection timed out, retrying (0/2 alive) [ 652.399205][ T1620] block nbd2: Connection timed out, retrying (0/2 alive) [ 652.406684][ T1620] blk_print_req_error: 129 callbacks suppressed [ 652.406705][ T1620] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.424589][ T1620] buffer_io_error: 130 callbacks suppressed [ 652.424610][ T1620] Buffer I/O error on dev nbd2, logical block 2, async page read [ 652.439086][ T1620] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.448600][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 652.457236][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.466493][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 652.475174][T17285] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.493984][T17285] Buffer I/O error on dev nbd2, logical block 0, async page read [ 652.514050][T17285] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.567847][T17285] Buffer I/O error on dev nbd2, logical block 1, async page read [ 652.606619][T17285] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.616016][T17285] Buffer I/O error on dev nbd2, logical block 2, async page read [ 652.624731][T17285] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.637072][T17285] Buffer I/O error on dev nbd2, logical block 3, async page read [ 652.646421][T17285] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.660156][T17285] Buffer I/O error on dev nbd2, logical block 0, async page read [ 652.669903][T17285] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.679327][T17285] Buffer I/O error on dev nbd2, logical block 1, async page read [ 652.693562][T17285] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 652.707539][T17285] Buffer I/O error on dev nbd2, logical block 2, async page read [ 652.740502][T17285] ldm_validate_partition_table(): Disk read failed. [ 652.754755][T17285] Dev nbd2: unable to read RDB block 0 [ 652.781762][T17285] nbd2: unable to read partition table [ 652.818496][T17285] ldm_validate_partition_table(): Disk read failed. [ 652.819165][ T5886] IPVS: starting estimator thread 0... [ 652.850418][T18344] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 652.890982][T17285] Dev nbd2: unable to read RDB block 0 [ 652.929912][T17285] nbd2: unable to read partition table [ 652.949181][T18347] IPVS: using max 27 ests per chain, 64800 per kthread [ 653.456851][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 653.470692][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.484696][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.502359][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.511513][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 654.096374][T18374] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3280'. [ 654.358864][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 654.460336][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 654.663062][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'. [ 655.063690][T18412] netlink: 'syz.1.3290': attribute type 29 has an invalid length. [ 655.082672][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 655.146725][T18412] netlink: 'syz.1.3290': attribute type 29 has an invalid length. [ 655.188034][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 655.324105][T18355] chnl_net:caif_netlink_parms(): no params data found [ 655.371645][T18422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 655.379320][T18422] IPv6: NLM_F_CREATE should be set when creating new route [ 655.575002][ T5832] Bluetooth: hci1: command tx timeout [ 655.640402][T18355] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.658410][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.678132][T18355] bridge_slave_0: entered allmulticast mode [ 655.707378][T18355] bridge_slave_0: entered promiscuous mode [ 655.727201][T18355] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.753671][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.783540][T18355] bridge_slave_1: entered allmulticast mode [ 655.806332][T18355] bridge_slave_1: entered promiscuous mode [ 655.834938][T18439] IPVS: set_ctl: invalid protocol: 59 172.30.0.4:20001 [ 655.971164][T18355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.023598][T18355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.334050][T18355] team0: Port device team_slave_0 added [ 656.345013][T18355] team0: Port device team_slave_1 added [ 656.518511][T18464] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3303'. [ 656.587280][T18459] syzkaller0: entered promiscuous mode [ 656.604129][T18459] syzkaller0: entered allmulticast mode [ 656.625787][T18355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.647002][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.677497][T18355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.534125][T18486] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3309'. [ 657.664077][ T5832] Bluetooth: hci1: command tx timeout [ 657.809554][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 657.879470][T18496] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3309'. [ 659.751043][ T5832] Bluetooth: hci1: command tx timeout [ 660.102838][T10538] lec:lec_start_xmit: lec0:No lecd attached [ 660.675694][T18355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.682766][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.712822][T18355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.839484][T18487] vlan2: entered allmulticast mode [ 660.860719][T18487] bond0: entered allmulticast mode [ 660.878189][T18487] bond_slave_0: entered allmulticast mode [ 660.889266][T18487] bond_slave_1: entered allmulticast mode [ 660.894641][T18501] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3311'. [ 660.940958][T18496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.956662][T18496] bond_slave_0: left allmulticast mode [ 660.979196][T18496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.992314][T18496] bond_slave_1: left allmulticast mode [ 661.000106][T18496] bond0 (unregistering): Released all slaves [ 661.236583][T18512] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3316'. [ 661.268330][T18355] hsr_slave_0: entered promiscuous mode [ 661.277595][T18355] hsr_slave_1: entered promiscuous mode [ 661.286589][T18355] debugfs: 'hsr0' already exists in 'hsr' [ 661.303932][T18355] Cannot create hsr debugfs directory [ 661.323116][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3316'. [ 661.545109][T18530] IPVS: set_ctl: invalid protocol: 0 100.1.1.4:20000 [ 661.622110][T18534] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 661.801338][T18538] xt_ecn: cannot match TCP bits for non-tcp packets [ 661.814430][ T5832] Bluetooth: hci1: command tx timeout [ 662.020500][T18538] syzkaller0: entered promiscuous mode [ 662.038231][T18538] syzkaller0: entered allmulticast mode [ 662.230689][T18355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.243970][T18355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.255956][T18355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 662.285162][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'. [ 662.467709][T18355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.479062][T18355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.491964][T18355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 662.578707][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 662.662574][T18355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.683572][T18355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.699631][T18355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 662.801955][T18355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.812640][T18355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.826371][T18355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 665.016787][T18545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.040175][T18355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 665.089421][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.126476][T18355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 665.152973][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.187387][T18355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 665.250445][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.268539][T18571] »»»»»»: renamed from bond_slave_0 (while UP) [ 665.284179][T18355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.288713][T18577] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3332'. [ 665.312098][T18355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.330822][T18576] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3332'. [ 665.333966][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 665.348271][ C1] lec:lec_tx_timeout: lec0 [ 665.362500][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3332'. [ 665.808119][T18355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.953511][T18355] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.028276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.035680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.104095][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.111455][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.259508][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 666.298334][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 666.481078][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 666.663109][T18637] x_tables: unsorted underflow at hook 4 [ 666.708318][T18641] netlink: 'syz.0.3352': attribute type 4 has an invalid length. [ 666.750616][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'. [ 666.784792][T18650] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3353'. [ 667.032735][T18355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.220011][T18669] batadv_slave_1: entered promiscuous mode [ 667.238564][T18668] batadv_slave_1: left promiscuous mode [ 667.449046][T18686] : entered promiscuous mode [ 667.653689][T18355] veth0_vlan: entered promiscuous mode [ 667.694165][T18355] veth1_vlan: entered promiscuous mode [ 667.775280][T18355] veth0_macvtap: entered promiscuous mode [ 667.791296][T18355] veth1_macvtap: entered promiscuous mode [ 667.808234][ T5832] Bluetooth: hci2: link tx timeout [ 667.818334][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 667.852237][T18355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.907483][T18355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.933550][ T8528] IPVS: starting estimator thread 0... [ 667.951719][T18694] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3362'. [ 667.957646][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.975286][T18694] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 667.984826][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.031888][T14642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.040875][T14642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.074049][T18697] IPVS: using max 28 ests per chain, 67200 per kthread [ 668.323360][T18699] macvtap1: entered promiscuous mode [ 668.330385][T18699] macvtap1: entered allmulticast mode [ 668.341165][T18699] veth1_vlan: entered allmulticast mode [ 668.363952][T18700] macvtap2: entered promiscuous mode [ 668.369648][T18700] macvtap2: entered allmulticast mode [ 668.379807][ T1094] wlan1: Trigger new scan to find an IBSS to join [ 669.894362][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 670.116516][T18666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.257348][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.284948][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.448306][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.456763][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3368'. [ 670.465665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.478923][T18718] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 670.582415][T18718] bond1: entered promiscuous mode [ 670.588664][T18718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.725150][T18721] bond1: (slave bridge1): making interface the new active one [ 670.759827][T18721] bridge1: entered promiscuous mode [ 670.787435][T18721] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 670.790798][T18730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3373'. [ 670.815297][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3273'. [ 671.052661][T18738] IPVS: length: 59 != 8 [ 671.199971][T18754] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 671.415372][ T6145] wlan1: Trigger new scan to find an IBSS to join [ 671.639660][T18771] netlink: 'syz.2.3380': attribute type 10 has an invalid length. [ 671.676272][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.716975][T18771] bridge_slave_1: left allmulticast mode [ 671.750922][T18771] bridge_slave_1: left promiscuous mode [ 671.776785][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.799851][T18777] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 671.845710][T18777] netlink: 'syz.0.3381': attribute type 16 has an invalid length. [ 671.863876][T18777] netlink: 'syz.0.3381': attribute type 17 has an invalid length. [ 671.889315][T18774] tc_dump_action: action bad kind [ 671.916317][T18774] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 672.316570][T18793] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3385'. [ 672.375090][T18777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 672.396066][T18779] tc_dump_action: action bad kind [ 672.577884][T18800] xt_hashlimit: overflow, rate too high: 0 [ 672.969618][T18823] netlink: 'syz.0.3391': attribute type 11 has an invalid length. [ 673.021033][T18823] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3391'. [ 673.072154][T18810] syzkaller0: entered promiscuous mode [ 673.078020][T18810] syzkaller0: entered allmulticast mode [ 673.306466][T18840] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3403'. [ 673.412410][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 673.431681][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3402'. [ 674.375655][ T1110] wlan1: Creating new IBSS network, BSSID 3a:5e:38:8a:b1:08 [ 676.822939][T14648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.824925][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 676.841136][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3402'. [ 676.858276][T18853] kthread_run failed with err -4 [ 676.906964][T14648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.940415][T14648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.974116][T14639] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.377598][T18886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3414'. [ 677.419851][T18883] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 677.471557][T18883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.487677][T18889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3415'. [ 677.578031][T18889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3415'. [ 677.656914][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3415'. [ 677.716419][T18904] netlink: 'syz.3.3416': attribute type 1 has an invalid length. [ 677.733714][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3418'. [ 677.858681][T18904] bond1: entered promiscuous mode [ 677.865952][T18904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.905326][T18915] bond1: (slave bridge1): making interface the new active one [ 677.914152][T18915] bridge1: entered promiscuous mode [ 677.923322][T18915] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 678.922053][T18931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3424'. [ 680.597141][T18895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.792901][T18934] block nbd1: NBD_DISCONNECT [ 680.798302][T18934] block nbd1: Send disconnect failed -32 [ 680.829685][T18934] block nbd1: Send disconnect failed -32 [ 681.085966][T18933] nbd1: detected capacity change from 0 to 63 [ 681.111995][ T5832] block nbd1: Receive control failed (result -32) [ 681.119547][T18874] block nbd1: Dead connection, failed to find a fallback [ 681.178302][T18874] block nbd1: shutting down sockets [ 681.186944][T18874] blk_print_req_error: 137 callbacks suppressed [ 681.186967][T18874] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.227833][T18874] buffer_io_error: 137 callbacks suppressed [ 681.227856][T18874] Buffer I/O error on dev nbd1, logical block 0, async page read [ 681.249689][T18874] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.267851][T18874] Buffer I/O error on dev nbd1, logical block 1, async page read [ 681.279903][T18874] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.281467][T18954] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 681.294115][T18874] Buffer I/O error on dev nbd1, logical block 2, async page read [ 681.308758][T18874] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.323131][T18874] Buffer I/O error on dev nbd1, logical block 3, async page read [ 681.351006][T18955] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 681.352607][T18874] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.380717][T18874] Buffer I/O error on dev nbd1, logical block 0, async page read [ 681.410016][T18874] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.458234][T18874] Buffer I/O error on dev nbd1, logical block 1, async page read [ 681.484917][T18874] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.514179][T18966] netlink: 'syz.0.3434': attribute type 21 has an invalid length. [ 681.522361][T18874] Buffer I/O error on dev nbd1, logical block 2, async page read [ 681.535396][T18874] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.559268][T18874] Buffer I/O error on dev nbd1, logical block 3, async page read [ 681.587395][T18874] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.610197][T18874] Buffer I/O error on dev nbd1, logical block 0, async page read [ 681.636389][T18874] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 681.673874][T18874] Buffer I/O error on dev nbd1, logical block 1, async page read [ 681.710573][T18874] ldm_validate_partition_table(): Disk read failed. [ 681.740412][T18874] Dev nbd1: unable to read RDB block 0 [ 681.753304][T18973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.777831][T18874] nbd1: unable to read partition table [ 681.819016][T18874] ldm_validate_partition_table(): Disk read failed. [ 681.848325][T18874] Dev nbd1: unable to read RDB block 0 [ 681.879246][T18874] nbd1: unable to read partition table [ 681.956994][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 682.666986][T19014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3450'. [ 682.677331][T19014] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 682.813385][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 682.859865][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'. [ 683.253980][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 683.387968][T19043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3457'. [ 683.591850][T19050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.670013][T19052] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3460'. [ 684.371216][T19084] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3468'. [ 684.607394][T19092] veth0_to_bond: entered allmulticast mode [ 684.666303][T19092] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3473'. [ 684.908020][T19108] syzkaller0: entered promiscuous mode [ 684.934060][T19108] syzkaller0: entered allmulticast mode [ 685.334366][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 686.301926][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.313342][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.561418][T19189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3498'. [ 686.624342][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 686.648167][T19197] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 686.666424][T19197] netlink: 'syz.1.3500': attribute type 7 has an invalid length. [ 686.694248][T19197] netlink: 'syz.1.3500': attribute type 8 has an invalid length. [ 686.699520][T19189] hsr0: entered promiscuous mode [ 686.734482][T19197] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3500'. [ 686.739577][T19189] macvlan2: entered allmulticast mode [ 686.755862][T19189] hsr0: entered allmulticast mode [ 686.771536][T19197] NCSI netlink: No device for ifindex 65584 [ 686.777903][T19189] hsr_slave_0: entered allmulticast mode [ 686.777935][T19189] hsr_slave_1: entered allmulticast mode [ 687.839662][T19258] netlink: 'syz.2.3522': attribute type 8 has an invalid length. [ 688.062624][T19269] __nla_validate_parse: 5 callbacks suppressed [ 688.062649][T19269] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.3525'. [ 688.097736][T19271] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3526'. [ 688.679212][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 688.730296][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'. [ 688.735211][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 688.769518][T19298] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 688.781695][T19300] netlink: 'syz.2.3534': attribute type 13 has an invalid length. [ 688.800076][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'. [ 688.801100][T19301] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 688.959552][T19320] netlink: 'syz.0.3540': attribute type 1 has an invalid length. [ 689.111438][T19327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3538'. [ 689.151643][T19329] xt_l2tp: v2 doesn't support IP mode [ 689.152572][T19315] bond2: option mode: invalid value (133) [ 689.208904][T19332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3544'. [ 689.224777][T19315] bond2 (unregistering): Released all slaves [ 689.396513][T19332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3544'. [ 689.634969][T19354] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3546'. [ 689.740687][T19352] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 689.769957][T19352] bond1 (unregistering): Released all slaves [ 690.270143][T19384] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 690.507775][T19386] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.698283][T19386] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 690.766245][T19409] netlink: 'syz.0.3562': attribute type 2 has an invalid length. [ 690.811581][T19409] netlink: 'syz.0.3562': attribute type 11 has an invalid length. [ 690.968560][T19407] syzkaller1: entered promiscuous mode [ 690.990450][T19407] syzkaller1: entered allmulticast mode [ 691.333801][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 691.341976][ C1] lec:lec_tx_timeout: lec0 [ 691.777513][T19452] hsr_slave_1: left promiscuous mode [ 691.821045][T19454] netlink: 'syz.2.3576': attribute type 1 has an invalid length. [ 691.956632][T19464] netlink: 'syz.0.3580': attribute type 21 has an invalid length. [ 691.965232][T19464] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.617534][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 706.778411][T14642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.855179][ T5832] Bluetooth: hci0: command 0x0c20 tx timeout [ 711.759583][T19511] __nla_validate_parse: 10 callbacks suppressed [ 711.759608][T19511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3590'. [ 711.857730][T19511] vlan2: entered allmulticast mode [ 711.866623][T19511] bridge2: entered allmulticast mode [ 712.012352][T19520] netlink: 'syz.4.3590': attribute type 21 has an invalid length. [ 712.062419][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3587'. [ 712.072723][T19511] bridge2: port 1(bond1) entered blocking state [ 712.079598][T19511] bridge2: port 1(bond1) entered disabled state [ 712.086454][T19511] bond1: entered allmulticast mode [ 712.096547][T19511] bond1: entered promiscuous mode [ 712.117757][T19520] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3590'. [ 712.149778][T19492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3587'. [ 712.799507][T19546] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3598'. [ 712.849534][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3598'. [ 712.896572][T19546] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3598'. [ 713.046019][T19559] Cannot find map_set index 65533 as target [ 713.100694][T19561] lo speed is unknown, defaulting to 1000 [ 713.183341][T19561] lo speed is unknown, defaulting to 1000 [ 713.203321][T19561] lo speed is unknown, defaulting to 1000 [ 713.425839][T19573] netlink: 'syz.3.3605': attribute type 29 has an invalid length. [ 713.434310][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 713.459025][T19573] netlink: 'syz.3.3605': attribute type 29 has an invalid length. [ 713.495755][T19577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3607'. [ 714.145973][T19561] infiniband syz0: set active [ 714.160488][T19561] infiniband syz0: added lo [ 714.185903][T19561] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 714.204262][T19561] infiniband syz0: Couldn't open port 1 [ 714.347015][T19561] RDS/IB: syz0: added [ 714.356230][T19561] smc: adding ib device syz0 with port count 1 [ 714.368219][T19561] smc: ib device syz0 port 1 has no pnetid [ 714.488478][ T5886] lo speed is unknown, defaulting to 1000 [ 714.501404][ T8529] lo speed is unknown, defaulting to 1000 [ 714.515880][T19561] lo speed is unknown, defaulting to 1000 [ 715.082939][T19639] syzkaller1: entered promiscuous mode [ 715.108633][T19639] syzkaller1: entered allmulticast mode [ 715.132495][T19639] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3624'. [ 715.260541][T19643] pim6reg1: entered promiscuous mode [ 715.274547][T19643] pim6reg1: entered allmulticast mode [ 715.434630][T19561] lo speed is unknown, defaulting to 1000 [ 715.598309][T19659] netlink: 'syz.2.3630': attribute type 8 has an invalid length. [ 715.605065][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.614126][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.708957][T19652] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 715.914366][T19605] lo speed is unknown, defaulting to 1000 [ 715.939454][T19661] syzkaller0: entered promiscuous mode [ 715.958361][T19661] syzkaller0: entered allmulticast mode [ 715.995995][T19661] netlink: 'syz.2.3631': attribute type 10 has an invalid length. [ 716.055481][T19665] netlink: 'syz.2.3631': attribute type 1 has an invalid length. [ 716.100187][T19665] netlink: 'syz.2.3631': attribute type 2 has an invalid length. [ 716.510785][T19561] lo speed is unknown, defaulting to 1000 [ 717.103314][T19702] __nla_validate_parse: 6 callbacks suppressed [ 717.103340][T19702] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3638'. [ 717.189868][T19704] netlink: 'syz.3.3639': attribute type 11 has an invalid length. [ 717.216057][T19704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3639'. [ 717.447277][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 717.491565][T19715] nbd: must specify a size in bytes for the device [ 717.560956][T19561] lo speed is unknown, defaulting to 1000 [ 717.657691][T19726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3643'. [ 718.075363][T19739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 718.093527][T19740] IPv6: sit1: Disabled Multicast RS [ 718.105844][T19739] bridge_slave_1: entered allmulticast mode [ 718.331131][T19561] lo speed is unknown, defaulting to 1000 [ 718.389443][T19752] veth1: entered promiscuous mode [ 718.410335][T19752] veth1: entered allmulticast mode [ 718.444269][T19752] syzkaller1: entered promiscuous mode [ 718.459938][T19752] syzkaller1: entered allmulticast mode [ 718.480602][T19752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3650'. [ 718.506790][T19756] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3651'. [ 718.761312][T19764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3653'. [ 718.902085][T19561] lo speed is unknown, defaulting to 1000 [ 719.178106][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 719.189646][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 719.387892][T19561] lo speed is unknown, defaulting to 1000 [ 719.400339][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3659'. [ 721.362122][T19861] openvswitch: netlink: IP tunnel TTL not specified. [ 721.699239][T19850] lo speed is unknown, defaulting to 1000 [ 721.787681][T19870] tipc: Started in network mode [ 721.799288][T19870] tipc: Node identity 7e91aed1df37, cluster identity 4711 [ 721.822206][T19870] tipc: Enabled bearer , priority 11 [ 722.289956][T19892] __nla_validate_parse: 4 callbacks suppressed [ 722.289978][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 722.336322][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3692'. [ 722.367904][T19899] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 722.741552][T19912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3700'. [ 722.942841][ T8514] tipc: Node number set to 2712055505 [ 723.210733][T19932] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 723.522363][T19945] netlink: 'syz.1.3708': attribute type 1 has an invalid length. [ 723.820936][T19945] bond2: entered promiscuous mode [ 723.846157][T19945] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.929157][T19960] bond2: (slave bridge3): making interface the new active one [ 723.938449][T19960] bridge3: entered promiscuous mode [ 723.950137][T19960] bridge3: left promiscuous mode [ 723.970680][T10538] lec:lec_start_xmit: lec0:No lecd attached [ 724.217928][T19971] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3713'. [ 724.242871][T19973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3714'. [ 724.263587][T19975] openvswitch: netlink: EtherType 0 is less than min 600 [ 724.297802][T19975] netlink: 'syz.0.3715': attribute type 2 has an invalid length. [ 724.310099][T19973] syzkaller0: entered promiscuous mode [ 724.316459][T19973] syzkaller0: entered allmulticast mode [ 724.564520][T19986] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 724.594940][T19986] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 724.935313][T20000] : entered promiscuous mode [ 724.971032][T20006] syzkaller0: entered promiscuous mode [ 724.980155][T20006] syzkaller0: entered allmulticast mode [ 725.040557][T20002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3724'. [ 725.122522][T20012] ip6t_REJECT: ECHOREPLY is not supported [ 725.221348][T20015] openvswitch: netlink: IP tunnel dst address not specified [ 725.933303][T20024] dvmrp8: entered allmulticast mode [ 725.943693][T20013] lo speed is unknown, defaulting to 1000 [ 726.061174][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 726.186521][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 726.245786][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 726.281642][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 726.595783][T20059] syzkaller0: entered promiscuous mode [ 726.603220][T20059] syzkaller0: entered allmulticast mode [ 727.017932][T20017] lo speed is unknown, defaulting to 1000 [ 727.130012][T20075] netlink: 'syz.0.3748': attribute type 1 has an invalid length. [ 729.344541][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 729.353107][ C1] lec:lec_tx_timeout: lec0 [ 730.990923][T20075] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 731.169708][T20094] __nla_validate_parse: 32 callbacks suppressed [ 731.169732][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3754'. [ 731.196782][T20094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.244839][T20096] netlink: 'syz.2.3755': attribute type 21 has an invalid length. [ 731.266744][T20096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3755'. [ 731.304153][T20096] sctp: [Deprecated]: syz.2.3755 (pid 20096) Use of int in maxseg socket option. [ 731.304153][T20096] Use struct sctp_assoc_value instead [ 731.779286][T20113] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 731.813213][T20113] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 732.520836][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 732.570349][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'. [ 732.607590][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 732.807266][T20157] netlink: 'syz.2.3768': attribute type 1 has an invalid length. [ 732.826586][T20157] netlink: 'syz.2.3768': attribute type 3 has an invalid length. [ 732.839135][T20157] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3768'. [ 732.857356][T20146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 732.878599][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'. [ 732.888161][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 733.205932][T20160] syzkaller1: entered promiscuous mode [ 733.223932][T20160] syzkaller1: entered allmulticast mode [ 733.381931][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 733.796407][T20189] netlink: Conntrack attr has 4 unknown bytes [ 733.919937][T20193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.272554][T20208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.279921][T20208] IPv6: NLM_F_CREATE should be set when creating new route [ 734.280301][T20209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.640404][T20228] netlink: 'syz.1.3791': attribute type 3 has an invalid length. [ 734.691394][T20231] netlink: 'syz.3.3792': attribute type 1 has an invalid length. [ 734.733484][T20231] bond2: entered promiscuous mode [ 734.738695][T20231] bond2: entered allmulticast mode [ 734.744606][T20231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.309719][T20249] team0: Port device team_slave_0 removed [ 736.261443][T20301] __nla_validate_parse: 10 callbacks suppressed [ 736.261467][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3815'. [ 736.439964][T20309] netlink: 'syz.0.3817': attribute type 58 has an invalid length. [ 736.448948][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3817'. [ 736.896373][T20324] netlink: 'syz.4.3825': attribute type 2 has an invalid length. [ 736.906900][T20324] netlink: 'syz.4.3825': attribute type 5 has an invalid length. [ 736.917747][T20325] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 736.943195][T20325] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 737.117998][T20335] netlink: 'syz.2.3827': attribute type 10 has an invalid length. [ 737.178186][T20335] team0 (unregistering): Port device team_slave_0 removed [ 737.196090][T20335] team0 (unregistering): Port device team_slave_1 removed [ 737.223128][T20341] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3830'. [ 737.237235][T20337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3828'. [ 737.360279][T20311] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 737.376201][T20311] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 737.420309][T20350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.568643][T20311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 737.604811][T20311] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 737.643169][T20358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3835'. [ 737.670919][T20360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3835'. [ 737.700878][T20358] F: renamed from ip_vti0 (while UP) [ 737.728183][T20358] F: entered allmulticast mode [ 737.893065][T20311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.909159][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 737.919942][T20375] netlink: 'syz.4.3839': attribute type 8 has an invalid length. [ 737.923665][T20311] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 738.198988][T17473] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 738.210958][T17473] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 738.219572][T17473] CPU: 0 UID: 0 PID: 17473 Comm: kbnepd ú» Not tainted syzkaller #0 PREEMPT(full) [ 738.228959][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.239449][T17473] RIP: 0010:klist_del+0x49/0x110 [ 738.244733][T17473] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 ce 87 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb cd 87 f6 4d 8b 7e 58 4c 89 f7 e8 1f 60 [ 738.264721][T17473] RSP: 0018:ffffc90002ff7828 EFLAGS: 00010202 [ 738.270955][T17473] RAX: 000000000000000b RBX: ffff888056608060 RCX: ffff88808a31dc40 [ 738.279121][T17473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 738.287273][T17473] RBP: ffffc90002ff7950 R08: ffff888042c88e13 R09: 1ffff110085911c2 [ 738.295372][T17473] R10: dffffc0000000000 R11: ffffed10085911c3 R12: dffffc0000000000 [ 738.303351][T17473] R13: 1ffff1100acc100c R14: 0000000000000000 R15: ffff88807dc7c7a8 [ 738.311438][T17473] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 738.320721][T17473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.327421][T17473] CR2: 00007f530f84edd5 CR3: 000000007c7c2000 CR4: 00000000003526f0 [ 738.335419][T17473] Call Trace: [ 738.338705][T17473] [ 738.341642][T17473] device_del+0x27f/0x8f0 [ 738.346005][T17473] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 738.352302][T17473] ? __pfx_device_del+0x10/0x10 [ 738.357193][T17473] ? netdev_unregister_kobject+0x344/0x450 [ 738.363107][T17473] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 738.369672][T17473] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 738.376536][T17473] ? rtnl_net_dev_lock+0x36/0x2f0 [ 738.381578][T17473] ? rtnl_net_dev_lock+0x36/0x2f0 [ 738.386655][T17473] unregister_netdev+0x15f/0x200 [ 738.391616][T17473] ? __pfx_unregister_netdev+0x10/0x10 [ 738.397085][T17473] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 738.402901][T17473] bnep_session+0x29d1/0x2c00 [ 738.407615][T17473] ? __lock_acquire+0x6b5/0x2cf0 [ 738.412647][T17473] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 738.418386][T17473] ? __pfx_bnep_session+0x10/0x10 [ 738.423430][T17473] ? __pfx_woken_wake_function+0x10/0x10 [ 738.429073][T17473] ? __kthread_parkme+0x7a/0x1f0 [ 738.434207][T17473] ? __kthread_parkme+0x19c/0x1f0 [ 738.439429][T17473] kthread+0x388/0x470 [ 738.443564][T17473] ? __pfx_bnep_session+0x10/0x10 [ 738.448703][T17473] ? __pfx_kthread+0x10/0x10 [ 738.453402][T17473] ret_from_fork+0x514/0xb70 [ 738.458129][T17473] ? __pfx_ret_from_fork+0x10/0x10 [ 738.463272][T17473] ? __switch_to+0xc79/0x1410 [ 738.467973][T17473] ? __pfx_kthread+0x10/0x10 [ 738.472597][T17473] ret_from_fork_asm+0x1a/0x30 [ 738.477414][T17473] [ 738.480446][T17473] Modules linked in: [ 738.485528][T17473] ---[ end trace 0000000000000000 ]--- [ 738.505395][T17473] RIP: 0010:klist_del+0x49/0x110 [ 738.511203][T17473] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 ce 87 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb cd 87 f6 4d 8b 7e 58 4c 89 f7 e8 1f 60 [ 738.532004][T17473] RSP: 0018:ffffc90002ff7828 EFLAGS: 00010202 [ 738.538308][T17473] RAX: 000000000000000b RBX: ffff888056608060 RCX: ffff88808a31dc40 [ 738.547198][T17473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 738.557577][T17473] RBP: ffffc90002ff7950 R08: ffff888042c88e13 R09: 1ffff110085911c2 [ 738.566606][T17473] R10: dffffc0000000000 R11: ffffed10085911c3 R12: dffffc0000000000 [ 738.574745][T17473] R13: 1ffff1100acc100c R14: 0000000000000000 R15: ffff88807dc7c7a8 [ 738.582782][T17473] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 738.592896][T17473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.600147][T17473] CR2: 00007f0c07cfbd30 CR3: 00000000770f0000 CR4: 00000000003526f0 [ 738.608381][T17473] Kernel panic - not syncing: Fatal exception [ 738.615013][T17473] Kernel Offset: disabled [ 738.619548][T17473] Rebooting in 86400 seconds..