last executing test programs: 3.730196406s ago: executing program 1 (id=6349): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c032e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb477ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad750f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c262fb637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf96283447366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce56902007f5d6a6270ff0f0f4c371029ca8489571b55841b06de003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0d0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c75"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 3.477662622s ago: executing program 1 (id=6353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3.402253896s ago: executing program 3 (id=6356): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r3, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x8000) sendto(r1, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.325656658s ago: executing program 4 (id=6357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001800400", @ANYRESDEC=0x0], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.198249803s ago: executing program 1 (id=6359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 3.009144318s ago: executing program 4 (id=6360): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002880)=""/60, 0x3c}, {0x0, 0x3c}], 0x2}}], 0x1, 0x10002, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.838667787s ago: executing program 1 (id=6362): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="61030500000002"], 0xa) unshare(0x20400) 2.619119665s ago: executing program 2 (id=6364): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_generic(0x10, 0x3, 0x10) 2.477059649s ago: executing program 0 (id=6365): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.476023834s ago: executing program 2 (id=6366): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb9876207", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 2.399775893s ago: executing program 2 (id=6367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) socket$igmp6(0xa, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) shutdown(r0, 0x1) socket$netlink(0x10, 0x3, 0x5) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 2.384062483s ago: executing program 3 (id=6368): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb9876207", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 2.347837536s ago: executing program 0 (id=6369): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000001000000001000000140002007767310000000000000000000000000034000880"], 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.024996527s ago: executing program 4 (id=6370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x6}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) 1.898393084s ago: executing program 2 (id=6371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a000100"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) socketpair(0x1e, 0xa, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10000) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f00000000c0)=0xa40f) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) 1.850160247s ago: executing program 1 (id=6372): syz_open_procfs$namespace(0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.83522365s ago: executing program 0 (id=6373): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000240)="a356f58980a4d1bc340b4e2fde9103daf31d759e26dc8c7daf932a29deb282c831f5ac7c221bd877f910efe1305661a004d56dcdae60bf8c5afcdf94e242116d01754e2c8bf813abff4130fbf20f90d34ec6312e92c1f0702bdc590d16a0e93b9a7cb6f4a57018173bdc851f1a55fca8ff825e03bdabad1c447a88abbcfafe7b8c76a6e71a03f4abbe22454a88599438b9c3740cdbd09e74715e6a6b640fd621b67df416dcf324fe233f3e043b", 0xad}, {&(0x7f0000000340)="c046641ca8108ae11f406a3f6dd523a4b312f92777b24ad78aab6c826de6", 0x1e}, {&(0x7f00000006c0)="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", 0xc00}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x800, @mcast2, 0x3}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001980)="31528e6cebdca11051b51b31c269713759553a", 0x13}, {&(0x7f00000019c0)="1b5dc47c03816fb5bb06281920bf061b1dc509aec54e40237de1468e90c05e1c873517b5", 0x24}, {&(0x7f0000001a00)="0acb5f642beddb047742422f921e13bd56b9894e8ff9ecf84183eef4d2b2121fb85fcf232dcac2d9780b569c59d0bdc0e05558d75927622176b4b3216d1bd60008ae4f3f79a159324ab279f39a860201cab70650681c1169018b85f800a90d8cc438b5c1c3c3bb0ccf2e37acfd8ea171b0f977ca5142e91e2716f5ffd74b64345b66f9e4bfc2abc9659968d0915ad79d26a0b81fb30001272e", 0x99}, {&(0x7f0000001ac0)="d2e28d1a1fce04d8f58c25c3b48ce2fb415ce2f561c65e730e3243d33d9490046c3cf8da337d1e65d98ea136c20661bd69092a1b9802703495cdeffeee", 0x3d}, {&(0x7f0000001b00)="334ab4db6d9b9f94b67ac9cd1753a82730881f2ce8628c9e8e85945cb4ba03aba3f8", 0x22}, {&(0x7f0000001b80)="213fa5b18ceb14f0643b4152c759d31c7fc994cd405012c08c3b6dc58e6efc8cd1fa88a86b20486d24fb9f1155d8643c6d9cf986291a42b9f0654dd1f7ccaf1dd9db49f22a96c0c453944e3832f2a0a7feba00f40a01a7e1a0945b7f9a33fa3eccf2049b1b71e61820e6793a716cd78a25a86d62c1950ae42deb2f24f355be107f6a0be8282173facf30453c50e1447cce3271d230ef98c7d75653e12e07b60080af50f5bee909985176d66145c39f241eb2ee46801ebd01f01ae0b1c84406e606f2f437b0f89fbaf4b4b661c0685ff7f864358f55efee97f480", 0xda}, {&(0x7f0000001c80)="50fc7cd0287dd963d2a983375fbf662998a716474e7e28fbf39b8e3895548546817a62bea2cb63b33e210c128d54fa7b288dc9155aa8c9cdeab091f4e5abf60dcd82ed3d3fd0afeb065ac186db7b914270b48a1c9259a42fa038fe911b96a9ddb53d902a49a170c86b4ad5d70322a48b811a3e17c6d48a75198b937665b306980215ce71c19479ff619e01b25e543bd4f20a54662f147b50ce935334f7e781e8c1ab512c7fdbb7153b88a56a2fecfadcf9a5262d90d40d74ae1973a3dcbd097405a3083f893f4100679b965578c804dba6d2084269cd780bb4e9e1e4b5aa32c73fa75ee7c97b53e0e9ee4f5cc7b707518164bae608192247", 0xf8}, {&(0x7f0000001d80)="8dd742d1808f6d37ed8489f943e2d2e9d85062990ebfaf708b036c5116f763adf073589a99a6b70cefd6f0b5ea025459f841bf701d49f2aff88c92c95289a9653f5d422f6816c82180902476e12092d7c17d04d8de6f5a207bc2d32c64a60905647e4492bcbba4c4af225d054da6df0cd62dd504f2ede57371b15bce402062a667690d14d8ff5c3b7ebc7861768909f0cfb8b87b606b1f9598058fd5ca12222b3c1f23e3aad17fdc4eeed7809b993bb84ed3083d594dfe19ed260504d258f4780ab801e4c68b177f017783ffa435736d07f215f0fc14ada1c3407d4a42", 0xdd}], 0x8, &(0x7f0000002200)=[@dstopts={{0x18, 0x29, 0x37, {0x16}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x2, 0x6, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x73}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd257}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @tclass={{0x14}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x16, 0x14, '\x00', [@generic={0x3b, 0x87, "58642afd28dbec2a49f99b36ff0d2a406423e56d2b63d1ec132e4b58f8e93518a12ab21c866d4fa4153c150e0c622c7534bb64883c65c971962686464b261afdd57aafc648e2595cd468b57adb24d3a806b8b066545e5b9c6ea8930621d497cdd3e47ce5f296de28628e96ce701d2dcb7c2d5c8c65e0c92e46d502f81830c8e9d3bbf8adf311e2"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x44fe}, @ra={0x5, 0x2, 0x6f}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x1c0}}], 0x3, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c"], 0x3c}}, 0x0) socket(0x18, 0x80805, 0x0) 1.827102851s ago: executing program 3 (id=6374): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000380)="0b09207965b0b9f188846471db52aa4a3784619245eb47a3cd94", 0x1a, 0x4000000, &(0x7f0000000340), 0x10) 1.65822026s ago: executing program 3 (id=6375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) socketpair(0x1e, 0xa, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10000) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f00000000c0)=0xa40f) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) 1.596018358s ago: executing program 4 (id=6376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0x8) 1.539046832s ago: executing program 2 (id=6377): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, 0x0, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb9876207", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 1.238159002s ago: executing program 4 (id=6378): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.236109126s ago: executing program 2 (id=6379): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r3, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x8000) sendto(r1, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 753.83229ms ago: executing program 1 (id=6380): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000340)=@DATA={0x0, 0x0, 0x0, 0x0, 0x4, "4a52709a"}, 0x7) 718.371332ms ago: executing program 4 (id=6381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x21, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x5, r5, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910000000000000620000000000000095107400000000008facdfd7ebdbdb0e342ddf85668c8bcb4a5bda2d612d16f1716a362aad118a81e75b9d7945e77d5b477e77d13d75e682617c0481090c83376431ed74668bd6d0550fa824e0e0b1f3c0b2716913e7a55cacb13b6f2f44f06fd54191bcad3808af6d771612"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc5, &(0x7f0000000000)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0}, 0x94) 709.172241ms ago: executing program 3 (id=6382): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)='X\x00', 0x2}], 0x1) 386.200183ms ago: executing program 0 (id=6383): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 374.08088ms ago: executing program 3 (id=6384): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xf, r1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x880) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x3, 0x1ff, 0xfb9d, 0x5, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r6, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000000000008400000002001000000041020000000000000000bab5ff22cf91ab74989825b9de0f594716bb23943f148cc267a66ef86d19066110c0ae7bb9876207", @ANYRES32=0x0], 0x20}], 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 74.037658ms ago: executing program 0 (id=6385): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000380)="0b09207965b0b9f188846471db52aa4a3784619245eb47a3cd94", 0x1a, 0x4000000, &(0x7f0000000340), 0x10) 0s ago: executing program 0 (id=6386): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) kernel console output (not intermixed with test programs): 20755] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4614'. [ 630.408136][T20761] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 630.422673][T20763] netlink: 'syz.2.4617': attribute type 2 has an invalid length. [ 630.441575][T20761] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4616'. [ 630.481946][T20763] : entered promiscuous mode [ 630.858892][T20770] gre0 speed is unknown, defaulting to 1000 [ 630.905612][T20785] netlink: 'syz.3.4621': attribute type 1 has an invalid length. [ 630.937590][T20785] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4621'. [ 631.297609][T20800] netlink: 'syz.3.4622': attribute type 21 has an invalid length. [ 631.383236][T20803] netlink: 'syz.3.4622': attribute type 1 has an invalid length. [ 631.397118][T20803] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4622'. [ 631.666055][T20814] bpq0: entered promiscuous mode [ 631.672335][T20814] bpq0: entered allmulticast mode [ 631.822567][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 631.936404][T20770] lo speed is unknown, defaulting to 1000 [ 632.116091][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4627'. [ 632.357155][T20827] gre0 speed is unknown, defaulting to 1000 [ 632.569152][T20833] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4628'. [ 633.046073][T20847] gre0 speed is unknown, defaulting to 1000 [ 633.046562][T20827] lo speed is unknown, defaulting to 1000 [ 633.878294][T20847] lo speed is unknown, defaulting to 1000 [ 634.957208][T20894] validate_nla: 3 callbacks suppressed [ 634.957232][T20894] netlink: 'syz.0.4640': attribute type 1 has an invalid length. [ 634.987413][T20894] __nla_validate_parse: 3 callbacks suppressed [ 634.987435][T20894] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4640'. [ 634.993352][T20898] syzkaller0: entered promiscuous mode [ 635.017355][T20898] syzkaller0: entered allmulticast mode [ 635.528959][T20915] netlink: 'syz.4.4642': attribute type 2 has an invalid length. [ 635.768397][T20924] netlink: 'syz.1.4643': attribute type 1 has an invalid length. [ 635.776430][T20924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4643'. [ 636.067037][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 636.075169][ C0] lec:lec_tx_timeout: lec0 [ 637.638760][T20935] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4647'. [ 637.705130][T20935] siw: device registration error -23 [ 637.972233][T20949] netlink: 'syz.1.4651': attribute type 1 has an invalid length. [ 637.999610][T20949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4651'. [ 638.084623][T20954] gre0 speed is unknown, defaulting to 1000 [ 638.122557][T20960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4653'. [ 638.150516][T20961] netlink: 'syz.3.4654': attribute type 2 has an invalid length. [ 638.394246][T20968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4650'. [ 638.565687][T20961] : entered promiscuous mode [ 638.572541][T20970] netlink: 'syz.1.4655': attribute type 1 has an invalid length. [ 638.587498][T20970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4655'. [ 638.749212][T20976] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 638.828111][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4656'. [ 638.931226][T20954] lo speed is unknown, defaulting to 1000 [ 638.941084][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4656'. [ 639.001837][T20982] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4656'. [ 639.182171][T20995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.191429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.367780][ T5832] lo speed is unknown, defaulting to 1000 [ 639.373579][ T5832] syz2: Port: 1 Link DOWN [ 639.427189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.452587][T21003] netlink: 'syz.2.4663': attribute type 1 has an invalid length. [ 639.463916][T20992] syzkaller1: entered promiscuous mode [ 639.469709][T20992] syzkaller1: entered allmulticast mode [ 639.785166][T21001] gre0 speed is unknown, defaulting to 1000 [ 640.017308][T21013] netlink: 'syz.4.4665': attribute type 1 has an invalid length. [ 640.025110][T21013] __nla_validate_parse: 5 callbacks suppressed [ 640.025133][T21013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4665'. [ 640.390415][T21022] netlink: 'syz.0.4667': attribute type 32 has an invalid length. [ 640.398721][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4667'. [ 640.452845][T21022] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5) [ 640.526020][T21024] netlink: 'syz.1.4668': attribute type 1 has an invalid length. [ 640.597249][T21024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4668'. [ 640.610782][T21025] bond0: (slave wlan1): Releasing backup interface [ 640.678982][T21025] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 640.702578][T21025] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 640.867229][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 641.040446][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4673'. [ 641.069746][T21038] netlink: 'syz.0.4674': attribute type 1 has an invalid length. [ 641.087179][T21038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4674'. [ 641.279308][T21001] lo speed is unknown, defaulting to 1000 [ 641.294216][T21048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4675'. [ 641.377485][T21048] netlink: 'syz.4.4675': attribute type 10 has an invalid length. [ 641.441862][T21053] netlink: 'syz.0.4676': attribute type 1 has an invalid length. [ 641.476350][T21053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4676'. [ 641.672202][T21063] openvswitch: netlink: IPv4 tun info is not correct [ 641.696576][T21064] netlink: 'syz.1.4679': attribute type 21 has an invalid length. [ 641.731656][T21064] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4679'. [ 641.753681][T21064] netlink: 'syz.1.4679': attribute type 4 has an invalid length. [ 641.774695][T21064] netlink: 'syz.1.4679': attribute type 5 has an invalid length. [ 641.813392][T21064] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4679'. [ 641.835942][T21070] netlink: 'syz.0.4682': attribute type 1 has an invalid length. [ 641.845078][T21070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4682'. [ 642.656349][T21092] gre0 speed is unknown, defaulting to 1000 [ 642.672431][T21101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.956214][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 643.065297][T21114] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 643.694284][T21092] lo speed is unknown, defaulting to 1000 [ 643.694320][T21094] gre0 speed is unknown, defaulting to 1000 [ 644.363623][T21141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.381162][T20063] lo speed is unknown, defaulting to 1000 [ 644.398557][T20063] syz2: Port: 1 Link ACTIVE [ 644.876906][T21094] lo speed is unknown, defaulting to 1000 [ 644.877034][T21163] gre0 speed is unknown, defaulting to 1000 [ 645.107167][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 645.115280][ C0] lec:lec_tx_timeout: lec0 [ 645.120243][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 645.363017][T21194] validate_nla: 6 callbacks suppressed [ 645.363040][T21194] netlink: 'syz.1.4704': attribute type 1 has an invalid length. [ 645.402993][T21194] __nla_validate_parse: 13 callbacks suppressed [ 645.403016][T21194] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4704'. [ 645.508896][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4699'. [ 645.733722][ T5490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.742315][T20818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.789444][T21163] lo speed is unknown, defaulting to 1000 [ 646.036308][T21209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4706'. [ 646.692725][T21221] tipc: Resetting bearer [ 646.823760][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4711'. [ 646.838633][T21229] openvswitch: netlink: Flow actions attr not present in new flow. [ 646.867426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.229824][T21236] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 647.888416][T21262] netlink: 'syz.2.4718': attribute type 3 has an invalid length. [ 647.950930][T21262] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 648.078963][T21264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.089167][T21264] bridge0: port 3(vlan2) entered blocking state [ 648.095621][T21264] bridge0: port 3(vlan2) entered forwarding state [ 648.111469][T21266] netlink: 'syz.4.4719': attribute type 1 has an invalid length. [ 648.119515][T21266] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4719'. [ 648.131479][T21264] batman_adv: batadv0: Interface activated: dummy0 [ 648.139315][T21264] batadv0: mtu less than device minimum [ 648.146815][T21264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 648.159040][T21264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 648.170707][T21264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 648.182352][T21264] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 648.306342][ T5832] gre0 speed is unknown, defaulting to 1000 [ 648.319349][ T5832] syz1: Port: 1 Link ACTIVE [ 648.332003][ T5832] gre0 speed is unknown, defaulting to 1000 [ 648.669733][T21277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.683751][T21277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.694791][T21277] batman_adv: batadv0: Removing interface: gretap2 [ 648.833242][T21279] netlink: 'syz.1.4723': attribute type 13 has an invalid length. [ 648.915303][T21286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 648.935284][T21292] gre0 speed is unknown, defaulting to 1000 [ 649.310218][T21308] netlink: 'syz.3.4731': attribute type 1 has an invalid length. [ 649.337326][T21308] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4731'. [ 649.696306][T21292] lo speed is unknown, defaulting to 1000 [ 649.836525][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 650.127058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 650.135132][ C0] lec:lec_tx_timeout: lec0 [ 650.498825][T21352] bond10: option mode: invalid value (254) [ 650.560897][T21352] bond10 (unregistering): Released all slaves [ 650.610640][T21358] syz.2.4735 (21358) used obsolete PPPIOCDETACH ioctl [ 651.058472][T21373] net_ratelimit: 17 callbacks suppressed [ 651.058492][T21373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.065497][T21374] netlink: 'syz.0.4739': attribute type 13 has an invalid length. [ 651.072915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.115603][T21374] netlink: 'syz.0.4739': attribute type 17 has an invalid length. [ 651.440708][T21374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.471724][T21389] netlink: 'syz.2.4742': attribute type 1 has an invalid length. [ 651.479940][T21389] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4742'. [ 651.489872][ T3458] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.499859][ T3458] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.563099][ T3458] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.574806][ T3458] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.907255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.026282][ T30] audit: type=1800 audit(1775014847.471:5): pid=21408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4744" name=20202020202020203B206672616D65313A2052313D307832303230323030303235373832303230205231303D6670302066702D383D3078323032303230303032353738323032300A31333A2028626629207231203D207231302020202020202020202020202020202020202020203B206672616D65313A2052313D667030205231303D6670300A31343A2028303729207231202B3D202D382020202020202020202020202020202020202020203B206672616D65313A2052313D66702D380A3135 dev="tmpfs" ino=4924 res=0 errno=0 [ 652.550242][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4748'. [ 653.133883][T21430] netlink: 'syz.0.4754': attribute type 1 has an invalid length. [ 653.190887][T21430] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4754'. [ 653.728481][T21433] syzkaller0: entered promiscuous mode [ 653.766827][T21433] syzkaller0: entered allmulticast mode [ 653.776321][T21445] smc: net device wlan0 applied user defined pnetid SYZ0 [ 653.785575][T21445] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 653.807540][T21419] : entered promiscuous mode [ 654.163800][T21466] netlink: 'syz.4.4761': attribute type 13 has an invalid length. [ 654.171834][T21466] netlink: 'syz.4.4761': attribute type 17 has an invalid length. [ 656.074913][T21481] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 656.110408][T21466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.128583][T21484] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 656.138208][T21466] bridge0: port 1(vlan0) entered blocking state [ 656.144726][T21466] bridge0: port 1(vlan0) entered listening state [ 656.161294][T21466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.182476][ T8128] bridge0: port 1(vlan0) entered disabled state [ 656.251554][T21475] tipc: Resetting bearer [ 656.378631][ T6694] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 656.407501][T21481] batman_adv: batadv0: Interface deactivated: dummy0 [ 656.418455][T21481] bridge0: port 3(vlan2) entered disabled state [ 656.436913][T21481] batman_adv: batadv0: Removing interface: dummy0 [ 656.501285][T21484] bridge0: port 3(vlan2) entered blocking state [ 656.507837][T21484] bridge0: port 3(vlan2) entered forwarding state [ 656.549274][T21484] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 656.596580][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4766'. [ 656.641500][T21485] gre0 speed is unknown, defaulting to 1000 [ 656.681498][ T6694] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 656.864134][T21505] netlink: 'syz.3.4767': attribute type 1 has an invalid length. [ 656.947542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.958713][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4769'. [ 657.029745][T21509] bond10: (slave geneve4): making interface the new active one [ 657.070387][T21509] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 657.104016][ T3458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 657.184508][T21505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4767'. [ 657.218111][T21508] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 657.248902][T21511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 657.265431][ T3458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 657.286831][ T3458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 657.313493][T21485] lo speed is unknown, defaulting to 1000 [ 657.341166][T21509] tipc: Resetting bearer [ 657.389830][T21505] 8021q: adding VLAN 0 to HW filter on device bond10 [ 657.398671][ T3458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 657.407481][ T6681] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 657.998984][T21534] bridge0: entered promiscuous mode [ 658.004796][T21534] macsec1: entered promiscuous mode [ 658.154507][T21534] bond0: (slave rose0): Releasing backup interface [ 658.230395][T21534] tipc: Resetting bearer [ 658.236337][T21534] tipc: Resetting bearer [ 658.308307][ T6681] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.397933][T21540] gre0 speed is unknown, defaulting to 1000 [ 658.886325][T21540] lo speed is unknown, defaulting to 1000 [ 659.565425][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4783'. [ 659.940684][T21574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 660.103140][T21574] netlink: 'syz.0.4784': attribute type 4 has an invalid length. [ 660.211538][T21584] netlink: 'syz.4.4785': attribute type 142 has an invalid length. [ 660.675799][T21602] gre0 speed is unknown, defaulting to 1000 [ 660.698815][T21607] openvswitch: netlink: IPv4 tun info is not correct [ 660.943804][T21615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.952654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.230149][T21602] lo speed is unknown, defaulting to 1000 [ 661.585700][T21631] gre0 speed is unknown, defaulting to 1000 [ 661.859324][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4798'. [ 661.964399][T21650] pim6reg: entered allmulticast mode [ 661.987532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.031048][T21654] pim6reg: left allmulticast mode [ 662.086375][T21658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.095296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.143570][T21650] gre0: entered promiscuous mode [ 662.163806][T21650] gre0: entered allmulticast mode [ 662.206679][T21631] lo speed is unknown, defaulting to 1000 [ 662.229300][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'. [ 662.774845][T21656] gre0 speed is unknown, defaulting to 1000 [ 662.797287][T20818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.836680][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4802'. [ 663.142126][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4801'. [ 663.163085][T21681] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4806'. [ 663.175352][T21681] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4806'. [ 663.478826][T21660] gre0 speed is unknown, defaulting to 1000 [ 663.818678][T21656] lo speed is unknown, defaulting to 1000 [ 663.852075][T21660] lo speed is unknown, defaulting to 1000 [ 663.852702][T21689] gre0 speed is unknown, defaulting to 1000 [ 664.608406][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 664.778151][T21702] bond13: entered allmulticast mode [ 664.787616][T21702] 8021q: adding VLAN 0 to HW filter on device bond13 [ 664.817494][T21708] tipc: Enabling of bearer rejected, failed to enable media [ 664.864239][T21689] lo speed is unknown, defaulting to 1000 [ 664.948722][T21712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4811'. [ 665.039225][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4810'. [ 665.208280][T21702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 665.233966][T21702] batadv1: entered allmulticast mode [ 665.251421][T21702] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 665.385060][T21704] bond13 (unregistering): (slave batadv1): Releasing backup interface [ 665.404668][T21704] batadv1: left allmulticast mode [ 665.427460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.446918][T21704] bond13 (unregistering): Released all slaves [ 666.169676][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4814'. [ 666.388429][T21727] gre0 speed is unknown, defaulting to 1000 [ 666.468262][T21734] netlink: 'syz.2.4818': attribute type 13 has an invalid length. [ 666.476144][T21734] netlink: 'syz.2.4818': attribute type 17 has an invalid length. [ 666.608382][T21732] bridge0: port 3(vlan2) entered disabled state [ 666.830752][T21734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.869317][T21734] bridge0: port 3(vlan2) entered blocking state [ 666.876003][T21734] bridge0: port 3(vlan2) entered forwarding state [ 666.899980][T21734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.916826][ T5935] gre0 speed is unknown, defaulting to 1000 [ 666.937456][T21727] lo speed is unknown, defaulting to 1000 [ 666.939880][ T5935] gre0 speed is unknown, defaulting to 1000 [ 667.027367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.048650][T20063] gre0 speed is unknown, defaulting to 1000 [ 667.541875][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4824'. [ 667.628793][T21758] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4824'. [ 667.644391][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4825'. [ 667.658172][T21758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4824'. [ 667.703207][T21758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4824'. [ 667.832287][T21761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.016589][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 668.229368][T21769] gre0 speed is unknown, defaulting to 1000 [ 668.552270][T21769] lo speed is unknown, defaulting to 1000 [ 668.726177][T21785] gre0 speed is unknown, defaulting to 1000 [ 668.917349][T21795] netlink: 'syz.1.4834': attribute type 1 has an invalid length. [ 669.143127][T21805] netlink: 'syz.1.4834': attribute type 1 has an invalid length. [ 669.181157][T21795] 8021q: adding VLAN 0 to HW filter on device bond20 [ 669.252083][T21789] bond20: (slave veth33): Enslaving as an active interface with a down link [ 669.290985][T21805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.307986][T21805] bond20: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 669.376255][T21785] lo speed is unknown, defaulting to 1000 [ 669.385717][T21784] siw: device registration error -23 [ 669.400321][T21791] smc: removing ib device syz1 [ 669.777975][T21809] bond0: (slave dummy0): Releasing backup interface [ 669.820363][T21809] bridge0: port 3(vlan2) entered disabled state [ 669.926727][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 670.242824][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 671.680188][T21833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4844'. [ 671.781571][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4844'. [ 672.067289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.808185][T21852] __nla_validate_parse: 3 callbacks suppressed [ 672.808207][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 672.831538][T21849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.840932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.875197][T21853] lo speed is unknown, defaulting to 1000 [ 672.877411][T21849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.919037][T21861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.955147][T21849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.005654][T21866] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 673.020482][T21858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.029249][T21858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.038165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.046787][T21861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.101968][T21864] delete_channel: no stack [ 673.151112][T21875] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4855'. [ 673.162432][T21875] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4855'. [ 673.189904][ T6694] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 673.205139][T21858] 8021q: VLANs not supported on gre0 [ 673.244022][T21870] bond0: entered promiscuous mode [ 673.252386][T21870] debugfs: 'hsr0' already exists in 'hsr' [ 673.258320][T21870] Cannot create hsr debugfs directory [ 673.276139][T21862] lo speed is unknown, defaulting to 1000 [ 673.525631][T21886] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 673.567359][ T8130] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 673.770372][T21888] netlink: 'syz.3.4857': attribute type 4 has an invalid length. [ 673.822785][T21890] netlink: 'syz.3.4857': attribute type 4 has an invalid length. [ 673.889400][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4860'. [ 673.988555][ T6694] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 674.344894][T21930] netlink: 41 bytes leftover after parsing attributes in process `syz.2.4864'. [ 674.396327][T21930] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4864'. [ 674.544570][T21909] lo speed is unknown, defaulting to 1000 [ 674.618908][T21906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 674.633288][T21906] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 674.665251][ T137] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 674.688591][ T137] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 674.775802][T21906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.809675][T21906] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 674.846347][T21906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.885592][T21906] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 675.005945][T21906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 675.019330][T21906] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 675.197252][ T6694] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 675.216249][T21939] syzkaller0: entered promiscuous mode [ 675.256696][T21939] syzkaller0: entered allmulticast mode [ 675.431469][T21957] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 675.723780][T21956] lo speed is unknown, defaulting to 1000 [ 676.435230][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4874'. [ 676.504518][T21978] tipc: Resetting bearer [ 676.648486][ T6694] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 676.774423][T21986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 676.927939][T21989] netlink: 'syz.2.4879': attribute type 10 has an invalid length. [ 677.029171][T21993] netlink: 'syz.0.4880': attribute type 13 has an invalid length. [ 677.056306][T21993] netlink: 'syz.0.4880': attribute type 17 has an invalid length. [ 677.107266][ C0] net_ratelimit: 50 callbacks suppressed [ 677.107288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.217691][T20063] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 677.559352][ T8130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.702227][ T6687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.772238][T21993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.917745][T22001] tipc: Enabling of bearer rejected, failed to enable media [ 678.167798][T22011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 678.181218][T22011] netlink: 'syz.0.4882': attribute type 1 has an invalid length. [ 678.404069][T22015] lo speed is unknown, defaulting to 1000 [ 678.538456][T22022] lo speed is unknown, defaulting to 1000 [ 678.700629][T20049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.729496][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4887'. [ 678.776129][T22023] lo speed is unknown, defaulting to 1000 [ 679.107267][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 679.235016][T22045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4891'. [ 679.239355][T22044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.253057][T22044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.264549][T22044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.278602][T22044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.327699][T22044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.665315][T22062] netlink: 'syz.4.4896': attribute type 2 has an invalid length. [ 679.898570][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 680.049192][T22068] lo speed is unknown, defaulting to 1000 [ 680.250566][T22079] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4900'. [ 680.297224][T22079] netlink: 'syz.3.4900': attribute type 1 has an invalid length. [ 680.305023][T22079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4900'. [ 681.439224][T22101] lo speed is unknown, defaulting to 1000 [ 682.137532][ T78] net_ratelimit: 26 callbacks suppressed [ 682.137556][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.147614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.498469][T22119] netlink: 'syz.4.4910': attribute type 27 has an invalid length. [ 682.506370][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 682.555697][T22119] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 682.645624][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4911'. [ 682.659898][T22123] lo speed is unknown, defaulting to 1000 [ 682.680158][T22125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.689874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.747159][T22127] netlink: 'syz.3.4912': attribute type 4 has an invalid length. [ 682.931573][T22134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4916'. [ 683.085890][T22137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4915'. [ 683.097052][T22137] syzkaller0: entered promiscuous mode [ 683.102758][T22137] syzkaller0: entered allmulticast mode [ 683.220216][T22144] bpq0: left promiscuous mode [ 683.226165][T22144] bpq0: left allmulticast mode [ 683.277934][T20049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.320524][T22149] __nla_validate_parse: 1 callbacks suppressed [ 683.320547][T22149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4917'. [ 683.338030][T22149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4917'. [ 683.368533][T22150] netlink: 41 bytes leftover after parsing attributes in process `syz.4.4918'. [ 683.382767][T22150] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4918'. [ 683.386490][T22149] gretap5: entered promiscuous mode [ 683.998719][ T5935] lo speed is unknown, defaulting to 1000 [ 684.170024][T22169] netlink: 'syz.1.4923': attribute type 27 has an invalid length. [ 684.187263][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 684.190064][T22167] netlink: 'syz.0.4922': attribute type 1 has an invalid length. [ 684.196574][T22169] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 684.229399][T22167] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4922'. [ 684.410237][ T8128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.491101][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4924'. [ 684.594606][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4924'. [ 684.627900][T22182] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 684.633971][T22182] syzkaller1: linktype set to 825 [ 684.660084][T22182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4927'. [ 684.851044][T22186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4929'. [ 684.884945][T22184] lo speed is unknown, defaulting to 1000 [ 684.900060][T22186] syzkaller0: entered promiscuous mode [ 684.919735][T22186] syzkaller0: entered allmulticast mode [ 685.527407][ T8130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.590854][T22202] tipc: Failed to remove unknown binding: 66,0,0/855928916:3468916836/3468916838 [ 685.637944][T22202] tipc: Failed to remove unknown binding: 66,0,0/855928916:3468916836/3468916837 [ 685.671179][T22203] tipc: Failed to remove unknown binding: 66,0,0/855928916:3468916836/3468916838 [ 685.712045][T22203] tipc: Failed to remove unknown binding: 66,0,0/855928916:3468916836/3468916837 [ 685.994080][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 685.994788][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.016732][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.022933][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.032834][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.055024][T22211] netlink: 'syz.4.4935': attribute type 27 has an invalid length. [ 686.063087][T22211] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 686.757986][ T8130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.779912][T22218] dvmrp0: entered allmulticast mode [ 687.187450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.877973][T22236] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 687.880213][T22240] lo speed is unknown, defaulting to 1000 [ 687.907192][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 687.918897][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.940301][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.967485][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.986754][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.061998][T22236] 8021q: VLANs not supported on gre0 [ 688.070587][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.079415][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.089210][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.127619][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.207635][T22236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.740268][T22244] __nla_validate_parse: 4 callbacks suppressed [ 688.740292][T22244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4941'. [ 688.776471][T22244] syzkaller0: entered promiscuous mode [ 688.797940][T22244] syzkaller0: entered allmulticast mode [ 688.830853][T22248] netlink: 41 bytes leftover after parsing attributes in process `syz.4.4942'. [ 688.841903][T22248] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4942'. [ 689.114831][T22254] netlink: 41 bytes leftover after parsing attributes in process `syz.0.4940'. [ 689.127196][T22254] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4940'. [ 689.374653][T22264] lo speed is unknown, defaulting to 1000 [ 690.213131][T22275] netlink: 'syz.2.4946': attribute type 27 has an invalid length. [ 690.221500][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4946'. [ 690.231370][T22275] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 690.454055][T22280] syzkaller0: entered promiscuous mode [ 690.470436][T22280] syzkaller0: entered allmulticast mode [ 691.107781][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5080 ms [ 691.115908][ C0] lec:lec_tx_timeout: lec0 [ 692.227277][ C0] net_ratelimit: 29 callbacks suppressed [ 692.227299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.537309][ T8130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.098834][T22295] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 693.126617][T22297] lo speed is unknown, defaulting to 1000 [ 693.136789][T22295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.167553][T22295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.237559][T22295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.374103][T22295] 8021q: VLANs not supported on gre0 [ 693.396512][T12679] lec:lec_start_xmit: lec0:No lecd attached [ 693.404534][T22303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.450900][T22303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.507829][T22303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.518444][T22303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.587301][T22303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.673626][T22312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4954'. [ 693.727569][T22312] syzkaller0: entered promiscuous mode [ 693.748910][T22312] syzkaller0: entered allmulticast mode [ 694.289008][T22323] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4955'. [ 694.299266][T22323] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4955'. [ 694.345381][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4956'. [ 694.632279][T22332] netlink: 'syz.3.4958': attribute type 27 has an invalid length. [ 694.641364][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4958'. [ 694.650912][T22332] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 694.705161][T22331] syzkaller0: entered promiscuous mode [ 694.726502][T22331] syzkaller0: entered allmulticast mode [ 694.949874][T22341] bpq0: entered promiscuous mode [ 694.955102][T22341] bpq0: entered allmulticast mode [ 694.998219][T22341] netlink: 'syz.3.4961': attribute type 11 has an invalid length. [ 695.006099][T22341] netlink: 'syz.3.4961': attribute type 23 has an invalid length. [ 695.067047][T22341] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4961'. [ 695.117718][T22348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4961'. [ 695.142617][T22348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4961'. [ 695.170880][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4962'. [ 695.208530][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4962'. [ 695.644140][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4963'. [ 696.164628][T22372] lo speed is unknown, defaulting to 1000 [ 696.182925][T22366] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 696.436042][T22382] syzkaller0: entered promiscuous mode [ 696.442864][T22382] syzkaller0: entered allmulticast mode [ 696.884098][T22394] netlink: 'syz.2.4971': attribute type 27 has an invalid length. [ 697.088091][T22394] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 697.208279][T22398] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 697.214146][T22402] lo speed is unknown, defaulting to 1000 [ 697.248486][T22398] net_ratelimit: 50 callbacks suppressed [ 697.248506][T22398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.267225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.317707][T22398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.326223][T22398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.433095][T22398] 8021q: VLANs not supported on gre0 [ 697.510586][T22418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.592744][T22396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.602627][T22396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.262273][T22426] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 698.303104][T22433] lo speed is unknown, defaulting to 1000 [ 698.310466][T22428] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 698.528893][T22428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.554751][T22435] syzkaller0: entered promiscuous mode [ 698.567655][T22428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.576073][T22428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.582010][T22435] syzkaller0: entered allmulticast mode [ 698.757874][T22428] 8021q: VLANs not supported on gre0 [ 699.103334][T22452] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 699.109963][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 699.109998][ C0] lec:lec_tx_timeout: lec0 [ 699.771709][T22459] lo speed is unknown, defaulting to 1000 [ 700.270521][T22505] __nla_validate_parse: 12 callbacks suppressed [ 700.270543][T22505] netlink: 41 bytes leftover after parsing attributes in process `syz.4.4992'. [ 700.315828][T22505] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4992'. [ 700.588700][T22514] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 700.896932][T22525] lo speed is unknown, defaulting to 1000 [ 700.969877][T22532] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4997'. [ 701.033028][T22532] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4997'. [ 701.132098][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4998'. [ 701.550245][T22555] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 [ 701.699923][T22563] netlink: 'syz.0.5002': attribute type 1 has an invalid length. [ 701.809583][T22570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5002'. [ 702.200982][T22563] 8021q: adding VLAN 0 to HW filter on device bond14 [ 702.259870][T22568] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 702.288278][T22568] bond14: (slave batadv2): making interface the new active one [ 702.307203][ C0] net_ratelimit: 24 callbacks suppressed [ 702.307225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.324942][T22568] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 702.361286][T22585] netlink: 'syz.4.5003': attribute type 13 has an invalid length. [ 702.380656][T22585] netlink: 'syz.4.5003': attribute type 17 has an invalid length. [ 702.430706][T22589] netlink: 41 bytes leftover after parsing attributes in process `syz.3.5004'. [ 702.433564][T22570] bond14 (unregistering): (slave batadv2): Releasing active interface [ 702.468004][T22589] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5004'. [ 702.610091][T22570] bond14 (unregistering): Released all slaves [ 702.672993][T22600] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 702.964623][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5007'. [ 703.159215][T22620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5007'. [ 703.569546][T22585] gre0: left promiscuous mode [ 703.574320][T22585] gre0: left allmulticast mode [ 703.609614][T22585] bridge0: left promiscuous mode [ 703.617743][T22585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.627872][T22585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.790464][T22599] lo speed is unknown, defaulting to 1000 [ 704.272584][T22639] lo speed is unknown, defaulting to 1000 [ 704.406246][T22652] netlink: 'syz.0.5014': attribute type 2 has an invalid length. [ 704.418269][T22651] netlink: 'syz.4.5013': attribute type 4 has an invalid length. [ 704.779167][T22653] lo speed is unknown, defaulting to 1000 [ 705.454918][T22679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.478314][T22679] xt_hashlimit: size too large, truncated to 1048576 [ 705.489827][T22679] xt_hashlimit: invalid interval [ 705.833001][T22682] __nla_validate_parse: 6 callbacks suppressed [ 705.833024][T22682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5019'. [ 706.073501][T22692] block nbd2: Unsupported socket: should be TCP or UNIX. [ 706.338360][T22707] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5023'. [ 706.349617][T22704] netlink: 'syz.3.5025': attribute type 10 has an invalid length. [ 706.377104][T22707] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5023'. [ 706.416135][T22716] netlink: 'syz.3.5025': attribute type 10 has an invalid length. [ 706.420398][T22714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5024'. [ 706.466564][T22719] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 706.482768][T22710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.482843][T22704] bond0: (slave dummy0): Releasing backup interface [ 706.507326][T22710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.516390][T22710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.606906][T22704] dummy0: left promiscuous mode [ 706.673789][T22731] lo speed is unknown, defaulting to 1000 [ 706.692193][T22732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.731400][T22716] dummy0: entered promiscuous mode [ 706.740860][T22732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.751336][T22716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 706.778139][T22732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.787652][T22733] geneve6: entered promiscuous mode [ 706.793812][T22732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.847510][T22732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.887048][T20049] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 706.899372][ T8128] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 706.933312][T22715] lo speed is unknown, defaulting to 1000 [ 706.939600][ T8128] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 706.962261][T22738] netlink: 'syz.2.5028': attribute type 2 has an invalid length. [ 706.975440][ T8128] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 707.096471][T22746] netlink: 'syz.4.5030': attribute type 10 has an invalid length. [ 707.163847][T22742] netlink: 'syz.4.5030': attribute type 4 has an invalid length. [ 707.347149][ C0] net_ratelimit: 23 callbacks suppressed [ 707.347170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.436171][T22756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5031'. [ 707.639064][T22761] netlink: 'syz.3.5032': attribute type 2 has an invalid length. [ 707.779742][T22763] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 707.816823][T22767] lo speed is unknown, defaulting to 1000 [ 707.868516][T22763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.897266][T22763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.905696][T22763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.008859][T22773] erspan0: entered promiscuous mode [ 708.015049][T22773] macsec1: entered promiscuous mode [ 708.034555][T22773] erspan0: left promiscuous mode [ 708.052123][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.064148][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.080210][T22782] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5035'. [ 708.087139][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.101882][T22782] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5035'. [ 708.118029][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.157556][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.166129][T22761] lo speed is unknown, defaulting to 1000 [ 708.205124][T22781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.238478][T22763] 8021q: VLANs not supported on gre0 [ 708.832250][T22799] netlink: 'syz.1.5036': attribute type 5 has an invalid length. [ 708.909408][T22801] netlink: 'syz.4.5037': attribute type 13 has an invalid length. [ 708.918316][T22801] netlink: 'syz.4.5037': attribute type 17 has an invalid length. [ 709.184621][T22808] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5038'. [ 709.207196][T22808] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5038'. [ 709.592950][T22801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.608390][ T8130] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.628202][ T8130] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.672548][ T8130] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.704566][ T8130] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.802717][T22817] lo speed is unknown, defaulting to 1000 [ 709.832215][T22822] netlink: 'syz.2.5041': attribute type 2 has an invalid length. [ 710.733285][T22850] syzkaller1: entered promiscuous mode [ 710.739829][T22846] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 710.761677][T22850] syzkaller1: entered allmulticast mode [ 710.838387][T22848] lo speed is unknown, defaulting to 1000 [ 711.221538][T22860] vlan0: entered allmulticast mode [ 711.264060][T22860] bridge_slave_0: entered allmulticast mode [ 711.281358][T22860] bridge0: port 1(vlan0) entered blocking state [ 711.288824][T22864] netlink: 'syz.3.5050': attribute type 1 has an invalid length. [ 711.297629][T22860] bridge0: port 1(vlan0) entered disabled state [ 711.306636][T22860] vlan0: entered promiscuous mode [ 711.312469][T22860] bridge_slave_0: entered promiscuous mode [ 711.460216][T22866] bond12: entered promiscuous mode [ 711.465419][T22866] bond12: entered allmulticast mode [ 711.490998][T22866] 8021q: adding VLAN 0 to HW filter on device bond12 [ 711.514064][T22868] bridge9: entered promiscuous mode [ 711.519944][T22868] bridge9: entered allmulticast mode [ 711.528436][T22868] bond12: (slave bridge9): Enslaving as a backup interface with an up link [ 711.552649][T22866] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5050'. [ 711.662174][T22864] bridge10: entered promiscuous mode [ 711.664086][T22875] netlink: 'syz.2.5051': attribute type 2 has an invalid length. [ 711.678369][T22864] bridge10: entered allmulticast mode [ 711.684602][T22864] bond12: (slave bridge10): Enslaving as a backup interface with a down link [ 712.169759][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5052'. [ 712.205820][T22883] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 712.271239][T22885] lo speed is unknown, defaulting to 1000 [ 712.314492][T22895] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 712.348656][T22891] lo speed is unknown, defaulting to 1000 [ 712.353877][T22893] netlink: 'syz.2.5055': attribute type 2 has an invalid length. [ 712.367111][ C1] net_ratelimit: 60 callbacks suppressed [ 712.367133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.381798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.390335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.607281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.616348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.752251][T22893] lo speed is unknown, defaulting to 1000 [ 712.837178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.846457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.930490][T22894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.156119][T22912] lo speed is unknown, defaulting to 1000 [ 713.282702][T22921] lo speed is unknown, defaulting to 1000 [ 713.323267][T22918] netlink: 'syz.0.5059': attribute type 39 has an invalid length. [ 713.513819][T22928] geneve5: entered promiscuous mode [ 713.575671][T22926] lo speed is unknown, defaulting to 1000 [ 715.618505][T22969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5067'. [ 716.159473][T22982] netlink: 'syz.3.5070': attribute type 10 has an invalid length. [ 716.228360][T22985] netlink: 'syz.3.5070': attribute type 10 has an invalid length. [ 716.369037][T22991] netlink: 'syz.3.5070': attribute type 1 has an invalid length. [ 716.376884][T22991] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5070'. [ 716.493095][T22982] bond0: (slave dummy0): Releasing backup interface [ 716.505090][T22982] dummy0: left promiscuous mode [ 716.539709][T22985] dummy0: entered promiscuous mode [ 716.548883][T22985] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 716.593787][T22997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5071'. [ 716.789471][T22987] syzkaller0: entered promiscuous mode [ 716.796480][T22987] syzkaller0: entered allmulticast mode [ 716.911003][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.919796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.436500][ C0] net_ratelimit: 105 callbacks suppressed [ 717.436524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.460202][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.468785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.493245][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.502256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.560440][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.568990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.698038][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.706641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.763071][T23024] sctp: [Deprecated]: syz.4.5074 (pid 23024) Use of int in maxseg socket option. [ 717.763071][T23024] Use struct sctp_assoc_value instead [ 717.885984][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.358853][T23050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5081'. [ 720.396140][T23044] bond10: invalid ARP target 0.0.0.0 specified for addition [ 720.437107][T23044] bond10: option arp_ip_target: invalid value (0) [ 720.452684][T23044] bond10 (unregistering): Released all slaves [ 720.514622][T23040] bpq0: left promiscuous mode [ 720.522759][T23040] bpq0: left allmulticast mode [ 720.831593][T23064] TCP: TCP_TX_DELAY enabled [ 720.902102][T23067] lo speed is unknown, defaulting to 1000 [ 720.961167][T23072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5085'. [ 721.002178][T23072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5085'. [ 721.037125][T23072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5085'. [ 721.069937][T23072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5085'. [ 721.135745][T23066] netlink: 'syz.1.5078': attribute type 4 has an invalid length. [ 721.184247][T23037] netlink: 'syz.1.5078': attribute type 10 has an invalid length. [ 721.244625][T23037] bond0: (slave wlan1): refused to change device type [ 721.318986][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.328211][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.767907][T23097] netlink: 'syz.1.5088': attribute type 2 has an invalid length. [ 721.869518][T23102] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5089'. [ 721.878701][T23102] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5089'. [ 722.095237][T23116] netlink: 'syz.0.5092': attribute type 10 has an invalid length. [ 722.145541][T23110] lo speed is unknown, defaulting to 1000 [ 722.310501][T23112] netlink: 'syz.3.5091': attribute type 1 has an invalid length. [ 722.445208][T23126] lo speed is unknown, defaulting to 1000 [ 722.467284][ C0] net_ratelimit: 254 callbacks suppressed [ 722.467305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.488036][T23169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.423699][T23187] netlink: 'syz.2.5098': attribute type 4 has an invalid length. [ 724.927008][T23108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.224417][T23196] IPVS: Scheduler module ip_vs_ not found [ 725.230878][T23199] IPVS: Unknown mcast interface: vcan0 [ 725.315648][T23196] 8021q: VLANs not supported on ip6gre0 [ 725.607189][T23210] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5103'. [ 725.616206][T23210] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5103'. [ 725.879069][T23221] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 725.956028][T23221] 8021q: adding VLAN 0 to HW filter on device bond15 [ 726.167703][T23226] bond15: (slave veth37): Enslaving as an active interface with a down link [ 726.205967][T23221] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 726.222724][T23221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.244842][T23221] bond15: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 726.417648][T23241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.691859][T23247] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 726.699938][T23247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5111'. [ 727.037548][T23256] tipc: Can't bind to reserved service type 1 [ 727.061566][T23256] netlink: 'syz.4.5113': attribute type 39 has an invalid length. [ 727.156093][T23258] netlink: 'syz.3.5114': attribute type 1 has an invalid length. [ 727.174630][T23258] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5114'. [ 727.176062][T23262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5113'. [ 727.265778][T23262] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5113'. [ 727.275534][T23262] netlink: 'syz.4.5113': attribute type 5 has an invalid length. [ 727.276181][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 727.283713][T23262] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5113'. [ 727.418737][T23253] macvtap0: entered promiscuous mode [ 727.448192][T23253] virtio_net virtio1 eth0: entered promiscuous mode [ 727.488310][T23253] macvtap0: entered allmulticast mode [ 727.509481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.533973][T23253] virtio_net virtio1 eth0: entered allmulticast mode [ 727.692263][T23272] netlink: 41 bytes leftover after parsing attributes in process `syz.3.5116'. [ 727.707208][T23272] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5116'. [ 727.736017][T23262] vlan1: entered allmulticast mode [ 727.751834][T23262] bridge_slave_0: entered allmulticast mode [ 727.923185][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 727.981636][T23253] virtio_net virtio1 eth0: left allmulticast mode [ 728.007657][T23253] virtio_net virtio1 eth0: left promiscuous mode [ 728.110259][T23284] xt_bpf: check failed: parse error [ 728.120494][T23284] siw: device registration error -23 [ 728.255069][T23293] netlink: 'syz.4.5122': attribute type 1 has an invalid length. [ 728.263756][T23293] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5122'. [ 728.293523][T23296] netlink: 'syz.1.5121': attribute type 13 has an invalid length. [ 728.301821][T23296] netlink: 'syz.1.5121': attribute type 17 has an invalid length. [ 728.756703][T20058] lo speed is unknown, defaulting to 1000 [ 728.765113][T20058] syz2: Port: 1 Link DOWN [ 728.881442][T23296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.016164][ T6680] lo speed is unknown, defaulting to 1000 [ 729.037083][ T6680] syz2: Port: 1 Link ACTIVE [ 729.309440][T23329] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5127'. [ 729.781207][T23341] tipc: Enabled bearer , priority 0 [ 729.809841][T23341] syzkaller0: entered promiscuous mode [ 729.857529][T23341] syzkaller0: entered allmulticast mode [ 730.002537][T23348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.606770][T23340] tipc: Resetting bearer [ 730.754788][T23340] tipc: Disabling bearer [ 731.101399][T23372] netlink: 'syz.1.5135': attribute type 1 has an invalid length. [ 731.267342][T23385] netlink: 'syz.0.5138': attribute type 2 has an invalid length. [ 731.576878][T23385] lo speed is unknown, defaulting to 1000 [ 731.694341][T23404] netlink: 'syz.2.5142': attribute type 1 has an invalid length. [ 731.752657][T23404] 8021q: adding VLAN 0 to HW filter on device bond10 [ 731.949393][T23414] netlink: 'syz.0.5143': attribute type 27 has an invalid length. [ 732.547200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.665643][T23407] bond10: (slave veth17): Enslaving as an active interface with a down link [ 732.760425][T23433] __nla_validate_parse: 4 callbacks suppressed [ 732.760448][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5146'. [ 732.779112][T23419] Nßôž: entered allmulticast mode [ 732.849976][T23424] vlan4: entered allmulticast mode [ 732.855350][T23424] veth0_to_bond: entered allmulticast mode [ 732.864777][T23424] bond10: (slave vlan4): Opening slave failed [ 733.003914][T23440] netlink: 'syz.3.5149': attribute type 1 has an invalid length. [ 733.050045][T23440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5149'. [ 733.430504][T23457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.653447][T23463] netlink: 'syz.3.5153': attribute type 2 has an invalid length. [ 734.306320][T23475] lo speed is unknown, defaulting to 1000 [ 734.768690][T23502] netlink: 'syz.1.5157': attribute type 27 has an invalid length. [ 734.776688][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5157'. [ 735.307280][T23502] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 735.454099][T23512] netlink: 'syz.2.5158': attribute type 7 has an invalid length. [ 737.697995][T23566] netlink: 'syz.1.5169': attribute type 27 has an invalid length. [ 737.706286][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 737.715843][T23566] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 737.737541][T23564] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5168'. [ 737.899342][T23564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5168'. [ 738.158590][T23575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.317809][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5170'. [ 739.435460][T23606] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5178'. [ 739.477165][T23606] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5178'. [ 739.542633][T23593] lo speed is unknown, defaulting to 1000 [ 740.190294][T23622] lo speed is unknown, defaulting to 1000 [ 740.541197][T23631] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 740.583959][T23633] lo speed is unknown, defaulting to 1000 [ 740.591006][T23630] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5185'. [ 740.634288][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.643176][T23630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5185'. [ 740.667561][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.676124][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.689093][T23630] netlink: 'syz.1.5185': attribute type 1 has an invalid length. [ 740.697336][T23630] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5185'. [ 740.768340][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.797564][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.805900][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.837702][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.846350][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.907697][T23631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.128537][T23626] syzkaller1: entered promiscuous mode [ 741.134134][T23626] syzkaller1: entered allmulticast mode [ 741.501708][T23653] netlink: 'syz.3.5189': attribute type 2 has an invalid length. [ 741.909854][T23660] lo speed is unknown, defaulting to 1000 [ 742.163994][T23670] lo speed is unknown, defaulting to 1000 [ 742.374130][T23678] lo speed is unknown, defaulting to 1000 [ 743.270553][T23705] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 743.344948][T23703] lo speed is unknown, defaulting to 1000 [ 744.216318][T23728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5206'. [ 744.446688][T23730] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 744.490576][T23733] lo speed is unknown, defaulting to 1000 [ 744.517742][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5209'. [ 744.889786][ T5946] lo speed is unknown, defaulting to 1000 [ 744.899828][ T5946] syz2: Port: 1 Link DOWN [ 744.913035][ T6680] lo speed is unknown, defaulting to 1000 [ 745.139567][T23758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5217'. [ 745.322251][T23762] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 745.352186][T23760] lo speed is unknown, defaulting to 1000 [ 745.558160][T23777] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 745.682114][T23776] lo speed is unknown, defaulting to 1000 [ 746.720765][T23801] netlink: 'syz.0.5229': attribute type 27 has an invalid length. [ 746.728942][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5229'. [ 746.855625][T23801] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 746.876860][T23803] erspan1: entered promiscuous mode [ 746.883557][T23803] erspan1: entered allmulticast mode [ 747.374702][T23824] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 747.421185][T23816] net_ratelimit: 22 callbacks suppressed [ 747.421206][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.439742][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.451018][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.457421][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.466453][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.496222][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.505052][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.555534][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.584834][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.612450][T23826] netlink: 'syz.1.5238': attribute type 21 has an invalid length. [ 747.641029][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.653115][T23826] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.677236][T23832] geneve5: entered promiscuous mode [ 747.694042][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.709712][T23826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.717170][T23826] IPv6: NLM_F_CREATE should be set when creating new route [ 747.723901][T23835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5238'. [ 747.724470][T23826] IPv6: NLM_F_CREATE should be set when creating new route [ 747.740723][T23826] IPv6: NLM_F_CREATE should be set when creating new route [ 747.742103][ T8130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.769168][T23816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.818608][ T8130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.935544][T23835] 8021q: adding VLAN 0 to HW filter on device bond22 [ 747.953373][T23820] lo speed is unknown, defaulting to 1000 [ 747.978383][ T8130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.997192][ T8130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 748.558225][T23831] lo speed is unknown, defaulting to 1000 [ 748.741779][T23853] netlink: 'syz.1.5244': attribute type 27 has an invalid length. [ 748.767247][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 748.843851][T23853] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 749.883298][T23893] netlink: 'syz.4.5257': attribute type 27 has an invalid length. [ 749.891362][T23893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5257'. [ 749.900848][T23893] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 750.133949][T23891] syzkaller0: entered promiscuous mode [ 750.143029][T23891] syzkaller0: entered allmulticast mode [ 750.295121][T23905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5260'. [ 750.447824][T23910] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 751.051910][T23920] netlink: 'syz.0.5263': attribute type 3 has an invalid length. [ 751.415871][T23930] netlink: 'syz.0.5267': attribute type 27 has an invalid length. [ 751.424187][T23930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 753.107055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 753.115192][ C0] lec:lec_tx_timeout: lec0 [ 753.325815][T23930] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 753.356303][T23909] lo speed is unknown, defaulting to 1000 [ 753.562786][T23940] netlink: 'syz.3.5271': attribute type 27 has an invalid length. [ 753.575725][T23940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5271'. [ 753.640908][T23940] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 754.395784][T23974] lo speed is unknown, defaulting to 1000 [ 754.642738][T23980] netlink: 'syz.1.5280': attribute type 27 has an invalid length. [ 754.684709][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5280'. [ 754.728802][T23980] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 754.942633][T23983] syzkaller0: entered promiscuous mode [ 754.949874][T23983] syzkaller0: entered allmulticast mode [ 755.484979][T23998] netlink: 'syz.0.5286': attribute type 27 has an invalid length. [ 755.493340][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5286'. [ 756.900943][T23993] geneve2: entered promiscuous mode [ 756.907081][T23993] geneve2: entered allmulticast mode [ 756.940245][T23998] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 756.974995][ T3458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.995141][ T3458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.009999][ T3458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.039197][ T3458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.141368][T12679] lec:lec_start_xmit: lec0:No lecd attached [ 757.405529][T24021] netlink: 'syz.3.5292': attribute type 27 has an invalid length. [ 757.427085][T24021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 757.471040][T24024] netlink: 'syz.4.5293': attribute type 1 has an invalid length. [ 757.487327][T24021] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 757.587040][T24024] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5293'. [ 758.160091][T24048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5298'. [ 758.385355][T24057] netlink: 'syz.2.5301': attribute type 27 has an invalid length. [ 758.461953][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5301'. [ 758.522830][T24057] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 758.700009][T20818] net_ratelimit: 44 callbacks suppressed [ 758.700030][T20818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.803701][T24069] netlink: 'syz.1.5305': attribute type 27 has an invalid length. [ 758.811695][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5305'. [ 758.822104][T24069] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 758.838026][T24064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.846442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.871616][T24064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.880354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.904432][T24068] lo speed is unknown, defaulting to 1000 [ 758.937694][T24074] netlink: 'syz.0.5307': attribute type 1 has an invalid length. [ 758.966144][T24074] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5307'. [ 759.687318][T24108] netlink: 'syz.4.5316': attribute type 27 has an invalid length. [ 759.695198][T24108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5316'. [ 759.757134][T24108] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 759.813893][T24115] netlink: 'syz.3.5318': attribute type 27 has an invalid length. [ 759.857037][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 759.888303][T24115] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 760.785533][T24144] netlink: 'syz.2.5330': attribute type 27 has an invalid length. [ 760.825148][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 760.858697][T24144] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 761.237090][T24156] netlink: 'syz.1.5336': attribute type 27 has an invalid length. [ 761.245059][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5336'. [ 761.277093][T24156] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 761.350832][T24160] ÿ: renamed from bond_slave_0 [ 762.156989][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 762.165189][ C0] lec:lec_tx_timeout: lec0 [ 762.433314][T24195] netlink: 'syz.0.5351': attribute type 27 has an invalid length. [ 762.460140][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 762.491996][T24195] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 763.800259][T24231] erspan0: entered promiscuous mode [ 763.822598][T24231] macsec1: entered promiscuous mode [ 763.986480][T24231] erspan0: left promiscuous mode [ 764.316255][T24255] netlink: 'syz.1.5372': attribute type 27 has an invalid length. [ 764.332256][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5372'. [ 764.344830][T24255] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 764.361919][T24256] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 764.370530][T24256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5373'. [ 765.199222][T24292] netlink: 'syz.2.5386': attribute type 27 has an invalid length. [ 765.207725][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5386'. [ 765.224553][T24292] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 765.397995][T24301] erspan0: entered promiscuous mode [ 765.403662][T24301] macsec1: entered promiscuous mode [ 765.414700][T24303] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5391'. [ 765.424030][T24303] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5391'. [ 765.443321][T24301] erspan0: left promiscuous mode [ 765.589258][T24306] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 765.622082][T24306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.635786][T24309] lo speed is unknown, defaulting to 1000 [ 765.642666][T24306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.657691][T24306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.691009][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.716875][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.777402][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.817729][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.842233][T24320] lo speed is unknown, defaulting to 1000 [ 765.856731][T24317] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 765.924893][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.940389][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.948994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.812885][T24379] erspan0: entered promiscuous mode [ 767.834413][T24379] macsec1: entered promiscuous mode [ 767.849589][T24379] erspan0: left promiscuous mode [ 767.981675][T24386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5416'. [ 768.695459][T24403] lo speed is unknown, defaulting to 1000 [ 768.885690][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 768.897253][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 768.919547][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 768.957547][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 768.967632][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 768.977788][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 769.026676][T24409] netlink: 'syz.4.5424': attribute type 1 has an invalid length. [ 769.568300][T24429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5432'. [ 769.764326][T24439] lo speed is unknown, defaulting to 1000 [ 769.925140][T24431] xt_CT: No such helper "syz1" [ 770.591278][T24460] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 770.637432][T24470] ±ÿA©Ù¨€: renamed from lo (while UP) [ 770.641102][T24460] net_ratelimit: 759 callbacks suppressed [ 770.641118][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.679330][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.702000][T24464] lo speed is unknown, defaulting to 1000 [ 770.707531][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.770203][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.808121][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.859660][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.907240][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.946327][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.977345][T24460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.985861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.755416][T24501] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 771.763381][T24497] lo speed is unknown, defaulting to 1000 [ 772.083180][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5460'. [ 772.117470][T24508] nbd: couldn't find a device at index 0 [ 772.614789][T24532] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5467'. [ 772.634676][T24532] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5467'. [ 772.823701][T24535] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 772.851597][T24544] lo speed is unknown, defaulting to 1000 [ 773.956889][T24565] lo speed is unknown, defaulting to 1000 [ 773.959057][T24563] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 774.093455][T24568] sctp: [Deprecated]: syz.1.5476 (pid 24568) Use of int in max_burst socket option. [ 774.093455][T24568] Use struct sctp_assoc_value instead [ 774.551698][T24589] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5482'. [ 774.584510][T24589] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5482'. [ 774.596566][T24592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5484'. [ 774.995417][T24608] bridge0: entered promiscuous mode [ 775.700155][T24628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 775.740124][T24624] lo speed is unknown, defaulting to 1000 [ 775.778366][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5495'. [ 776.304366][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5498'. [ 776.355033][T24642] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5497'. [ 776.378555][T24642] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5497'. [ 776.498379][T24648] tipc: Enabled bearer , priority 10 [ 777.084268][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5511'. [ 777.324458][T24694] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5514'. [ 777.524865][T24694] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5514'. [ 777.576802][T24698] net_ratelimit: 59 callbacks suppressed [ 777.576827][T24698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.608380][T24735] validate_nla: 9 callbacks suppressed [ 778.608403][T24735] netlink: 'syz.4.5524': attribute type 1 has an invalid length. [ 778.615954][T24730] lo speed is unknown, defaulting to 1000 [ 778.706158][T24743] nbd: couldn't find a device at index 0 [ 778.933156][T24750] lo speed is unknown, defaulting to 1000 [ 779.014008][T24747] geneve3: entered promiscuous mode [ 779.081440][T24760] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 779.131662][T24752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.191326][T24752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.202360][ T8128] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 779.218188][T24752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.226625][ T8128] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 779.242044][ T8128] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 779.258095][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.278254][ T8128] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 779.296478][T24757] lo speed is unknown, defaulting to 1000 [ 779.374586][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.404244][T24768] netlink: 'syz.0.5530': attribute type 2 has an invalid length. [ 779.415938][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.427513][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.436657][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.475680][T24762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.852628][T24785] IPv6: Can't replace route, no match found [ 779.859726][T24785] IPv6: Can't replace route, no match found [ 779.934399][T24768] lo speed is unknown, defaulting to 1000 [ 780.024217][T24789] netlink: 'syz.1.5537': attribute type 1 has an invalid length. [ 780.068553][T24789] __nla_validate_parse: 3 callbacks suppressed [ 780.068574][T24789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5537'. [ 780.226759][T24802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5541'. [ 780.550435][T24816] netlink: 'syz.0.5546': attribute type 27 has an invalid length. [ 780.577057][T24816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5546'. [ 780.668610][T24816] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 780.685619][T24820] netlink: 'syz.4.5551': attribute type 2 has an invalid length. [ 780.954836][T24832] netlink: 'syz.0.5553': attribute type 1 has an invalid length. [ 781.002207][T24832] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5553'. [ 781.044150][T24831] lo speed is unknown, defaulting to 1000 [ 781.505831][T24863] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 781.530891][T24859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 781.558662][T24857] lo speed is unknown, defaulting to 1000 [ 781.601681][T24852] 8021q: VLANs not supported on gre0 [ 781.855761][T24881] netlink: 'syz.4.5568': attribute type 1 has an invalid length. [ 781.865872][T24881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5568'. [ 782.114763][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5574'. [ 782.297249][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5577'. [ 782.573167][T24918] netlink: 'syz.0.5582': attribute type 1 has an invalid length. [ 782.594363][T24918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5582'. [ 783.388135][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 783.908224][T24970] netlink: 'syz.4.5595': attribute type 1 has an invalid length. [ 783.957645][T24968] syzkaller0: entered promiscuous mode [ 783.967555][T24968] syzkaller0: entered allmulticast mode [ 786.122249][T25000] __nla_validate_parse: 4 callbacks suppressed [ 786.122271][T25000] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5607'. [ 786.203756][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5606'. [ 786.306050][T25010] netlink: 'syz.4.5610': attribute type 1 has an invalid length. [ 786.314261][T25010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5610'. [ 786.321660][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5612'. [ 786.769936][T25036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5618'. [ 786.943768][T25036] syzkaller0: entered promiscuous mode [ 786.989881][T25036] syzkaller0: entered allmulticast mode [ 787.091250][T25048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5620'. [ 789.039786][T25076] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 789.056998][T25076] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5627'. [ 789.410503][T25095] macsec1: entered promiscuous mode [ 789.458828][T25095] erspan0: entered promiscuous mode [ 789.492133][T25095] erspan0: left promiscuous mode [ 789.598850][T25098] syzkaller0: entered promiscuous mode [ 789.604476][T25098] syzkaller0: entered allmulticast mode [ 789.742527][T25114] lo speed is unknown, defaulting to 1000 [ 789.758886][T25113] netlink: 'syz.3.5637': attribute type 14 has an invalid length. [ 789.895179][T25119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5638'. [ 789.960019][T25119] tipc: Invalid UDP bearer configuration [ 789.960085][T25119] tipc: Enabling of bearer rejected, failed to enable media [ 790.052825][T25128] netlink: 'syz.4.5638': attribute type 4 has an invalid length. [ 790.281726][T25132] netlink: 'syz.3.5642': attribute type 1 has an invalid length. [ 790.303148][T25132] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5642'. [ 790.556322][T25143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5643'. [ 790.813257][T25140] syzkaller0: entered promiscuous mode [ 790.828642][T25140] syzkaller0: entered allmulticast mode [ 793.464100][T25202] __nla_validate_parse: 3 callbacks suppressed [ 793.464123][T25202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5657'. [ 793.747118][T25218] netlink: 'syz.2.5666': attribute type 10 has an invalid length. [ 793.816581][T25221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5668'. [ 794.462108][T25259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5675'. [ 794.592199][T25266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5678'. [ 794.648807][T25266] ipvlan1: entered promiscuous mode [ 794.666675][T25266] ipvlan1: left promiscuous mode [ 795.012710][T25286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5684'. [ 795.094121][T25290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.120593][T25295] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 795.148809][T25284] net_ratelimit: 24 callbacks suppressed [ 795.148828][T25284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.163922][T25284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.187023][T25284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.210259][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.224983][T25291] lo speed is unknown, defaulting to 1000 [ 795.238791][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.259804][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.281500][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.282496][T25290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.301313][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.335650][T25295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.344283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.412749][T25290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.554842][T25290] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 795.801702][ T78] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 795.946175][ T78] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 796.034982][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 796.103725][ T78] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.023155][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5709'. [ 797.214988][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5709'. [ 797.878058][T25409] erspan0: entered promiscuous mode [ 797.897145][T25409] macsec2: entered promiscuous mode [ 798.011330][T25409] erspan0: left promiscuous mode [ 798.203198][T25410] lo speed is unknown, defaulting to 1000 [ 798.598738][T25444] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5724'. [ 799.902278][T25497] netlink: 41 bytes leftover after parsing attributes in process `syz.3.5736'. [ 799.979275][T25497] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5736'. [ 800.140342][T25501] lo speed is unknown, defaulting to 1000 [ 800.740279][T25535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5746'. [ 800.764596][T25535] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5746'. [ 802.256831][T25580] lo speed is unknown, defaulting to 1000 [ 802.610095][T25587] netlink: 'syz.1.5760': attribute type 2 has an invalid length. [ 802.861775][T25597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5762'. [ 802.933248][T25597] syzkaller0: entered promiscuous mode [ 802.947649][T25597] syzkaller0: entered allmulticast mode [ 803.018334][T25598] lo speed is unknown, defaulting to 1000 [ 803.348195][T25582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.588307][T25632] netlink: 'syz.0.5773': attribute type 1 has an invalid length. [ 803.617066][T25632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5773'. [ 804.448964][T25648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5776'. [ 804.628737][T25648] syzkaller0: entered promiscuous mode [ 804.644963][T25648] syzkaller0: entered allmulticast mode [ 805.247943][T25676] net_ratelimit: 35 callbacks suppressed [ 805.247991][T25676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.546665][T25685] netlink: 'syz.2.5785': attribute type 1 has an invalid length. [ 807.565943][T25685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5785'. [ 807.694557][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5789'. [ 808.019230][T25709] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.159712][T25720] macsec1: entered promiscuous mode [ 808.165191][T25720] erspan0: entered promiscuous mode [ 808.240546][T25723] netlink: 'syz.1.5800': attribute type 1 has an invalid length. [ 808.249167][T25723] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5800'. [ 808.510768][T25738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.533511][T25745] lo speed is unknown, defaulting to 1000 [ 808.547402][T25738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.599901][T25738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.677336][T25751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.685850][T25751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.707547][T25751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.738032][T25751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.771452][T25751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.907814][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.914046][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 809.102366][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5810'. [ 809.600847][T25781] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 809.617026][T25781] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5817'. [ 809.762562][T25790] xt_hashlimit: size too large, truncated to 1048576 [ 809.925268][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5822'. [ 810.047497][T25805] lo speed is unknown, defaulting to 1000 [ 810.135268][T25810] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5825'. [ 810.327143][ C1] net_ratelimit: 42 callbacks suppressed [ 810.327166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.341411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.567077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.576333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.614503][T25818] erspan0: entered promiscuous mode [ 810.626840][T25818] macsec2: entered promiscuous mode [ 810.634432][T25818] erspan0: left promiscuous mode [ 810.732581][T25802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.857740][T25830] xt_hashlimit: size too large, truncated to 1048576 [ 810.898176][T25832] netlink: 'syz.2.5834': attribute type 1 has an invalid length. [ 810.956565][T25832] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5834'. [ 811.119851][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5835'. [ 811.628461][T25857] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 811.856551][T25864] erspan0: entered promiscuous mode [ 811.869858][T25864] macsec1: entered promiscuous mode [ 811.894051][T25864] erspan0: left promiscuous mode [ 811.965851][T25868] netlink: 'syz.3.5844': attribute type 27 has an invalid length. [ 811.967137][T25871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5846'. [ 811.997961][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5844'. [ 812.023074][T25868] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 812.037805][T25873] netlink: 'syz.4.5847': attribute type 1 has an invalid length. [ 812.045583][T25873] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5847'. [ 812.143277][T25878] bridge_slave_0: invalid flags given to default FDB implementation [ 812.313069][T25884] batadv_slave_1: entered promiscuous mode [ 812.329474][T25883] batadv_slave_1: left promiscuous mode [ 812.633167][T25897] macsec1: entered promiscuous mode [ 812.669415][T25897] erspan0: entered promiscuous mode [ 812.754641][T25897] erspan0: left promiscuous mode [ 813.483208][T25925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.066969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 814.073998][T25939] batadv_slave_1: entered promiscuous mode [ 814.075043][ C0] lec:lec_tx_timeout: lec0 [ 814.136020][T25938] batadv_slave_1: left promiscuous mode [ 814.172763][T25943] netlink: 'syz.2.5869': attribute type 27 has an invalid length. [ 814.187966][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5869'. [ 814.197512][T25943] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 814.325474][T25945] netlink: 'syz.4.5870': attribute type 1 has an invalid length. [ 814.343896][T25945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5870'. [ 814.632199][T25957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.647604][T25953] macsec1: entered promiscuous mode [ 814.652877][T25953] erspan0: entered promiscuous mode [ 815.100379][T25975] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 815.129749][T25953] erspan0: left promiscuous mode [ 815.182563][T25983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.708209][T25979] lo speed is unknown, defaulting to 1000 [ 816.212451][T26005] netlink: 'syz.3.5882': attribute type 27 has an invalid length. [ 816.247409][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5882'. [ 816.295425][T26005] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 816.379238][T26009] netlink: 'syz.2.5884': attribute type 1 has an invalid length. [ 816.390144][T26009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5884'. [ 816.510050][T26013] netlink: 'syz.3.5885': attribute type 29 has an invalid length. [ 816.540847][T26013] netlink: 'syz.3.5885': attribute type 29 has an invalid length. [ 816.604817][T26013] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5885'. [ 816.618148][T26013] unsupported nla_type 58 [ 816.653471][T26020] netlink: 'syz.4.5888': attribute type 27 has an invalid length. [ 816.661686][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5888'. [ 816.682744][T26020] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 816.998342][T26036] erspan0: entered promiscuous mode [ 817.003797][T26036] macsec2: entered promiscuous mode [ 817.100301][T26041] netlink: 'syz.4.5895': attribute type 27 has an invalid length. [ 817.108608][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5895'. [ 817.298012][T26036] erspan0: left promiscuous mode [ 817.406517][T26041] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 817.508321][T26054] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 817.516303][T26054] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5896'. [ 817.871411][T26070] netlink: 'syz.2.5899': attribute type 1 has an invalid length. [ 817.880430][T26070] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5899'. [ 818.132810][T26077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5902'. [ 818.141984][T26077] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 818.366647][T26092] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 818.677190][T26102] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 818.698644][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.708186][T26106] lo speed is unknown, defaulting to 1000 [ 818.740041][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.768177][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.847012][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.855676][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.873264][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.960867][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.008692][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.047668][T26102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.056333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.485803][T26135] validate_nla: 4 callbacks suppressed [ 819.485825][T26135] netlink: 'syz.1.5920': attribute type 27 has an invalid length. [ 819.515820][T26135] __nla_validate_parse: 4 callbacks suppressed [ 819.515844][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 819.594192][T26135] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 820.127310][T26160] netlink: 'syz.2.5928': attribute type 1 has an invalid length. [ 820.135386][T26160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5928'. [ 820.791971][T26183] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5932'. [ 820.809653][T26183] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5932'. [ 821.196366][T26197] netlink: 'syz.0.5934': attribute type 4 has an invalid length. [ 821.331864][T12679] lec:lec_start_xmit: lec0:No lecd attached [ 821.464359][T26209] netlink: 'syz.4.5935': attribute type 27 has an invalid length. [ 821.550863][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5935'. [ 821.577482][T26209] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 821.981821][T26228] netlink: 'syz.1.5941': attribute type 1 has an invalid length. [ 822.004847][T26228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5941'. [ 822.532212][T26250] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5945'. [ 822.544000][T26250] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5945'. [ 823.052060][T26256] netlink: 'syz.2.5947': attribute type 2 has an invalid length. [ 823.331198][T26259] lo speed is unknown, defaulting to 1000 [ 823.447941][T26267] netlink: 'syz.3.5949': attribute type 27 has an invalid length. [ 823.477076][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'. [ 823.511956][T26267] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 823.687513][T26274] netlink: 'syz.3.5955': attribute type 1 has an invalid length. [ 823.695768][T26274] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5955'. [ 823.980908][T26298] net_ratelimit: 36 callbacks suppressed [ 823.980972][T26298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.548598][T26300] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 824.938749][T26319] netlink: 'syz.3.5965': attribute type 27 has an invalid length. [ 824.952670][T26319] __nla_validate_parse: 2 callbacks suppressed [ 824.952694][T26319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5965'. [ 824.984942][T26319] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 825.202430][T26324] netlink: 'syz.3.5967': attribute type 2 has an invalid length. [ 825.468840][T26327] lo speed is unknown, defaulting to 1000 [ 826.122151][T26343] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5973'. [ 826.168150][T26343] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5973'. [ 826.317559][T26351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5976'. [ 826.365747][T26353] netlink: 'syz.3.5977': attribute type 27 has an invalid length. [ 826.402322][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 826.422857][T26353] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 826.766802][T26369] syzkaller1: entered promiscuous mode [ 826.783287][T26369] syzkaller1: entered allmulticast mode [ 827.085134][T26378] netlink: 'syz.1.5987': attribute type 2 has an invalid length. [ 827.106962][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 827.115035][ C0] lec:lec_tx_timeout: lec0 [ 827.351214][T26378] lo speed is unknown, defaulting to 1000 [ 827.562588][T26397] netlink: 'syz.0.5992': attribute type 27 has an invalid length. [ 827.574362][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5992'. [ 827.609548][T26397] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 827.736375][T26406] netlink: 'syz.1.5994': attribute type 11 has an invalid length. [ 827.770077][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'. [ 828.333538][T26427] erspan0: entered promiscuous mode [ 828.346872][T26427] macsec2: entered promiscuous mode [ 828.361682][T26427] erspan0: left promiscuous mode [ 829.019063][T26443] netlink: 'syz.1.6005': attribute type 27 has an invalid length. [ 829.027721][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6005'. [ 829.045939][T26443] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 829.245540][T26448] "syz.1.6008" (26448) uses obsolete ecb(arc4) skcipher [ 829.717928][T26463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.992516][T26470] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 830.623623][T26487] macsec1: entered promiscuous mode [ 830.631579][T26487] erspan0: entered promiscuous mode [ 830.669034][T26487] erspan0: left promiscuous mode [ 830.782558][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 831.028028][T26504] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 831.767892][T26533] syzkaller1: entered promiscuous mode [ 831.774175][T26533] syzkaller1: entered allmulticast mode [ 831.872825][T26539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 832.012392][T26537] lo speed is unknown, defaulting to 1000 [ 832.109339][T26531] 8021q: VLANs not supported on gre0 [ 832.380676][T26556] netlink: 'syz.3.6041': attribute type 2 has an invalid length. [ 832.472311][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6042'. [ 833.058562][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 833.137009][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 833.414886][T26599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6052'. [ 833.434282][T26599] tipc: Invalid UDP bearer configuration [ 833.434350][T26599] tipc: Enabling of bearer rejected, failed to enable media [ 833.561191][T26599] netlink: 'syz.1.6052': attribute type 4 has an invalid length. [ 833.658182][ T6686] lo speed is unknown, defaulting to 1000 [ 833.663998][ T6686] syz2: Port: 1 Link ACTIVE [ 834.166742][T26631] netlink: 'syz.0.6061': attribute type 1 has an invalid length. [ 834.281128][T26638] netlink: 'syz.1.6063': attribute type 25 has an invalid length. [ 834.289674][T26638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'. [ 834.326500][T26631] 8021q: adding VLAN 0 to HW filter on device bond14 [ 834.382834][T26635] bond14: (slave geneve5): making interface the new active one [ 834.435867][T26635] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 834.483669][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.483686][T26638] netlink: 'syz.1.6063': attribute type 25 has an invalid length. [ 834.483710][T26638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'. [ 834.492385][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.492432][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.631447][T26647] lo speed is unknown, defaulting to 1000 [ 834.680874][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.689500][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.699440][T26642] 8021q: VLANs not supported on gre0 [ 834.763132][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.787172][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.795662][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 835.016614][T26664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6068'. [ 835.085323][T26664] hsr_slave_1 (unregistering): left promiscuous mode [ 835.168611][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6070'. [ 835.190762][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6070'. [ 835.834761][T26701] __nla_validate_parse: 1 callbacks suppressed [ 835.834783][T26701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6075'. [ 835.978854][T26701] tipc: Invalid UDP bearer configuration [ 835.978918][T26701] tipc: Enabling of bearer rejected, failed to enable media [ 835.993905][T26708] netlink: 'syz.2.6075': attribute type 4 has an invalid length. [ 836.042310][T26696] lo speed is unknown, defaulting to 1000 [ 837.043707][T26755] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 837.243452][T26735] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 837.711512][T26771] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 837.815535][T26766] lo speed is unknown, defaulting to 1000 [ 838.355569][T26804] netlink: 'syz.4.6103': attribute type 11 has an invalid length. [ 838.363934][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 838.374383][T26804] netlink: 'syz.4.6103': attribute type 11 has an invalid length. [ 838.383877][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 838.515428][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 839.093730][T26825] netlink: 'syz.3.6108': attribute type 1 has an invalid length. [ 839.185142][T26825] 8021q: adding VLAN 0 to HW filter on device bond13 [ 839.929237][T26865] netlink: 'syz.0.6122': attribute type 1 has an invalid length. [ 839.938217][T26865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6122'. [ 840.504160][T26898] netlink: 'syz.0.6130': attribute type 27 has an invalid length. [ 840.528914][T26898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6130'. [ 840.558311][T26895] lo speed is unknown, defaulting to 1000 [ 840.572191][T26899] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 841.225419][T26916] netlink: 'syz.2.6135': attribute type 1 has an invalid length. [ 841.233988][T26916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6135'. [ 841.430448][T26929] netlink: 'syz.1.6139': attribute type 4 has an invalid length. [ 841.474386][ T6686] lo speed is unknown, defaulting to 1000 [ 841.495204][T26929] netlink: 'syz.1.6139': attribute type 4 has an invalid length. [ 841.505142][ T6686] syz2: Port: 1 Link DOWN [ 841.514652][ T6686] lo speed is unknown, defaulting to 1000 [ 841.524785][ T6686] syz2: Port: 1 Link ACTIVE [ 841.705318][T26941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.478790][T26966] netlink: 'syz.0.6151': attribute type 1 has an invalid length. [ 842.488059][T26966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6151'. [ 842.490353][T26955] lo speed is unknown, defaulting to 1000 [ 843.310647][T26990] netlink: 'syz.2.6156': attribute type 1 has an invalid length. [ 843.321558][T26990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6156'. [ 843.545009][T27002] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6159'. [ 843.633774][T27012] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6159'. [ 843.667108][T27012] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6159'. [ 844.187767][T27038] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 844.209626][T27038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6171'. [ 844.278177][T27048] netlink: 'syz.0.6174': attribute type 1 has an invalid length. [ 844.349007][T27048] 8021q: adding VLAN 0 to HW filter on device bond15 [ 844.469686][T27056] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6178'. [ 844.498599][T27054] netlink: 'syz.3.6177': attribute type 1 has an invalid length. [ 844.588253][T27065] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6178'. [ 844.598421][T27065] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6178'. [ 844.892274][T27080] netlink: 'syz.1.6186': attribute type 21 has an invalid length. [ 844.896755][T27086] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 844.927393][T27080] netlink: 'syz.1.6186': attribute type 22 has an invalid length. [ 844.935632][T27081] lo speed is unknown, defaulting to 1000 [ 844.961469][T27080] netlink: 'syz.1.6186': attribute type 23 has an invalid length. [ 844.987065][T27080] netlink: 'syz.1.6186': attribute type 25 has an invalid length. [ 845.023927][T27088] netlink: 'syz.4.6188': attribute type 1 has an invalid length. [ 845.463751][T27089] lo speed is unknown, defaulting to 1000 [ 846.068146][T27125] lo speed is unknown, defaulting to 1000 [ 846.367344][T27139] __nla_validate_parse: 2 callbacks suppressed [ 846.367366][T27139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6199'. [ 847.375761][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6203'. [ 848.795990][T27114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.820259][T27144] netlink: 'syz.3.6200': attribute type 1 has an invalid length. [ 848.847342][T27144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6200'. [ 848.872786][T27144] workqueue: Failed to create a rescuer kthread for wq "phy156": -EINTR [ 849.012982][T27169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.039163][T27171] lo speed is unknown, defaulting to 1000 [ 849.055897][T27169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.066196][T27169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.078302][T27177] macsec1: entered promiscuous mode [ 849.083606][T27177] erspan0: entered promiscuous mode [ 849.097897][T27177] erspan0: left promiscuous mode [ 849.243900][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.287704][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.318072][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.346459][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.367082][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6215'. [ 849.397488][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.406240][T27191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.414781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.765528][T27210] netlink: 41 bytes leftover after parsing attributes in process `syz.2.6219'. [ 849.774711][T27210] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6219'. [ 849.931012][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'. [ 850.094058][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'. [ 850.328660][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6227'. [ 850.431644][T27233] lo speed is unknown, defaulting to 1000 [ 850.440513][T27239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6228'. [ 850.477970][T27239] tipc: Invalid UDP bearer configuration [ 850.478034][T27239] tipc: Enabling of bearer rejected, failed to enable media [ 850.661084][T27245] netlink: 'syz.4.6228': attribute type 4 has an invalid length. [ 851.181767][T27266] erspan0: entered promiscuous mode [ 851.207090][T27266] macsec2: entered promiscuous mode [ 851.232117][T27266] erspan0: left promiscuous mode [ 851.546002][T27286] __nla_validate_parse: 3 callbacks suppressed [ 851.546023][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 852.172617][T27308] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6249'. [ 852.269888][T27307] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6249'. [ 852.279647][T27307] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6249'. [ 852.506089][T27299] lo speed is unknown, defaulting to 1000 [ 852.566447][T27317] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 852.652314][T27315] lo speed is unknown, defaulting to 1000 [ 852.928125][T27322] netlink: 'syz.0.6252': attribute type 29 has an invalid length. [ 852.954720][T27327] netlink: 'syz.0.6252': attribute type 29 has an invalid length. [ 853.138448][T27322] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6252'. [ 853.651930][T27344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'. [ 854.121524][T27355] erspan0: entered promiscuous mode [ 854.137787][T27355] macsec2: entered promiscuous mode [ 854.233604][T27355] erspan0: left promiscuous mode [ 854.517103][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6268'. [ 854.702245][T27387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6272'. [ 854.801001][T27394] netlink: 41 bytes leftover after parsing attributes in process `syz.1.6272'. [ 854.821319][T27394] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6272'. [ 855.489165][T27428] lo speed is unknown, defaulting to 1000 [ 855.947506][T27442] erspan0: entered promiscuous mode [ 855.963185][T27442] macsec2: entered promiscuous mode [ 855.982485][T27442] erspan0: left promiscuous mode [ 856.135386][T27428] net_ratelimit: 33 callbacks suppressed [ 856.135409][T27428] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 856.613656][T27471] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 856.614697][T27467] lo speed is unknown, defaulting to 1000 [ 856.632848][T27470] syzkaller1: entered promiscuous mode [ 856.638642][T27470] syzkaller1: entered allmulticast mode [ 856.962203][T27480] __nla_validate_parse: 13 callbacks suppressed [ 856.962225][T27480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6301'. [ 857.071458][T27483] netlink: 41 bytes leftover after parsing attributes in process `syz.2.6301'. [ 857.096667][T27483] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6301'. [ 857.253274][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6306'. [ 857.358552][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6308'. [ 857.429450][T27504] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6308'. [ 857.441080][T27504] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6308'. [ 857.635874][T27507] netlink: 'syz.1.6310': attribute type 10 has an invalid length. [ 857.737619][T27510] erspan0: entered promiscuous mode [ 857.752094][T27510] macsec2: entered promiscuous mode [ 857.783047][T27510] erspan0: left promiscuous mode [ 858.008420][T27525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6315'. [ 858.090682][T27532] netlink: 41 bytes leftover after parsing attributes in process `syz.0.6315'. [ 858.105507][T27532] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6315'. [ 858.278848][T27539] lo speed is unknown, defaulting to 1000 [ 858.288881][T27541] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 859.002204][T27563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.339034][T27591] tipc: Invalid UDP bearer configuration [ 859.339098][T27591] tipc: Enabling of bearer rejected, failed to enable media [ 859.384579][T27587] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 859.458261][T27597] netlink: 'syz.4.6333': attribute type 13 has an invalid length. [ 859.466158][T27597] netlink: 'syz.4.6333': attribute type 17 has an invalid length. [ 859.746158][T27603] netlink: 'syz.1.6335': attribute type 27 has an invalid length. [ 860.210989][T27597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.226529][T27597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 860.255222][T27603] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 860.272111][T27590] lo speed is unknown, defaulting to 1000 [ 860.766184][T27621] lo speed is unknown, defaulting to 1000 [ 861.020493][T27635] lo speed is unknown, defaulting to 1000 [ 861.394028][T27655] netlink: 'syz.1.6349': attribute type 27 has an invalid length. [ 861.531354][T27655] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 861.975777][T27676] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 862.111934][T27681] lo speed is unknown, defaulting to 1000 [ 862.266194][T27697] netlink: 'syz.0.6361': attribute type 11 has an invalid length. [ 862.512739][T27708] bridge0: port 2(erspan0) entered blocking state [ 862.522174][T27708] bridge0: port 2(erspan0) entered disabled state [ 862.531362][T27708] erspan0: entered allmulticast mode [ 862.539523][T27708] erspan0: left allmulticast mode [ 863.126030][T27700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.292426][T27734] __nla_validate_parse: 17 callbacks suppressed [ 863.292449][T27734] netlink: 41 bytes leftover after parsing attributes in process `syz.2.6371'. [ 863.328734][T27734] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6371'. [ 863.547829][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6375'. [ 863.627239][T27752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.893943][T27753] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6375'. [ 863.903960][T27753] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6375'. [ 864.388546][T27766] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 864.442178][T27763] lo speed is unknown, defaulting to 1000 [ 864.520726][ T1152] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 864.859824][T27794] netlink: 'syz.4.6381': attribute type 4 has an invalid length. [ 864.933846][T27788] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 865.187423][ C0] ================================================================== [ 865.195555][ C0] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x1ea/0x560 [ 865.203680][ C0] Read of size 8 at addr ffff888026fa6818 by task syz.0.6386/27800 [ 865.211667][ C0] [ 865.214000][ C0] CPU: 0 UID: 0 PID: 27800 Comm: syz.0.6386 Not tainted syzkaller #0 PREEMPT(full) [ 865.214018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 865.214028][ C0] Call Trace: [ 865.214035][ C0] [ 865.214042][ C0] dump_stack_lvl+0xe8/0x150 [ 865.214067][ C0] print_report+0xba/0x230 [ 865.214084][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 865.214099][ C0] kasan_report+0x117/0x150 [ 865.214118][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 865.214135][ C0] rose_t0timer_expiry+0x1ea/0x560 [ 865.214152][ C0] call_timer_fn+0x192/0x640 [ 865.214171][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 865.214185][ C0] ? call_timer_fn+0xd4/0x640 [ 865.214202][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 865.214224][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 865.214242][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 865.214257][ C0] __run_timer_base+0x652/0x8b0 [ 865.214274][ C0] ? ktime_get+0x45/0x200 [ 865.214292][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 865.214311][ C0] ? sched_clock_cpu+0x74/0x440 [ 865.214332][ C0] run_timer_softirq+0xb7/0x170 [ 865.214350][ C0] handle_softirqs+0x22a/0x870 [ 865.214370][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 865.214391][ C0] __irq_exit_rcu+0x5f/0x150 [ 865.214409][ C0] irq_exit_rcu+0x9/0x30 [ 865.214426][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 865.214447][ C0] [ 865.214452][ C0] [ 865.214458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.214474][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 865.214496][ C0] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 b0 6b 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb e2 02 00 cc 90 0f 0b 90 48 c7 [ 865.214511][ C0] RSP: 0018:ffffc9001d7de868 EFLAGS: 00000206 [ 865.214527][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 865.214538][ C0] RDX: ffff8880462adb80 RSI: ffffffff8e19b8e3 RDI: ffffffff8c27ca80 [ 865.214549][ C0] RBP: 00000000ffffffff R08: ffffffff89fc8007 R09: ffffffff8e75e620 [ 865.214560][ C0] R10: dffffc0000000000 R11: fffffbfff2023117 R12: 0000000000000246 [ 865.214571][ C0] R13: ffff8880462adb80 R14: ffffffff8e75e620 R15: 0000000000000002 [ 865.214585][ C0] ? hash_netport6_list+0x1a7/0x13d0 [ 865.214609][ C0] hash_netport6_list+0x536/0x13d0 [ 865.214633][ C0] ? hash_netport6_list+0x1a7/0x13d0 [ 865.214653][ C0] ? __pfx_hash_netport6_list+0x10/0x10 [ 865.214670][ C0] ? hash_netport6_uref+0x57/0x5b0 [ 865.214687][ C0] ? hash_netport6_uref+0x57/0x5b0 [ 865.214705][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 865.214725][ C0] ip_set_dump_do+0xffa/0x1820 [ 865.214752][ C0] ? __pfx_ip_set_dump_do+0x10/0x10 [ 865.214776][ C0] ? __alloc_skb+0x4e5/0x7d0 [ 865.214794][ C0] netlink_dump+0x722/0xe80 [ 865.214815][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 865.214836][ C0] ? netlink_lookup+0x30/0x200 [ 865.214850][ C0] ? netlink_lookup+0x30/0x200 [ 865.214863][ C0] ? netlink_lookup+0x30/0x200 [ 865.214879][ C0] __netlink_dump_start+0x5cb/0x7e0 [ 865.214898][ C0] ip_set_dump+0x15b/0x1f0 [ 865.214924][ C0] ? __pfx_ip_set_dump+0x10/0x10 [ 865.214943][ C0] ? __pfx_ip_set_dump_start+0x10/0x10 [ 865.214963][ C0] ? __pfx_ip_set_dump_do+0x10/0x10 [ 865.214982][ C0] ? __pfx_ip_set_dump_done+0x10/0x10 [ 865.215007][ C0] nfnetlink_rcv_msg+0xc00/0x12c0 [ 865.215023][ C0] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 865.215043][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 865.215076][ C0] netlink_rcv_skb+0x232/0x4b0 [ 865.215092][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 865.215107][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 865.215126][ C0] ? bpf_lsm_capable+0x9/0x20 [ 865.215146][ C0] ? security_capable+0x7e/0x2c0 [ 865.215171][ C0] nfnetlink_rcv+0x2c0/0x27b0 [ 865.215184][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 865.215202][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 865.215216][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 865.215232][ C0] ? kernel_text_address+0xa5/0xe0 [ 865.215248][ C0] ? __kernel_text_address+0xd/0x30 [ 865.215263][ C0] ? unwind_get_return_address+0x4d/0x90 [ 865.215285][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 865.215301][ C0] ? arch_stack_walk+0xfb/0x150 [ 865.215325][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 865.215344][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 865.215358][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 865.215376][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 865.215397][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 865.215418][ C0] ? __netlink_lookup+0xc6/0x8b0 [ 865.215436][ C0] ? __netlink_lookup+0x7e4/0x8b0 [ 865.215456][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.215473][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.215492][ C0] netlink_unicast+0x80f/0x9b0 [ 865.215517][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 865.215539][ C0] ? netlink_sendmsg+0x650/0xb40 [ 865.215554][ C0] ? skb_put+0x11b/0x210 [ 865.215572][ C0] netlink_sendmsg+0x813/0xb40 [ 865.215592][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.215609][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 865.215631][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.215650][ C0] ____sys_sendmsg+0x972/0x9f0 [ 865.215669][ C0] ? futex_unqueue+0x211/0x240 [ 865.215689][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.215711][ C0] ? import_iovec+0x73/0xa0 [ 865.215729][ C0] ___sys_sendmsg+0x2a5/0x360 [ 865.215749][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.215770][ C0] ? futex_wait+0x29a/0x380 [ 865.215801][ C0] ? __fget_files+0x2a/0x420 [ 865.215822][ C0] ? __fget_files+0x3a0/0x420 [ 865.215846][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 865.215866][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.215888][ C0] ? rcu_is_watching+0x15/0xb0 [ 865.215913][ C0] do_syscall_64+0x14d/0xf80 [ 865.215941][ C0] ? trace_irq_disable+0x3b/0x150 [ 865.215954][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.215969][ C0] ? clear_bhb_loop+0x40/0x90 [ 865.215986][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.216000][ C0] RIP: 0033:0x7f7bed79c819 [ 865.216014][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.216026][ C0] RSP: 002b:00007f7bee62c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.216041][ C0] RAX: ffffffffffffffda RBX: 00007f7beda15fa0 RCX: 00007f7bed79c819 [ 865.216052][ C0] RDX: 000000002000c094 RSI: 0000200000000280 RDI: 0000000000000006 [ 865.216062][ C0] RBP: 00007f7bed832c91 R08: 0000000000000000 R09: 0000000000000000 [ 865.216072][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.216081][ C0] R13: 00007f7beda16038 R14: 00007f7beda15fa0 R15: 00007ffc3a225138 [ 865.216098][ C0] [ 865.216104][ C0] [ 865.873540][ C0] Allocated by task 22144: [ 865.877963][ C0] kasan_save_track+0x3e/0x80 [ 865.882657][ C0] __kasan_kmalloc+0x93/0xb0 [ 865.887271][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 865.892664][ C0] rose_add_node+0x23c/0xf00 [ 865.897275][ C0] rose_rt_ioctl+0xd35/0x12a0 [ 865.901957][ C0] rose_ioctl+0x3fb/0x8f0 [ 865.906300][ C0] sock_do_ioctl+0x101/0x320 [ 865.910913][ C0] sock_ioctl+0x5c6/0x7f0 [ 865.915255][ C0] __se_sys_ioctl+0xfc/0x170 [ 865.919849][ C0] do_syscall_64+0x14d/0xf80 [ 865.924469][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.930377][ C0] [ 865.932703][ C0] Freed by task 0: [ 865.936417][ C0] kasan_save_track+0x3e/0x80 [ 865.941205][ C0] kasan_save_free_info+0x46/0x50 [ 865.946351][ C0] __kasan_slab_free+0x5c/0x80 [ 865.951224][ C0] kfree+0x1c1/0x630 [ 865.955136][ C0] rose_timer_expiry+0x4cb/0x600 [ 865.960076][ C0] call_timer_fn+0x192/0x640 [ 865.964677][ C0] __run_timer_base+0x652/0x8b0 [ 865.969529][ C0] run_timer_softirq+0xb7/0x170 [ 865.974393][ C0] handle_softirqs+0x22a/0x870 [ 865.979157][ C0] __irq_exit_rcu+0x5f/0x150 [ 865.983754][ C0] irq_exit_rcu+0x9/0x30 [ 865.988004][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 865.993690][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.999684][ C0] [ 866.002038][ C0] The buggy address belongs to the object at ffff888026fa6800 [ 866.002038][ C0] which belongs to the cache kmalloc-512 of size 512 [ 866.016186][ C0] The buggy address is located 24 bytes inside of [ 866.016186][ C0] freed 512-byte region [ffff888026fa6800, ffff888026fa6a00) [ 866.029903][ C0] [ 866.032240][ C0] The buggy address belongs to the physical page: [ 866.038715][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26fa4 [ 866.047654][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 866.056153][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 866.063791][ C0] page_type: f5(slab) [ 866.067784][ C0] raw: 00fff00000000040 ffff88813fea6c80 dead000000000100 dead000000000122 [ 866.076370][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 866.084952][ C0] head: 00fff00000000040 ffff88813fea6c80 dead000000000100 dead000000000122 [ 866.093627][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 866.102311][ C0] head: 00fff00000000002 ffffea00009be901 00000000ffffffff 00000000ffffffff [ 866.110998][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 866.119667][ C0] page dumped because: kasan: bad access detected [ 866.126114][ C0] page_owner tracks the page as allocated [ 866.131844][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5199, tgid 5199 (udevd), ts 35433417597, free_ts 35403131298 [ 866.152608][ C0] post_alloc_hook+0x231/0x280 [ 866.157484][ C0] get_page_from_freelist+0x24dc/0x2580 [ 866.163067][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 866.168899][ C0] allocate_slab+0x77/0x660 [ 866.173423][ C0] refill_objects+0x331/0x3c0 [ 866.178109][ C0] __pcs_replace_empty_main+0x2e6/0x730 [ 866.183663][ C0] __kmalloc_cache_noprof+0x392/0x660 [ 866.189039][ C0] kernfs_fop_open+0x397/0xca0 [ 866.193815][ C0] do_dentry_open+0x785/0x14e0 [ 866.198605][ C0] vfs_open+0x3b/0x340 [ 866.202692][ C0] path_openat+0x2e08/0x3860 [ 866.207295][ C0] do_file_open+0x23e/0x4a0 [ 866.211830][ C0] do_sys_openat2+0x113/0x200 [ 866.216554][ C0] __x64_sys_openat+0x138/0x170 [ 866.221411][ C0] do_syscall_64+0x14d/0xf80 [ 866.226010][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.231930][ C0] page last free pid 5209 tgid 5209 stack trace: [ 866.238258][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 866.243374][ C0] __slab_free+0x263/0x2b0 [ 866.247804][ C0] qlist_free_all+0x97/0x100 [ 866.252400][ C0] kasan_quarantine_reduce+0x148/0x160 [ 866.257881][ C0] __kasan_slab_alloc+0x22/0x80 [ 866.262743][ C0] __kmalloc_cache_noprof+0x2ba/0x660 [ 866.268118][ C0] kernfs_fop_open+0x397/0xca0 [ 866.272886][ C0] do_dentry_open+0x785/0x14e0 [ 866.277659][ C0] vfs_open+0x3b/0x340 [ 866.281734][ C0] path_openat+0x2e08/0x3860 [ 866.286323][ C0] do_file_open+0x23e/0x4a0 [ 866.290830][ C0] do_sys_openat2+0x113/0x200 [ 866.295516][ C0] __x64_sys_openat+0x138/0x170 [ 866.300805][ C0] do_syscall_64+0x14d/0xf80 [ 866.305488][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.311383][ C0] [ 866.313726][ C0] Memory state around the buggy address: [ 866.319368][ C0] ffff888026fa6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.327539][ C0] ffff888026fa6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 866.335629][ C0] >ffff888026fa6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 866.343874][ C0] ^ [ 866.348728][ C0] ffff888026fa6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 866.356818][ C0] ffff888026fa6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 866.364881][ C0] ================================================================== [ 866.373144][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 866.380368][ C0] CPU: 0 UID: 0 PID: 27800 Comm: syz.0.6386 Not tainted syzkaller #0 PREEMPT(full) [ 866.389853][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 866.399918][ C0] Call Trace: [ 866.403207][ C0] [ 866.406053][ C0] vpanic+0x56c/0xa60 [ 866.410093][ C0] ? __pfx_vpanic+0x10/0x10 [ 866.414609][ C0] ? irqentry_exit+0x59e/0x620 [ 866.419386][ C0] panic+0xc5/0xd0 [ 866.423115][ C0] ? __pfx_panic+0x10/0x10 [ 866.427536][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 866.432829][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 866.438204][ C0] check_panic_on_warn+0x89/0xb0 [ 866.443148][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 866.448434][ C0] end_report+0x73/0x180 [ 866.452690][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 866.457975][ C0] kasan_report+0x128/0x150 [ 866.462499][ C0] ? rose_t0timer_expiry+0x1ea/0x560 [ 866.467788][ C0] rose_t0timer_expiry+0x1ea/0x560 [ 866.472917][ C0] call_timer_fn+0x192/0x640 [ 866.477512][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 866.483146][ C0] ? call_timer_fn+0xd4/0x640 [ 866.487834][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 866.492960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 866.498163][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 866.503815][ C0] __run_timer_base+0x652/0x8b0 [ 866.508707][ C0] ? ktime_get+0x45/0x200 [ 866.513064][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 866.518451][ C0] ? sched_clock_cpu+0x74/0x440 [ 866.523313][ C0] run_timer_softirq+0xb7/0x170 [ 866.528169][ C0] handle_softirqs+0x22a/0x870 [ 866.532941][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 866.537718][ C0] __irq_exit_rcu+0x5f/0x150 [ 866.542486][ C0] irq_exit_rcu+0x9/0x30 [ 866.546735][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 866.552375][ C0] [ 866.555315][ C0] [ 866.558260][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.564244][ C0] RIP: 0010:lock_is_held_type+0x106/0x150 [ 866.569972][ C0] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 b0 6b 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cb e2 02 00 cc 90 0f 0b 90 48 c7 [ 866.589586][ C0] RSP: 0018:ffffc9001d7de868 EFLAGS: 00000206 [ 866.595683][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 866.603751][ C0] RDX: ffff8880462adb80 RSI: ffffffff8e19b8e3 RDI: ffffffff8c27ca80 [ 866.611728][ C0] RBP: 00000000ffffffff R08: ffffffff89fc8007 R09: ffffffff8e75e620 [ 866.619704][ C0] R10: dffffc0000000000 R11: fffffbfff2023117 R12: 0000000000000246 [ 866.627680][ C0] R13: ffff8880462adb80 R14: ffffffff8e75e620 R15: 0000000000000002 [ 866.635668][ C0] ? hash_netport6_list+0x1a7/0x13d0 [ 866.640970][ C0] hash_netport6_list+0x536/0x13d0 [ 866.646100][ C0] ? hash_netport6_list+0x1a7/0x13d0 [ 866.651389][ C0] ? __pfx_hash_netport6_list+0x10/0x10 [ 866.656944][ C0] ? hash_netport6_uref+0x57/0x5b0 [ 866.662062][ C0] ? hash_netport6_uref+0x57/0x5b0 [ 866.667176][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 866.672557][ C0] ip_set_dump_do+0xffa/0x1820 [ 866.677339][ C0] ? __pfx_ip_set_dump_do+0x10/0x10 [ 866.682573][ C0] ? __alloc_skb+0x4e5/0x7d0 [ 866.687168][ C0] netlink_dump+0x722/0xe80 [ 866.691689][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 866.696722][ C0] ? netlink_lookup+0x30/0x200 [ 866.701488][ C0] ? netlink_lookup+0x30/0x200 [ 866.706251][ C0] ? netlink_lookup+0x30/0x200 [ 866.711041][ C0] __netlink_dump_start+0x5cb/0x7e0 [ 866.716246][ C0] ip_set_dump+0x15b/0x1f0 [ 866.720669][ C0] ? __pfx_ip_set_dump+0x10/0x10 [ 866.725615][ C0] ? __pfx_ip_set_dump_start+0x10/0x10 [ 866.731085][ C0] ? __pfx_ip_set_dump_do+0x10/0x10 [ 866.736292][ C0] ? __pfx_ip_set_dump_done+0x10/0x10 [ 866.741680][ C0] nfnetlink_rcv_msg+0xc00/0x12c0 [ 866.746707][ C0] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 866.751917][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 866.757400][ C0] netlink_rcv_skb+0x232/0x4b0 [ 866.762168][ C0] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 866.767634][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.772930][ C0] ? bpf_lsm_capable+0x9/0x20 [ 866.777617][ C0] ? security_capable+0x7e/0x2c0 [ 866.782603][ C0] nfnetlink_rcv+0x2c0/0x27b0 [ 866.787303][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 866.792510][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 866.797801][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 866.803003][ C0] ? kernel_text_address+0xa5/0xe0 [ 866.808135][ C0] ? __kernel_text_address+0xd/0x30 [ 866.813342][ C0] ? unwind_get_return_address+0x4d/0x90 [ 866.818980][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 866.825140][ C0] ? arch_stack_walk+0xfb/0x150 [ 866.830092][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 866.835035][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 866.840150][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 866.845526][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 866.850484][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 866.855429][ C0] ? __netlink_lookup+0xc6/0x8b0 [ 866.860379][ C0] ? __netlink_lookup+0x7e4/0x8b0 [ 866.865430][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.870638][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.875850][ C0] netlink_unicast+0x80f/0x9b0 [ 866.880644][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 866.885938][ C0] ? netlink_sendmsg+0x650/0xb40 [ 866.890886][ C0] ? skb_put+0x11b/0x210 [ 866.895135][ C0] netlink_sendmsg+0x813/0xb40 [ 866.899906][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.905195][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.910145][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.915435][ C0] ____sys_sendmsg+0x972/0x9f0 [ 866.920211][ C0] ? futex_unqueue+0x211/0x240 [ 866.924984][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.930284][ C0] ? import_iovec+0x73/0xa0 [ 866.934796][ C0] ___sys_sendmsg+0x2a5/0x360 [ 866.939483][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.944692][ C0] ? futex_wait+0x29a/0x380 [ 866.949216][ C0] ? __fget_files+0x2a/0x420 [ 866.953816][ C0] ? __fget_files+0x3a0/0x420 [ 866.958513][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.963505][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.968985][ C0] ? rcu_is_watching+0x15/0xb0 [ 866.973773][ C0] do_syscall_64+0x14d/0xf80 [ 866.978482][ C0] ? trace_irq_disable+0x3b/0x150 [ 866.983517][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.989593][ C0] ? clear_bhb_loop+0x40/0x90 [ 866.994298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.000197][ C0] RIP: 0033:0x7f7bed79c819 [ 867.004622][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.024232][ C0] RSP: 002b:00007f7bee62c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.032659][ C0] RAX: ffffffffffffffda RBX: 00007f7beda15fa0 RCX: 00007f7bed79c819 [ 867.040637][ C0] RDX: 000000002000c094 RSI: 0000200000000280 RDI: 0000000000000006 [ 867.048619][ C0] RBP: 00007f7bed832c91 R08: 0000000000000000 R09: 0000000000000000 [ 867.056598][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.064571][ C0] R13: 00007f7beda16038 R14: 00007f7beda15fa0 R15: 00007ffc3a225138 [ 867.072554][ C0] [ 867.075985][ C0] Kernel Offset: disabled [ 867.080304][ C0] Rebooting in 86400 seconds..