last executing test programs: 47.31422329s ago: executing program 3 (id=6339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) 47.151532211s ago: executing program 3 (id=6344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$nci(r1, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a={0x8, 0x2, 0x1, 0x0, 0x8, 0x9, 0xa, {0xfb, 0x0, "", 0x2, 0x6}, 0x8, 0xf4, 0x8, 0x10, 0x24, "825f2d717da5d6cf066fbe3065012cc9846f7f563b4a4821068615efd8dfd4b218e996f8"}}, 0x37) shutdown(r0, 0x2) 46.962670196s ago: executing program 3 (id=6349): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) (async) r0 = socket(0x22, 0x2, 0x4) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)=""/190, 0xbe}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) r2 = socket$isdn(0x22, 0x2, 0x26) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 40.862692273s ago: executing program 2 (id=6390): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) poll(&(0x7f0000000040), 0x55, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd25, 0x9, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r7 = socket(0x1, 0x800, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) 40.842039322s ago: executing program 0 (id=6391): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async, rerun: 64) sendmsg$can_bcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x5, 0x480, 0x10001, {}, {0x0, 0x2710}, {0x4, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "d09a62af74fbbea1"}}, 0x48}}, 0x4) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x14}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xa1, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x15, &(0x7f0000000740)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xfffffffffffffff0}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x53e}}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}, @alu={0x7, 0x0, 0x5, 0x3, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xaa, &(0x7f0000000800)=""/170, 0x0, 0x3, '\x00', r3}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000d00)={0x40, r7, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x400c014) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 40.633726192s ago: executing program 2 (id=6393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xac, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x40}}, @void}}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac09, 0xfac0d]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x20000014) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r7, 0x200000000000000}, 0x38) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 40.429695191s ago: executing program 2 (id=6395): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000006c0)=""/194, 0xc2}], 0x2}, 0x40000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$netlink(0x10, 0x3, 0xa) 40.358095882s ago: executing program 0 (id=6396): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$qrtr(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x40010121}, 0x38, 0x40) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r4, @ANYBLOB="ddbe"], 0x54}}, 0x0) 40.070684681s ago: executing program 1 (id=6400): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x20008040) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x8d}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r5, @ANYRES8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) listen(r7, 0x8001) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010028ad700402d4df2500000000", @ANYRES32=r11, @ANYBLOB="104e0600816a030024001280110001006272696467655f736c617665000000000c00058008002200", @ANYBLOB="b88094bfc9e41832eca564c16722e33c7856e48766219981bf1018ab9db2022ae603a9e390202d064ce55126f9acab"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 40.045297835s ago: executing program 0 (id=6401): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000010c0)={r2, 0x1de9, 0x70}, 0xc) r3 = socket(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 39.785630921s ago: executing program 0 (id=6404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xa0, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac09, 0xfac0d]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}}, 0x20000014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 39.771662971s ago: executing program 1 (id=6405): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.562196375s ago: executing program 4 (id=6406): r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 39.559067941s ago: executing program 1 (id=6407): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000140)=0x68) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000340), &(0x7f0000000380)=0x4) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r13, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 39.557424724s ago: executing program 3 (id=6351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) 39.511282289s ago: executing program 0 (id=6408): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x7, 0x7, 0x12}) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x94) 39.48384447s ago: executing program 2 (id=6409): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000340), 0x4) socket(0xb, 0x4, 0x101) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) 39.349342633s ago: executing program 2 (id=6410): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x5e25c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) close(0x4) sendto$inet(r2, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f00000000000100"], 0x20) accept4$tipc(r2, 0x0, 0x0, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 39.311757452s ago: executing program 3 (id=6411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$nci(r1, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a={0x8, 0x2, 0x1, 0x0, 0x8, 0x9, 0xa, {0xfb, 0x0, "", 0x2, 0x6}, 0x8, 0xf4, 0x8, 0x10, 0x24, "825f2d717da5d6cf066fbe3065012cc9846f7f563b4a4821068615efd8dfd4b218e996f8"}}, 0x37) shutdown(r0, 0x2) 39.300483313s ago: executing program 1 (id=6412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x7f, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, @private1, 0x7f40, 0x700, 0x3ff, 0x4}}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x1, 0xf2, r2}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x1, 0xf2, r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.208541674s ago: executing program 4 (id=6413): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xb}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@i, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xb}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1}, &(0x7f0000000100)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@i, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 39.185410352s ago: executing program 1 (id=6414): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r1}, 0x38) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x208, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x60}, {0x36, 0x1}, {0x36, 0x1}, {0x4}, {0x18, 0x1}, {0x60, 0x1}, {0x2}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa58, 0x6, 0x3, 0x101, 0x82, 0x9, 0xb, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xfff7, 0x101, 0x4000, 0x1, 0x0, 0x5, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x400, 0x800, 0xff0b, 0x4, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc203, 0x6, 0x1000, 0x3, 0x8, 0xc, 0x4000, 0x8001]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff5, 0x6cea, 0xfffa, 0x6, 0x3, 0x33, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x60, 0x3, 0x0, 0x1, 0x9, 0x48, 0x16, 0x12, 0x36, 0x12, 0x2, 0x1, 0xb, 0x18, 0xb, 0x9, 0x26, 0x3, 0x3, 0xb, 0x2]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x3}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x3}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xa4, 0x1, 0x5, 0x6, 0x1800, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x6, 0xed4, 0x10, 0x5, 0x80, 0x6d29]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x7}, {0x0, 0xa}, {0x6, 0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x2, 0xa}, {0x6, 0x6}, {0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x2, 0x1}, {0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x6, 0x1}, {0x1}, {0x2}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x4080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=r0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="ee54019cf294eb0c6609972418e975e2947b806e1179ff07c3bd0714d03dfa8ef889f78256738332c38f1ff07853471b080b308d47"], 0x88}}, 0x0) 38.922008367s ago: executing program 4 (id=6415): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000100)) (async, rerun: 64) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000380)="0b09207965b0b9f1", 0x8, 0x4000000, &(0x7f0000000340), 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 38.345909948s ago: executing program 2 (id=6416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000c02000000000000000000000d0000000000005f000000000000"], 0x0, 0x34}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20008040) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r17 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r15, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002cbd7000fedbdf257f00000008000300", @ANYRES32=r18, @ANYBLOB="14005500783d951db00b50fd8c46877b7376def2140055001dccab43dfc46b51beddae8238ac39a80a00f500d1babf8a5ff80000140055004dfe30f5ed5ad1b0ec84cdb643b534e9c08af50015b40f8c0cb30000b952fc50a75c4483023dc1e2cf9f436e0e54a80ec91d8bf209008efbaed19c4cea94c27502cd9dffaff5dac97b867eb739afef7b6194211fc7a204522346f28897785255647bf5aea8612fc6c5ee5d"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) 36.060638382s ago: executing program 1 (id=6417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = socket(0x3, 0x5, 0xfffffffe) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xfffe, 0x20, 0xe43, 0x68f}, &(0x7f0000000140)=0x18) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) 36.04157017s ago: executing program 4 (id=6418): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000006c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 35.958098293s ago: executing program 3 (id=6419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000042}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa0, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac09, 0xfac0d]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa0}}, 0x20000014) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 35.771770676s ago: executing program 4 (id=6420): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="200000000000003114000000000000e3b6b6d52a4179300000000000", @ANYRES32=0x0], 0x20, 0x20000000}], 0x1, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ip6gretap0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2e, 0x10, 0x80, {0xd, @sctp_ip6_spec={@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4e21, 0x4e20, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4283, 0x22ed, [0x0, 0x8]}, @usr_ip4_spec={@remote, @local, 0x6, 0x3, 0x1, 0x9}, {0x0, @local, 0x4, 0x8, [0x0, 0x3ff]}, 0x8000000000000001, 0x7fffffff}, 0x1, [0x12]}}) (async, rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x1}, 0xe) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r5 = socket$inet(0x2, 0x80001, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r6], 0x1c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000) (async) r7 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x4000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x5, 0x8}, &(0x7f0000000380)=0x8) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000140), 0x0, 0x8001) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 35.707967574s ago: executing program 0 (id=6421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x68}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0xfffffffffffffd80}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0) 35.553800241s ago: executing program 4 (id=6422): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x1f4, 0x24, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90021bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01032bbd7000fcdbdf256b00800008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000080) socket$inet6(0xa, 0x800, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 0s ago: executing program 32 (id=6416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000c02000000000000000000000d0000000000005f000000000000"], 0x0, 0x34}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffe0, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20008040) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r17 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r15, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01002cbd7000fedbdf257f00000008000300", @ANYRES32=r18, @ANYBLOB="14005500783d951db00b50fd8c46877b7376def2140055001dccab43dfc46b51beddae8238ac39a80a00f500d1babf8a5ff80000140055004dfe30f5ed5ad1b0ec84cdb643b534e9c08af50015b40f8c0cb30000b952fc50a75c4483023dc1e2cf9f436e0e54a80ec91d8bf209008efbaed19c4cea94c27502cd9dffaff5dac97b867eb739afef7b6194211fc7a204522346f28897785255647bf5aea8612fc6c5ee5d"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) kernel console output (not intermixed with test programs): 641.557701][T26590] only policy match revision 0 supported [ 641.557724][T26590] unable to load match [ 644.133903][T26555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.558251][T26618] __nla_validate_parse: 4 callbacks suppressed [ 644.558274][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5556'. [ 644.684617][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5557'. [ 644.886206][T26638] Bluetooth: MGMT ver 1.23 [ 644.909122][T26639] netlink: 'syz.2.5561': attribute type 1 has an invalid length. [ 644.922202][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 644.945902][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 644.986784][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.015996][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.044843][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.064590][T26639] netlink: 'syz.2.5561': attribute type 1 has an invalid length. [ 645.099723][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.109130][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.118949][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.127266][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.136825][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.147234][T26639] netlink: 'syz.2.5561': attribute type 1 has an invalid length. [ 645.155616][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.165049][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.227397][T26639] netlink: 'syz.2.5561': attribute type 2 has an invalid length. [ 645.239932][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.249842][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 645.296216][T26660] xt_hashlimit: max too large, truncated to 1048576 [ 645.533359][T26673] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.693647][T26683] bond11: entered promiscuous mode [ 645.698797][T26683] bond11: entered allmulticast mode [ 645.705537][T26683] 8021q: adding VLAN 0 to HW filter on device bond11 [ 645.720573][T26687] macvlan2: entered promiscuous mode [ 645.726819][T26687] macvlan2: entered allmulticast mode [ 645.734383][T26687] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 645.775406][ T7798] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 645.795120][ T7798] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 645.812487][T12660] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 646.179454][ T7791] tipc: Subscription rejected, illegal request [ 646.272471][T12660] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 646.550318][T26743] 8021q: adding VLAN 0 to HW filter on device bond12 [ 646.585574][T26743] 8021q: adding VLAN 0 to HW filter on device bond12 [ 646.594434][T26743] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address [ 646.609457][T26743] bond12: (slave vxcan5): Error -95 calling set_mac_address [ 646.624843][T26746] net_ratelimit: 45 callbacks suppressed [ 646.624861][T26746] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 646.742954][T12660] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 646.775169][T26751] syzkaller0: entered promiscuous mode [ 646.780714][T26751] syzkaller0: entered allmulticast mode [ 646.814119][T26753] 8021q: VLANs not supported on lo [ 647.793901][T26811] bond7 (unregistering): Released all slaves [ 649.781722][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 650.006953][T26942] sctp: [Deprecated]: syz.1.5643 (pid 26942) Use of int in maxseg socket option. [ 650.006953][T26942] Use struct sctp_assoc_value instead [ 650.063870][T26944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.073756][T26944] validate_nla: 128 callbacks suppressed [ 650.073768][T26944] netlink: 'syz.1.5644': attribute type 1 has an invalid length. [ 650.108323][T26944] bond10: entered promiscuous mode [ 650.113963][T26944] 8021q: adding VLAN 0 to HW filter on device bond10 [ 650.124542][T26944] sctp: [Deprecated]: syz.1.5644 (pid 26944) Use of int in max_burst socket option. [ 650.124542][T26944] Use struct sctp_assoc_value instead [ 650.142735][T26944] 8021q: VLANs not supported on rose0 [ 650.158644][T26944] bond10: (slave bridge5): making interface the new active one [ 650.166353][T26944] bridge5: entered promiscuous mode [ 650.173946][T26944] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 651.547920][T26866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.714742][T26956] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 651.765675][T26956] __nla_validate_parse: 150 callbacks suppressed [ 651.765698][T26956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5647'. [ 651.788758][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5648'. [ 652.053782][T26983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5654'. [ 652.115711][T26974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.150235][T26992] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 652.247532][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5657'. [ 652.307415][T27001] netlink: 'syz.4.5657': attribute type 2 has an invalid length. [ 652.335244][T27001] netlink: 'syz.4.5657': attribute type 2 has an invalid length. [ 652.344334][T26999] syz_tun (unregistering): left allmulticast mode [ 652.625412][T27019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5670'. [ 652.673500][T27019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5670'. [ 652.711073][T27019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5670'. [ 652.734506][T27019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5670'. [ 652.984534][T27042] netlink: 'syz.0.5679': attribute type 1 has an invalid length. [ 653.032140][T27042] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.152962][T27044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5679'. [ 653.183307][T27054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5683'. [ 653.245547][T27048] netlink: 'syz.3.5683': attribute type 83 has an invalid length. [ 653.256534][T27051] netlink: 'syz.1.5682': attribute type 9 has an invalid length. [ 653.343166][T27059] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 653.503065][T27067] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.772418][T27089] bond7 (unregistering): Released all slaves [ 656.393999][T27063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.571987][T27106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.624007][T27114] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001 [ 656.658951][T27108] can: request_module (can-proto-5) failed. [ 656.684948][T12940] lec:lec_start_xmit: lec0:No lecd attached [ 656.903118][T27131] __nla_validate_parse: 2 callbacks suppressed [ 656.903140][T27131] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5704'. [ 657.003317][T27138] batadv_slave_0: Caught tx_queue_len zero misconfig [ 657.261060][T27162] nbd: must specify at least one socket [ 657.284293][T27164] netlink: 'syz.1.5712': attribute type 1 has an invalid length. [ 657.422922][T27164] 8021q: adding VLAN 0 to HW filter on device bond11 [ 657.487573][T27170] bond11: (slave geneve5): making interface the new active one [ 657.517119][T27170] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 657.527493][ T7798] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 20004 - 0 [ 657.543630][ T7798] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 20004 - 0 [ 657.574722][ T7798] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 20004 - 0 [ 657.605936][ T7798] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 20004 - 0 [ 657.870199][T27198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5721'. [ 657.907119][T27203] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 658.093755][T27212] SET target dimension over the limit! [ 658.153653][T27220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5728'. [ 658.261726][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.283282][T27227] sctp: [Deprecated]: syz.2.5731 (pid 27227) Use of int in max_burst socket option. [ 658.283282][T27227] Use struct sctp_assoc_value instead [ 658.722167][T27259] x_tables: unsorted underflow at hook 3 [ 658.736638][T27260] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 658.904040][T27269] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5746'. [ 658.955637][T27269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5746'. [ 659.438172][T27299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.474667][T27299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5754'. [ 659.568208][T27299] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 659.885093][T27320] 8021q: adding VLAN 0 to HW filter on device bond12 [ 660.104890][T27332] syzkaller0: entered promiscuous mode [ 660.124183][T27332] syzkaller0: entered allmulticast mode [ 660.575851][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5771'. [ 660.597036][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5771'. [ 660.612348][ T5144] block nbd4: Receive control failed (result -32) [ 660.664250][T27355] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5771'. [ 661.412086][T27394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5779'. [ 661.719053][T27406] bridge0: Device is already in use. [ 661.861566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 661.869672][ C1] lec:lec_tx_timeout: lec0 [ 661.969607][T27424] __nla_validate_parse: 1 callbacks suppressed [ 661.969628][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 662.264611][T27433] syzkaller0: entered promiscuous mode [ 662.281734][T27433] syzkaller0: entered allmulticast mode [ 662.305782][T27435] xt_l2tp: v2 doesn't support IP mode [ 662.331989][T27437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5787'. [ 662.341111][T27437] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5787'. [ 662.396165][T27435] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 662.556870][T27435] vcan0: entered promiscuous mode [ 662.562515][T27435] vcan0: entered allmulticast mode [ 662.578371][T27442] 8021q: VLANs not supported on ip_vti0 [ 662.777566][T27431] geneve0: entered promiscuous mode [ 663.308109][T27479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5796'. [ 663.325391][T27479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5796'. [ 663.380371][T27483] team0: Cannot enslave team device to itself [ 663.389015][T27481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5796'. [ 663.517995][T27479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5796'. [ 663.541385][T27496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5799'. [ 663.572204][T27479] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5796'. [ 663.625438][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5799'. [ 663.673477][T27496] netlink: 'syz.0.5799': attribute type 2 has an invalid length. [ 663.966526][T27518] netlink: 'syz.3.5803': attribute type 11 has an invalid length. [ 664.274075][T27534] netlink: 'syz.1.5808': attribute type 2 has an invalid length. [ 664.399444][T27538] vlan2: entered allmulticast mode [ 664.415472][T27538] hsr0: entered allmulticast mode [ 664.436141][T27538] hsr_slave_0: entered allmulticast mode [ 664.642112][T27551] ±ÿ: renamed from team_slave_1 [ 664.666789][T27554] sctp: [Deprecated]: syz.2.5814 (pid 27554) Use of int in max_burst socket option deprecated. [ 664.666789][T27554] Use struct sctp_assoc_value instead [ 664.944514][T27573] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 665.740794][T27608] lo speed is unknown, defaulting to 1000 [ 665.754996][T22515] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 665.767651][T22515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 665.776200][T22515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 665.785014][T22515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 665.802442][T22515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 665.989644][T27618] lo speed is unknown, defaulting to 1000 [ 666.344905][T27627] syzkaller1: entered promiscuous mode [ 666.350580][T27627] syzkaller1: entered allmulticast mode [ 666.805650][T27647] netlink: 'syz.1.5836': attribute type 10 has an invalid length. [ 666.971341][T27618] chnl_net:caif_netlink_parms(): no params data found [ 667.144457][ T1318] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 58308 - 0 [ 667.212587][T27656] netlink: 'syz.1.5839': attribute type 1 has an invalid length. [ 667.290065][ T147] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 58308 - 0 [ 667.324117][ T1318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 58308 - 0 [ 667.338008][T27668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.491022][ T7792] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 58308 - 0 [ 667.582712][T27677] netlink: 'syz.1.5844': attribute type 3 has an invalid length. [ 667.630467][T27618] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.655069][T27618] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.678398][T27618] bridge_slave_0: entered allmulticast mode [ 667.693027][T27618] bridge_slave_0: entered promiscuous mode [ 667.710155][T27687] __nla_validate_parse: 6 callbacks suppressed [ 667.710175][T27687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5848'. [ 667.757794][T24608] bridge_slave_1: left allmulticast mode [ 667.777866][T24608] bridge_slave_1: left promiscuous mode [ 667.801941][T24608] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.844075][T27698] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5847'. [ 667.861919][T22515] Bluetooth: hci0: command tx timeout [ 667.903814][T27698] netlink: ct family unspecified [ 668.397379][T24608] ¾x9ÿ: left allmulticast mode [ 668.402490][T24608] ¾x9ÿ: left promiscuous mode [ 668.407493][T24608] bridge0: port 1(1¾x9ÿ) entered disabled state [ 668.673961][T24608] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 668.819033][T24608] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 669.172799][T24608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.185338][T24608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.195900][T24608] bond0 (unregistering): Released all slaves [ 669.215659][T24608] bond1 (unregistering): Released all slaves [ 669.243261][T24608] bond2 (unregistering): Released all slaves [ 669.260630][T24608] bond3 (unregistering): Released all slaves [ 669.279213][T24608] bond4 (unregistering): (slave bond5): Releasing backup interface [ 669.296839][T24608] bond4 (unregistering): Released all slaves [ 669.312476][T24608] bond5 (unregistering): Released all slaves [ 669.327363][T24608] bond6 (unregistering): Released all slaves [ 669.342987][T24608] bond7 (unregistering): Released all slaves [ 669.368500][T24608] bond8 (unregistering): Released all slaves [ 669.384144][T27618] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.391407][T27618] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.403650][T27618] bridge_slave_1: entered allmulticast mode [ 669.412239][T27618] bridge_slave_1: entered promiscuous mode [ 669.458825][T27721] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.466119][T27721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.613944][T24608] tipc: Left network mode [ 669.624372][T27618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.657915][T27729] netlink: zone id is out of range [ 669.673935][T27729] netlink: zone id is out of range [ 669.679137][T27729] netlink: zone id is out of range [ 669.697347][T27618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.705544][T27729] netlink: zone id is out of range [ 669.720395][T24608] IPVS: stopping backup sync thread 21078 ... [ 669.738047][T27726] tipc: Can't bind to reserved service type 2 [ 669.751976][T27729] netlink: zone id is out of range [ 669.762068][T27729] netlink: zone id is out of range [ 669.767242][T27729] netlink: zone id is out of range [ 669.811835][T27729] netlink: zone id is out of range [ 669.827232][T27618] team0: Port device team_slave_0 added [ 669.836041][T27618] team0: Port device team_slave_1 added [ 669.861852][T27734] netlink: 'syz.2.5858': attribute type 1 has an invalid length. [ 669.880020][T27734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5858'. [ 669.941956][T22515] Bluetooth: hci0: command tx timeout [ 670.032697][T27618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.043513][T27618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.094963][T27618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.109582][T27618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.117574][T27618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.145854][T27618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.232916][T27743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.245355][T27743] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.267744][T27743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.333441][T27751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 670.343032][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5864'. [ 670.360037][T27743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.384767][T27743] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 670.408338][T27743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.439579][T27754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5865'. [ 670.470851][T27744] lo: left allmulticast mode [ 670.481044][T27744] tunl0: left allmulticast mode [ 670.488316][T27744] gre0: left allmulticast mode [ 670.495590][T27744] v: left allmulticast mode [ 670.500453][T27744] erspan0: left allmulticast mode [ 670.506450][T27744] ip_vti0: left allmulticast mode [ 670.512525][T27744] ip6_vti0: left allmulticast mode [ 670.518008][T27744] sit0: left allmulticast mode [ 670.523323][T27744] ip6tnl0: left allmulticast mode [ 670.528623][T27744] ip6gre0: left allmulticast mode [ 670.535860][T27744] syz_tun: left allmulticast mode [ 670.541280][T27744] bridge0: left allmulticast mode [ 670.547345][T27744] vcan0: left allmulticast mode [ 670.552970][T27744] bond0: left allmulticast mode [ 670.558540][T27744] team0: left allmulticast mode [ 670.564360][T27744] nlmon0: left allmulticast mode [ 670.569750][T27744] batadv0: left allmulticast mode [ 670.575662][T27744] vxcan0: left allmulticast mode [ 670.581031][T27744] vxcan1: left allmulticast mode [ 670.589152][T27744] veth0: left allmulticast mode [ 670.595899][T27744] veth1: left allmulticast mode [ 670.601137][T27744] wg0: left allmulticast mode [ 670.606880][T27744] wg1: left allmulticast mode [ 670.612736][T27744] wg2: left allmulticast mode [ 670.617739][T27744] veth0_to_bridge: left allmulticast mode [ 670.624782][T27744] veth1_to_bridge: left allmulticast mode [ 670.631308][T27744] veth0_to_bond: left allmulticast mode [ 670.637670][T27744] bond_slave_0: left allmulticast mode [ 670.643907][T27744] veth1_to_bond: left allmulticast mode [ 670.649788][T27744] bond_slave_1: left allmulticast mode [ 670.655852][T27744] veth0_to_team: left allmulticast mode [ 670.662904][T27744] team_slave_0: left allmulticast mode [ 670.668899][T27744] veth1_to_team: left allmulticast mode [ 670.675053][T27744] team_slave_1: left allmulticast mode [ 670.681034][T27744] veth0_to_batadv: left allmulticast mode [ 670.687393][T27744] batadv_slave_0: left allmulticast mode [ 670.693768][T27744] xfrm0: left allmulticast mode [ 670.698950][T27744] veth0_to_hsr: left allmulticast mode [ 670.705904][T27744] veth1_to_hsr: left allmulticast mode [ 670.712840][T27744] hsr0: left allmulticast mode [ 670.717625][T27744] hsr_slave_0: left allmulticast mode [ 670.723638][T27744] hsr_slave_1: left allmulticast mode [ 670.729501][T27744] veth1_virt_wifi: left allmulticast mode [ 670.735905][T27744] veth0_virt_wifi: left allmulticast mode [ 670.742766][T27744] virt_wifi0: left allmulticast mode [ 670.775843][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.783071][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.824309][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.831638][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.958496][T27756] netlink: 'syz.2.5866': attribute type 29 has an invalid length. [ 671.073225][T27618] hsr_slave_0: entered promiscuous mode [ 671.116779][T27618] hsr_slave_1: entered promiscuous mode [ 671.124274][T27618] debugfs: 'hsr0' already exists in 'hsr' [ 671.130081][T27618] Cannot create hsr debugfs directory [ 671.174619][T27767] netlink: 'syz.3.5867': attribute type 15 has an invalid length. [ 671.340852][T24608] hsr_slave_0: left promiscuous mode [ 671.363792][T24608] hsr_slave_1: left promiscuous mode [ 671.370875][T24608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.671890][T27799] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5874'. [ 671.706551][T27798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5874'. [ 671.794359][T27805] netlink: 'syz.4.5876': attribute type 1 has an invalid length. [ 671.802452][T27805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5876'. [ 671.816707][T27805] netlink: 'syz.4.5876': attribute type 1 has an invalid length. [ 671.825112][T27805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5876'. [ 671.973742][T24608] team0 (unregistering): Port device team_slave_1 removed [ 671.998395][T24608] team0 (unregistering): Port device team_slave_0 removed [ 672.023765][T22515] Bluetooth: hci0: command tx timeout [ 672.207678][T27816] netlink: 'syz.4.5878': attribute type 30 has an invalid length. [ 672.244015][T27795] vlan1: entered allmulticast mode [ 672.249306][T27795] bond0: entered allmulticast mode [ 672.259371][T27795] bond_slave_0: entered allmulticast mode [ 672.272766][T27795] bond_slave_1: entered allmulticast mode [ 672.280129][T27788] syzkaller1: entered promiscuous mode [ 672.289426][T27788] syzkaller1: entered allmulticast mode [ 672.326490][T27799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.335618][T27799] bond_slave_0: left allmulticast mode [ 672.353394][T27799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.364445][T27799] bond_slave_1: left allmulticast mode [ 672.374670][T27799] bond0 (unregistering): Released all slaves [ 672.575508][T27818] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 672.599808][T27818] bond13 (unregistering): Released all slaves [ 672.865021][T27840] __nla_validate_parse: 1 callbacks suppressed [ 672.865044][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 673.076678][T27855] net_ratelimit: 64 callbacks suppressed [ 673.076699][T27855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.091841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.118115][T24608] IPVS: stop unused estimator thread 0... [ 673.151359][T27855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.161211][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.172358][T27618] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 673.184747][T27857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.186298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.336059][T27618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 673.452295][T27872] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5892'. [ 673.463612][T27618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 673.505993][T27869] netlink: 'syz.3.5891': attribute type 11 has an invalid length. [ 673.590182][T27618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 673.621799][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.907050][T27618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.946352][T27618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 674.063820][T27618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.085167][T27899] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5897'. [ 674.096348][T27618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 674.102354][T22515] Bluetooth: hci0: command tx timeout [ 674.330075][T27912] bond_slave_0: Caught tx_queue_len zero misconfig [ 674.341266][T27912] sch_tbf: burst 6 is lower than device bond_slave_0 mtu (1514) ! [ 674.365284][T27912] syzkaller0: entered promiscuous mode [ 674.372876][T27912] syzkaller0: entered allmulticast mode [ 675.545152][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.554133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.563516][ T7791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.572295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.037534][T27898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.336863][T27618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.459800][T27996] syzkaller1: entered allmulticast mode [ 677.478372][T28004] netlink: 'syz.4.5905': attribute type 11 has an invalid length. [ 677.494033][T28004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5905'. [ 677.506965][T27618] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.622038][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.629345][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.679451][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.686685][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.788583][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5911'. [ 677.807656][T28014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5911'. [ 677.829022][T28014] netlink: 'syz.1.5911': attribute type 3 has an invalid length. [ 677.876906][T28020] syzkaller1: entered promiscuous mode [ 677.893319][T28020] syzkaller1: entered allmulticast mode [ 678.102772][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5914'. [ 678.192975][T27618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.643376][T28057] netlink: 'syz.4.5919': attribute type 1 has an invalid length. [ 678.719577][T28057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 678.908662][T28057] bond8: (slave veth0_to_bond): making interface the new active one [ 678.958906][T28057] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 679.119154][T27618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.331016][T27618] veth0_vlan: entered promiscuous mode [ 679.396888][T27618] veth1_vlan: entered promiscuous mode [ 679.525961][T27618] veth0_macvtap: entered promiscuous mode [ 679.568497][T27618] veth1_macvtap: entered promiscuous mode [ 679.636720][T27618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.665075][T28106] netlink: 'syz.4.5927': attribute type 5 has an invalid length. [ 679.710356][T28103] bond7: entered promiscuous mode [ 679.741044][T27618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.799432][T28110] macvlan2: entered promiscuous mode [ 679.809204][T28110] macvlan2: entered allmulticast mode [ 679.818131][T28110] bond7: (slave macvlan2): Opening slave failed [ 679.836296][T28109] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 679.883513][ T1318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.921931][ T1318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.951810][ T1318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.984821][ T1318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.118715][T28129] net_ratelimit: 2 callbacks suppressed [ 680.118736][T28129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.133354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.286845][T28129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.295823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.349579][T28129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.397673][T28127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.408603][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.419447][T28145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5937'. [ 680.472329][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.480223][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.550741][T28127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.594007][T28127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.651928][ T7798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.683221][ T7798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.700389][T28151] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5940'. [ 680.800594][T28157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5943'. [ 681.100919][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 681.171020][T28179] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5948'. [ 681.171274][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 681.181652][ T7798] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.251666][ T7798] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.260730][ T7798] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.302968][ T338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.322985][ T7792] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.545949][T28198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5952'. [ 681.935108][T28206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5955'. [ 682.631066][T28256] netlink: 'syz.4.5967': attribute type 32 has an invalid length. [ 682.648385][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5967'. [ 682.698043][T28256] bond9: option coupled_control: invalid value (192) [ 682.708922][T28256] bond9 (unregistering): Released all slaves [ 683.280713][T28289] __nla_validate_parse: 2 callbacks suppressed [ 683.280734][T28289] netlink: 181328 bytes leftover after parsing attributes in process `syz.1.5976'. [ 683.366499][T28294] netlink: 181328 bytes leftover after parsing attributes in process `syz.1.5976'. [ 683.548990][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5979'. [ 683.592437][T28307] netlink: 'syz.1.5982': attribute type 1 has an invalid length. [ 683.614724][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 683.708612][T28307] 8021q: adding VLAN 0 to HW filter on device bond13 [ 683.777333][T28308] bond14: Unable to set up delay as MII monitoring is disabled [ 683.791267][T28308] bond14 (unregistering): Released all slaves [ 683.875899][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 683.939532][T28326] netlink: 'syz.2.5987': attribute type 3 has an invalid length. [ 683.956545][T28308] bond14: Unable to set up delay as MII monitoring is disabled [ 683.991040][T28308] bond14 (unregistering): Released all slaves [ 684.117085][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 684.257123][T28308] bond14: Unable to set up delay as MII monitoring is disabled [ 684.282458][T28308] bond14 (unregistering): Released all slaves [ 684.706354][T28363] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5999'. [ 684.749667][T28365] netlink: 'syz.2.6000': attribute type 5 has an invalid length. [ 684.856178][T28367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6002'. [ 684.866047][T28370] Cannot find del_set index 49151 as target [ 685.186644][T28381] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6007'. [ 685.304517][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 685.318699][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 685.327570][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 685.352867][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 685.360873][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.418814][T28387] lo speed is unknown, defaulting to 1000 [ 685.455032][T28390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6008'. [ 685.794750][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 685.942806][T28408] hsr_slave_0: left promiscuous mode [ 685.952366][T28406] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 685.964591][T28408] hsr_slave_1: left promiscuous mode [ 686.002251][T28406] netlink: 'syz.3.6014': attribute type 5 has an invalid length. [ 686.010043][T28406] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 686.032527][T28387] chnl_net:caif_netlink_parms(): no params data found [ 686.098741][T28406] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 686.139198][T28406] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 686.156195][T28406] netlink: 'syz.3.6014': attribute type 11 has an invalid length. [ 686.175767][T28418] netlink: 'syz.1.6015': attribute type 25 has an invalid length. [ 686.190194][T28410] netlink: 'syz.4.6013': attribute type 1 has an invalid length. [ 686.200961][T28418] netlink: 'syz.1.6015': attribute type 25 has an invalid length. [ 686.222637][T28387] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.229942][T28387] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.238115][T28387] bridge_slave_0: entered allmulticast mode [ 686.247596][T28387] bridge_slave_0: entered promiscuous mode [ 686.256733][T28387] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.264627][T28387] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.272536][T28387] bridge_slave_1: entered allmulticast mode [ 686.280432][T28387] bridge_slave_1: entered promiscuous mode [ 686.342815][ T7798] net_ratelimit: 9 callbacks suppressed [ 686.342834][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.357519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.382023][T28420] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 686.424424][T28420] bond14 (unregistering): Released all slaves [ 686.433617][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.442023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.583145][T28387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.626997][T28387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.674109][T28439] netlink: 'syz.4.6019': attribute type 21 has an invalid length. [ 686.689180][T28435] syzkaller0: entered promiscuous mode [ 686.695229][T28435] syzkaller0: entered allmulticast mode [ 686.698378][T28439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.708068][T28439] IPv6: NLM_F_CREATE should be set when creating new route [ 686.715396][T28439] IPv6: NLM_F_CREATE should be set when creating new route [ 686.722714][T28439] IPv6: NLM_F_CREATE should be set when creating new route [ 686.906287][T28387] team0: Port device team_slave_0 added [ 686.918902][T28445] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.927736][T28445] team0: Device macvlan2 is already an upper device of the team interface [ 686.978612][T28387] team0: Port device team_slave_1 added [ 687.062446][T24608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.070832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.106281][T28387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.126145][T28387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.203509][T28387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.256784][T28387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.279466][T28387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.337830][T28387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.462544][T22515] Bluetooth: hci5: command tx timeout [ 689.256377][T28387] hsr_slave_0: entered promiscuous mode [ 689.263227][T28387] hsr_slave_1: entered promiscuous mode [ 689.269421][T28387] debugfs: 'hsr0' already exists in 'hsr' [ 689.276042][T28387] Cannot create hsr debugfs directory [ 689.508460][T28496] netlink: zone id is out of range [ 689.514029][T28496] netlink: zone id is out of range [ 689.519269][T28496] netlink: zone id is out of range [ 689.529303][T28496] netlink: zone id is out of range [ 689.542897][T22515] Bluetooth: hci5: command tx timeout [ 689.615200][T28496] tipc: Started in network mode [ 689.625306][T28496] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 689.650450][T28496] tipc: Enabling of bearer rejected, failed to enable media [ 689.929734][T28387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.962004][T28387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.996644][T28387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 690.190048][T28387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.210833][T28387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.224657][T28387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 690.331193][T28530] __nla_validate_parse: 7 callbacks suppressed [ 690.331214][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6045'. [ 690.433725][T28387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.455864][T28387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.482084][T28387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 690.635162][T28387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.658234][T28387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.674562][T28387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 690.696393][T28544] bond0: entered promiscuous mode [ 690.704146][T28544] bond0: entered allmulticast mode [ 690.709915][T28544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.781096][T28546] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6049'. [ 690.821555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 690.829664][ C1] lec:lec_tx_timeout: lec0 [ 691.553014][ T7792] net_ratelimit: 5 callbacks suppressed [ 691.553035][ T7792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.567356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.626150][T22515] Bluetooth: hci5: command tx timeout [ 692.186349][T24608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.195245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.826650][ T7792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.835145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.022968][T28387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 693.038217][T28578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6057'. [ 693.056142][T28576] syzkaller0: entered promiscuous mode [ 693.062168][T28576] syzkaller0: entered allmulticast mode [ 693.075161][T28387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 693.091110][T28579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6057'. [ 693.100441][T28584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6057'. [ 693.274072][T28387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 693.321808][T28387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 693.459998][T28604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6061'. [ 693.584884][T28609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6062'. [ 693.602351][T28608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6062'. [ 693.619794][T28387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.644804][T28611] netlink: 'syz.0.6064': attribute type 2 has an invalid length. [ 693.657468][T28611] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6064'. [ 693.689290][T28387] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.705667][T22515] Bluetooth: hci5: command tx timeout [ 693.718402][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.725645][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.793839][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.801078][ T7792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.918367][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6068'. [ 694.010515][T28625] geneve2: entered promiscuous mode [ 694.026388][T28625] geneve2: entered allmulticast mode [ 694.120794][T28634] netlink: 'syz.1.6069': attribute type 1 has an invalid length. [ 694.351274][T28387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.451177][T28387] veth0_vlan: entered promiscuous mode [ 694.490209][T28387] veth1_vlan: entered promiscuous mode [ 694.565697][T28387] veth0_macvtap: entered promiscuous mode [ 694.590356][T28387] veth1_macvtap: entered promiscuous mode [ 694.630101][T28387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.640438][T28655] netlink: 'syz.0.6078': attribute type 5 has an invalid length. [ 694.724747][T28387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.737620][T28661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.778002][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.799767][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.892548][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.920217][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.957832][T28664] veth0_to_bond: entered allmulticast mode [ 695.172931][T28674] tipc: Trying to set illegal importance in message [ 695.280592][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.308064][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.468352][ T338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.495610][ T338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.506101][T28688] __nla_validate_parse: 11 callbacks suppressed [ 695.506121][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6088'. [ 695.523641][T28688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6088'. [ 695.732817][T28698] ipt_ECN: cannot use operation on non-tcp rule [ 695.867424][T28710] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 695.906018][T28708] openvswitch: netlink: Missing valid actions attribute. [ 695.913764][T28708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.130965][T28726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.934177][T28725] net_ratelimit: 4 callbacks suppressed [ 696.934200][T28725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.949665][T28726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 696.967439][T28726] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 696.999066][T28726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.006637][T28726] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 697.019126][T28726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 697.036848][T28726] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 697.090643][T28726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 697.117564][T28726] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 697.175509][T28726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 697.192343][T28726] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 697.295978][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 697.307278][T24608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.315966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.330483][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 697.344038][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 697.354234][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 697.362561][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 697.386208][T28768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6110'. [ 697.508876][T22515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 697.524268][T22515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 697.532308][T22515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 697.558406][T22515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 697.567822][T22515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 697.643071][T28777] @: renamed from bond_slave_1 [ 697.776005][T28742] lo speed is unknown, defaulting to 1000 [ 697.943787][ T7791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.952780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.019656][T28802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6118'. [ 698.093680][T28806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6118'. [ 698.389158][T28742] chnl_net:caif_netlink_parms(): no params data found [ 698.585334][ T7792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.594071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.768375][T28742] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.778466][T28742] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.786078][T28742] bridge_slave_0: entered allmulticast mode [ 698.794581][T28742] bridge_slave_0: entered promiscuous mode [ 698.803931][T28742] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.811162][T28742] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.820405][T28742] bridge_slave_1: entered allmulticast mode [ 698.829020][T28742] bridge_slave_1: entered promiscuous mode [ 698.851325][T28831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.894194][T28742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.907999][T28742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.987726][T28742] team0: Port device team_slave_0 added [ 699.001001][T28838] gtp3: entered promiscuous mode [ 699.007996][T28838] gtp3: entered allmulticast mode [ 699.028714][T28742] team0: Port device team_slave_1 added [ 699.196069][T28742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.228359][T28742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.258078][T28742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.272262][T28742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.279655][T28742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.308352][T28742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.330524][T28847] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6128'. [ 699.423573][T28742] hsr_slave_0: entered promiscuous mode [ 699.442824][T28742] hsr_slave_1: entered promiscuous mode [ 699.480212][T28742] debugfs: 'hsr0' already exists in 'hsr' [ 699.524181][T28742] Cannot create hsr debugfs directory [ 699.632178][ T5144] Bluetooth: hci2: command tx timeout [ 699.824008][T28867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6135'. [ 699.839923][T28867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6135'. [ 699.890454][T28867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6135'. [ 699.930643][T28867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6135'. [ 699.957730][T28873] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 699.975172][T28875] netlink: 'syz.2.6135': attribute type 5 has an invalid length. [ 700.075915][T28742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.118329][T28742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.152925][T28742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 53465 - 0 [ 700.170505][T28742] netdevsim netdevsim1 eth3 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 700.269516][T28885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.303455][T28885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.323796][T28885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.331240][T28885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.400539][T28742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.417231][T28742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.448914][T28742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 53465 - 0 [ 700.470843][T28742] netdevsim netdevsim1 eth2 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 700.674032][T28742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.702094][T28742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.730152][T28742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 53465 - 0 [ 700.773603][T28742] netdevsim netdevsim1 eth1 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 700.831698][T28909] __nla_validate_parse: 2 callbacks suppressed [ 700.831721][T28909] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6144'. [ 700.852952][T28742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.868510][T28742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 700.911193][T28742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 53465 - 0 [ 700.941756][T28742] netdevsim netdevsim1 eth0 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 700.992275][T28920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 701.043595][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 701.068988][T28922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.267093][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 701.445085][T28922] team0 (unregistering): Port device team_slave_0 removed [ 701.494882][T28937] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6151'. [ 701.504598][T28922] team0 (unregistering): Port device team_slave_1 removed [ 701.557485][T28742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 701.574779][T28742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 701.617061][T28921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.642056][T28742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 701.692478][T28742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.702153][ T5144] Bluetooth: hci2: command tx timeout [ 701.838394][T28954] netlink: 'syz.0.6153': attribute type 1 has an invalid length. [ 701.973875][T28954] bond1 (unregistering): Released all slaves [ 702.009156][T28950] syzkaller1: entered promiscuous mode [ 702.019774][T28950] syzkaller1: entered allmulticast mode [ 702.086661][T28742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.133187][T28742] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.166647][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.173953][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.188061][T28965] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6157'. [ 702.207875][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.215127][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.230949][T28965] netlink: 'syz.2.6157': attribute type 1 has an invalid length. [ 702.596298][T28991] x_tables: unsorted underflow at hook 2 [ 702.766032][T28742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.777933][T29001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6163'. [ 702.810937][T28997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6163'. [ 702.860424][T28742] veth0_vlan: entered promiscuous mode [ 702.874870][T28742] veth1_vlan: entered promiscuous mode [ 702.937128][T28742] veth0_macvtap: entered promiscuous mode [ 702.948852][T28742] veth1_macvtap: entered promiscuous mode [ 702.973263][T28742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.000217][T28742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.102130][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.110571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.180571][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.189686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.229784][ T338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.256607][ T338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.279295][T29006] syzkaller0: entered promiscuous mode [ 703.285891][T29006] syzkaller0: entered allmulticast mode [ 703.311299][ T338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.324403][ T338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.500610][T29018] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 703.513214][ T7792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.539950][ T7792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.554542][T29018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6169'. [ 703.567763][T29018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6169'. [ 703.597187][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.642454][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.781980][ T5144] Bluetooth: hci2: command tx timeout [ 704.341841][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 704.346042][T24604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.357837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.472751][T22515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 704.493922][T22515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 704.511174][T22515] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 704.532143][T22515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 704.549800][T22515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 704.619311][T29064] lo speed is unknown, defaulting to 1000 [ 704.732939][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.742162][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.796147][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.816204][T29070] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 704.940774][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.960385][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.969585][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.978696][T29070] hsr0 speed is unknown, defaulting to 1000 [ 704.988455][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.102897][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.110037][T29083] hsr_slave_0: left promiscuous mode [ 705.132565][T29083] hsr_slave_1: left promiscuous mode [ 705.181254][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.233433][ T338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.246065][ T338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.257287][ T338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.288884][T29064] chnl_net:caif_netlink_parms(): no params data found [ 705.326525][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.355272][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.414393][ T338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.440277][ T338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.475070][ T338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.537047][T29070] hsr0 speed is unknown, defaulting to 1000 [ 705.645992][T29092] syzkaller0: entered promiscuous mode [ 705.861895][ T5144] Bluetooth: hci2: command tx timeout [ 706.662495][ T5144] Bluetooth: hci4: command tx timeout [ 707.332720][T29070] hsr0 speed is unknown, defaulting to 1000 [ 707.338814][T29105] __nla_validate_parse: 3 callbacks suppressed [ 707.338830][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6189'. [ 707.443520][ T338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.472077][ T338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.496741][ T338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.515950][T29109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6191'. [ 707.659858][T29109] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 707.680208][T29120] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 707.721272][T29131] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6194'. [ 707.744173][ T338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.802801][ T338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.832749][ T338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.869361][T29141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6197'. [ 707.906783][T29139] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 707.920957][T29139] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 707.930248][T29139] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 707.949225][T29064] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.972193][T29064] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.979652][T29064] bridge_slave_0: entered allmulticast mode [ 707.989039][T29138] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 708.000324][T29064] bridge_slave_0: entered promiscuous mode [ 708.009383][T29138] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 708.025308][T29064] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.032866][T29138] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 708.044565][T29064] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.064095][T29064] bridge_slave_1: entered allmulticast mode [ 708.083697][T29064] bridge_slave_1: entered promiscuous mode [ 708.104778][T29135] netlink: 'syz.3.6195': attribute type 4 has an invalid length. [ 708.179721][T29064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.195532][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.204908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.217084][T29135] syzkaller0: entered promiscuous mode [ 708.223426][T29135] syzkaller0: entered allmulticast mode [ 708.267792][T29064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.340857][T29159] Bluetooth: MGMT ver 1.23 [ 708.366603][T29156] netlink: 404 bytes leftover after parsing attributes in process `syz.2.6202'. [ 708.414396][T29146] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6199'. [ 708.559602][T29064] team0: Port device team_slave_0 added [ 708.576822][ T147] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 58308 - 0 [ 708.602238][ T147] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 58308 - 0 [ 708.631279][T29064] team0: Port device team_slave_1 added [ 708.742684][ T5144] Bluetooth: hci4: command tx timeout [ 708.773019][T29064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.780867][T29064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.817794][T29064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.831512][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.840361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.849108][T24604] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 58308 - 0 [ 708.858634][T29169] syzkaller0: entered promiscuous mode [ 708.899703][T29169] syzkaller0: entered allmulticast mode [ 708.916333][T29064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.931685][T29064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.987092][T29064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.040839][ T147] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 58308 - 0 [ 709.071134][T29179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6208'. [ 709.110037][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6208'. [ 709.284339][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6210'. [ 709.306457][T29184] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6210'. [ 709.499934][ T338] erspan0 (unregistering): left allmulticast mode [ 709.577614][ T338] batman_adv: batadv0: Removing interface: gretap1 [ 709.612377][ T338] bond3 (unregistering): (slave gretap2): Releasing active interface [ 709.645051][T29197] block nbd0: NBD_DISCONNECT [ 709.649816][T29197] block nbd0: Send disconnect failed -32 [ 709.657102][T29197] block nbd0: shutting down sockets [ 709.663621][ T338] bond4 (unregistering): (slave gretap4): Releasing active interface [ 709.699024][T29197] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 709.720191][ T338] bond1 (unregistering): (slave geneve2): Releasing active interface [ 709.820884][ T338] bond5 (unregistering): (slave bridge0): Releasing active interface [ 709.980365][ T338]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.992310][ T338]  (unregistering): (slave @): Releasing backup interface [ 710.000895][ T338]  (unregistering): Released all slaves [ 710.015697][ T338] bond1 (unregistering): Released all slaves [ 710.033055][ T338] bond2 (unregistering): Released all slaves [ 710.048487][ T338] bond3 (unregistering): Released all slaves [ 710.064453][ T338] bond4 (unregistering): (slave veth3): Releasing active interface [ 710.076946][ T338] bond4 (unregistering): Released all slaves [ 710.094138][ T338] bond5 (unregistering): Released all slaves [ 710.104630][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.113229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.128110][ T338] bond0 (unregistering): Released all slaves [ 710.145409][ T338] bond6 (unregistering): Released all slaves [ 710.162553][ T338] bond7 (unregistering): Released all slaves [ 710.187839][ T338] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 710.198626][ T338] bond8 (unregistering): Released all slaves [ 710.237828][T29178] bridge0: port 3(ipvlan2) entered blocking state [ 710.245870][T29178] bridge0: port 3(ipvlan2) entered disabled state [ 710.252747][T29178] ipvlan2: entered allmulticast mode [ 710.258125][T29178] bridge0: entered allmulticast mode [ 710.269768][T29178] ipvlan2: left allmulticast mode [ 710.275285][T29178] bridge0: left allmulticast mode [ 710.411446][T29064] hsr_slave_0: entered promiscuous mode [ 710.463112][T29064] hsr_slave_1: entered promiscuous mode [ 710.469606][T29064] debugfs: 'hsr0' already exists in 'hsr' [ 710.485315][T29064] Cannot create hsr debugfs directory [ 710.496383][ T338] : left promiscuous mode [ 710.664594][ T338] tipc: Left network mode [ 710.825963][ T5144] Bluetooth: hci4: command tx timeout [ 711.003360][T29232] : renamed from hsr0 (while UP) [ 711.426262][T29064] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 711.578236][T29064] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 711.730874][T29064] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 711.856860][T29064] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58308 - 0 [ 712.163096][ T338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.170673][ T338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.180503][ T338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.193603][ T338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.219067][ T338] veth1_macvtap: left promiscuous mode [ 712.224822][ T338] veth0_macvtap: left promiscuous mode [ 712.230698][ T338] veth1_vlan: left promiscuous mode [ 712.238418][ T338] veth0_vlan: left promiscuous mode [ 712.399337][ T338] pim6reg (unregistering): left allmulticast mode [ 712.902670][ T5144] Bluetooth: hci4: command tx timeout [ 713.145046][ T338] IPVS: stop unused estimator thread 0... [ 713.517517][ T338] bond2 (unregistering): (slave geneve3): Releasing active interface [ 713.576848][ T338] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 713.585543][ T338] bridge1 (unregistering): left promiscuous mode [ 713.592788][ T338] bridge1 (unregistering): left allmulticast mode [ 713.860685][ T338] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 713.873530][ T338] bond0 (unregistering): Released all slaves [ 713.885181][ T338] bond1 (unregistering): Released all slaves [ 713.906339][ T338] bond2 (unregistering): Released all slaves [ 713.921129][ T338] bond3 (unregistering): Released all slaves [ 713.936823][ T338] bond4 (unregistering): (slave veth3): Releasing active interface [ 713.946572][T24604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.955063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.968649][ T338] bond4 (unregistering): Released all slaves [ 713.984975][ T338] bond5 (unregistering): Released all slaves [ 714.013081][ T338] bond6 (unregistering): Released all slaves [ 714.030475][ T338] bond7 (unregistering): (slave veth5): Releasing active interface [ 714.041350][ T338] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 714.056108][ T338] bond7 (unregistering): (slave veth7): Releasing active interface [ 714.067895][ T338] bond7 (unregistering): Released all slaves [ 714.083752][ T338] bond8 (unregistering): Released all slaves [ 714.099500][ T338] bond9 (unregistering): (slave veth11): Releasing active interface [ 714.109969][ T338] bond9 (unregistering): Released all slaves [ 714.126608][ T338] bond10 (unregistering): Released all slaves [ 714.309253][ T338] tipc: Left network mode [ 714.474373][T29263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.493693][T29064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 714.588058][T29064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 714.595280][T27151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.604148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.648174][T29064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 714.789488][T29064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 715.048320][ T338] veth1_vlan: left promiscuous mode [ 715.072424][ T338] veth0_vlan: left promiscuous mode [ 715.229143][T24604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.237731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.394886][ T338] vlan1 (unregistering): left allmulticast mode [ 715.428028][ T338] veth0_vlan (unregistering): left allmulticast mode [ 715.895479][T29343] __nla_validate_parse: 3 callbacks suppressed [ 715.895500][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 715.937886][T29343] bridge: RTM_NEWNEIGH with invalid ether address [ 715.947622][T29368] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6250'. [ 715.963969][T29368] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6250'. [ 715.984297][T29368] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6250'. [ 716.017815][T29372] C: renamed from lo (while UP) [ 716.037877][T29372] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 716.220748][T29064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.280573][T29064] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.306814][ T338] IPVS: stop unused estimator thread 0... [ 716.320200][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.327416][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.357061][T27151] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.364285][T27151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.685860][T29064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.931140][T29064] veth0_vlan: entered promiscuous mode [ 716.944862][T29064] veth1_vlan: entered promiscuous mode [ 716.976842][T29064] veth0_macvtap: entered promiscuous mode [ 716.987995][T29064] veth1_macvtap: entered promiscuous mode [ 717.013678][T29064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.028393][T29064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.044000][ T1318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.054086][ T1318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.066893][ T1318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.077600][ T1318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.648641][T29362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.769289][T27151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.811641][T27151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.874904][T29408] bridge0: port 3(veth0_to_bridge) entered blocking state [ 718.886055][T29408] bridge0: port 3(veth0_to_bridge) entered disabled state [ 718.894752][T29408] veth0_to_bridge: entered allmulticast mode [ 718.907147][T29408] veth0_to_bridge: entered promiscuous mode [ 718.916220][T29408] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 718.937471][T29408] bridge0: port 3(veth0_to_bridge) entered blocking state [ 718.945249][T29408] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 718.977785][T27151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.006920][T27151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.442846][T29440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6265'. [ 719.672233][T29444] bridge1: entered promiscuous mode [ 719.677506][T29444] bridge1: entered allmulticast mode [ 719.699256][T29444] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6267'. [ 719.710213][T27151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.718750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.729734][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.738347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.773872][T29450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6268'. [ 719.822520][T29450] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6268'. [ 719.864317][T29450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.283056][T12940] lec:lec_start_xmit: lec0:No lecd attached [ 720.418981][T29483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6276'. [ 720.444675][T29481] syzkaller0: entered allmulticast mode [ 720.474256][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6276'. [ 720.499830][T29487] vlan2: entered promiscuous mode [ 720.518197][T29487] vlan2: entered allmulticast mode [ 720.530103][T29487] hsr_slave_1: entered allmulticast mode [ 720.612694][T29496] sctp: [Deprecated]: syz.4.6280 (pid 29496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.612694][T29496] Use struct sctp_sack_info instead [ 720.708918][T29502] netlink: 'syz.2.6282': attribute type 11 has an invalid length. [ 720.717765][T29502] netlink: 'syz.2.6282': attribute type 11 has an invalid length. [ 720.844320][T29509] netlink: 'syz.4.6284': attribute type 21 has an invalid length. [ 720.873213][T29509] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.882635][T29509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.889925][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 720.897384][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 720.904757][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 720.965281][T29517] __nla_validate_parse: 2 callbacks suppressed [ 720.978089][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6285'. [ 720.987180][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.987388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.117904][T29523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 721.202429][T29480] syzkaller0: left allmulticast mode [ 721.370686][T29533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6291'. [ 721.412725][T29539] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 721.420521][T29539] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 721.707051][T29563] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6299'. [ 722.131040][T29602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6310'. [ 722.140559][T29598] veth0: entered promiscuous mode [ 722.182365][T29595] veth0: left promiscuous mode [ 722.582862][T29621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.681333][T29637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6320'. [ 722.711953][T29636] x_tables: duplicate underflow at hook 3 [ 722.731075][T29637] openvswitch: netlink: Duplicate key (type 32). [ 722.925608][T29648] bridge0: port 3(gretap0) entered blocking state [ 722.946684][T29648] bridge0: port 3(gretap0) entered disabled state [ 722.966111][T29648] gretap0: entered allmulticast mode [ 722.989351][T29648] gretap0: entered promiscuous mode [ 723.012768][T29648] bridge0: port 3(gretap0) entered blocking state [ 723.019392][T29648] bridge0: port 3(gretap0) entered forwarding state [ 723.145844][T29654] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 723.370289][T29670] syzkaller0: entered promiscuous mode [ 723.376658][T29670] syzkaller0: entered allmulticast mode [ 723.810288][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6339'. [ 724.156639][T29729] delete_channel: no stack [ 724.324941][T29737] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 724.426690][T29737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.584387][T22515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.600555][T22515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 724.610174][T22515] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 724.626135][T22515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 724.634134][T22515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 724.713293][T29751] netlink: 'syz.2.6354': attribute type 2 has an invalid length. [ 724.721304][T29751] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6354'. [ 724.810216][T29741]  speed is unknown, defaulting to 1000 [ 724.824645][ T7802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.834093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.424031][T29741] chnl_net:caif_netlink_parms(): no params data found [ 725.469740][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.478247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.487088][T29785] Cannot find map_set index 65533 as target [ 725.716079][T29741] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.723903][T29741] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.731221][T29741] bridge_slave_0: entered allmulticast mode [ 725.739230][T29741] bridge_slave_0: entered promiscuous mode [ 725.749352][T29741] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.756733][T29741] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.764602][T29741] bridge_slave_1: entered allmulticast mode [ 725.772623][T29741] bridge_slave_1: entered promiscuous mode [ 725.813902][T29741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.827049][T29741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.861639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 725.869766][ C1] lec:lec_tx_timeout: lec0 [ 725.877692][T29741] team0: Port device team_slave_0 added [ 725.886620][T29741] team0: Port device team_slave_1 added [ 725.916670][T29741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.924165][T29741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.950754][T29741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.964804][T29741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.973210][T29741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.999551][T29741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.055414][T29741] hsr_slave_0: entered promiscuous mode [ 726.062468][T29741] hsr_slave_1: entered promiscuous mode [ 726.068841][T29741] debugfs: 'hsr0' already exists in 'hsr' [ 726.075468][T29741] Cannot create hsr debugfs directory [ 726.104139][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.113238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.661889][T22515] Bluetooth: hci3: command tx timeout [ 728.312148][T29774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.334436][T29741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 728.424663][T29741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 728.469064][T29807] netlink: 'syz.2.6368': attribute type 1 has an invalid length. [ 728.514539][T29741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 728.539762][T29813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6367'. [ 728.594646][T29807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.618967][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6367'. [ 728.639258][T29814] bond1: (slave geneve2): making interface the new active one [ 728.672358][T29814] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 728.690297][T29741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.710728][T24604] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.732249][T24604] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.741763][T22515] Bluetooth: hci3: command tx timeout [ 728.754585][T24604] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.764060][T24604] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 728.959012][T29741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.019421][T29741] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.053116][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.060366][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.219577][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.226766][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.428440][T29852] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6379'. [ 729.485811][T29857] siw: device registration error -23 [ 729.791035][T29864] netlink: 'syz.0.6381': attribute type 3 has an invalid length. [ 729.852248][T29864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6381'. [ 729.895719][T29873] netlink: 'syz.4.6383': attribute type 10 has an invalid length. [ 729.918964][T29873] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 730.071061][T29741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.113228][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6385'. [ 730.186392][T29883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.263751][T29741] veth0_vlan: entered promiscuous mode [ 730.277632][T29741] veth1_vlan: entered promiscuous mode [ 730.288346][T29899] Bluetooth: MGMT ver 1.23 [ 730.413961][T29741] veth0_macvtap: entered promiscuous mode [ 730.446884][T29905] sit0: entered promiscuous mode [ 730.465698][T29905] netlink: 'syz.0.6391': attribute type 1 has an invalid length. [ 730.476032][T29905] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6391'. [ 730.497533][T29741] veth1_macvtap: entered promiscuous mode [ 730.529752][T29909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6392'. [ 730.555849][T29909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6392'. [ 730.584505][T24604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.592978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.618057][T29909] syzkaller0: entered promiscuous mode [ 730.656729][T29741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.676143][T29741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.734531][ T7798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.753894][ T7798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.776475][ T7798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.787773][T29925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6397'. [ 730.814709][T29924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6396'. [ 730.823859][ T7798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.841619][T22515] Bluetooth: hci3: command tx timeout [ 731.161109][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.176263][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.227703][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.236179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.318172][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.337786][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.629698][T29948] bond1: entered promiscuous mode [ 731.637743][T29948] bond1: entered allmulticast mode [ 731.643470][T29948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.046314][T29975] bond1: option arp_validate: invalid value (134217728) [ 732.165797][T29975] bond1 (unregistering): Released all slaves [ 732.184184][ T7798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.192664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.902324][T22515] Bluetooth: hci3: command tx timeout [ 734.442172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.454609][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.467882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.480298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.851043][T29966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.195689][T29994] __nla_validate_parse: 8 callbacks suppressed [ 735.195711][T29994] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6418'. [ 735.561261][T30011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6421'. [ 735.591979][ C1] net_ratelimit: 1498 callbacks suppressed [ 735.592001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.610404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.623673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.636185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.649475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.661975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.675314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.687868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.701330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.709032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 739.459754][ C0] sched: DL replenish lagged too much [ 740.601760][ C0] net_ratelimit: 18151 callbacks suppressed [ 740.601782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.602739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.608934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 740.620681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.632614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.647054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.657306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 740.669004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.680529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 740.694719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.611585][ C0] net_ratelimit: 23290 callbacks suppressed [ 745.611610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 745.612292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.618455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 745.633014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.643078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.657581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.666360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.681162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.690320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 745.702888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.621701][ C0] net_ratelimit: 23530 callbacks suppressed [ 750.621726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.622461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.628922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.642827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.652490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.666664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.676183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 750.688627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.700576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 750.714530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.997834][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 755.631722][ C1] net_ratelimit: 23382 callbacks suppressed [ 755.631744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.631912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.641172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.650278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.662889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.674253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 755.689425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.698628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 755.713166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.722802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.020508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 757.028622][ C1] lec:lec_tx_timeout: lec0 [ 760.641558][ C1] net_ratelimit: 23102 callbacks suppressed [ 760.641581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.641864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 760.651127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.660477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 760.672859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.684788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.699185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.708200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.720716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.732176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 765.651500][ C0] net_ratelimit: 22971 callbacks suppressed [ 765.651524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.653404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.658235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.671170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.682457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 765.699979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.706893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.719275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.730753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.745448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.706720][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 770.661598][ C1] net_ratelimit: 23440 callbacks suppressed [ 770.661622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.661663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.668944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.680324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.695040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.704208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 770.716827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.728544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 770.743229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.752642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.671492][ C0] net_ratelimit: 23607 callbacks suppressed [ 775.671517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.673621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.678502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.690660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.702122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.717008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.726123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 775.738731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.750095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.764516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.681748][ C0] net_ratelimit: 23737 callbacks suppressed [ 780.681771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.682573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.688498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.701017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.712362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 780.727078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.736568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 780.748878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.760729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.775303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.691505][ C0] net_ratelimit: 23616 callbacks suppressed [ 785.691528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 785.694312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.698400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.710751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.722422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.736780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.746070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.758513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.769917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 785.784575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.701592][ C0] net_ratelimit: 24051 callbacks suppressed [ 790.701615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 790.701936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.708501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.722806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.732619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.744626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.756075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.770949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.780241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 790.792804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.711635][ C0] net_ratelimit: 23346 callbacks suppressed [ 795.711658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 795.712020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.718530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 795.732894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.742619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.754664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.766151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.780527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.790198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 795.802651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.721497][ C0] net_ratelimit: 22929 callbacks suppressed [ 800.721521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 800.722737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.728352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 800.743185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.752495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.766248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.775900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.790511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 800.800167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 800.814665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.731547][ C1] net_ratelimit: 22915 callbacks suppressed [ 805.731571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.732009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.740968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.750282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.765167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.774155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 805.786461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.798253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 805.810686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.822392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.137067][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 810.741531][ C0] net_ratelimit: 25092 callbacks suppressed [ 810.741556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.742609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.748381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.763070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.771990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.784171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.795777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.808500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.820258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 810.834335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.751560][ C0] net_ratelimit: 24493 callbacks suppressed [ 815.751584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.754049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.758238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 815.770702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.782781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.795148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.806862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.820918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.830327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.845141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 815.888448][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 815.896548][ C1] lec:lec_tx_timeout: lec0 [ 820.761719][ C0] net_ratelimit: 24220 callbacks suppressed [ 820.761744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.761910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.768417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.783272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.792196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 820.804635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.816812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 820.828986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.840808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 820.854805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.363980][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 825.771641][ C0] net_ratelimit: 23930 callbacks suppressed [ 825.771665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.773754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.778608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.790498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.802223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.814654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.826065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 825.840604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.850655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 825.864569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.781482][ C0] net_ratelimit: 24607 callbacks suppressed [ 830.781504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 830.783583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.788653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 830.802742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.812363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.826762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.835847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.848149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.859914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 830.872540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.791725][ C0] net_ratelimit: 24748 callbacks suppressed [ 835.791748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 835.792592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.798529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.813224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.822317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.834427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.846389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 835.858776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.870484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 835.884733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.801588][ C0] net_ratelimit: 24646 callbacks suppressed [ 840.801615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 840.801625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.802462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.808543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 840.820848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.832586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.846819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.856056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.871101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.880131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.811580][ C0] net_ratelimit: 24987 callbacks suppressed [ 845.811604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 845.812472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.818447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.832976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.842434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.854429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.866150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.878884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.889875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 845.904442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.821473][ C0] net_ratelimit: 24772 callbacks suppressed [ 850.821497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.822509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.828140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.843204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.852104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 850.864225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.876176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 850.888543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.900431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.914574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.831619][ C0] net_ratelimit: 25016 callbacks suppressed [ 855.831644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 855.832174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.838534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.850422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.862288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.875001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.886061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 855.900976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.910688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 855.925392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.841505][ C0] net_ratelimit: 25098 callbacks suppressed [ 860.841529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.842254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.847956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.862454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.872671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 860.889090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.896302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.908490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.920187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.932728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 864.681431][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 864.688432][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30014/1:b..l [ 864.697415][ C1] rcu: (detected by 1, t=10503 jiffies, g=128093, q=3946 ncpus=2) [ 864.705343][ C1] task:syz.4.6422 state:R running task stack:27328 pid:30014 tgid:30009 ppid:29064 task_flags:0x400040 flags:0x00080000 [ 864.720596][ C1] Call Trace: [ 864.723924][ C1] [ 864.726901][ C1] __schedule+0x15dd/0x52d0 [ 864.731481][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 864.736487][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 864.741477][ C1] ? __pfx___schedule+0x10/0x10 [ 864.746372][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 864.751370][ C1] preempt_schedule_irq+0x4d/0xa0 [ 864.756455][ C1] irqentry_exit+0x599/0x620 [ 864.761093][ C1] ? trace_irq_disable+0x3b/0x150 [ 864.766166][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 864.772286][ C1] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 864.778142][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 864.797876][ C1] RSP: 0018:ffffc900036875b8 EFLAGS: 00000a06 [ 864.803996][ C1] RAX: 0000000000000000 RBX: ffffffff902d2750 RCX: dffffc0000000000 [ 864.812003][ C1] RDX: ffffffff902d2724 RSI: ffffffff90aacf78 RDI: ffffffff8c27caa0 [ 864.820027][ C1] RBP: ffffffff902d2724 R08: 000000000000000c R09: ffffffff8e75e620 [ 864.828036][ C1] R10: ffffc900036876d8 R11: ffffffff81b0cfd0 R12: ffffffff81b0cf68 [ 864.836051][ C1] R13: ffffffff902d2724 R14: ffffc90003687688 R15: ffffffff902d2738 [ 864.844119][ C1] ? stack_trace_save+0xa8/0x100 [ 864.849108][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 864.855322][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 864.860496][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 864.865689][ C1] ? __unwind_start+0x5b8/0x760 [ 864.870587][ C1] ? stack_trace_save+0xa9/0x100 [ 864.875572][ C1] ? stack_trace_save+0xa9/0x100 [ 864.880640][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 864.886828][ C1] arch_stack_walk+0x11b/0x150 [ 864.891733][ C1] ? stack_trace_save+0xa9/0x100 [ 864.896758][ C1] stack_trace_save+0xa9/0x100 [ 864.901561][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 864.906987][ C1] save_stack+0x122/0x230 [ 864.911360][ C1] ? __pfx_save_stack+0x10/0x10 [ 864.916266][ C1] ? page_ext_put+0x97/0xc0 [ 864.920811][ C1] __reset_page_owner+0x71/0x1f0 [ 864.925788][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 864.930989][ C1] __slab_free+0x263/0x2b0 [ 864.935458][ C1] ? qlist_free_all+0x8c/0x100 [ 864.940262][ C1] qlist_free_all+0x97/0x100 [ 864.944933][ C1] kasan_quarantine_reduce+0x148/0x160 [ 864.950434][ C1] __kasan_kmalloc+0x22/0xb0 [ 864.955070][ C1] __kmalloc_noprof+0x35c/0x760 [ 864.959972][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 864.965752][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 864.970823][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 864.976419][ C1] ? tomoyo_path_number_perm+0x219/0x630 [ 864.982104][ C1] tomoyo_path_number_perm+0x246/0x630 [ 864.987608][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 864.993640][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 864.998627][ C1] ? freezing_slow_path+0x115/0x160 [ 865.003893][ C1] ? __fget_files+0x2a/0x420 [ 865.008536][ C1] ? __fget_files+0x2a/0x420 [ 865.013168][ C1] ? __fget_files+0x3a0/0x420 [ 865.017892][ C1] ? __fget_files+0x2a/0x420 [ 865.022538][ C1] security_file_ioctl+0xc3/0x2a0 [ 865.027608][ C1] __se_sys_ioctl+0x47/0x170 [ 865.032239][ C1] do_syscall_64+0x14d/0xf80 [ 865.036865][ C1] ? trace_irq_disable+0x3b/0x150 [ 865.041947][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.048051][ C1] ? clear_bhb_loop+0x40/0x90 [ 865.052775][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.058722][ C1] RIP: 0033:0x7ff6e6f9c42b [ 865.063170][ C1] RSP: 002b:00007ff6e4d91050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.071730][ C1] RAX: ffffffffffffffda RBX: 00007ff6e7216308 RCX: 00007ff6e6f9c42b [ 865.079733][ C1] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000db [ 865.087737][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff6e4d916c0 [ 865.095740][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 865.103745][ C1] R13: 00007ff6e7216308 R14: 00007fff68d78630 R15: 00007fff68d78718 [ 865.111780][ C1] [ 865.851557][ C1] net_ratelimit: 23098 callbacks suppressed [ 865.851580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.852143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 865.858417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.870311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.882772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.894057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.908954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.918198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 865.933089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.942406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.861440][ C0] net_ratelimit: 24813 callbacks suppressed [ 870.861462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.862595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.868232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.882851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.891911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.904168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.915778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.928365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.940170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:72:17:f6:05:66:96, vlan:0) [ 870.954551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 873.715663][ T1299] lec:lec_start_xmit: lec0:No lecd attached