last executing test programs: 4m59.861235452s ago: executing program 1 (id=3772): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') (async, rerun: 32) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\xff\xff', 0x800, &(0x7f0000000080)={@_ha_fsid={[0x81, 0x88]}, {0x401, 0x1, 0xb, 0xc14a}}, 0x10, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xf650}) connect$netlink(r6, &(0x7f0000001200)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) (async) read$alg(r6, &(0x7f0000000200)=""/4096, 0x1000) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "27bfcffca79a789ceab1c8b50785aeb1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) 4m59.627062409s ago: executing program 1 (id=3776): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000040)={0xb, 0x2, 0xb, 0x2}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, &(0x7f0000000040)) ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f00000000c0)={0x7, 0x6, 0x8000a, 0x400}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000026c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xc0, r4, 0x40d, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xec}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa8}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x41b19a018c221632, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff4d66}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000029c0)) socket$inet(0x2, 0x4000000000000001, 0x100) r10 = socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r10, 0x10f, 0x85) close(0x3) 4m59.331820467s ago: executing program 1 (id=3780): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000fc0)={0xa, 0x4e24, 0x5, @local, 0xb}, 0x1c) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x38, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x6, 0x0, 0x9}}}}, 0x30}}, 0x4884) 4m59.114723834s ago: executing program 1 (id=3785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c000780080006400000000205000100d5000000050002000200000005000400000000000900020073797a00686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfa, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r7, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000540)={@val={0x0, 0x88b5}, @void, @x25={0x0, 0x2, 0x17, "c56fcfd29e161fb64289d81479865e8276eba649470f2b7e43ded60a9f0586e591ac0a5dd1460c44fd4e1c7411c105f0a16a"}}, 0x39) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080064bb4c04d34b875326bd7000fbdbdf2514000f00080014000200000008000e00010000003f84c97be879665ab8afa17964c75f4eeda4cd46d98dd149598ae7545e19a658b1ba7e2005bbb350ebe317"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4080004) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0xfffffffffffffed6, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x94}, 0x1, 0x0, 0x0, 0x1014}, 0x8eb7066ede7088ab) close(0x4) sendmsg$nl_route(r3, 0x0, 0x4008840) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) socketpair(0x6, 0x2, 0xffffff6b, &(0x7f0000000000)={0xffffffffffffffff}) r11 = accept4$llc(r10, 0x0, &(0x7f0000000100)=0x45, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r11, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000040)=0xc) 4m58.401412028s ago: executing program 1 (id=3792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd701003000000030000000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8030) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x44}}, 0x4008080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x8d, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x57, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}, "d2fad28f4e8783b636022538c67884f4fdc88e31c0e310e0fb2c39766ac58392a0f9653fdf9ec7e6972c9ece3042198c7a24f3ec2185138fe030170dda008bd7d42867c177d4e3"}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 4m57.724004643s ago: executing program 1 (id=3800): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000090900020073797a31000000000500010007000000000000000000000000000000000000002503fba99635d7bce9d18a557e16fb630c6cb8bf"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x55}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000045}, 0x4080) 4m42.520880984s ago: executing program 32 (id=3800): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000090900020073797a31000000000500010007000000000000000000000000000000000000002503fba99635d7bce9d18a557e16fb630c6cb8bf"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x55}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000045}, 0x4080) 7.525879823s ago: executing program 5 (id=6941): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) (async) listen(r2, 0x9) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async, rerun: 64) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0xfffffffffffffed5, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 7.374545441s ago: executing program 5 (id=6944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r4, 0x54ce48f1ce1f0e1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xac}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002401000034020000020000000800010068822f144cbb9835d12997d92eb2de721c82bdaa3f8d981151222b702c67eb50ecc7c949ebb8f64fc3763e45c5f386bfc02e626b6fb1489f7a93be9006254f0173a54819bc9dbcd9b210c989ddfba714b584da43ae91", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES32], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 7.004925285s ago: executing program 5 (id=6950): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x0, 0x800, 0x3, 0x1132, 0x1, 0xdf6, 0xfffffffb, 0x7, 0x0, 0x1, 0x238e, 0x401, 0x167c1e5d, 0x7, 0x10000, 0x81, 0xfff, 0xfffffa86, 0x4, 0x1, 0x8fc, 0x80, 0x10, 0x10001, 0x5d, 0x602e, 0x7886ec9f, 0xfffffff8, 0x8, 0x81, 0x31e3, 0x9, 0xfffffffc, 0xfffffffb, 0x2, 0x3, 0x276, 0x8, 0x10000, 0x5, 0x6, 0xfffffffc, 0x8, 0x6, 0x4a1e, 0x0, 0x7ff, 0x5, 0x800, 0x3, 0x1, 0x93, 0x3, 0x4, 0x0, 0x90, 0x72, 0x3, 0x8, 0x2, 0xf2ba, 0x41e3, 0x1, 0x9, 0xffff58a1, 0x80000000, 0x9, 0xc, 0x1, 0x6, 0x160000, 0x3, 0x80, 0x6f, 0x3, 0x5, 0x5, 0x7fff, 0x2, 0x3, 0x10000, 0x80, 0x8, 0xff, 0x17, 0x7, 0x39, 0x5b, 0x7, 0xbb, 0x9, 0xffff0001, 0x8, 0x7, 0x2, 0x5, 0x8, 0x7, 0x6, 0x0, 0x1, 0x1, 0x10, 0x7, 0x8, 0x7c, 0x0, 0x4, 0x10f7, 0x7, 0x9e19, 0x0, 0x7fff, 0x69b, 0xa055, 0x2, 0x773, 0xaf36, 0x0, 0x4f1afd61, 0x1ff, 0xffff0001, 0x6, 0x5, 0x0, 0x7ff, 0x1000], "8de1ac81746e78e38b2e4cd1b406783f7cb90cb6027b9671ca2b1470902cbc3d343cea299e7d6d83890a10c22adb5ce13e5bcdecaa0a5078a7ae35fb5a934c3c0e890d767eb8d56235250ad37017e8f5cf7f851d1a5dc2b2e86c7333ce7e8dbf3d7a8c4c29938968210ac64a1d39857dbb8b1c1cd63055d658"}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x0, 0x800, 0x3, 0x1132, 0x1, 0xdf6, 0xfffffffb, 0x7, 0x0, 0x1, 0x238e, 0x401, 0x167c1e5d, 0x7, 0x10000, 0x81, 0xfff, 0xfffffa86, 0x4, 0x1, 0x8fc, 0x80, 0x10, 0x10001, 0x5d, 0x602e, 0x7886ec9f, 0xfffffff8, 0x8, 0x81, 0x31e3, 0x9, 0xfffffffc, 0xfffffffb, 0x2, 0x3, 0x276, 0x8, 0x10000, 0x5, 0x6, 0xfffffffc, 0x8, 0x6, 0x4a1e, 0x0, 0x7ff, 0x5, 0x800, 0x3, 0x1, 0x93, 0x3, 0x4, 0x0, 0x90, 0x72, 0x3, 0x8, 0x2, 0xf2ba, 0x41e3, 0x1, 0x9, 0xffff58a1, 0x80000000, 0x9, 0xc, 0x1, 0x6, 0x160000, 0x3, 0x80, 0x6f, 0x3, 0x5, 0x5, 0x7fff, 0x2, 0x3, 0x10000, 0x80, 0x8, 0xff, 0x17, 0x7, 0x39, 0x5b, 0x7, 0xbb, 0x9, 0xffff0001, 0x8, 0x7, 0x2, 0x5, 0x8, 0x7, 0x6, 0x0, 0x1, 0x1, 0x10, 0x7, 0x8, 0x7c, 0x0, 0x4, 0x10f7, 0x7, 0x9e19, 0x0, 0x7fff, 0x69b, 0xa055, 0x2, 0x773, 0xaf36, 0x0, 0x4f1afd61, 0x1ff, 0xffff0001, 0x6, 0x5, 0x0, 0x7ff, 0x1000], "8de1ac81746e78e38b2e4cd1b406783f7cb90cb6027b9671ca2b1470902cbc3d343cea299e7d6d83890a10c22adb5ce13e5bcdecaa0a5078a7ae35fb5a934c3c0e890d767eb8d56235250ad37017e8f5cf7f851d1a5dc2b2e86c7333ce7e8dbf3d7a8c4c29938968210ac64a1d39857dbb8b1c1cd63055d658"}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x100010, r1, 0xffffd000) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x650, 0x330, 0x0, 0xffffffff, 0x0, 0x330, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, &(0x7f0000000100), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @remote, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff, 0xff000000], 'netpci0\x00', 'team0\x00', {0xff}, {}, 0x1d, 0x7, 0x4, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x80, 0x8], 0x8001, 0x20, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@mcast2, @empty, [0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'batadv0\x00', 'wg0\x00', {}, {}, 0xff, 0x6, 0x1, 0x13}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e20, @gre_key=0x7}}}, {{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'macvtap0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x87, 0x9a, 0x4, 0x54}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0x200, 0x5, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1f, @ipv6=@loopback, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}, @icmp_id=0x65, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x79, [0x3, 0x5], 0x1, 0x25, 0x1, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x15}, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1={0xfc, 0x1, '\x00', 0xc2}, @local]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv6=@empty, @port=0x4e22, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) 5.03328536s ago: executing program 5 (id=6956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x1e, 0x9, 0x0, 0x3, 0xfffffff8]}, &(0x7f0000000140)=0x54) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x12) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 4.905437633s ago: executing program 5 (id=6961): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/64, &(0x7f0000000080)=0x40) 4.820128588s ago: executing program 5 (id=6964): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="1121e5", 0x3}, 0x1, 0x0, 0x0, 0x24008801}, 0x240048a4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2122, 0x0) 3.005901764s ago: executing program 2 (id=6990): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 2.913063802s ago: executing program 4 (id=6991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0x40}}, 0x0) 2.893175469s ago: executing program 3 (id=6992): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}], 0x1}}], 0x1, 0x4008440) write$cgroup_int(r0, &(0x7f0000000100)=0x8, 0x12) 2.710640315s ago: executing program 3 (id=6993): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001200)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[], 0x7) 2.62594133s ago: executing program 3 (id=6995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.165511903s ago: executing program 4 (id=6996): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 2.099234206s ago: executing program 3 (id=6998): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 2.057837425s ago: executing program 2 (id=6999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.009308226s ago: executing program 4 (id=7000): syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004c13"], 0x0) 1.88113872s ago: executing program 4 (id=7002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff9a, 0x12, 0x0, 0x12) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.801744978s ago: executing program 3 (id=7003): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.801393355s ago: executing program 0 (id=7004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 1.681327258s ago: executing program 4 (id=7005): syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xe641, 0x5}]}}}}}}}, 0x0) 1.655598962s ago: executing program 0 (id=7006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "ad0f2a9284ba763160743212736168f23e919cfab4d26e464aa658861c15e394", "3320f6fffeba91e740a6d1c07056226f5429a588ac73c584e1bf6bddd93675583af30ae536bddc1fcf21c8fb40fb9e6b", "cd6e4c292a1c29366f857cd9f502246b13fc09054138c65f8eb94045", {"5117aaac953f17364d5fac53fa6d43d6", "88e2e3c676fe9a945d41649186fa7aa2"}}}}}}}}, 0xc6) 1.557699859s ago: executing program 2 (id=7007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7df8184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118230541448370fa2d1b362ce6c2eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a34484005b58a703899ad2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf", 0xca1}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15", 0xb4}, {&(0x7f00000007c0)="1da19d23fdff85b98167af7726547120df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132d115fd9988c00b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b651ec19cedc69367ba0093c404d4ac7409ae7f612cd45bc475f1f4b47ba45ec376c3a98a06da61124f2650b53b15c87c3e6ea7734e44835fcd6d23a0d7e", 0xdd}, {&(0x7f00000009c0)="a5ca8683d601768d343ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e", 0x12f}], 0x5}, 0x8bb3a321efc09a) 1.520469729s ago: executing program 4 (id=7008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 1.345878972s ago: executing program 3 (id=7009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x24, 0x11, 0xa, 0x500, 0x70bd27, 0x25dfdbfc, {0x3, 0x0, 0x1}, [@typed={0xd, 0x15c, 0x0, 0x0, @binary="6f3c014a7b74d63a78"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x20000040) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.345498669s ago: executing program 0 (id=7010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route(r0, 0x0, 0x20000840) 1.169851242s ago: executing program 2 (id=7011): syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004c13"], 0x0) 1.025743626s ago: executing program 0 (id=7012): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @mcast2, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 962.240477ms ago: executing program 2 (id=7013): socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 946.321773ms ago: executing program 0 (id=7014): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000000d00)="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", 0x146}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434", 0x40}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9", 0xbb}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 797.758164ms ago: executing program 2 (id=7015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b7d1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00053c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 0s ago: executing program 0 (id=7016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) kernel console output (not intermixed with test programs): igured! [ 528.955774][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5109'. [ 529.138665][T24806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5113'. [ 529.302406][T24814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5115'. [ 529.395728][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5115'. [ 529.508817][T24814] net_ratelimit: 135 callbacks suppressed [ 529.509873][T24814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.785601][T24835] lo speed is unknown, defaulting to 1000 [ 529.825842][T24835] lo speed is unknown, defaulting to 1000 [ 529.888976][T24835] lo speed is unknown, defaulting to 1000 [ 529.997871][T24846] xt_hashlimit: max too large, truncated to 1048576 [ 530.271181][T24835] infiniband syz0: set down [ 530.275860][T24835] infiniband syz0: added lo [ 530.295321][T23679] lo speed is unknown, defaulting to 1000 [ 530.327778][T24858] syzkaller0: entered promiscuous mode [ 530.333323][T24858] syzkaller0: entered allmulticast mode [ 530.379631][T24866] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5125'. [ 530.409634][T24835] RDS/IB: syz0: added [ 530.413815][T24835] smc: adding ib device syz0 with port count 1 [ 530.420979][T24835] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 530.436964][ T7494] lo speed is unknown, defaulting to 1000 [ 530.444164][T24835] lo speed is unknown, defaulting to 1000 [ 530.448978][T24858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.996402][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 531.004522][ C0] lec:lec_tx_timeout: lec0 [ 531.009242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 531.062197][T24835] lo speed is unknown, defaulting to 1000 [ 531.379520][T24907] xt_l2tp: invalid flags combination: 8 [ 531.391822][T24906] netlink: 'syz.0.5135': attribute type 16 has an invalid length. [ 531.432882][T24906] netlink: 'syz.0.5135': attribute type 17 has an invalid length. [ 531.587692][T24906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.618047][T24906] dummy0: left promiscuous mode [ 531.633544][T24906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.662734][T24919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5136'. [ 531.872604][T24930] netlink: 'syz.0.5140': attribute type 1 has an invalid length. [ 531.896660][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 531.923127][T24835] lo speed is unknown, defaulting to 1000 [ 532.084023][T24934] netlink: 'syz.5.5138': attribute type 32 has an invalid length. [ 532.145208][T24935] bond11: (slave gretap3): making interface the new active one [ 532.208560][T24947] netlink: 'syz.3.5142': attribute type 4 has an invalid length. [ 532.218321][T24935] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 532.256160][T24947] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5142'. [ 532.277492][T24938] netlink: 'syz.5.5138': attribute type 5 has an invalid length. [ 532.306590][T24945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5138'. [ 532.353895][T24938] syzkaller1: entered promiscuous mode [ 532.367562][T24938] syzkaller1: entered allmulticast mode [ 532.504248][T24951] syzkaller0: entered promiscuous mode [ 532.518146][T24951] syzkaller0: entered allmulticast mode [ 532.690570][T24835] lo speed is unknown, defaulting to 1000 [ 534.814009][T24835] lo speed is unknown, defaulting to 1000 [ 534.968495][T25022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5155'. [ 535.181554][T25040] xfrm0: entered promiscuous mode [ 535.186779][T25040] xfrm0: entered allmulticast mode [ 535.351894][T25047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5160'. [ 535.419921][T25047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5160'. [ 535.462386][T25055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5160'. [ 535.722837][T24835] lo speed is unknown, defaulting to 1000 [ 535.915318][T25079] Cannot find del_set index 4 as target [ 536.016418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 536.024519][ C0] lec:lec_tx_timeout: lec0 [ 536.029150][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 536.094969][T25091] No such timeout policy "syz0" [ 536.169246][T25096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5172'. [ 536.440984][T25105] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.562673][T24835] lo speed is unknown, defaulting to 1000 [ 536.609167][T25111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.646653][T25114] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.809926][T25120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5178'. [ 536.935825][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'. [ 537.121742][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5182'. [ 537.149616][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5182'. [ 537.263342][T25105] lo speed is unknown, defaulting to 1000 [ 537.407815][T25145] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5185'. [ 537.707258][T24835] lo speed is unknown, defaulting to 1000 [ 538.162629][T24835] lo speed is unknown, defaulting to 1000 [ 538.175996][T25165] syzkaller0: entered promiscuous mode [ 538.192419][T25165] syzkaller0: entered allmulticast mode [ 538.461745][T24835] lo speed is unknown, defaulting to 1000 [ 538.805087][T25180] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 538.892363][T25180] 8021q: adding VLAN 0 to HW filter on device bond11 [ 539.020814][T25185] 8021q: adding VLAN 0 to HW filter on device bond11 [ 539.028359][T25185] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 539.040405][T25185] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 539.208410][T25195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.237376][T25195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.244671][T25195] IPv6: NLM_F_CREATE should be set when creating new route [ 539.252012][T25195] IPv6: NLM_F_CREATE should be set when creating new route [ 539.259316][T25195] IPv6: NLM_F_CREATE should be set when creating new route [ 539.763299][T25227] netlink: 'syz.2.5205': attribute type 1 has an invalid length. [ 539.780536][T25215] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.877194][T25232] netlink: 'syz.4.5208': attribute type 4 has an invalid length. [ 539.896467][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 539.928900][T25232] netlink: 'syz.4.5208': attribute type 1 has an invalid length. [ 539.988568][T25232] __nla_validate_parse: 11 callbacks suppressed [ 539.988590][T25232] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5208'. [ 540.214305][T25246] netlink: 'syz.0.5215': attribute type 1 has an invalid length. [ 540.246903][T25246] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.5215'. [ 540.268692][T25246] veth0: entered promiscuous mode [ 540.313928][T25251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5216'. [ 540.327345][T25244] veth0: left promiscuous mode [ 540.348780][T25215] lo speed is unknown, defaulting to 1000 [ 540.645215][T25266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5222'. [ 540.798302][T25273] ip6tnl0: Caught tx_queue_len zero misconfig [ 540.806990][T25274] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5225'. [ 540.835765][T25279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5226'. [ 540.953430][T25282] netlink: zone id is out of range [ 540.960169][T25282] netlink: zone id is out of range [ 540.965450][T25282] netlink: zone id is out of range [ 540.971193][T25282] netlink: zone id is out of range [ 540.976613][T25282] netlink: zone id is out of range [ 540.981750][T25282] netlink: zone id is out of range [ 540.987700][T25282] netlink: zone id is out of range [ 541.036304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 541.044390][ C0] lec:lec_tx_timeout: lec0 [ 541.051451][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 541.201726][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5230'. [ 541.582614][T25311] netlink: 'syz.0.5236': attribute type 10 has an invalid length. [ 541.608211][T25311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5236'. [ 541.644469][T25311] dummy0: entered promiscuous mode [ 541.660490][T25311] net_ratelimit: 1 callbacks suppressed [ 541.660508][T25311] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 541.695774][T25313] netlink: 'syz.4.5237': attribute type 2 has an invalid length. [ 541.746124][T25313] 9: entered promiscuous mode [ 541.894788][T25319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.954434][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5241'. [ 542.279438][T25345] xt_hashlimit: size too large, truncated to 1048576 [ 542.435367][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5248'. [ 542.805023][T25375] bridge_slave_1: entered promiscuous mode [ 542.833130][T25375] bridge_slave_1: entered allmulticast mode [ 543.295489][T25409] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 543.501343][T25419] bond6 (unregistering): Released all slaves [ 543.607258][T25420] bond6 (unregistering): Released all slaves [ 543.733317][T25430] netlink: 'syz.5.5268': attribute type 10 has an invalid length. [ 543.743598][T25431] netlink: 'syz.5.5268': attribute type 10 has an invalid length. [ 543.778756][T25431] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 543.825603][T25430] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 544.042881][T25438] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 544.128867][T25438] bond9 (unregistering): Released all slaves [ 545.291896][T25496] __nla_validate_parse: 6 callbacks suppressed [ 545.291916][T25496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5289'. [ 545.339046][T25500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5291'. [ 545.408875][T25500] bond9 (unregistering): Released all slaves [ 545.590927][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 545.600293][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 545.809176][T25526] xt_l2tp: v2 sid > 0xffff: 1114112 [ 545.859941][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5295'. [ 545.913155][T25537] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.077091][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 546.085217][ C0] lec:lec_tx_timeout: lec0 [ 546.089970][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 546.267779][T25547] netlink: 'syz.5.5302': attribute type 1 has an invalid length. [ 546.279666][T25550] block nbd5: Unsupported socket: should be TCP or UNIX. [ 546.359163][T25550] block nbd5: Unsupported socket: should be TCP or UNIX. [ 546.413619][T25551] veth5: entered promiscuous mode [ 546.476965][T25562] tap0: tun_chr_ioctl cmd 1074025672 [ 546.482327][T25562] tap0: ignored: set checksum disabled [ 546.585863][T25569] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 546.613209][T25569] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 546.831860][T25576] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5310'. [ 546.910086][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5312'. [ 547.307350][T25598] syzkaller0: entered promiscuous mode [ 547.322149][T25598] syzkaller0: entered allmulticast mode [ 547.698391][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'. [ 547.707642][T25621] netlink: 'syz.3.5323': attribute type 1 has an invalid length. [ 547.715402][T25621] netlink: 'syz.3.5323': attribute type 2 has an invalid length. [ 547.732156][T25623] xt_hashlimit: size too large, truncated to 1048576 [ 547.813446][T25627] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 547.813899][T25630] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 547.955487][T25640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5325'. [ 548.440988][T25665] netlink: 'syz.2.5331': attribute type 39 has an invalid length. [ 548.544005][T25668] bridge0: port 1(veth0_to_bridge) entered blocking state [ 548.571614][T25668] bridge0: port 1(veth0_to_bridge) entered disabled state [ 548.608235][T25668] veth0_to_bridge: entered allmulticast mode [ 548.610847][T25669] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5332'. [ 548.623723][T25668] veth0_to_bridge: entered promiscuous mode [ 549.591228][T25717] syzkaller0: entered promiscuous mode [ 549.613548][T25717] syzkaller0: entered allmulticast mode [ 549.753473][T25724] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 550.315579][T25763] __nla_validate_parse: 9 callbacks suppressed [ 550.315601][T25763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5364'. [ 550.352436][T25769] Bluetooth: hci1: too big key_count value 32778 [ 550.388878][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5362'. [ 550.693581][T25791] netlink: 'syz.2.5371': attribute type 4 has an invalid length. [ 550.702894][T25791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5371'. [ 550.713623][T25791] .`: renamed from bond0 [ 550.804215][T25796] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5372'. [ 550.885638][T25799] sctp: [Deprecated]: syz.2.5373 (pid 25799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.885638][T25799] Use struct sctp_sack_info instead [ 550.967415][T25801] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5374'. [ 551.092443][T25806] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 551.106808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 551.114858][ C0] lec:lec_tx_timeout: lec0 [ 551.119902][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 551.193661][T25810] netem: incorrect ge model size [ 551.199269][T25810] netem: change failed [ 551.222438][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5379'. [ 551.232948][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5379'. [ 551.249129][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5379'. [ 551.337037][T25806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 551.552177][T25835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5383'. [ 552.769809][T25884] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 554.938357][T26038] xt_policy: output policy not valid in PREROUTING and INPUT [ 555.005135][T26042] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 555.032874][T26045] netlink: 'syz.3.5428': attribute type 2 has an invalid length. [ 555.168459][T26053] Unknown metaid 0 dlen 4 [ 555.173778][T26053] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 555.213058][T26053] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.380597][T26067] __nla_validate_parse: 13 callbacks suppressed [ 555.380618][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5434'. [ 555.595279][T26072] bridge4: entered promiscuous mode [ 555.608668][T26072] bridge4: entered allmulticast mode [ 555.896501][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 555.941144][T26090] tipc: Enabled bearer , priority 0 [ 556.114029][T26106] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.5446'. [ 556.155348][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 556.164767][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5447'. [ 556.177086][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 556.188754][T26108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5447'. [ 556.213060][T26110] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 556.262482][T26110] netlink: 198672 bytes leftover after parsing attributes in process `syz.4.5448'. [ 556.365572][T26114] netlink: 'syz.4.5450': attribute type 10 has an invalid length. [ 556.385716][T26114] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.410183][T26114] bridge_slave_1: left allmulticast mode [ 556.416014][T26114] bridge_slave_1: left promiscuous mode [ 556.425833][T26114] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.441193][T26114] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 556.518866][T26119] netlink: 'syz.4.5452': attribute type 10 has an invalid length. [ 556.742294][T26089] tipc: Disabling bearer [ 556.801898][T26130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5456'. [ 556.879020][T26130] block nbd0: reconnected socket [ 556.886895][T26131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5456'. [ 556.913260][T25960] block nbd0: NBD_DISCONNECT [ 556.927136][T25960] block nbd0: Disconnected due to user request. [ 556.934704][T25960] block nbd0: shutting down sockets [ 556.947359][T26136] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5458'. [ 557.176389][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 557.184482][ C0] lec:lec_tx_timeout: lec0 [ 557.190285][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 557.252016][T25960] udevd[25960]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 557.373714][T26155] netlink: 'syz.4.5463': attribute type 14 has an invalid length. [ 557.409828][T26159] netlink: 'syz.4.5463': attribute type 14 has an invalid length. [ 557.432936][T26161] netlink: 'syz.2.5465': attribute type 2 has an invalid length. [ 557.999098][T26189] bridge5: entered promiscuous mode [ 558.015586][T26189] bridge5: entered allmulticast mode [ 558.421000][T26215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.455231][T26222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.681447][T26239] netlink: 'syz.5.5485': attribute type 83 has an invalid length. [ 559.068401][T26264] ip6tnl0: Caught tx_queue_len zero misconfig [ 559.459077][T26287] syzkaller0: entered promiscuous mode [ 559.465809][T26287] syzkaller0: entered allmulticast mode [ 559.618139][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.636924][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.650234][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.665414][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.677354][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.688608][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.699712][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.711530][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.726862][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.748635][T26300] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 559.895991][T26309] tipc: Invalid UDP bearer configuration [ 559.896058][T26309] tipc: Enabling of bearer rejected, failed to enable media [ 560.009318][T26315] IPVS: length: 195 != 8 [ 560.535790][T26349] tipc: Enabled bearer , priority 0 [ 560.567748][T26349] syzkaller0: entered promiscuous mode [ 560.574450][T26349] syzkaller0: entered allmulticast mode [ 560.629959][T26349] __nla_validate_parse: 7 callbacks suppressed [ 560.629993][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 560.668588][T26349] tipc: Resetting bearer [ 560.684313][T26348] tipc: Resetting bearer [ 560.709839][T26348] tipc: Disabling bearer [ 560.728881][T26356] pimreg3: entered allmulticast mode [ 561.010293][T26373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.023207][T26377] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 561.244605][T26395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5525'. [ 561.350706][T26399] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 561.360961][T26400] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 561.475613][T26402] lo: Caught tx_queue_len zero misconfig [ 561.520399][T26408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 561.681828][T26421] team_slave_0: entered promiscuous mode [ 561.695285][T26421] team_slave_0: entered allmulticast mode [ 561.821105][T26434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5537'. [ 562.015325][T26448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5538'. [ 562.467631][T26434] bond0: entered promiscuous mode [ 562.474033][T26434] gretap0: entered promiscuous mode [ 562.480475][T26434] debugfs: 'hsr0' already exists in 'hsr' [ 562.486745][T26434] Cannot create hsr debugfs directory [ 562.492218][T26434] hsr0: entered promiscuous mode [ 562.653106][T26451] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5540'. [ 562.718519][T26456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.728390][T26451] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 562.787228][T26456] xfrm1: entered allmulticast mode [ 562.943695][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 562.948025][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.951851][ C0] lec:lec_tx_timeout: lec0 [ 562.964075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 563.199791][T26475] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 563.381420][T26487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 563.729408][T26501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5557'. [ 563.989717][T26511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5561'. [ 564.233561][T26519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5565'. [ 564.382408][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'. [ 564.629685][T26538] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 564.656023][T26538] bond12: option packets_per_slave: allowed values 0 - 65535 [ 564.682950][T26538] bond12 (unregistering): Released all slaves [ 565.097705][T26560] netlink: 'syz.3.5574': attribute type 5 has an invalid length. [ 565.206887][T26562] tipc: Enabled bearer , priority 0 [ 565.307157][T26572] xt_TPROXY: Can be used only with -p tcp or -p udp [ 565.346978][T26562] syzkaller0: entered promiscuous mode [ 565.368760][T26562] syzkaller0: entered allmulticast mode [ 565.377496][T26562] tipc: Resetting bearer [ 565.424936][T26561] tipc: Resetting bearer [ 566.858186][T26561] tipc: Disabling bearer [ 566.902796][T23696] tipc: Node number set to 771274905 [ 566.994510][T26592] __nla_validate_parse: 8 callbacks suppressed [ 566.994529][T26592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5583'. [ 567.035446][T26596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5585'. [ 567.047134][T26596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5585'. [ 567.068706][T26598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5584'. [ 567.239694][T26606] sctp: [Deprecated]: syz.5.5584 (pid 26606) Use of int in maxseg socket option. [ 567.239694][T26606] Use struct sctp_assoc_value instead [ 567.864795][T26597] bond0: Caught tx_queue_len zero misconfig [ 567.986210][T26614] netlink: 'syz.2.5587': attribute type 10 has an invalid length. [ 567.986325][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 567.986371][ C0] lec:lec_tx_timeout: lec0 [ 567.996545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 568.099845][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5590'. [ 568.129073][T26618] syzkaller0: entered promiscuous mode [ 568.136175][T26618] syzkaller0: entered allmulticast mode [ 568.420762][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5593'. [ 568.594649][T26651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5595'. [ 568.611558][T26650] syzkaller1: entered promiscuous mode [ 568.633582][T26650] syzkaller1: entered allmulticast mode [ 568.708078][T26654] netem: incorrect gi model size [ 568.733901][T26649] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.735031][T26659] netem: incorrect gi model size [ 569.385549][T26649] lo speed is unknown, defaulting to 1000 [ 569.398150][T26688] netlink: 'syz.4.5607': attribute type 29 has an invalid length. [ 569.408721][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5606'. [ 569.419915][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5606'. [ 569.592204][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5609'. [ 569.821052][T26703] netlink: 'syz.5.5612': attribute type 1 has an invalid length. [ 569.936171][T26703] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.155830][T26723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.716386][T26733] ip6_vti0 speed is unknown, defaulting to 1000 [ 570.891012][T26721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.200621][T26764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.295454][T26767] netlink: 'syz.3.5629': attribute type 10 has an invalid length. [ 571.411147][T26773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 571.453954][T26771] netlink: 'syz.0.5631': attribute type 18 has an invalid length. [ 571.464385][T26771] netlink: 'syz.0.5631': attribute type 18 has an invalid length. [ 571.532063][T26733] lo speed is unknown, defaulting to 1000 [ 571.772876][T26788] Cannot find set identified by id 3 to match [ 571.828575][T26792] netlink: 'syz.3.5638': attribute type 11 has an invalid length. [ 571.952913][T26801] netlink: 'syz.5.5639': attribute type 9 has an invalid length. [ 572.138583][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 572.149834][T26806] tipc: Enabled bearer , priority 0 [ 572.195951][T26812] +: renamed from syzkaller0 [ 572.213020][T26812] tipc: Disabling bearer [ 572.314161][T26805] veth0_to_bond: entered allmulticast mode [ 573.021192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.029297][ C0] lec:lec_tx_timeout: lec0 [ 573.034818][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.049730][T26853] __nla_validate_parse: 7 callbacks suppressed [ 573.049749][T26853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 573.072514][T26853] nbd: must specify a size in bytes for the device [ 573.246855][T26855] syzkaller0: entered promiscuous mode [ 573.256701][T26855] syzkaller0: entered allmulticast mode [ 573.302946][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5657'. [ 573.337748][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5657'. [ 573.564327][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.639858][T26873] vþ: entered promiscuous mode [ 573.675868][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.735932][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.758166][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.804547][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.836153][T26873] netlink: 'syz.3.5663': attribute type 2 has an invalid length. [ 573.956006][T26891] veth1_to_bond: entered promiscuous mode [ 573.966636][T26891] veth1_to_bond: entered allmulticast mode [ 574.113624][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5672'. [ 574.171356][T26909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.190205][T26910] netlink: 'syz.3.5672': attribute type 11 has an invalid length. [ 574.492967][T26920] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.563021][T26934] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 574.621797][T26934] atomic_op ffff88807b12e998 conn xmit_atomic 0000000000000000 [ 574.635448][T26936] erspan0: entered promiscuous mode [ 574.658106][T26938] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5683'. [ 574.967373][T26956] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ1 [ 575.029554][T26956] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 575.055224][T26958] syzkaller1: entered promiscuous mode [ 575.066501][T26958] syzkaller1: entered allmulticast mode [ 575.138270][T26920] lo speed is unknown, defaulting to 1000 [ 575.298529][T26973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.385640][T26971] can: request_module (can-proto-0) failed. [ 576.187983][T27013] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5703'. [ 576.506887][T27029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5711'. [ 576.600675][T27035] validate_nla: 27 callbacks suppressed [ 576.600713][T27035] netlink: 'syz.4.5714': attribute type 3 has an invalid length. [ 576.614791][T27035] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5714'. [ 576.633486][T27035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5714'. [ 576.785357][T27036] bond9: entered allmulticast mode [ 576.844774][T27045] netlink: 'syz.4.5716': attribute type 33 has an invalid length. [ 576.923337][T27045] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 576.938289][T27045] bond8 (unregistering): Released all slaves [ 577.085598][T27050] netlink: 'syz.3.5717': attribute type 18 has an invalid length. [ 577.093743][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5717'. [ 577.104308][T27050] netlink: 'syz.3.5717': attribute type 18 has an invalid length. [ 577.151495][T27052] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 577.159022][T27052] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 577.284877][T27061] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 577.443472][T27069] openvswitch: netlink: Missing key (keys=40, expected=80) [ 577.610025][T27076] bond10: (slave gre0): Device is not bonding slave [ 577.636701][T27076] bond10: option active_slave: invalid value (gre0) [ 577.661893][T27076] bond10 (unregistering): Released all slaves [ 577.677755][T27085] netlink: 'syz.5.5730': attribute type 3 has an invalid length. [ 577.921287][T27100] netlink: 'syz.3.5733': attribute type 1 has an invalid length. [ 577.965299][T27100] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 577.978499][T27100] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 577.994028][T27100] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 578.046691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 578.054818][ C0] lec:lec_tx_timeout: lec0 [ 578.059482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.109820][T27102] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 578.128075][T27107] __nla_validate_parse: 2 callbacks suppressed [ 578.128097][T27107] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5735'. [ 578.150016][T27102] bond10: (slave vcan0): making interface the new active one [ 578.161308][T27102] bond10: (slave vcan0): Enslaving as an active interface with an up link [ 578.170678][T27104] lo: entered promiscuous mode [ 578.175725][T27104] netlink: 'syz.2.5734': attribute type 2 has an invalid length. [ 578.184448][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.368669][T27117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5739'. [ 578.391517][T27118] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5738'. [ 578.430762][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'. [ 578.507217][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'. [ 579.060745][T27149] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 579.076426][T27149] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 579.322038][T27155] syzkaller0: entered promiscuous mode [ 579.336688][T27155] syzkaller0: entered allmulticast mode [ 579.610694][T27181] netlink: 'syz.3.5757': attribute type 1 has an invalid length. [ 579.633622][T27184] netlink: 'syz.5.5758': attribute type 2 has an invalid length. [ 579.648925][T27184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.053195][T27188] team0: Caught tx_queue_len zero misconfig [ 581.059645][T27193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5756'. [ 581.069196][T27193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5756'. [ 581.257970][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'. [ 581.298174][T27214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5761'. [ 581.730133][T27246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5772'. [ 581.767532][T27253] syzkaller1: entered promiscuous mode [ 581.773204][T27253] syzkaller1: entered allmulticast mode [ 582.262926][T27264] syzkaller1: entered promiscuous mode [ 582.306508][T27264] syzkaller1: entered allmulticast mode [ 582.411235][T27272] pim6reg: entered allmulticast mode [ 583.066286][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 583.074394][ C0] lec:lec_tx_timeout: lec0 [ 583.079820][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.148994][T27316] netlink: 'syz.5.5791': attribute type 2 has an invalid length. [ 583.324691][T27330] __nla_validate_parse: 5 callbacks suppressed [ 583.324711][T27330] netlink: 808 bytes leftover after parsing attributes in process `syz.4.5796'. [ 583.522462][T27334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5797'. [ 583.753261][T27355] netlink: 'syz.4.5802': attribute type 1 has an invalid length. [ 584.017084][T27377] wg0: Caught tx_queue_len zero misconfig [ 584.049236][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 584.060379][T27380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5809'. [ 584.108050][T27380] bond10: (slave vcan0): Releasing backup interface [ 584.140403][T27380] bond10: Destroying bond [ 584.153783][T27380] bond10 (unregistering): Released all slaves [ 584.168586][T27384] netlink: 'syz.0.5810': attribute type 11 has an invalid length. [ 584.177066][T27384] netlink: 'syz.0.5810': attribute type 11 has an invalid length. [ 584.185190][T27384] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5810'. [ 584.395485][T27393] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.405638][T27397] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.5811'. [ 584.500236][T27401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5814'. [ 584.757280][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5817'. [ 584.923314][T27421] netlink: 'syz.4.5819': attribute type 4 has an invalid length. [ 584.996475][T27393] lo speed is unknown, defaulting to 1000 [ 585.063532][T27423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5821'. [ 585.456732][T27451] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 585.704599][T27463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5831'. [ 585.717399][T27463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5831'. [ 586.132872][T27469] veth0: entered promiscuous mode [ 586.235671][T27469] hsr_slave_0: left promiscuous mode [ 586.263961][T27469] hsr_slave_1: left promiscuous mode [ 586.726993][T27468] veth0: left promiscuous mode [ 586.813649][T27515] netlink: 'syz.2.5846': attribute type 1 has an invalid length. [ 586.846535][T27515] netlink: 'syz.2.5846': attribute type 2 has an invalid length. [ 587.079969][T27525] erspan1: entered allmulticast mode [ 587.128018][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.137579][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 587.145463][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 587.154171][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 587.162530][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.253386][T27526] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.266433][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.340817][T27539] netlink: 'syz.2.5854': attribute type 11 has an invalid length. [ 587.583697][T27543] bond8 (unregistering): Released all slaves [ 587.780673][ T6279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.806633][T27526] lo speed is unknown, defaulting to 1000 [ 587.918841][ T6279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.060762][ T6279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.096605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 588.104717][ C0] lec:lec_tx_timeout: lec0 [ 588.109542][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.238681][ T6279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.643936][T27581] __nla_validate_parse: 12 callbacks suppressed [ 588.643956][T27581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5869'. [ 588.708108][T27581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5869'. [ 588.724188][T27579] 8021q: VLANs not supported on gre0 [ 588.732173][T27581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5869'. [ 588.835346][T27589] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 588.869050][T27589] bond0: (slave lo): Enslaving as an active interface with an up link [ 588.881307][T27589] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 589.024748][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5872'. [ 589.043099][T27599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.064718][T27599] netlink: 'syz.0.5872': attribute type 64 has an invalid length. [ 589.077005][T27601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'. [ 589.213216][ T6279] gretap0 (unregistering): left promiscuous mode [ 589.259179][ T6279] dvmrp6 (unregistering): left allmulticast mode [ 589.266910][ T5831] Bluetooth: hci5: command tx timeout [ 589.280570][ T6279] bond1 (unregistering): (slave geneve2): Releasing active interface [ 589.531203][ T6279] bond1 (unregistering): Released all slaves [ 589.547637][ T6279] bond0 (unregistering): left promiscuous mode [ 589.559708][ T6279] bond0 (unregistering): (slave veth5): Releasing active interface [ 589.570482][ T6279] bond0 (unregistering): Released all slaves [ 589.586134][ T6279] bond2 (unregistering): (slave veth7): Releasing active interface [ 589.602314][ T6279] bond2 (unregistering): Released all slaves [ 589.618458][ T6279] bond3 (unregistering): Released all slaves [ 589.633258][ T6279] bond4 (unregistering): Released all slaves [ 589.648485][ T6279] bond5 (unregistering): Released all slaves [ 589.674174][ T6279] bond6 (unregistering): Released all slaves [ 589.692952][ T6279] bond7 (unregistering): Released all slaves [ 589.707899][ T6279] bond8 (unregistering): Released all slaves [ 589.729353][ T6279] bond9 (unregistering): Released all slaves [ 589.745624][ T6279] bond11 (unregistering): Released all slaves [ 589.875145][T27526] chnl_net:caif_netlink_parms(): no params data found [ 589.935395][T27616] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5877'. [ 589.977450][ T6279] vþ: left promiscuous mode [ 590.147618][T27624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.190390][ T6279] tipc: Left network mode [ 590.246148][T27631] netlink: 'syz.4.5882': attribute type 10 has an invalid length. [ 590.306239][T27626] tipc: Enabled bearer , priority 0 [ 590.317825][T27626] syzkaller0: mtu less than device minimum [ 590.402987][T27638] can: request_module (can-proto-0) failed. [ 590.598603][T27526] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.632715][T27526] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.648774][T27526] bridge_slave_0: entered allmulticast mode [ 590.664836][T27526] bridge_slave_0: entered promiscuous mode [ 590.701329][T27526] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.716993][T27526] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.734632][T27526] bridge_slave_1: entered allmulticast mode [ 590.748618][T27526] bridge_slave_1: entered promiscuous mode [ 590.762830][T27669] netlink: 83 bytes leftover after parsing attributes in process `syz.5.5887'. [ 590.763941][T27670] netlink: 83 bytes leftover after parsing attributes in process `syz.5.5887'. [ 591.032439][T27526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.073158][T27526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.256132][T27690] netlink: 'syz.0.5893': attribute type 39 has an invalid length. [ 591.266832][ T7514] IPVS: starting estimator thread 0... [ 591.274832][T27686] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 591.337496][ T5831] Bluetooth: hci5: command tx timeout [ 591.344242][T27526] team0: Port device team_slave_0 added [ 591.353461][T27526] team0: Port device team_slave_1 added [ 591.419928][T27694] IPVS: using max 27 ests per chain, 64800 per kthread [ 591.468987][T27695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5894'. [ 591.524553][T27526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.553369][T27526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.611134][T27526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.629916][T27526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.639560][T27526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.688710][T27526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.140126][T27526] hsr_slave_0: entered promiscuous mode [ 592.151846][T27734] netlink: 'syz.5.5906': attribute type 1 has an invalid length. [ 592.152739][T27526] hsr_slave_1: entered promiscuous mode [ 592.197352][T27526] debugfs: 'hsr0' already exists in 'hsr' [ 592.203167][T27526] Cannot create hsr debugfs directory [ 592.214015][T27739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5906'. [ 592.438590][T27734] bond7: entered promiscuous mode [ 592.444171][T27734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.558846][T27742] bond7: (slave bridge3): making interface the new active one [ 592.569095][T27742] bridge3: entered promiscuous mode [ 592.588345][T27742] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 592.724455][ T6279] pim6reg (unregistering): left allmulticast mode [ 593.417206][ T5831] Bluetooth: hci5: command tx timeout [ 593.881509][T27814] __nla_validate_parse: 3 callbacks suppressed [ 593.881528][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5920'. [ 593.909928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 593.918007][ C0] lec:lec_tx_timeout: lec0 [ 593.926333][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.237472][ T6279] IPVS: stop unused estimator thread 0... [ 594.945405][T27526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 595.118366][T27862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5932'. [ 595.130295][T27526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 595.187618][T27526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 595.214438][T27526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 595.369840][T27874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5933'. [ 595.432186][T27526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.496552][ T5831] Bluetooth: hci5: command tx timeout [ 595.579358][T27526] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.642042][T12294] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.649271][T12294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.688839][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.696061][T12294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.907213][T27902] netlink: 766 bytes leftover after parsing attributes in process `syz.5.5940'. [ 595.960089][T27526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.219895][T27925] netlink: 'syz.5.5946': attribute type 75 has an invalid length. [ 596.277101][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 596.286438][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 596.295620][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 596.317131][T27926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5947'. [ 596.369494][T27925] nbd5: detected capacity change from 0 to 63 [ 596.390766][T27929] block nbd5: NBD_DISCONNECT [ 596.417616][T27929] block nbd5: Disconnected due to user request. [ 596.425635][T27929] block nbd5: shutting down sockets [ 596.481379][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.491171][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 596.499024][ C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.508552][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 596.516380][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.525928][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 596.533796][ C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.543396][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 596.586628][T26589] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.641136][T26589] Buffer I/O error on dev nbd5, logical block 0, async page read [ 596.656695][T26589] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.702624][T26589] Buffer I/O error on dev nbd5, logical block 1, async page read [ 596.727334][T26589] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.750419][T26589] Buffer I/O error on dev nbd5, logical block 2, async page read [ 596.766487][T26589] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.789510][T26589] Buffer I/O error on dev nbd5, logical block 3, async page read [ 596.838243][T26589] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.863936][T27526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.874412][T26589] Buffer I/O error on dev nbd5, logical block 0, async page read [ 596.895863][T26589] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 596.907311][T27960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5953'. [ 596.940237][T26589] Buffer I/O error on dev nbd5, logical block 1, async page read [ 596.961426][T26589] ldm_validate_partition_table(): Disk read failed. [ 596.977280][T26589] Dev nbd5: unable to read RDB block 0 [ 596.990483][T26589] nbd5: unable to read partition table [ 597.039771][T26589] ldm_validate_partition_table(): Disk read failed. [ 597.069009][T26589] Dev nbd5: unable to read RDB block 0 [ 597.090062][T26589] nbd5: unable to read partition table [ 597.107789][T27965] xt_hashlimit: size too large, truncated to 1048576 [ 597.116178][T27526] veth0_vlan: entered promiscuous mode [ 597.175992][T27526] veth1_vlan: entered promiscuous mode [ 597.488563][T27526] veth0_macvtap: entered promiscuous mode [ 597.531507][T27526] veth1_macvtap: entered promiscuous mode [ 597.603642][T27526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.651844][T27526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.732399][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.765550][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.785069][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.832802][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.288928][ T29] audit: type=1800 audit(1773733952.423:3): pid=28007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5960" name="memory.events" dev="tmpfs" ino=3196 res=0 errno=0 [ 598.496093][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.525927][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.679028][T12294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.697409][T12294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.838679][T28035] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5967'. [ 598.910398][T28039] netlink: 'syz.2.5968': attribute type 4 has an invalid length. [ 598.946415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 598.954497][ C0] lec:lec_tx_timeout: lec0 [ 598.959742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 599.401425][T28059] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5975'. [ 599.517358][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.527668][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.535531][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.545028][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.552979][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 599.620635][T28060] ip6_vti0 speed is unknown, defaulting to 1000 [ 599.665017][T28069] xt_nat: multiple ranges no longer supported [ 599.950062][T28077] xt_hashlimit: size too large, truncated to 1048576 [ 600.100260][T28060] lo speed is unknown, defaulting to 1000 [ 600.163231][T28084] syzkaller0: entered promiscuous mode [ 600.174910][T28084] syzkaller0: entered allmulticast mode [ 600.341262][T28091] 0: reclassify loop, rule prio 0, protocol 700 [ 600.570531][T28100] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 600.715036][T28104] netlink: 'syz.4.5993': attribute type 3 has an invalid length. [ 600.731709][T28104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5993'. [ 600.764090][T28110] netlink: 'syz.3.5995': attribute type 3 has an invalid length. [ 600.894542][T28060] chnl_net:caif_netlink_parms(): no params data found [ 601.427354][T28060] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.434613][T28060] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.447843][T28060] bridge_slave_0: entered allmulticast mode [ 601.455298][T28060] bridge_slave_0: entered promiscuous mode [ 601.508288][T28060] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.515480][T28060] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.577898][ T51] Bluetooth: hci4: command tx timeout [ 601.584791][T28060] bridge_slave_1: entered allmulticast mode [ 601.633482][T28060] bridge_slave_1: entered promiscuous mode [ 601.704097][T28136] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.756119][T28060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.799484][T28060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.915824][T28145] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6003'. [ 601.964407][T28060] team0: Port device team_slave_0 added [ 601.972280][T28145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6003'. [ 601.998307][T28060] team0: Port device team_slave_1 added [ 602.086543][T28060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.106044][T28060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.185329][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6003'. [ 602.194505][T28060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.211299][T28148] IPv6: sit1: Disabled Multicast RS [ 602.218317][T28148] sit1: entered allmulticast mode [ 602.253133][T28060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.296793][T28060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.323527][T28145] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6003'. [ 602.343240][T28060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.385375][T28136] lo speed is unknown, defaulting to 1000 [ 602.561394][T28060] hsr_slave_0: entered promiscuous mode [ 602.587461][T28060] hsr_slave_1: entered promiscuous mode [ 602.603923][T28060] debugfs: 'hsr0' already exists in 'hsr' [ 602.621215][T28060] Cannot create hsr debugfs directory [ 603.060787][T28060] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.091650][T28060] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.171197][T28178] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6012'. [ 603.197793][T28179] netlink: 'syz.3.6011': attribute type 2 has an invalid length. [ 603.263407][T28060] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.274027][T28060] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.482443][T28060] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.502865][T28184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6013'. [ 603.526469][T28060] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.538225][T28183] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6013'. [ 603.656466][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 603.703730][T28060] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.716419][T28060] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.862976][T28193] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6016'. [ 603.881829][T28193] 8021q: VLANs not supported on ip_vti0 [ 603.966351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 603.974451][ C0] lec:lec_tx_timeout: lec0 [ 603.979144][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.422836][T28060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.438075][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.447526][T28212] netlink: 'syz.3.6021': attribute type 1 has an invalid length. [ 604.462532][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.474513][T28060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.481444][T28212] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6021'. [ 604.497410][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.509678][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.522689][T28060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.525086][T28211] netlink: 'syz.5.6019': attribute type 1 has an invalid length. [ 604.550901][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.558288][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.588191][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.600031][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.629441][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.639356][T28211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 604.649770][T28210] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 604.658758][T28060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.889532][T28060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.958192][T28060] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.009977][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.017236][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.045624][T28233] netlink: 'syz.5.6024': attribute type 1 has an invalid length. [ 605.057972][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.065198][T12291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.245522][T28238] netlink: 'syz.5.6026': attribute type 10 has an invalid length. [ 605.260420][T28238] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 605.274311][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6026'. [ 605.467005][T28246] netlink: 'syz.3.6028': attribute type 13 has an invalid length. [ 605.646890][T28257] netlink: 'syz.5.6032': attribute type 4 has an invalid length. [ 605.738728][ T5831] Bluetooth: hci4: command 0x041b tx timeout [ 605.764765][T28060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.958580][T28060] veth0_vlan: entered promiscuous mode [ 606.002293][T28060] veth1_vlan: entered promiscuous mode [ 606.024190][T28284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6037'. [ 606.081632][T28288] netlink: 'syz.4.6038': attribute type 24 has an invalid length. [ 606.153536][T28060] veth0_macvtap: entered promiscuous mode [ 606.211471][T28060] veth1_macvtap: entered promiscuous mode [ 606.272185][T28060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.322776][T28060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.368287][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.416303][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.425097][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.466757][T28311] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 606.492454][T28311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.525854][ T1089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.726018][T28326] netlink: 'syz.4.6047': attribute type 1 has an invalid length. [ 606.773099][T28326] 8021q: adding VLAN 0 to HW filter on device bond8 [ 606.797308][T28330] bond8: (slave geneve3): making interface the new active one [ 606.806567][T28330] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 607.650226][T28338] gtp1: entered promiscuous mode [ 607.655219][T28338] gtp1: entered allmulticast mode [ 607.816474][ T5831] Bluetooth: hci4: command 0x041b tx timeout [ 607.942006][T28346] syzkaller0: entered promiscuous mode [ 607.949746][T28346] syzkaller0: entered allmulticast mode [ 608.989887][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.998021][ C0] lec:lec_tx_timeout: lec0 [ 609.002764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 609.556536][T28320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.900134][ T5831] Bluetooth: hci4: command 0x041b tx timeout [ 610.204863][T12291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.238609][T12291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.323785][T28352] ieee802154 phy0 wpan0: encryption failed: -22 [ 610.388596][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.397431][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.580350][T28372] xt_cgroup: path and classid specified [ 610.616035][T28377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.890049][T28397] netlink: 'syz.0.6068': attribute type 1 has an invalid length. [ 611.023903][T28397] 8021q: adding VLAN 0 to HW filter on device bond13 [ 611.033473][T28401] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6070'. [ 611.079075][T28403] bond13: (slave veth5): Enslaving as an active interface with a down link [ 611.134313][T28416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6073'. [ 611.158310][T28412] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 611.191482][T28412] bond13: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 611.333199][T28427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6076'. [ 611.380408][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6078'. [ 611.390847][T28438] delete_channel: no stack [ 611.412756][T28427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.420455][T28438] netlink: 'syz.3.6076': attribute type 1 has an invalid length. [ 611.433375][T28434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6078'. [ 611.447538][T28427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.514939][T28433] netlink: 'syz.2.6078': attribute type 2 has an invalid length. [ 611.781829][T28451] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.6082'. [ 612.105100][T28473] syzkaller0: entered promiscuous mode [ 612.125967][T28473] syzkaller0: entered allmulticast mode [ 612.736909][T28497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6095'. [ 612.819444][T28503] netlink: 'syz.2.6096': attribute type 1 has an invalid length. [ 613.121517][T28530] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 613.208844][T28533] netlink: 'syz.0.6105': attribute type 1 has an invalid length. [ 613.217047][T28533] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6105'. [ 613.217849][T28530] 8021q: adding VLAN 0 to HW filter on device bond11 [ 613.234951][T28533] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6105'. [ 613.280450][T28534] bond11: (slave gretap2): making interface the new active one [ 613.297038][T28542] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.328964][T28534] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 613.440755][T28549] team0: No ports can be present during mode change [ 613.493619][T28555] xt_TCPMSS: Only works on TCP SYN packets [ 613.572508][T28565] dvmrp0: entered allmulticast mode [ 613.603998][T28563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6113'. [ 613.770940][T28571] netlink: 'syz.4.6114': attribute type 3 has an invalid length. [ 613.804032][T28575] netlink: 'syz.3.6116': attribute type 25 has an invalid length. [ 614.016355][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 614.024448][ C0] lec:lec_tx_timeout: lec0 [ 614.029169][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 614.051514][T28587] netlink: 'syz.5.6120': attribute type 1 has an invalid length. [ 614.071176][T28589] netlink: 'syz.3.6121': attribute type 21 has an invalid length. [ 614.331696][T28601] : entered promiscuous mode [ 614.354048][T28602] openvswitch: netlink: IP tunnel TTL not specified. [ 614.371332][T28606] veth0_macvtap: left promiscuous mode [ 614.547601][T28614] RDS: rds_bind could not find a transport for ::ffff:ffff, load rds_tcp or rds_rdma? [ 614.561018][T28617] tipc: Started in network mode [ 614.565931][T28617] tipc: Node identity ac14140f, cluster identity 4711 [ 614.605569][T28617] tipc: New replicast peer: 255.255.255.255 [ 614.626435][T28617] tipc: Enabled bearer , priority 10 [ 614.769050][T28624] tipc: Started in network mode [ 614.790213][T28624] tipc: Node identity bab0c03a0e08, cluster identity 4711 [ 614.815827][T28624] tipc: Enabled bearer , priority 0 [ 614.837911][T28625] syzkaller0: entered promiscuous mode [ 614.843699][T28625] syzkaller0: entered allmulticast mode [ 615.644013][T28635] tipc: Resetting bearer [ 615.716758][T28621] tipc: Resetting bearer [ 615.721697][T28645] nbd: must specify at least one socket [ 615.850390][T28621] tipc: Disabling bearer [ 615.914629][T23696] tipc: Node number set to 2886997007 [ 615.922971][T20703] tipc: Node number set to 3032006714 [ 616.025668][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.036800][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.045994][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.077681][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.092424][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.243975][T28655] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.327066][T28665] openvswitch: netlink: Tunnel attr 31 out of range max 16 [ 616.754861][T28681] validate_nla: 3 callbacks suppressed [ 616.754881][T28681] netlink: 'syz.4.6149': attribute type 1 has an invalid length. [ 616.850874][T28681] bond12: entered promiscuous mode [ 616.857552][T28681] 8021q: adding VLAN 0 to HW filter on device bond12 [ 616.915355][T28688] macvtap1: entered allmulticast mode [ 616.921295][T28655] lo speed is unknown, defaulting to 1000 [ 616.945670][T28681] bond12: (slave bridge9): making interface the new active one [ 616.954012][T28681] bridge9: entered promiscuous mode [ 616.961392][T28681] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 617.017237][T28696] __nla_validate_parse: 11 callbacks suppressed [ 617.017268][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6152'. [ 617.084389][T28696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6152'. [ 617.141649][T28700] openvswitch: netlink: IP tunnel dst address not specified [ 617.161185][T28703] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6156'. [ 617.177161][T28696] geneve2: entered promiscuous mode [ 617.182430][T28696] geneve2: entered allmulticast mode [ 617.188750][T28702] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6156'. [ 617.355613][T28699] tipc: Enabled bearer , priority 0 [ 617.371493][ T35] veth0_to_bridge: left allmulticast mode [ 617.385711][ T35] veth0_to_bridge: left promiscuous mode [ 617.393613][ T35] bridge0: port 1(veth0_to_bridge) entered disabled state [ 617.493943][T28713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6159'. [ 618.000479][ T35] bond11 (unregistering): (slave gretap3): Releasing active interface [ 618.145438][T28748] netlink: 'syz.3.6164': attribute type 32 has an invalid length. [ 618.156176][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6164'. [ 618.202402][T28751] netlink: 'syz.4.6165': attribute type 1 has an invalid length. [ 618.217203][ T5831] Bluetooth: hci2: command tx timeout [ 618.459891][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.470598][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.482595][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 618.494145][ T35] bond0 (unregistering): Released all slaves [ 618.507843][ T35] bond1 (unregistering): Released all slaves [ 618.523331][ T35] bond2 (unregistering): (slave lo): Releasing backup interface [ 618.531644][ T35] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 618.553439][ T35] bond2 (unregistering): Released all slaves [ 618.573468][ T35] bond3 (unregistering): (slave batadv0): Releasing active interface [ 618.581773][ T35] batadv0: left promiscuous mode [ 618.587698][ T35] batadv0: left allmulticast mode [ 618.594423][ T35] bond3 (unregistering): Released all slaves [ 618.615659][ T35] bond4 (unregistering): Released all slaves [ 618.632778][ T35] bond5 (unregistering): Released all slaves [ 618.647877][ T35] bond6 (unregistering): Released all slaves [ 618.664498][ T35] bond7 (unregistering): Released all slaves [ 618.679179][ T35] bond8 (unregistering): Released all slaves [ 618.706864][ T35] bond9 (unregistering): Released all slaves [ 618.721791][ T35] bond10 (unregistering): Released all slaves [ 618.735819][ T35] bond11 (unregistering): Released all slaves [ 618.759115][ T35] bond12 (unregistering): Released all slaves [ 618.774870][ T35] bond13 (unregistering): (slave veth5): Releasing active interface [ 618.795148][ T35] bond13 (unregistering): Released all slaves [ 618.813899][T28699] syzkaller0: entered promiscuous mode [ 618.819591][T28699] syzkaller0: entered allmulticast mode [ 618.827841][T28714] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 618.847179][T28727] tipc: Resetting bearer [ 618.853990][T28729] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 618.879396][T28697] tipc: Resetting bearer [ 618.925829][T28697] tipc: Disabling bearer [ 619.036404][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 619.044622][ C0] lec:lec_tx_timeout: lec0 [ 619.049589][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 619.078407][T28748] bond1: option coupled_control: invalid value (128) [ 619.110515][T28748] bond1 (unregistering): Released all slaves [ 619.183864][T28751] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 619.309799][ T35] : left promiscuous mode [ 619.409369][T28770] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6169'. [ 619.473960][ T35] tipc: Left network mode [ 619.565471][T28781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6169'. [ 619.614816][T28777] tipc: Started in network mode [ 619.625095][T28777] tipc: Node identity da2981b9a3f3, cluster identity 4711 [ 619.636622][T28777] tipc: Enabled bearer , priority 0 [ 619.693733][T28777] syzkaller0: entered promiscuous mode [ 619.699870][T28777] syzkaller0: entered allmulticast mode [ 619.709297][T28777] tipc: Resetting bearer [ 619.715372][T28781] bridge_slave_1: left allmulticast mode [ 619.721110][T28781] bridge_slave_1: left promiscuous mode [ 619.727061][T28781] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.740177][T28781] bridge_slave_0: left allmulticast mode [ 619.745946][T28781] bridge_slave_0: left promiscuous mode [ 619.777163][T28781] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.905387][T28797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6174'. [ 620.135176][T28805] netlink: 'syz.3.6176': attribute type 1 has an invalid length. [ 620.297506][ T5831] Bluetooth: hci2: command tx timeout [ 621.577179][ T1089] tipc: Resetting bearer [ 621.584977][T28805] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 621.612777][T28772] tipc: Resetting bearer [ 621.695532][T28772] tipc: Disabling bearer [ 621.715716][T20703] tipc: Node number set to 2044363193 [ 622.004212][T28655] chnl_net:caif_netlink_parms(): no params data found [ 622.358831][T28859] netlink: 'syz.3.6189': attribute type 1 has an invalid length. [ 622.377864][ T5831] Bluetooth: hci2: command tx timeout [ 622.438199][T28859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.545573][T28865] bond1: entered allmulticast mode [ 622.621640][T28655] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.641602][T28655] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.660854][T28655] bridge_slave_0: entered allmulticast mode [ 622.679787][T28655] bridge_slave_0: entered promiscuous mode [ 622.723798][T28655] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.733858][T28655] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.742101][T28655] bridge_slave_1: entered allmulticast mode [ 622.757270][T28655] bridge_slave_1: entered promiscuous mode [ 622.930692][T28655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.954872][T28655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.071702][T28895] netlink: 'syz.3.6195': attribute type 8 has an invalid length. [ 623.141692][T28892] pim6reg: entered allmulticast mode [ 623.179160][T28655] team0: Port device team_slave_0 added [ 623.204769][T28655] team0: Port device team_slave_1 added [ 623.442985][T28655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.466493][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.506719][T28655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.557308][T28655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.580857][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.683879][T28655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.984022][T28931] netlink: 'syz.5.6204': attribute type 1 has an invalid length. [ 624.056376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 624.064482][ C0] lec:lec_tx_timeout: lec0 [ 624.069485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.165747][T28931] 8021q: adding VLAN 0 to HW filter on device bond9 [ 624.265022][T28935] bond9: (slave veth7): Enslaving as an active interface with a down link [ 624.302376][ T35] hsr_slave_0: left promiscuous mode [ 624.308663][ T35] hsr_slave_1: left promiscuous mode [ 624.389768][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.458807][ T5831] Bluetooth: hci2: command tx timeout [ 626.222669][T28655] hsr_slave_0: entered promiscuous mode [ 626.230387][T28655] hsr_slave_1: entered promiscuous mode [ 626.237003][T28655] debugfs: 'hsr0' already exists in 'hsr' [ 626.242851][T28655] Cannot create hsr debugfs directory [ 626.399874][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6209'. [ 626.416145][T28957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'. [ 626.509217][T28963] netlink: 'syz.5.6208': attribute type 3 has an invalid length. [ 626.570515][T28960] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6210'. [ 626.646960][ T35] IPVS: stop unused estimator thread 0... [ 627.382417][T29005] netlink: 'syz.3.6220': attribute type 11 has an invalid length. [ 627.426127][T29005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6220'. [ 627.467627][T29012] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6220'. [ 627.528263][T28655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 627.562867][T28655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 627.638954][T28655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 627.731366][T28655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 627.756729][T29031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6225'. [ 627.820350][T29031] IPv6: sit3: Disabled Multicast RS [ 627.869723][T29045] netlink: 'syz.4.6228': attribute type 1 has an invalid length. [ 627.906362][T29045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.339738][T28655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.385641][T28655] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.424613][T29061] netlink: 'syz.5.6232': attribute type 64 has an invalid length. [ 628.720204][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.727410][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.895693][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.903018][T12371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.946770][T29079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6234'. [ 629.076304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 629.084402][ C0] lec:lec_tx_timeout: lec0 [ 629.089046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.159386][T29084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6237'. [ 629.199381][T29084] netlink: 'syz.5.6237': attribute type 4 has an invalid length. [ 629.710025][T28655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.985343][T28655] veth0_vlan: entered promiscuous mode [ 630.075674][T28655] veth1_vlan: entered promiscuous mode [ 630.117554][T29125] : entered promiscuous mode [ 630.140345][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6245'. [ 630.186475][T29131] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 630.303395][T28655] veth0_macvtap: entered promiscuous mode [ 630.350691][T28655] veth1_macvtap: entered promiscuous mode [ 630.449091][T28655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.482286][T28655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.534215][ T6279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.587940][T29149] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6248'. [ 630.596498][ T6279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.605754][ T6279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.721833][ T6279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.986859][T29159] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.047851][T12371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.077474][T12371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.309855][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.358756][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.666816][T29224] sctp: [Deprecated]: syz.0.6139 (pid 29224) Use of int in maxseg socket option. [ 631.666816][T29224] Use struct sctp_assoc_value instead [ 631.778626][T29223] x_tables: duplicate underflow at hook 1 [ 632.049729][T29159] lo speed is unknown, defaulting to 1000 [ 632.271678][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.292911][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.311932][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.323339][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.366490][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.567170][T29259] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.705725][T29282] netlink: 'syz.5.6270': attribute type 2 has an invalid length. [ 634.071846][T29287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.096336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.104388][ C0] lec:lec_tx_timeout: lec0 [ 634.109100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.125079][T29259] lo speed is unknown, defaulting to 1000 [ 634.457378][ T5831] Bluetooth: hci1: command tx timeout [ 634.838716][T29324] __nla_validate_parse: 2 callbacks suppressed [ 634.838736][T29324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6276'. [ 635.040414][T29324] netlink: 'syz.5.6276': attribute type 16 has an invalid length. [ 635.059772][T29324] netlink: 'syz.5.6276': attribute type 17 has an invalid length. [ 635.361584][T29324] bridge0: port 3(gretap0) entered blocking state [ 635.368348][T29324] bridge0: port 3(gretap0) entered forwarding state [ 635.388305][T29324] bridge0: left allmulticast mode [ 635.434801][T29324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.686979][T29352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6280'. [ 636.195583][T29259] chnl_net:caif_netlink_parms(): no params data found [ 636.536609][ T5831] Bluetooth: hci1: command tx timeout [ 636.627652][T29259] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.634934][T29259] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.646553][T29259] bridge_slave_0: entered allmulticast mode [ 636.654567][T29259] bridge_slave_0: entered promiscuous mode [ 636.695952][T29401] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.6292'. [ 636.715337][T29259] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.731585][T29259] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.764797][T29259] bridge_slave_1: entered allmulticast mode [ 636.777409][T29259] bridge_slave_1: entered promiscuous mode [ 636.926913][T29259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.947490][T29409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6295'. [ 636.977602][T29259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.254707][T29414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 637.320708][T29259] team0: Port device team_slave_0 added [ 637.350441][T29259] team0: Port device team_slave_1 added [ 637.469834][T29259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.486404][T29259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.606518][T29259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.651229][T29446] ip6tnl0: Caught tx_queue_len zero misconfig [ 637.664579][T29259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.686631][T29259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.753180][T29259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.931485][T29259] hsr_slave_0: entered promiscuous mode [ 637.941333][T29259] hsr_slave_1: entered promiscuous mode [ 637.955930][T29259] debugfs: 'hsr0' already exists in 'hsr' [ 637.969053][T29259] Cannot create hsr debugfs directory [ 638.030382][T29466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6306'. [ 638.237331][T29477] netlink: 'syz.0.6310': attribute type 11 has an invalid length. [ 638.265572][T29477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6310'. [ 638.620594][ T5831] Bluetooth: hci1: command tx timeout [ 638.738460][T29259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.782201][T29259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 638.808929][T29259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.820634][T29259] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 639.021319][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6315'. [ 639.094089][T29259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.124926][T29259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 639.161012][T29259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.186918][T29519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6319'. [ 639.204632][T29259] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 639.219524][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6319'. [ 639.293884][T29504] syzkaller0: entered promiscuous mode [ 639.300447][T29504] syzkaller0: entered allmulticast mode [ 639.555609][T29259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.590615][T29259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 639.618014][T29259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.636461][T29259] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 639.669858][T29543] netlink: 'syz.0.6323': attribute type 4 has an invalid length. [ 639.713761][T29543] netlink: 'syz.0.6323': attribute type 4 has an invalid length. [ 639.833429][T29259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.883086][T29553] rxe_newlink: 23 callbacks suppressed [ 639.883110][T29553] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 639.896246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 639.904288][ C0] lec:lec_tx_timeout: lec0 [ 639.909254][T29259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 639.916497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.940367][T29259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.993958][T29259] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 640.487667][T29542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.628163][T29259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 640.640392][T29259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 640.652488][T29259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 640.664260][T29259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 640.697234][ T5831] Bluetooth: hci1: command tx timeout [ 640.771338][T29259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.793457][T29259] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.805665][T29213] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.812871][T29213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.832445][T29236] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.839624][T29236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.900042][T29259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.080440][T29259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.294068][T29259] veth0_vlan: entered promiscuous mode [ 641.306501][T29259] veth1_vlan: entered promiscuous mode [ 641.334095][T29259] veth0_macvtap: entered promiscuous mode [ 641.347251][T29259] veth1_macvtap: entered promiscuous mode [ 641.365021][T29259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.381875][T29259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.395873][T29236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.405677][T29236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.414992][T29236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.425695][T29236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.501186][T29236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.522848][T29236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.550590][T29233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.559396][T29233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.673151][T29594] sch_fq: defrate 0 ignored. [ 644.936547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 644.944597][ C0] lec:lec_tx_timeout: lec0 [ 644.950256][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 649.966398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.974423][ C0] lec:lec_tx_timeout: lec0 [ 649.981265][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 650.004365][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 651.810568][T29600] netlink: 'syz.4.6333': attribute type 24 has an invalid length. [ 651.852256][T29600] delete_channel: no stack [ 651.891820][T29607] __nla_validate_parse: 2 callbacks suppressed [ 651.891842][T29607] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6332'. [ 651.924034][T29602] netlink: set zone limit has 4 unknown bytes [ 652.025193][T29600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6333'. [ 652.055116][T29613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6334'. [ 652.203501][T29618] tipc: Enabling of bearer rejected, failed to enable media [ 652.232648][T29616] netlink: 'syz.3.6335': attribute type 4 has an invalid length. [ 652.255074][T29618] netlink: 'syz.2.6336': attribute type 1 has an invalid length. [ 652.324048][T29618] tipc: Enabling of bearer rejected, failed to enable media [ 652.506750][T29634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6339'. [ 652.668354][T29644] netlink: 'syz.3.6342': attribute type 2 has an invalid length. [ 652.676628][T29644] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6342'. [ 652.850450][T29653] netlink: 'syz.5.6345': attribute type 27 has an invalid length. [ 652.939592][T29657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6346'. [ 652.970038][T29657] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6346'. [ 652.987159][T29657] netlink: 'syz.2.6346': attribute type 6 has an invalid length. [ 653.009050][T29657] netlink: 'syz.2.6346': attribute type 5 has an invalid length. [ 653.018795][T29657] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6346'. [ 653.168936][T29666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 653.399566][T29686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6357'. [ 654.103557][T29220] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 654.168570][T29726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.314774][T29741] gretap1: entered promiscuous mode [ 654.356417][T29741] gretap1: entered allmulticast mode [ 654.412350][T29748] nbd: must specify at least one socket [ 654.570658][T29761] xt_policy: neither incoming nor outgoing policy selected [ 654.803533][T29782] xt_hashlimit: size too large, truncated to 1048576 [ 655.026427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 655.034540][ C0] lec:lec_tx_timeout: lec0 [ 655.039980][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.058342][T29796] netlink: 'syz.5.6390': attribute type 12 has an invalid length. [ 655.080522][T29796] netlink: 'syz.5.6390': attribute type 29 has an invalid length. [ 655.100121][T29796] netlink: 'syz.5.6390': attribute type 2 has an invalid length. [ 655.125844][T29794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.808173][T29833] team0 (unregistering): Port device team_slave_0 removed [ 655.852447][T29833] team0 (unregistering): Port device team_slave_1 removed [ 655.996861][T29841] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 656.214486][T29849] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 656.409853][T29861] bond1: (slave ip6gretap1): making interface the new active one [ 656.429930][T29861] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 656.441086][T29861] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 656.449402][T29861] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 657.024101][T29900] __nla_validate_parse: 141 callbacks suppressed [ 657.024125][T29900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'. [ 657.162890][T29905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6421'. [ 657.191249][T29905] block nbd5: Unsupported socket: should be TCP or UNIX. [ 657.238825][T29910] delete_channel: no stack [ 657.387255][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6427'. [ 657.412577][T29918] validate_nla: 3 callbacks suppressed [ 657.412600][T29918] netlink: 'syz.2.6427': attribute type 1 has an invalid length. [ 657.428931][T29919] netlink: 216 bytes leftover after parsing attributes in process `syz.5.6426'. [ 657.497182][T29918] bond2: entered promiscuous mode [ 657.502918][T29918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.563530][T29929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6430'. [ 657.680622][T29918] bond2: (slave bridge1): making interface the new active one [ 657.712005][T29918] bridge1: entered promiscuous mode [ 657.729668][T29918] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 657.959191][T29956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6436'. [ 658.034564][T29964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6435'. [ 658.034603][T29961] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6436'. [ 658.046964][T29956] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6436'. [ 658.257533][T29974] netlink: 'syz.0.6440': attribute type 32 has an invalid length. [ 658.327103][T29975] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 658.476970][T29987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.757858][T30005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6447'. [ 659.008398][T30012] netlink: 'syz.0.6451': attribute type 13 has an invalid length. [ 659.121108][T30023] tipc: Failed to remove unknown binding: 66,0,0/0:3071033993/3071033994 [ 659.130185][T30023] tipc: Failed to remove unknown binding: 66,0,0/0:3071033993/3071033994 [ 659.282579][T30021] ip6_vti0 speed is unknown, defaulting to 1000 [ 659.289145][T30027] bridge_slave_1: left allmulticast mode [ 659.294840][T30027] bridge_slave_1: left promiscuous mode [ 659.330333][T30027] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.375143][T30027] bridge_slave_0: left allmulticast mode [ 659.401230][T30027] bridge_slave_0: left promiscuous mode [ 659.429256][T30027] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.480084][T30037] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 659.629913][T30037] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.651454][T30037] bridge_slave_1: left allmulticast mode [ 659.670721][T30037] bridge_slave_1: left promiscuous mode [ 659.681556][T30037] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.697157][T30037] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 659.708342][T30021] lo speed is unknown, defaulting to 1000 [ 659.944541][T30040] netlink: 'syz.3.6457': attribute type 39 has an invalid length. [ 660.046255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.054363][ C0] lec:lec_tx_timeout: lec0 [ 660.059438][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.217459][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 661.045531][T30090] IPVS: length: 58 != 8 [ 661.581867][T30124] netlink: 'syz.4.6481': attribute type 10 has an invalid length. [ 661.949412][T30152] bridge0: Caught tx_queue_len zero misconfig [ 661.960889][T30153] lo: Caught tx_queue_len zero misconfig [ 662.050569][T30159] __nla_validate_parse: 7 callbacks suppressed [ 662.050588][T30159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6491'. [ 662.151527][T30161] bond1: entered allmulticast mode [ 662.157287][T30168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6494'. [ 662.187649][T30165] bridge1: entered promiscuous mode [ 662.193029][T30165] bridge1: entered allmulticast mode [ 662.204238][T30165] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 662.210746][T30168] netlink: 'syz.5.6494': attribute type 7 has an invalid length. [ 662.237435][T30168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6494'. [ 662.639355][T30192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6503'. [ 662.845269][T30207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6506'. [ 663.105929][T30228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6514'. [ 663.116315][T30228] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6514'. [ 663.211276][T30234] netlink: 'syz.2.6515': attribute type 23 has an invalid length. [ 663.302115][T30235] netlink: 'syz.3.6516': attribute type 1 has an invalid length. [ 663.320314][T30235] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6516'. [ 663.357647][T30235] netlink: 'syz.3.6516': attribute type 1 has an invalid length. [ 663.368290][T30235] netlink: 634 bytes leftover after parsing attributes in process `syz.3.6516'. [ 663.378129][T30235] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6516'. [ 663.685061][T30258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.695406][T30264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.837444][T30275] netlink: 'syz.3.6525': attribute type 12 has an invalid length. [ 663.875047][T30275] netlink: 'syz.3.6525': attribute type 12 has an invalid length. [ 663.877738][T29236] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.915185][T29236] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.941322][T29236] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.953723][T29236] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.066328][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 665.074404][ C0] lec:lec_tx_timeout: lec0 [ 665.079315][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 665.601028][T30373] can: request_module (can-proto-3) failed. [ 665.713241][T29236] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 665.855756][T29236] bond6 (unregistering): (slave gretap3): Releasing active interface [ 665.905271][T29236] bond5 (unregistering): (slave geneve2): Releasing active interface [ 666.232269][T29236] bond1 (unregistering): Released all slaves [ 666.248271][T29236] bond2 (unregistering): Released all slaves [ 666.263886][T29236] bond3 (unregistering): Released all slaves [ 666.290107][T29236] bond4 (unregistering): Released all slaves [ 666.312411][T29236] bond5 (unregistering): Released all slaves [ 666.332610][T29236] bond6 (unregistering): Released all slaves [ 666.381648][T30353] ip6_vti0 speed is unknown, defaulting to 1000 [ 666.526951][T29236] : left promiscuous mode [ 666.677003][T29236] vþ: left promiscuous mode [ 666.754099][T30403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.761438][T30403] IPv6: NLM_F_CREATE should be set when creating new route [ 667.254621][T30427] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.461904][T30403] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.469688][T30403] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.926856][T30403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.974110][T30403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.518099][T30403] bond2: left promiscuous mode [ 668.524018][T30403] bridge1: left promiscuous mode [ 668.555113][T29236] tipc: Disabling bearer [ 668.560964][T29236] tipc: Left network mode [ 668.604988][T29236] IPVS: stopping master sync thread 12650 ... [ 668.647431][T30353] lo speed is unknown, defaulting to 1000 [ 668.693123][T29220] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.704731][T29220] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.714963][T30422] netlink: 'syz.4.6569': attribute type 2 has an invalid length. [ 668.836680][T29220] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.887194][T29220] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.050777][T30437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.061022][T30434] __nla_validate_parse: 15 callbacks suppressed [ 669.061042][T30434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6570'. [ 669.376101][T30462] netlink: 'syz.2.6577': attribute type 24 has an invalid length. [ 669.423210][T30460] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 669.469554][T30462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6577'. [ 669.516273][T30464] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 669.573177][T30466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6579'. [ 669.603185][T30468] netlink: 'syz.3.6580': attribute type 2 has an invalid length. [ 669.626379][T30468] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6580'. [ 670.086427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 670.094521][ C0] lec:lec_tx_timeout: lec0 [ 670.099168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 670.182136][T30491] xt_ecn: cannot match TCP bits for non-tcp packets [ 671.160803][T29236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.188237][T29236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.224557][T29236] veth1_macvtap: left promiscuous mode [ 671.236749][T29236] veth1_vlan: left promiscuous mode [ 671.380185][T29236] pimreg (unregistering): left allmulticast mode [ 672.548110][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 672.809070][T30532] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 672.822259][T30532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6592'. [ 673.727181][T30532] vlan3: entered allmulticast mode [ 673.732522][T30532] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 673.862156][T30537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6595'. [ 673.941722][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6593'. [ 673.991738][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6593'. [ 674.065616][T30550] netlink: 183892 bytes leftover after parsing attributes in process `syz.0.6593'. [ 674.133780][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6598'. [ 674.210181][T29236] IPVS: stop unused estimator thread 0... [ 674.217703][T30562] netlink: 'syz.5.6600': attribute type 15 has an invalid length. [ 674.347492][T30565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6602'. [ 674.430988][T30567] syzkaller1: entered promiscuous mode [ 674.450195][T30567] syzkaller1: entered allmulticast mode [ 674.614084][T30583] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 674.891804][T30589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6608'. [ 675.017673][T30561] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 675.116263][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 675.124391][ C0] lec:lec_tx_timeout: lec0 [ 675.129822][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 675.313293][T30613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6615'. [ 675.322515][T30613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6615'. [ 675.921058][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6628'. [ 675.932164][T30658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6629'. [ 676.022535][T30661] veth0: Caught tx_queue_len zero misconfig [ 676.514429][T30691] netlink: 'syz.3.6640': attribute type 4 has an invalid length. [ 676.561621][T30691] netlink: 'syz.3.6640': attribute type 1 has an invalid length. [ 676.725453][T30702] bond4: (slave gretap1): making interface the new active one [ 676.757770][T30702] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 676.849361][T30710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6646'. [ 676.879865][T30710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6646'. [ 677.006902][T30716] pim6reg: entered allmulticast mode [ 677.016018][T30716] pim6reg: left allmulticast mode [ 677.086079][T30722] pim6reg: entered allmulticast mode [ 677.231415][T30734] gre0: entered promiscuous mode [ 677.243206][T30734] gre0: entered allmulticast mode [ 677.388059][T30693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.398549][T30719] netlink: 'syz.3.6649': attribute type 1 has an invalid length. [ 677.469628][T30748] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 677.576472][ T5831] Bluetooth: hci1: command tx timeout [ 677.805981][T30770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.005482][T30784] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 678.019953][T30784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6667'. [ 678.328878][T30798] syzkaller0: entered promiscuous mode [ 678.334430][T30798] syzkaller0: entered allmulticast mode [ 678.394067][T30805] netlink: 'syz.0.6674': attribute type 1 has an invalid length. [ 678.401932][T30805] netlink: 'syz.0.6674': attribute type 1 has an invalid length. [ 678.458672][T30798] syzkaller0: left promiscuous mode [ 678.463952][T30798] syzkaller0: left allmulticast mode [ 678.844961][T30815] netlink: 'syz.3.6677': attribute type 3 has an invalid length. [ 678.867319][T30817] netlink: 'syz.3.6677': attribute type 3 has an invalid length. [ 679.555667][T30837] bond3 (unregistering): Released all slaves [ 679.651114][T30843] delete_channel: no stack [ 679.893938][T30864] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 679.914458][T30858] block nbd5: Unsupported socket: should be TCP or UNIX. [ 680.105795][T30871] xt_hashlimit: size too large, truncated to 1048576 [ 680.179536][T30878] __nla_validate_parse: 3 callbacks suppressed [ 680.179557][T30878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6695'. [ 680.639155][T30892] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6701'. [ 680.691006][T30892] pim6reg1: entered promiscuous mode [ 680.706751][T30892] pim6reg1: entered allmulticast mode [ 680.742442][T30892] bridge0: port 2(batadv1) entered blocking state [ 680.756653][T30892] bridge0: port 2(batadv1) entered disabled state [ 680.773822][T30892] batadv1: entered allmulticast mode [ 680.789615][T30892] batadv1: entered promiscuous mode [ 681.115240][T30914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6707'. [ 681.246527][T29236] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 681.255838][T29236] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 681.336230][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6210 ms [ 681.344330][ C0] lec:lec_tx_timeout: lec0 [ 681.349491][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 681.715671][T30941] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6716'. [ 681.977025][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.184712][T30970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6724'. [ 682.226711][T30973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6726'. [ 682.328403][T30977] netlink: 'syz.4.6727': attribute type 3 has an invalid length. [ 682.474153][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6730'. [ 682.541478][T30988] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6732'. [ 682.587845][T30991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6733'. [ 682.618000][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.713487][T30992] syzkaller0: entered promiscuous mode [ 682.724008][T30992] syzkaller0: entered allmulticast mode [ 682.893685][T31000] tipc: Enabled bearer , priority 0 [ 682.964423][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6736'. [ 682.984781][T31000] syzkaller0: entered promiscuous mode [ 682.993607][T31000] syzkaller0: entered allmulticast mode [ 683.010670][T31000] tipc: Resetting bearer [ 683.019411][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.031941][T30996] tipc: Resetting bearer [ 684.056589][T23691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.870023][T30996] tipc: Disabling bearer [ 685.229617][T31066] nbd: couldn't find a device at index 0 [ 685.340741][T31072] SET target dimension over the limit! [ 685.367824][T31073] __nla_validate_parse: 4 callbacks suppressed [ 685.367843][T31073] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6752'. [ 685.436693][T31081] dvmrp0: entered allmulticast mode [ 685.470701][T31072] pim6reg: entered allmulticast mode [ 685.582731][T31089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.688403][T31098] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 685.815237][T31104] syzkaller0: entered promiscuous mode [ 685.841454][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.848095][T31104] syzkaller0: entered allmulticast mode [ 686.192434][T31127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6770'. [ 686.250925][T31130] lo: Caught tx_queue_len zero misconfig [ 686.266581][T31130] netem: change failed [ 686.279983][T31131] netlink: 'syz.2.6769': attribute type 12 has an invalid length. [ 686.461410][T31143] netlink: 'syz.3.6774': attribute type 2 has an invalid length. [ 686.511210][T31145] : entered promiscuous mode [ 686.530139][T31145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.559228][T31145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.593280][T31150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6778'. [ 686.611965][T31145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.646606][T31145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.989438][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.070000][T31176] netlink: 3920 bytes leftover after parsing attributes in process `syz.5.6787'. [ 687.096223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 687.103206][T31176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6787'. [ 687.104423][ C0] lec:lec_tx_timeout: lec0 [ 687.118823][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.165002][T31180] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6789'. [ 687.179321][T31178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 687.211089][T31178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6788'. [ 687.352279][T31189] netlink: 'syz.0.6793': attribute type 20 has an invalid length. [ 687.360971][T31189] IPv6: NLM_F_CREATE should be specified when creating new route [ 687.371325][T31189] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6793'. [ 687.430939][T31189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6793'. [ 687.441794][T31196] netlink: 'syz.2.6795': attribute type 1 has an invalid length. [ 687.538885][T31198] netlink: 'syz.2.6796': attribute type 63 has an invalid length. [ 687.559805][T31198] netlink: 'syz.2.6796': attribute type 63 has an invalid length. [ 687.587393][T31198] netlink: 'syz.2.6796': attribute type 63 has an invalid length. [ 687.603369][T31198] netlink: 'syz.2.6796': attribute type 63 has an invalid length. [ 687.735084][T31208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6802'. [ 687.762257][T31212] vlan1: left allmulticast mode [ 687.768137][T31212] veth0_vlan: left allmulticast mode [ 687.793019][T31212] sctp: [Deprecated]: syz.5.6800 (pid 31212) Use of int in max_burst socket option deprecated. [ 687.793019][T31212] Use struct sctp_assoc_value instead [ 687.899458][T31223] openvswitch: netlink: IP tunnel dst address not specified [ 687.937050][T31223] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 688.451227][T31246] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 688.502006][T31246] netlink: 'syz.2.6813': attribute type 10 has an invalid length. [ 688.544518][T31246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.581873][T31246] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 689.992963][T31338] bond5: entered promiscuous mode [ 689.998362][T31338] bond5: entered allmulticast mode [ 690.004109][T31338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 690.202434][T31347] bond6: entered allmulticast mode [ 690.325420][T31361] team0: Device ip6gre1 is of different type [ 690.360515][T31366] netlink: 'syz.4.6848': attribute type 24 has an invalid length. [ 690.381670][T31364] __nla_validate_parse: 3 callbacks suppressed [ 690.381692][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6849'. [ 690.453509][T31341] netlink: 'syz.2.6842': attribute type 16 has an invalid length. [ 690.463169][T31369] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.6850'. [ 690.479797][T31341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6842'. [ 690.784754][T31387] syzkaller0: entered promiscuous mode [ 690.802058][T31387] syzkaller0: entered allmulticast mode [ 692.392082][T31406] bond0: entered allmulticast mode [ 692.397399][T31406] bond_slave_0: entered allmulticast mode [ 692.403137][T31406] bond_slave_1: entered allmulticast mode [ 692.542296][T31429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6867'. [ 692.664523][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6867'. [ 692.827138][T31448] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6873'. [ 692.895354][T31453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6874'. [ 692.937478][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 692.945568][ C0] lec:lec_tx_timeout: lec0 [ 692.951229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 693.110954][T31461] xt_hashlimit: size too large, truncated to 1048576 [ 693.179183][T31468] netlink: 'syz.4.6878': attribute type 3 has an invalid length. [ 693.189663][T31468] netlink: 'syz.4.6878': attribute type 3 has an invalid length. [ 693.434746][T31477] netlink: 'syz.2.6881': attribute type 3 has an invalid length. [ 693.444871][T31472] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.468539][T31477] netlink: 'syz.2.6881': attribute type 1 has an invalid length. [ 693.497412][T31477] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.6881'. [ 693.557440][T31483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6884'. [ 693.567433][T31481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6883'. [ 693.662624][T31481] syzkaller0: entered promiscuous mode [ 693.679764][T31481] syzkaller0: entered allmulticast mode [ 693.740596][T31491] netlink: 'syz.3.6886': attribute type 33 has an invalid length. [ 694.197816][T31512] netlink: 'syz.4.6891': attribute type 5 has an invalid length. [ 695.492356][T31494] __nla_validate_parse: 6 callbacks suppressed [ 695.492382][T31494] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6886'. [ 695.510020][T31494] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6886'. [ 695.524687][T31494] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 695.546100][T31472] lo speed is unknown, defaulting to 1000 [ 695.749131][T31520] tipc: Started in network mode [ 695.756484][T31520] tipc: Node identity f6482ace335f, cluster identity 4711 [ 695.775062][T31520] tipc: Enabled bearer , priority 0 [ 695.869576][T31520] syzkaller0: entered promiscuous mode [ 695.885536][T31520] syzkaller0: entered allmulticast mode [ 695.892646][T31520] tipc: Resetting bearer [ 696.133769][T31518] tipc: Resetting bearer [ 696.157694][T31544] netlink: 'syz.5.6901': attribute type 1 has an invalid length. [ 696.200287][T31547] netlink: 'syz.0.6903': attribute type 17 has an invalid length. [ 696.209051][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6903'. [ 696.218532][T31547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6903'. [ 696.287647][T31550] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.401526][T31550] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6902'. [ 697.647920][T31518] tipc: Disabling bearer [ 697.668390][T31544] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 697.674683][T31547] gretap0: entered promiscuous mode [ 697.690453][T31547] gretap0: left promiscuous mode [ 697.737779][ T5907] tipc: Node number set to 3306629838 [ 697.843551][T31561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6904'. [ 697.948056][T31568] netlink: 'syz.0.6907': attribute type 1 has an invalid length. [ 697.966255][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 697.974313][ C0] lec:lec_tx_timeout: lec0 [ 697.979541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 697.996548][T31570] netlink: 'syz.0.6907': attribute type 1 has an invalid length. [ 698.301536][T31568] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 698.307053][T31570] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 699.311044][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6918'. [ 699.447429][T31625] netlink: 'syz.5.6920': attribute type 39 has an invalid length. [ 699.545478][T31629] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 699.776172][T31644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6924'. [ 699.806846][T31644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.374271][T31674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6931'. [ 700.386716][T31677] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6933'. [ 700.608494][T31693] netlink: 'syz.5.6936': attribute type 4 has an invalid length. [ 700.647397][T31694] __nla_validate_parse: 2 callbacks suppressed [ 700.647423][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6938'. [ 700.720522][T31697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6939'. [ 700.748620][T31697] ipt_rpfilter: unknown options [ 700.969422][T31714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6945'. [ 701.019674][T31711] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 701.036447][T31711] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 701.279648][T31729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6947'. [ 701.334112][T31722] syzkaller0: entered promiscuous mode [ 701.392354][T31737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6951'. [ 701.408285][T31722] syzkaller0: entered allmulticast mode [ 702.986285][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 702.994453][ C0] lec:lec_tx_timeout: lec0 [ 702.999291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 703.403973][T31770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.422040][T31770] batadv_slave_0: entered promiscuous mode [ 703.432633][T31770] batadv_slave_0: entered allmulticast mode [ 703.550590][T31777] xt_hashlimit: size too large, truncated to 1048576 [ 703.593662][T31779] syzkaller0: entered promiscuous mode [ 703.612764][T31779] syzkaller0: entered allmulticast mode [ 703.620303][T31782] team_slave_1: entered promiscuous mode [ 703.626146][T31782] team_slave_1: entered allmulticast mode [ 704.195957][T31808] syzkaller0: entered promiscuous mode [ 704.223021][T31808] syzkaller0: entered allmulticast mode [ 704.760909][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.773065][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.783117][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.792708][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.800587][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.947273][T31831] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.986532][T31843] netlink: 'syz.2.6987': attribute type 1 has an invalid length. [ 705.041946][T31843] bond4: entered promiscuous mode [ 705.047630][T31843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.059982][T31843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6987'. [ 705.071864][T31843] bond4: entered allmulticast mode [ 705.112867][T31843] bond4: (slave bridge2): making interface the new active one [ 705.120805][T31843] bridge2: entered promiscuous mode [ 705.126447][T31843] bridge2: entered allmulticast mode [ 705.134276][T31843] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 705.269773][T31849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6989'. [ 705.705248][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6995'. [ 705.787473][T31831] lo speed is unknown, defaulting to 1000 [ 706.281439][T31885] dvmrp0: entered allmulticast mode [ 706.356660][T31893] bridge_slave_1: entered promiscuous mode [ 706.638489][T31904] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 706.857970][ T5831] Bluetooth: hci0: command tx timeout [ 706.900380][T31915] syzkaller0: entered promiscuous mode [ 706.937186][T31917] tipc: Enabled bearer , priority 0 [ 707.152861][T31917] syzkaller0: entered promiscuous mode [ 707.170269][T31917] syzkaller0: entered allmulticast mode [ 707.182552][T31917] tipc: Resetting bearer [ 707.360408][T29218] tipc: Resetting bearer [ 707.406508][T31916] tipc: Resetting bearer [ 708.006296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 708.014427][ C0] lec:lec_tx_timeout: lec0 [ 708.019940][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 708.867183][ T5907] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 708.879312][ T5907] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 708.887865][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 708.897263][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.907325][ T5907] Workqueue: events l2cap_info_timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 708.912826][ T5907] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 708.918757][ T5907] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 708.938418][ T5907] RSP: 0018:ffffc90004557828 EFLAGS: 00010202 [ 708.944514][ T5907] RAX: dffffc0000000000 RBX: ffffffff8973f148 RCX: 0000000080000001 [ 708.952512][ T5907] RDX: 0000000000000000 RSI: ffffffff8973f148 RDI: 000000000000004c [ 708.960496][ T5907] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 708.968478][ T5907] R10: dffffc0000000000 R11: ffffffff8aadd740 R12: 0000000000000000 [ 708.976550][ T5907] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 708.984571][ T5907] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 708.993518][ T5907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.000110][ T5907] CR2: 00007f31dede9e80 CR3: 0000000055ca6000 CR4: 00000000003526f0 [ 709.008104][ T5907] Call Trace: [ 709.011395][ T5907] [ 709.014334][ T5907] __kasan_check_byte+0x12/0x40 [ 709.019207][ T5907] lock_acquire+0x79/0x2e0 [ 709.023652][ T5907] lock_sock_nested+0x48/0x100 [ 709.028447][ T5907] ? l2cap_sock_ready_cb+0x46/0x160 [ 709.033669][ T5907] l2cap_sock_ready_cb+0x46/0x160 [ 709.038723][ T5907] l2cap_conn_start+0x779/0xff0 [ 709.043627][ T5907] ? __pfx_l2cap_conn_start+0x10/0x10 [ 709.049022][ T5907] ? l2cap_info_timeout+0x60/0xa0 [ 709.054063][ T5907] ? do_raw_spin_lock+0x12b/0x2f0 [ 709.059101][ T5907] ? __pfx___mutex_lock+0x10/0x10 [ 709.064164][ T5907] l2cap_info_timeout+0x68/0xa0 [ 709.069214][ T5907] ? process_scheduled_works+0xa25/0x1830 [ 709.074976][ T5907] process_scheduled_works+0xb02/0x1830 [ 709.080557][ T5907] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.086563][ T5907] ? assign_work+0x3d5/0x5e0 [ 709.091167][ T5907] worker_thread+0xa50/0xfc0 [ 709.096313][ T5907] kthread+0x388/0x470 [ 709.100430][ T5907] ? __pfx_worker_thread+0x10/0x10 [ 709.105558][ T5907] ? __pfx_kthread+0x10/0x10 [ 709.110164][ T5907] ret_from_fork+0x51e/0xb90 [ 709.114796][ T5907] ? __pfx_ret_from_fork+0x10/0x10 [ 709.119928][ T5907] ? __switch_to+0xc7d/0x1450 [ 709.124646][ T5907] ? __pfx_kthread+0x10/0x10 [ 709.129250][ T5907] ret_from_fork_asm+0x1a/0x30 [ 709.134067][ T5907] [ 709.137114][ T5907] Modules linked in: [ 709.142707][ T5907] ---[ end trace 0000000000000000 ]--- [ 709.151632][ T5831] Bluetooth: hci0: command tx timeout [ 709.176068][ T5907] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 709.182307][ T5907] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 709.202766][ T5907] RSP: 0018:ffffc90004557828 EFLAGS: 00010202 [ 709.212395][ T5907] RAX: dffffc0000000000 RBX: ffffffff8973f148 RCX: 0000000080000001 [ 709.220560][ T5907] RDX: 0000000000000000 RSI: ffffffff8973f148 RDI: 000000000000004c [ 709.228603][ T5907] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 709.236988][ T5907] R10: dffffc0000000000 R11: ffffffff8aadd740 R12: 0000000000000000 [ 709.266293][ T5907] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 709.306073][ T5907] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 709.318569][ T5907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.325221][ T5907] CR2: 0000557c088c0d08 CR3: 000000005bf24000 CR4: 00000000003526f0 [ 709.333797][ T5907] Kernel panic - not syncing: Fatal exception [ 709.340520][ T5907] Kernel Offset: disabled [ 709.344853][ T5907] Rebooting in 86400 seconds..