last executing test programs: 18.063591247s ago: executing program 2 (id=3116): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x4000) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x3, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 6.407578388s ago: executing program 3 (id=3190): r0 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000081000000030000000500000016"], 0x48) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 6.126123319s ago: executing program 3 (id=3193): r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r3 = socket$inet6(0xa, 0x800, 0x24) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/23, 0x17}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d6090000010000807baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r2, @ANYRESDEC=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000003}, 0x94) r5 = accept4(r3, 0x0, 0x0, 0xdbf580427507b547) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x2c, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.443646252s ago: executing program 3 (id=3204): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x4, [0x9, 0x2]}]}}}], 0x20}}], 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0xffffff24, 0x5, 0x1, 0x6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 4.369964008s ago: executing program 4 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000", 0x1c}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) close(0x3) r2 = socket(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ec0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x9, 0x18}, 0xc) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0xd, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x1, 0x1, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_query, @ringbuf_query], &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x18, &(0x7f0000000700)=""/24, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x680, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001040)=[r3, r4, r5, r6, r8, r9], &(0x7f0000001080)=[{0x1, 0x5, 0xb, 0x6}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x1, 0x3, 0xb}, {0x1, 0x4, 0x2}, {0x2, 0x2, 0x10, 0x9}], 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYBLOB="4360dabdcceef6ffa6e1c76014aff5f19f2e77121dcb5d2a3bf17f99540d54026f018feb8cc5bbfbbade1a475c59c7e93963723b56e5009cf68df2813264172386453c45dc94ac1f4a40e533dc3c3aaaa333bcfbc2eaa500dc1afd10d42b5f669ad764103e8a3dec0e5646e504c01eeb1bedbe7c724bf5aba8761cbc3706126d84ddce6cf2eb5284475ebb92431f962776a88f9378a0bc9dbe76588ab632bc1daaa7fd0b0a11b70e4a2c9c38fcb30bbd61bde73f678e3d530a8e24d1ddfed4"], 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="5f90888107cbabac50983ec0d05d77fb8a91ceb425ae2164d4c8f0edd522308a7c157155bed2dc249b231b4d0a1b158005924043b7fb6ea252583a0d2687b9fe8aba7c12c605a5887b232c701919f01c99803191c5ddf557ff0a463ad00128111cbd3e7b8cbdc5e3735c8c3237a0e730404321b9b26f091e503d20f869bdcbd7eb81306e13dd750eba599d2dc21ed65117eb114d24b68ac27ca3472a8a4c5f3c7555e57bd09111862cc18d2fbd253c5746ce32fc2bdb30142f120117d8a1b673897a567aee1568454a08d2d7deb0e68e6c6ff67ab7fd5435b4513775b813f3706972", @ANYRES64=r10, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r1, @ANYBLOB="15ef650a0657f649a808004ae52208f7ea02fd6af1da6f4da046cf2cd83b13405429d5b7cce0a04e3e95e8605f32655e5a98dfb6881daaf7aa"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r11}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$packet(0x11, 0x2, 0x300) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r15 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x160}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.216013368s ago: executing program 3 (id=3207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1517000007fe800008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d616376746170000200028008000500", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x8000002) unshare(0x24020400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) ioctl$NS_GET_NSTYPE(r5, 0x8004b707, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d3aa64fea100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 3.941495059s ago: executing program 4 (id=3208): socket$tipc(0x1e, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x3) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x8, 0x1, 0x1, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x8000101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x6, 0x6, 0xd, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x7, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xfffffffa, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x9, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0xbde, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x7, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 3.898201818s ago: executing program 3 (id=3209): r0 = socket(0x23, 0x3, 0xfffbffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) (async, rerun: 32) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x80000000}) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="70000945fc832edab1153dad2e1e20ee7681983a4108f2509030a6853246ccb9e34470cac85bfb43c647fe1c3b44e3996f4736cdcbdf41ea2fa53324dc49"], 0xc) write$nci(r1, &(0x7f0000000340)=ANY=[], 0xffffffffffffff6c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0x9, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) (async) write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7037822f834d0001f808008c"], 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xfe9}], 0x1}, 0x40000020) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) (async) close(0x3) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async) r10 = socket$inet6(0xa, 0x3, 0x586a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11, 0x25, 0x2, @val=@tcx={@void, @value=r9}}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x0) 3.759642076s ago: executing program 4 (id=3210): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000a080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003d68c5e007688a2003308020200ecff3f0200000300000a000000009afc1e75264ca593dba67e06018000f4fffff00607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac3901000000000000ea000000001000000009ffff02dfcccef6ba00084027467f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000000000000000000000000000000000000000000000abd8bd2e1624", 0xb8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000098c19276", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.68940271s ago: executing program 3 (id=3212): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}]}, 0x28}, 0x2, 0x34005}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) accept4$ax25(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) close(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r9 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 3.627734276s ago: executing program 2 (id=3121): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) (async) socket$inet6(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x4, 0x0, 0x0, 0x62, 0xfffffffffffffeec], 0x197ba3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fd00008367312f394c83b600000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x108) 3.503598675s ago: executing program 4 (id=3213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000980)=ANY=[@ANYBLOB="3e7753bc4db64592588ee9698e83aeefee4d914933806cf347cb94c9465d9d423f4cbceda37cfd0fa119eaac58f943bd63ac21d0741639fc1999220e9318b7aa289c5b140ada34fe60bf9e1593ddabdef9ebf9f658bfebeecec62c99b0c2c188aa2d7bc742d856501f7aa823d9526c2cbbbcce9277703777bf7a200028a83db92a48368263f6344a05f5c305e9d16977c76be8a01d58f2220818c06ebf7160aa09f9e7ef20f2544c40712d1a6d77a7f5abab2c7313d8d5d3aa11e8d84fd05b22a4a7d7c8a59d738f160b1c69943684b125e27b395d91a064242ca508edd430a7f20eb83ca872da", @ANYRES32, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYBLOB="e922490ce6ca6ea518a376593f12f29ebf3860cfd51e4fe7992253de381772a25c5cdb709be548b8e8240544c5e75bb30ce9a4c92f352ca96d658d7828f9dbec8ecb8c1ccd41ca3f03091fb1cc257fe21c16de30591ce8", @ANYBLOB="0f59a19fa2fa12bc9c8fce1e17d410b9b1bb2fbffc73182926d1018d9995d2891c157de2ce83ff1013221c44720271a1e1f17924a4a2c6aff09da1dc83d661ea51aa218d34fb8137ec75bd2c17cefdb41b2f530444c39dac1b6ea4661acf64416d91f91e4cd5a556e4a2c6eb653b27ec16dc06ee1ce1daa105f844a949cf9de68e732412d323a09d8e110430df766dd64902057237b09fd2b9f7a84606d431121783ae2712507e1c8a02"], 0x20}, 0x1, 0xba01}, 0x8004) accept$alg(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000f5ffffff000095000000000000000ea6860d0000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delvlan={0x60, 0x71, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x78, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0xfffffffffffffd86, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x10}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x1, 0x0, 0xff, 0x2, 0xfffc}, 0x20) close(0x3) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x110, 0x3, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.055688268s ago: executing program 1 (id=3216): close(0x3) (async) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0xfffffffc}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0x1000f) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) (async) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10}, 0x1c) 2.503598396s ago: executing program 1 (id=3219): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x1c, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x8, 0x122, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x10) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = socket(0x1e, 0x1, 0x0) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000000)={r2, 0x0, 0x4, 0x9, 0x9, 0xb}) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000010c0)={0x3, {{0xa, 0x4e20, 0x634, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x7fff, 0x7, 0xab5, 0xd, 0x80000001}, 0x14) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="180000ffe53ab629fb564e00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f00000000c0)="29000000110005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000002000000000600002185100000030000001800070000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x10d, &(0x7f0000000300)=""/269, 0x41000}, 0x94) 2.435879731s ago: executing program 2 (id=3220): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x28511000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6020400) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB="180000000000000000000000050000009500000008000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r1, r3, 0x2f, 0x18, 0x4}, 0x20) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) socket$inet6_sctp(0xa, 0x4, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xd0, 0x0, &(0x7f0000000040)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.340301415s ago: executing program 0 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb"], 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000001c0)=':', 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b2f"], 0xfce) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb"], 0x0}, 0x94) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2b, 0x1, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000001c0)=':', 0x0}, 0x20) (async) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) (async) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b2f"], 0xfce) (async) 1.560123559s ago: executing program 4 (id=3222): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x80000000) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) ppoll(&(0x7f0000001880)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) (async) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300", @ANYRES8=r0], 0x3c}}, 0x10) 1.550722807s ago: executing program 0 (id=3223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000c4020000000000"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1.282497041s ago: executing program 1 (id=3224): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.14738326s ago: executing program 0 (id=3225): bind$x25(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) bind$x25(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x8, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) 1.113213166s ago: executing program 1 (id=3226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) getgid() getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, 0x0, 0x30) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000100}, 0x24004000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000001c0)={r5, 0x60, 0x6, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="90020000180001002cbd7000fddbdf25fc010000000000000000000000000000000000000000000000000000000000004e2100014e23000202008020ff000000", @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r10, 0x0, 0x0, 0x80800) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000000002"}) 875.251952ms ago: executing program 2 (id=3227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x40040) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) getsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'hsr0\x00', @broadcast}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000040), 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r7}, 0x38) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) 699.488953ms ago: executing program 1 (id=3228): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) (async) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x2}, @window={0x3, 0x6, 0x69e1}, @mss={0x2, 0x3}, @sack_perm, @timestamp, @window={0x3, 0x100}, @window={0x3, 0x1a, 0x2}], 0x7) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000480), 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 698.789595ms ago: executing program 0 (id=3229): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000097cd8e2600"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 667.523536ms ago: executing program 2 (id=3230): socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010003000000010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000208000b400000000068000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003000018008000100636d7000240002801000038009000100261fbabd4e000000080001400000000208000240000000000900010073797a3000000000140000001100010000000000000000000700000a"], 0x104}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x57, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x31}, @padn={0x5}, @ra]}]}}}}}, 0x0) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (async) close(0x4) (async) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) 570.782162ms ago: executing program 4 (id=3231): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4004010) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340), 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) splice(r7, 0x0, r6, 0x0, 0x1100000000f336, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000879097d42fb1f554cf008500000000000000b70000000000"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) 425.772613ms ago: executing program 0 (id=3233): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) recvfrom$l2tp6(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) (async) sendmsg$tipc(r6, 0x0, 0x8820) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfffff000, 0xc0, 0x8, 0x9a, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 425.354886ms ago: executing program 2 (id=3234): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f22bdbb752a6496fd0a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f22bdbb752a6496fd0a", 0x15}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20001}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) recvfrom(r5, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES64=r1], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2a, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 323.834457ms ago: executing program 1 (id=3235): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f00000001c0)=0x2, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c637200000008000500"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 0s ago: executing program 0 (id=3236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000500)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000fc0)={r1, &(0x7f0000000ec0), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f0000000280)) ioctl$sock_ifreq(r2, 0x8937, &(0x7f00000005c0)={'dummy0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}}) kernel console output (not intermixed with test programs): [ 287.099387][T13557] can: request_module (can-proto-0) failed. [ 287.303022][T13568] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1914'. [ 287.319967][T13568] netlink: 'syz.3.1914': attribute type 4 has an invalid length. [ 287.598376][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1919'. [ 287.676413][T13591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1922'. [ 287.697584][T13575] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 288.585094][T13654] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 288.594258][T13654] netlink: 'syz.4.1940': attribute type 2 has an invalid length. [ 288.629336][T13654] bond16: option ad_select: invalid value (34) [ 288.638356][T13654] bond16 (unregistering): Released all slaves [ 289.056739][T13677] __nla_validate_parse: 34 callbacks suppressed [ 289.056764][T13677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'. [ 289.073705][T13677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1948'. [ 289.117810][T13682] netlink: 'syz.3.1949': attribute type 61 has an invalid length. [ 289.144246][T13682] netlink: 'syz.3.1949': attribute type 62 has an invalid length. [ 289.267850][T13692] sctp: [Deprecated]: syz.4.1951 (pid 13692) Use of int in max_burst socket option deprecated. [ 289.267850][T13692] Use struct sctp_assoc_value instead [ 289.288512][T13694] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1953'. [ 289.475184][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'. [ 289.593227][T13708] xt_CT: No such helper "netbios-ns" [ 289.786813][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 289.992460][T13733] xt_hashlimit: size too large, truncated to 1048576 [ 290.054451][T13735] x9: renamed from bridge_slave_0 (while UP) [ 290.085164][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 290.135640][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 290.617500][T13752] bond9: option xmit_hash_policy: invalid value (10) [ 290.657599][T13752] bond9 (unregistering): Released all slaves [ 290.673115][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 290.723187][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1962'. [ 290.817686][T13777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1975'. [ 290.949454][T13782] validate_nla: 128 callbacks suppressed [ 290.949477][T13782] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 290.965403][T13782] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 291.003389][T13786] nbd: nbd0 already in use [ 291.008243][ T8555] lo speed is unknown, defaulting to 1000 [ 291.008288][ T8555] syz2: Port: 1 Link ACTIVE [ 291.908960][T13814] syzkaller0: entered promiscuous mode [ 291.918854][T13814] syzkaller0: entered allmulticast mode [ 292.453466][T13834] lo speed is unknown, defaulting to 1000 [ 292.460369][T13842] netlink: 'syz.4.1989': attribute type 3 has an invalid length. [ 292.487328][T13840] netlink: 'syz.4.1989': attribute type 9 has an invalid length. [ 292.565940][T13834] wlan1 speed is unknown, defaulting to 1000 [ 292.661908][T13848] syzkaller0: entered promiscuous mode [ 292.673220][T13848] syzkaller0: entered allmulticast mode [ 292.771042][T13848] 0: reclassify loop, rule prio 0, protocol 800 [ 293.008077][T13854] nbd: socks must be embedded in a SOCK_ITEM attr [ 293.038575][T13857] nbd: nbd64 already in use [ 293.050077][T12930] block nbd64: NBD_DISCONNECT [ 293.457012][T12930] udevd[12930]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 293.930853][T13888] : renamed from bond_slave_0 (while UP) [ 294.126858][T13900] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 294.147743][T13900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.178849][T13897] lo speed is unknown, defaulting to 1000 [ 294.204104][T13897] wlan1 speed is unknown, defaulting to 1000 [ 294.688536][T13910] __nla_validate_parse: 7 callbacks suppressed [ 294.688559][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 294.816096][T13913] bond16: option fail_over_mac: invalid value (127) [ 294.834025][T13913] bond16 (unregistering): Released all slaves [ 294.891986][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 295.124680][T13930] lo speed is unknown, defaulting to 1000 [ 295.126753][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 295.143018][T13929] tipc: Enabled bearer , priority 0 [ 295.161373][T13929] syzkaller0: entered promiscuous mode [ 295.174939][T13929] syzkaller0: entered allmulticast mode [ 295.248174][T13929] tipc: Resetting bearer [ 295.279810][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'. [ 295.284073][T13930] wlan1 speed is unknown, defaulting to 1000 [ 295.289591][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'. [ 295.332465][T13926] tipc: Resetting bearer [ 295.416387][T13926] tipc: Disabling bearer [ 295.655770][T13953] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 295.692220][T13951] lo speed is unknown, defaulting to 1000 [ 295.703789][T13951] wlan1 speed is unknown, defaulting to 1000 [ 296.033852][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 296.045827][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'. [ 296.370216][T13968] netlink: 'syz.2.2017': attribute type 21 has an invalid length. [ 296.696678][T13980] netlink: 'syz.0.2018': attribute type 3 has an invalid length. [ 296.934426][T13980] xt_l2tp: v2 doesn't support IP mode [ 297.035437][T13996] tap0: tun_chr_ioctl cmd 1074025680 [ 297.053368][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 297.135550][T14002] syzkaller0: entered promiscuous mode [ 297.141379][T14002] syzkaller0: entered allmulticast mode [ 297.185147][T12930] udevd[12930]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 297.333311][T14014] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2029'. [ 297.372022][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 297.414631][T14010] lo speed is unknown, defaulting to 1000 [ 297.433818][T14009] lo speed is unknown, defaulting to 1000 [ 297.468104][T14010] wlan1 speed is unknown, defaulting to 1000 [ 297.480197][T14009] wlan1 speed is unknown, defaulting to 1000 [ 297.844666][T14030] xt_hashlimit: size too large, truncated to 1048576 [ 298.776761][T14053] netlink: 'syz.0.2038': attribute type 8 has an invalid length. [ 298.934672][T14057] veth7: left promiscuous mode [ 298.969348][T14057] bond4: left promiscuous mode [ 298.974211][T14057] bond4: left allmulticast mode [ 298.985657][T14057] veth9: left promiscuous mode [ 298.999265][T14057] vlan1: left promiscuous mode [ 299.004093][T14057] bond8: left promiscuous mode [ 299.009663][T14057] vlan1: left allmulticast mode [ 299.016031][T14057] bond8: left allmulticast mode [ 299.033336][ T796] lo speed is unknown, defaulting to 1000 [ 299.054632][ T796] syz2: Port: 1 Link DOWN [ 299.654395][T14085] 8021q: adding VLAN 0 to HW filter on device bond9 [ 299.708811][T14093] __nla_validate_parse: 2 callbacks suppressed [ 299.708842][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2050'. [ 299.978881][T14101] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 300.371488][T14117] netlink: 'syz.4.2058': attribute type 21 has an invalid length. [ 300.385147][T14118] netlink: 'syz.4.2058': attribute type 21 has an invalid length. [ 300.420650][T14117] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2058'. [ 300.456966][T14118] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2058'. [ 300.493075][T14117] netlink: 'syz.4.2058': attribute type 5 has an invalid length. [ 300.532817][T14117] netlink: 'syz.4.2058': attribute type 6 has an invalid length. [ 300.566453][T14117] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2058'. [ 300.590038][T14118] netlink: 'syz.4.2058': attribute type 5 has an invalid length. [ 300.617882][T14118] netlink: 'syz.4.2058': attribute type 6 has an invalid length. [ 300.641618][T14118] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2058'. [ 300.847511][T14135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2060'. [ 300.872888][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 301.012029][T14100] lec:lec_atm_close: lec0: Shut down! [ 301.049891][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 301.118038][ T6633] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.134735][T14146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 301.149683][ T6633] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.159350][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2065'. [ 301.214442][ T6633] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.255824][ T6633] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.363033][T14159] syzkaller0: entered promiscuous mode [ 301.385711][T14159] syzkaller0: entered allmulticast mode [ 301.438183][T14156] tipc: Enabled bearer , priority 0 [ 301.466511][T14158] netlink: 'syz.3.2068': attribute type 28 has an invalid length. [ 301.582511][T14156] tipc: Resetting bearer [ 301.639504][T14156] tipc: Disabling bearer [ 302.167101][T14196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 302.258294][ T5896] lec:lec_start_xmit: lec0:No lecd attached [ 302.561696][T14204] bond10: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 302.607603][T14204] bond10: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 302.713307][T14219] syzkaller1: entered promiscuous mode [ 302.726015][T14219] syzkaller1: entered allmulticast mode [ 302.733279][T14214] lo speed is unknown, defaulting to 1000 [ 302.870910][T14214] wlan1 speed is unknown, defaulting to 1000 [ 303.234314][T14237] hsr0: entered promiscuous mode [ 303.392542][T14237] hsr_slave_0: left promiscuous mode [ 303.398985][T14237] hsr_slave_1: left promiscuous mode [ 303.480442][T14237] hsr0 (unregistering): left promiscuous mode [ 304.328635][T14287] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 304.337372][T14287] netlink: 'syz.2.2100': attribute type 11 has an invalid length. [ 304.661729][T14302] netlink: 'syz.3.2106': attribute type 2 has an invalid length. [ 304.724700][T14304] __nla_validate_parse: 13 callbacks suppressed [ 304.724723][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 304.808232][T14310] bridge0: port 1(gretap0) entered blocking state [ 304.825412][T14310] bridge0: port 1(gretap0) entered disabled state [ 304.833607][T14310] gretap0: entered allmulticast mode [ 304.844672][T14310] gretap0: entered promiscuous mode [ 304.873887][T14310] bridge0: port 1(gretap0) entered blocking state [ 304.880637][T14310] bridge0: port 1(gretap0) entered forwarding state [ 304.940642][T14313] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 304.952777][T14313] bridge6: entered allmulticast mode [ 305.145420][T14321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2115'. [ 305.172959][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'. [ 305.203431][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'. [ 305.203497][T14323] xt_CT: No such helper "netbios-ns" [ 305.236757][T14330] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 305.301871][T14330] bond10: entered promiscuous mode [ 305.307799][T14330] 8021q: adding VLAN 0 to HW filter on device bond10 [ 305.328385][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2113'. [ 305.525860][T14344] netlink: 211536 bytes leftover after parsing attributes in process `syz.0.2117'. [ 305.650279][T14350] bridge0: port 3(hsr0) entered blocking state [ 305.656706][T14350] bridge0: port 3(hsr0) entered forwarding state [ 305.664531][T14350] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.671977][T14350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.679528][T14350] bridge0: port 1(1x9) entered blocking state [ 305.686103][T14350] bridge0: port 1(1x9) entered forwarding state [ 305.726659][T14350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.855082][T14361] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2123'. [ 305.867502][T14361] netlink: 'syz.1.2123': attribute type 3 has an invalid length. [ 305.940977][T14365] macsec0: entered promiscuous mode [ 306.049736][T14371] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2126'. [ 306.108864][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 306.235253][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 306.257131][T14365] macsec0: left promiscuous mode [ 306.287552][ T6633] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.298118][ T6633] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.330531][ T6633] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.372194][ T6633] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.683238][T14399] lo speed is unknown, defaulting to 1000 [ 306.736055][T14399] wlan1 speed is unknown, defaulting to 1000 [ 306.869692][T14410] syzkaller0: entered promiscuous mode [ 306.905302][T14410] syzkaller0: entered allmulticast mode [ 307.337450][T14425] bridge0: port 1(gretap0) entered disabled state [ 307.462592][T14425] tipc: Resetting bearer [ 307.511921][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.523919][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.604369][T14425] geneve1: left allmulticast mode [ 307.625922][ T6620] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.660988][ T6620] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.714786][ T6620] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.755557][ T6620] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.880005][T14448] syzkaller1: entered promiscuous mode [ 307.894881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 307.903468][ C1] lec:lec_tx_timeout: lec0 [ 307.908343][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 307.915974][T14448] syzkaller1: entered allmulticast mode [ 307.924400][T14448] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 307.930092][T14455] netlink: 'syz.3.2144': attribute type 29 has an invalid length. [ 308.033590][T14460] netlink: 'syz.4.2150': attribute type 1 has an invalid length. [ 308.232576][T14468] sctp: [Deprecated]: syz.4.2151 (pid 14468) Use of int in maxseg socket option. [ 308.232576][T14468] Use struct sctp_assoc_value instead [ 308.705486][T14495] gretap2: entered promiscuous mode [ 308.711937][T14495] batman_adv: batadv0: Adding interface: gretap2 [ 308.719415][T14495] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 308.744741][T14495] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 309.319491][T14514] pim6reg: entered allmulticast mode [ 309.353903][T14514] pim6reg: left allmulticast mode [ 309.617541][T14519] syzkaller0: entered promiscuous mode [ 309.623090][T14519] syzkaller0: entered allmulticast mode [ 309.707037][T14533] netlink: 'syz.4.2164': attribute type 1 has an invalid length. [ 309.760010][T14532] __nla_validate_parse: 15 callbacks suppressed [ 309.760030][T14532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2163'. [ 310.060586][T14542] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2167'. [ 310.070479][T14549] lo speed is unknown, defaulting to 1000 [ 310.082860][T14542] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 310.113440][T14549] wlan1 speed is unknown, defaulting to 1000 [ 310.138137][ T1771] block nbd0: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 60 seconds [ 310.150761][ T1771] block nbd0: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 60 seconds [ 310.164642][ T1771] block nbd0: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 60 seconds [ 310.177331][ T1771] block nbd0: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 60 seconds [ 310.585542][T14562] bridge0: left allmulticast mode [ 310.628950][T14569] x9: left allmulticast mode [ 310.633807][T14569] x9: left promiscuous mode [ 310.673420][T14569] bridge0: port 1(1x9) entered disabled state [ 310.700218][T14569] bridge_slave_1: left allmulticast mode [ 310.718232][T14569] bridge_slave_1: left promiscuous mode [ 310.732119][T14569] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.771355][T14569] team0: Port device team_slave_0 removed [ 310.810840][T14569] team0: Port device 76 removed [ 310.827333][T14569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.836826][T14569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.847850][T14569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.866795][T14569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.018657][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2173'. [ 311.702467][T14594] syzkaller0: entered promiscuous mode [ 311.708513][T14594] syzkaller0: entered allmulticast mode [ 311.796744][T14595] syzkaller0: entered promiscuous mode [ 311.803481][T14595] syzkaller0: entered allmulticast mode [ 312.146892][T14600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2181'. [ 312.255594][T14597] netlink: 'syz.4.2181': attribute type 3 has an invalid length. [ 312.264076][T14597] netlink: 'syz.4.2181': attribute type 3 has an invalid length. [ 312.333298][T14603] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2183'. [ 312.350763][T14605] netlink: 'syz.3.2184': attribute type 1 has an invalid length. [ 312.386697][T14600] syz_tun: entered promiscuous mode [ 312.392382][T14600] macsec2: entered allmulticast mode [ 312.398222][T14605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.427737][T14600] syz_tun: entered allmulticast mode [ 312.435566][T14609] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2185'. [ 312.476258][T14600] syz_tun: left allmulticast mode [ 312.481381][T14600] syz_tun: left promiscuous mode [ 312.910763][T14631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2192'. [ 312.920044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.920119][ C1] lec:lec_tx_timeout: lec0 [ 312.928917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.536744][T14662] tipc: Enabled bearer , priority 0 [ 313.616866][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'. [ 313.657042][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 313.692667][T14662] syzkaller0: entered promiscuous mode [ 313.699471][T14662] syzkaller0: entered allmulticast mode [ 313.707944][T14662] tipc: Resetting bearer [ 313.746232][T14662] Bluetooth: MGMT ver 1.23 [ 313.881245][T14668] tipc: Resetting bearer [ 316.066967][T14668] tipc: Disabling bearer [ 316.166839][T14726] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 316.962314][T14777] set match dimension is over the limit! [ 317.181536][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.192529][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.570372][T14812] openvswitch: netlink: Missing valid actions attribute. [ 317.595317][T14812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.935130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.943227][ C1] lec:lec_tx_timeout: lec0 [ 317.947949][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.074361][T14842] lo speed is unknown, defaulting to 1000 [ 318.093644][T14842] wlan1 speed is unknown, defaulting to 1000 [ 318.685731][T14856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'. [ 319.988935][T14781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.350442][T14881] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 320.388356][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.400286][T14876] lo speed is unknown, defaulting to 1000 [ 320.410701][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.464422][T14876] wlan1 speed is unknown, defaulting to 1000 [ 320.492678][T14868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.665669][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.716854][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.728349][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.812286][T14903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.827878][T14894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.853725][T14903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.081104][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'. [ 321.094752][T14914] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2251'. [ 321.106546][T14914] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 321.115789][T14914] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 321.362536][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 321.638733][T14939] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 321.641815][T14934] syzkaller0: entered promiscuous mode [ 321.685739][T14934] syzkaller0: entered allmulticast mode [ 322.052190][T14949] infiniband syz1: set down [ 322.057434][T14949] infiniband syz1: added bond0 [ 322.116648][T14967] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2263'. [ 322.151149][T14949] RDS/IB: syz1: added [ 322.156234][T14949] smc: adding ib device syz1 with port count 1 [ 322.178038][T14949] smc: ib device syz1 port 1 has no pnetid [ 322.300668][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.960686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.968796][ C1] lec:lec_tx_timeout: lec0 [ 322.973682][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.998355][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 323.010919][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 324.299273][T14967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2263'. [ 324.741988][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2276'. [ 324.781839][T15020] gtp1: entered promiscuous mode [ 324.802929][T15020] gtp1: entered allmulticast mode [ 325.266980][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 325.287488][T15053] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.378409][T15053] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.607858][T15067] netlink: 'syz.4.2289': attribute type 11 has an invalid length. [ 325.662972][ T29] audit: type=1804 audit(1773619169.076:8): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2289" name="/newroot/458/cgroup.controllers" dev="tmpfs" ino=2348 res=1 errno=0 [ 325.714996][ T29] audit: type=1800 audit(1773619169.076:9): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2289" name="cgroup.controllers" dev="tmpfs" ino=2348 res=0 errno=0 [ 325.783801][ T29] audit: type=1800 audit(1773619169.076:10): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2289" name="cgroup.controllers" dev="tmpfs" ino=2348 res=0 errno=0 [ 325.851894][T15053] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.955887][T15053] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.060176][ T6633] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.079639][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 326.098543][T15071] netlink: 'syz.4.2290': attribute type 5 has an invalid length. [ 326.132228][ T6633] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.137907][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2290'. [ 326.191237][ T6633] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.214315][T15071] geneve4: entered promiscuous mode [ 326.225117][T15071] geneve4: entered allmulticast mode [ 326.282415][ T6633] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 326.317384][ T6633] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 326.364945][ T6633] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 326.394588][ T6633] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 326.427236][ T6633] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.524509][T15074] syzkaller1: entered promiscuous mode [ 326.537416][T15074] syzkaller1: entered allmulticast mode [ 326.759287][T15091] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2295'. [ 326.768736][T15091] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2295'. [ 326.960918][T15109] syzkaller0: entered promiscuous mode [ 326.974926][T15109] syzkaller0: entered allmulticast mode [ 327.041365][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 327.155597][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 327.162056][T15120] tipc: Enabled bearer , priority 0 [ 327.174274][T15115] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 327.192638][T15115] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 327.985021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.993102][ C1] lec:lec_tx_timeout: lec0 [ 327.998248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.022455][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 328.125860][T15160] 8021q: adding VLAN 0 to HW filter on device bond11 [ 328.793684][ T5903] tipc: Node number set to 11777 [ 328.894812][T15192] syzkaller1: entered promiscuous mode [ 328.900639][T15192] syzkaller1: entered allmulticast mode [ 329.653189][T15241] __nla_validate_parse: 6 callbacks suppressed [ 329.653210][T15241] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2331'. [ 329.886881][T15246] syzkaller0: create flow: hash 3824710143 index 1 [ 330.126641][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 330.151514][ T6630] syzkaller0: tun_net_xmit 76 [ 330.157020][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 330.157394][ T6630] syzkaller0: tun_net_xmit 48 [ 330.175122][ T8555] syzkaller0: tun_net_xmit 76 [ 330.213038][T15243] syzkaller0: delete flow: hash 3824710143 index 1 [ 330.314412][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 332.176623][T15280] dummy0: entered allmulticast mode [ 332.183970][T15280] dummy0: left allmulticast mode [ 332.362979][T15295] netlink: 'syz.4.2345': attribute type 2 has an invalid length. [ 332.386323][T15295] !9: entered promiscuous mode [ 332.413846][T15299] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 332.436207][T15296] syzkaller0: entered promiscuous mode [ 332.441872][T15296] syzkaller0: entered allmulticast mode [ 332.722726][T15315] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 332.851625][T15325] netlink: 'syz.3.2352': attribute type 1 has an invalid length. [ 332.876665][T15325] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2352'. [ 333.004944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.013266][ C1] lec:lec_tx_timeout: lec0 [ 333.018079][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.189126][T15332] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2355'. [ 333.354406][T15351] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 333.464382][T15343] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 333.628509][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 333.635276][T15340] lo speed is unknown, defaulting to 1000 [ 333.698509][T15355] lo speed is unknown, defaulting to 1000 [ 333.711287][T15340] wlan1 speed is unknown, defaulting to 1000 [ 333.767403][T15355] wlan1 speed is unknown, defaulting to 1000 [ 334.555634][T15404] netlink: 'syz.1.2371': attribute type 11 has an invalid length. [ 335.647250][T15432] lo speed is unknown, defaulting to 1000 [ 335.676900][T15432] wlan1 speed is unknown, defaulting to 1000 [ 335.810927][T15441] netlink: 'syz.0.2382': attribute type 8 has an invalid length. [ 336.423888][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 336.544501][T15476] net_ratelimit: 2 callbacks suppressed [ 336.544522][T15476] openvswitch: netlink: IP tunnel dst address not specified [ 336.680256][T15476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2390'. [ 336.707342][T15484] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 337.200115][T15509] netlink: 'syz.0.2399': attribute type 2 has an invalid length. [ 337.235109][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 337.253274][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 338.025167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.033383][ C1] lec:lec_tx_timeout: lec0 [ 338.038345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.316599][T15531] syzkaller1: entered promiscuous mode [ 338.355108][T15531] syzkaller1: entered allmulticast mode [ 338.523363][T15548] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2406'. [ 338.807676][T15555] lo speed is unknown, defaulting to 1000 [ 338.828794][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 338.843510][T15555] wlan1 speed is unknown, defaulting to 1000 [ 338.852092][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 338.863979][T15563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 338.889713][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2412'. [ 338.907451][T15559] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 338.919961][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 339.081845][T15571] "syz.1.2413" (15571) uses obsolete ecb(arc4) skcipher [ 339.149601][T15576] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.270708][T15587] tipc: Enabling of bearer rejected, already enabled [ 339.400389][T15589] netlink: 'syz.1.2417': attribute type 20 has an invalid length. [ 339.425991][T15587] tipc: Resetting bearer [ 339.614998][T15596] syzkaller0: entered promiscuous mode [ 339.627784][T15596] syzkaller0: entered allmulticast mode [ 340.025711][T15621] openvswitch: netlink: Key type 30 is not supported [ 340.031990][T15625] nbd: must specify an index to disconnect [ 340.193015][T15632] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 340.226017][ T1771] block nbd0: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 90 seconds [ 340.237303][ T1771] block nbd0: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 90 seconds [ 340.248726][ T1771] block nbd0: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 90 seconds [ 340.260422][ T1771] block nbd0: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 90 seconds [ 340.277061][T15630] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.302325][T15630] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.314274][T15630] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.466052][T15630] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.495163][T15630] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.518418][T15630] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.587661][T15649] netlink: 'syz.0.2433': attribute type 4 has an invalid length. [ 340.619369][T15649] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 340.677294][T15630] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.687334][T15630] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.691119][T15654] xt_hashlimit: size too large, truncated to 1048576 [ 340.698723][T15630] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 340.782461][T15630] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.807501][T15630] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 340.828745][T15630] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 341.088422][ T6621] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.104954][ T6621] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 341.125581][ T6621] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.220050][ T6621] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.229229][ T6621] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 341.242926][ T6621] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.270949][ T6621] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.298550][ T6621] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 341.309718][ T6621] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.364351][ T6621] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.377365][ T6621] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 341.410537][ T6621] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.663947][T15702] __nla_validate_parse: 14 callbacks suppressed [ 341.663970][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 342.329600][T15737] tipc: Enabled bearer , priority 0 [ 342.356296][T15737] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 342.382325][T15737] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 342.406462][T15737] tipc: Resetting bearer [ 342.694417][T15737] tipc: Resetting bearer [ 342.885898][ T6630] tipc: Resetting bearer [ 342.901008][T15764] tipc: Enabling of bearer rejected, failed to enable media [ 342.920750][T15761] syzkaller0: entered promiscuous mode [ 342.948737][T15761] syzkaller0: entered allmulticast mode [ 343.044954][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.053062][ C1] lec:lec_tx_timeout: lec0 [ 343.058028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.211566][T15783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2467'. [ 343.318722][T15772] lo speed is unknown, defaulting to 1000 [ 343.329171][T15772] wlan1 speed is unknown, defaulting to 1000 [ 343.409155][T15787] ip6tnl4: entered allmulticast mode [ 343.483176][T15790] netlink: 'syz.2.2474': attribute type 89 has an invalid length. [ 343.506527][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 343.913633][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2476'. [ 344.253805][T15811] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2477'. [ 344.544767][T15820] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 344.568740][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'. [ 344.597940][T15817] bridge8: entered promiscuous mode [ 344.616525][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 344.735559][T15820] 8021q: adding VLAN 0 to HW filter on device bond11 [ 344.914725][T15832] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 344.937255][T15832] bond11: (slave batadv1): making interface the new active one [ 344.967037][T15832] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 345.060418][T15851] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 345.070431][T15851] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 345.195702][T15851] netlink: 'syz.0.2489': attribute type 3 has an invalid length. [ 345.677065][T15879] netlink: 'syz.3.2495': attribute type 2 has an invalid length. [ 345.712225][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2495'. [ 346.121055][T15913] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 346.152468][T15918] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.177633][T15919] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 346.435803][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 346.506193][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2512'. [ 346.668286][T15948] tipc: Resetting bearer [ 347.110403][T15967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.249634][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.290121][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.331907][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.345764][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.357208][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.366319][T15977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 347.730592][T15973] __nla_validate_parse: 352 callbacks suppressed [ 347.730618][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 347.823386][T15988] syzkaller0: entered promiscuous mode [ 347.829276][T15988] syzkaller0: entered allmulticast mode [ 348.074865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 348.083019][ C1] lec:lec_tx_timeout: lec0 [ 348.088210][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.588717][T16028] netlink: 'syz.3.2533': attribute type 9 has an invalid length. [ 348.626098][T16028] netlink: 'syz.3.2533': attribute type 6 has an invalid length. [ 348.861738][T16043] bond16: entered promiscuous mode [ 348.867242][T16043] bond16: entered allmulticast mode [ 348.873271][T16043] 8021q: adding VLAN 0 to HW filter on device bond16 [ 349.079845][T16060] IPVS: length: 24 != 36888 [ 349.142941][T16062] lo speed is unknown, defaulting to 1000 [ 349.183694][T16062] wlan1 speed is unknown, defaulting to 1000 [ 349.254962][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 349.264275][T16069] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2543'. [ 349.406386][T16077] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2545'. [ 349.428327][T16069] lo speed is unknown, defaulting to 1000 [ 349.481224][T16069] wlan1 speed is unknown, defaulting to 1000 [ 349.512453][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'. [ 349.647403][T16082] lo speed is unknown, defaulting to 1000 [ 349.712088][T16082] wlan1 speed is unknown, defaulting to 1000 [ 349.811956][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 350.446476][T16117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2551'. [ 350.492728][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 350.617131][T16120] bond13: entered promiscuous mode [ 350.633184][T16120] 8021q: adding VLAN 0 to HW filter on device bond13 [ 350.829486][T16121] macvtap2: entered promiscuous mode [ 350.867478][T16121] macvtap2: entered allmulticast mode [ 350.925566][T16129] macvtap3: entered promiscuous mode [ 350.943831][T16129] macvtap3: entered allmulticast mode [ 351.185863][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 351.199075][T16146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2554'. [ 351.275846][T16151] xt_bpf: check failed: parse error [ 351.847888][T16158] lo speed is unknown, defaulting to 1000 [ 351.877827][T16175] hsr0: entered promiscuous mode [ 351.929753][T16158] wlan1 speed is unknown, defaulting to 1000 [ 351.982239][T16174] hsr0: left promiscuous mode [ 352.529715][T16194] xfrm0: entered promiscuous mode [ 352.543353][T16194] xfrm0: entered allmulticast mode [ 352.583875][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 353.294635][T16216] netlink: 'syz.0.2570': attribute type 10 has an invalid length. [ 353.303234][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2570'. [ 353.639343][T16231] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2572'. [ 353.676903][T16231] netlink: 'syz.4.2572': attribute type 11 has an invalid length. [ 353.693683][T16231] netlink: 'syz.4.2572': attribute type 23 has an invalid length. [ 353.715598][T16231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2572'. [ 353.853547][T16231] gretap2: entered promiscuous mode [ 353.861654][ T10] IPVS: starting estimator thread 0... [ 353.862073][T16234] net_ratelimit: 27 callbacks suppressed [ 353.862091][T16234] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 353.955049][T16240] IPVS: using max 35 ests per chain, 84000 per kthread [ 353.983769][T16246] SET target dimension over the limit! [ 354.095318][T16249] netlink: set zone limit has 4 unknown bytes [ 354.211141][T16255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2578'. [ 354.259302][T16255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2578'. [ 354.294874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 354.302988][ C1] lec:lec_tx_timeout: lec0 [ 354.309318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.342925][T16256] netlink: 'syz.2.2578': attribute type 11 has an invalid length. [ 354.592037][T16268] lo speed is unknown, defaulting to 1000 [ 354.621163][T16268] lo speed is unknown, defaulting to 1000 [ 354.642697][T16268] lo speed is unknown, defaulting to 1000 [ 354.709771][T16280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2583'. [ 354.918378][T16278] delete_channel: no stack [ 355.285173][T16268] infiniband sqz0: set active [ 355.295378][T16268] infiniband sqz0: added lo [ 355.342332][ T796] lo speed is unknown, defaulting to 1000 [ 355.369436][T16268] RDS/IB: sqz0: added [ 355.373629][T16268] smc: adding ib device sqz0 with port count 1 [ 355.380313][T16268] smc: ib device sqz0 port 1 has no pnetid [ 355.396131][T16268] lo speed is unknown, defaulting to 1000 [ 355.475283][ T10] lo speed is unknown, defaulting to 1000 [ 355.782191][T16338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2598'. [ 355.838331][T16338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2598'. [ 355.862543][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 355.913603][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 356.209349][T16356] ipvlan0: entered promiscuous mode [ 356.346284][T16268] lo speed is unknown, defaulting to 1000 [ 356.479342][T16366] syzkaller1: entered allmulticast mode [ 356.992360][T16389] lo speed is unknown, defaulting to 1000 [ 357.016004][T16268] lo speed is unknown, defaulting to 1000 [ 357.025524][T16396] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 357.107514][T16394] lo speed is unknown, defaulting to 1000 [ 357.114629][T16389] wlan1 speed is unknown, defaulting to 1000 [ 357.152138][T16394] wlan1 speed is unknown, defaulting to 1000 [ 357.191970][T16402] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 357.711571][T16434] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 357.729919][T16268] lo speed is unknown, defaulting to 1000 [ 357.808850][T16438] netlink: 'syz.4.2622': attribute type 10 has an invalid length. [ 357.881100][T16439] bond12: (slave bridge9): making interface the new active one [ 357.897428][T16439] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 357.945622][T16434] bond12: (slave bridge10): Enslaving as an active interface with a down link [ 358.010614][T16434] macvlan3: entered promiscuous mode [ 358.016645][T16434] macvlan3: entered allmulticast mode [ 358.024346][T16434] bond12: entered promiscuous mode [ 358.030809][T16434] bridge9: entered promiscuous mode [ 358.037200][T16434] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 358.046030][T16434] bond12: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 358.063273][T16434] bond12: left promiscuous mode [ 358.069112][T16434] bridge9: left promiscuous mode [ 358.097422][T16443] tipc: Enabling of bearer rejected, already enabled [ 358.125960][T16443] netlink: 'syz.4.2623': attribute type 3 has an invalid length. [ 358.203205][T16389] lo speed is unknown, defaulting to 1000 [ 358.519685][T16452] lo speed is unknown, defaulting to 1000 [ 358.537450][T16268] lo speed is unknown, defaulting to 1000 [ 358.552440][T16452] wlan1 speed is unknown, defaulting to 1000 [ 358.841335][T16268] lo speed is unknown, defaulting to 1000 [ 359.247539][T16452] lo speed is unknown, defaulting to 1000 [ 359.559360][T16475] __nla_validate_parse: 6 callbacks suppressed [ 359.559381][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2635'. [ 359.613147][T16476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2635'. [ 359.621070][T16475] ip6gre1: entered promiscuous mode [ 359.661429][T16475] ip6gre1: entered allmulticast mode [ 359.995294][T16485] netpci0: tun_chr_ioctl cmd 1074025678 [ 360.001078][T16485] netpci0: group set to 0 [ 360.055263][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 360.063378][ C1] lec:lec_tx_timeout: lec0 [ 360.068724][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.234144][T16497] xt_bpf: check failed: parse error [ 360.569160][T16489] delete_channel: no stack [ 360.650883][T16504] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 361.460270][T16525] lo speed is unknown, defaulting to 1000 [ 361.482663][T16525] wlan1 speed is unknown, defaulting to 1000 [ 361.638276][T16535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2648'. [ 361.709205][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.732020][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.762425][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.781759][T16541] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 361.789763][T16541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.794038][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.857734][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 361.980454][T16525] lo speed is unknown, defaulting to 1000 [ 362.059983][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 362.078877][T16554] netlink: 'syz.1.2651': attribute type 1 has an invalid length. [ 362.861459][T16586] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96 [ 363.370680][T16607] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 363.376356][T16605] IPVS: stopping backup sync thread 16607 ... [ 363.550108][T16610] syzkaller1: entered promiscuous mode [ 363.573000][T16610] syzkaller1: entered allmulticast mode [ 363.593531][T16612] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 364.465546][T16651] netlink: 'syz.0.2677': attribute type 6 has an invalid length. [ 365.075156][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.083356][ C1] lec:lec_tx_timeout: lec0 [ 365.088287][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.325470][T16693] lo speed is unknown, defaulting to 1000 [ 365.365181][T16693] wlan1 speed is unknown, defaulting to 1000 [ 365.373026][T16698] __nla_validate_parse: 8 callbacks suppressed [ 365.373047][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'. [ 365.412739][T16698] openvswitch: netlink: Flow key attr not present in new flow. [ 365.509570][T16701] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 365.721532][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 365.742696][T16724] netlink: 'syz.1.2690': attribute type 4 has an invalid length. [ 365.750906][T16723] netlink: 'syz.1.2690': attribute type 4 has an invalid length. [ 365.757855][T16693] lo speed is unknown, defaulting to 1000 [ 365.783299][ T8553] lo speed is unknown, defaulting to 1000 [ 365.791251][ T8553] sqz0: Port: 1 Link DOWN [ 365.798703][T15418] lo speed is unknown, defaulting to 1000 [ 366.071925][T16590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.160283][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 366.186541][T16746] netlink: 'syz.0.2697': attribute type 5 has an invalid length. [ 366.225762][ T6633] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.244042][ T6633] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.266703][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'. [ 366.275523][ T6633] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.301529][ T6633] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.784728][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 366.879133][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2706'. [ 367.073164][T16784] lo speed is unknown, defaulting to 1000 [ 367.099497][T16784] wlan1 speed is unknown, defaulting to 1000 [ 367.224523][T16792] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2707'. [ 367.236076][T16791] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2707'. [ 368.175345][T16820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2713'. [ 368.444318][T16814] veth13: entered promiscuous mode [ 368.535122][T16818] netlink: 'syz.1.2714': attribute type 30 has an invalid length. [ 368.779338][T16805] gretap2: entered promiscuous mode [ 368.911714][T16805] batman_adv: batadv0: Adding interface: gretap2 [ 368.967354][T16805] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.045151][T16805] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 369.121261][T16784] lo speed is unknown, defaulting to 1000 [ 369.437303][T16842] lo speed is unknown, defaulting to 1000 [ 369.478897][T16842] wlan1 speed is unknown, defaulting to 1000 [ 369.568236][T16844] lo speed is unknown, defaulting to 1000 [ 369.687455][T16844] wlan1 speed is unknown, defaulting to 1000 [ 369.725073][T16851] netlink: 'syz.3.2719': attribute type 4 has an invalid length. [ 370.253634][T16862] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2723'. [ 370.297514][ T1771] block nbd0: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 120 seconds [ 370.308628][ T1771] block nbd0: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 120 seconds [ 370.320013][ T1771] block nbd0: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 120 seconds [ 370.331448][ T1771] block nbd0: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 120 seconds [ 370.385775][T16842] lo speed is unknown, defaulting to 1000 [ 370.581248][T16873] bridge8: entered promiscuous mode [ 370.605056][T16873] bridge8: entered allmulticast mode [ 370.647751][T16873] team0: Port device bridge8 added [ 370.817379][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 370.934854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 370.942922][ C1] lec:lec_tx_timeout: lec0 [ 370.948920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.081464][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 371.128384][T16896] macvlan3: entered allmulticast mode [ 371.165385][T16895] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 371.179979][T16899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2731'. [ 371.264164][T16899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2731'. [ 371.555111][T16844] lo speed is unknown, defaulting to 1000 [ 371.801183][T16908] netlink: 'syz.3.2736': attribute type 1 has an invalid length. [ 371.900604][T16911] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2736'. [ 372.497840][T16908] lo speed is unknown, defaulting to 1000 [ 372.560668][T16908] wlan1 speed is unknown, defaulting to 1000 [ 372.635503][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2740'. [ 372.691310][T16925] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2740'. [ 373.348162][T16940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2743'. [ 373.407510][T16940] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 373.443094][T16940] bond13: (slave lo): Enslaving as an active interface with an up link [ 373.452379][T16940] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 373.536739][T16908] lo speed is unknown, defaulting to 1000 [ 373.768179][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 373.958981][T16960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2747'. [ 374.281741][T16965] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 374.291283][T16965] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 374.306066][T16965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.119684][T16989] tipc: Enabling of bearer rejected, already enabled [ 375.146411][T16993] caif0: entered promiscuous mode [ 375.151526][T16993] caif0: entered allmulticast mode [ 375.933953][T17021] __nla_validate_parse: 11 callbacks suppressed [ 375.933977][T17021] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2769'. [ 375.974851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 375.983067][ C1] lec:lec_tx_timeout: lec0 [ 375.989928][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.190134][T17035] lo speed is unknown, defaulting to 1000 [ 376.230603][T17035] wlan1 speed is unknown, defaulting to 1000 [ 376.706229][T17035] lo speed is unknown, defaulting to 1000 [ 377.223967][T17073] mac80211_hwsim hwsim3 wlan0: default FDB implementation only supports local addresses [ 377.652379][T17089] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 377.687530][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 378.020663][T17105] lo speed is unknown, defaulting to 1000 [ 378.046276][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 378.056826][T17105] wlan1 speed is unknown, defaulting to 1000 [ 378.336440][T17116] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2790'. [ 378.347259][T17116] ..0{X: renamed from gretap0 [ 378.386178][T17116] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 378.620561][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.731696][T17105] lo speed is unknown, defaulting to 1000 [ 378.824447][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2794'. [ 378.906524][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 378.921233][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 378.976948][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 378.990536][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.022561][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 379.031399][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.041615][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 379.055404][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.067917][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 379.077009][T17136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.098776][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 379.117376][T17136] netlink: 'syz.0.2796': attribute type 29 has an invalid length. [ 379.538579][T17172] xt_ecn: cannot match TCP bits for non-tcp packets [ 380.017678][T17187] syzkaller1: entered promiscuous mode [ 380.029550][T17187] syzkaller1: entered allmulticast mode [ 380.274043][T17198] pimreg: tun_chr_ioctl cmd 2147767520 [ 380.332424][T17203] bond0 (unregistering): left promiscuous mode [ 380.366123][T17203] bond0 (unregistering): Released all slaves [ 380.717164][T17226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.876174][T17243] validate_nla: 29 callbacks suppressed [ 380.876194][T17243] netlink: 'syz.0.2822': attribute type 13 has an invalid length. [ 381.005113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.013219][ C1] lec:lec_tx_timeout: lec0 [ 381.018135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.054679][T17246] __nla_validate_parse: 39 callbacks suppressed [ 381.054703][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2822'. [ 381.071741][T17249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2827'. [ 381.093573][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 381.149729][T17249] netlink: 'syz.1.2827': attribute type 12 has an invalid length. [ 381.155822][T17257] xt_TCPMSS: Only works on TCP SYN packets [ 381.157996][T17249] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2827'. [ 381.321570][T17266] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2831'. [ 381.412815][T17270] lo speed is unknown, defaulting to 1000 [ 381.449181][T17270] wlan1 speed is unknown, defaulting to 1000 [ 381.697947][T17270] lo speed is unknown, defaulting to 1000 [ 381.908121][T17292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.915454][T17292] IPv6: NLM_F_CREATE should be set when creating new route [ 381.922858][T17292] IPv6: NLM_F_CREATE should be set when creating new route [ 382.151749][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 382.707019][T17319] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 382.801445][T17319] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 383.047862][T17325] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2843'. [ 383.123409][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2843'. [ 383.142931][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2843'. [ 383.407987][T17338] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 383.738665][T17348] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2853'. [ 384.147738][T17369] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 384.203741][T17378] tap0: tun_chr_ioctl cmd 2148553947 [ 386.025140][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.033300][ C1] lec:lec_tx_timeout: lec0 [ 386.038030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.395497][T17392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.870362][T17355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.980859][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2865'. [ 387.129442][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 387.163099][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 387.422079][T17410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2871'. [ 387.436142][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'. [ 387.467544][T17419] netlink: 'syz.1.2874': attribute type 2 has an invalid length. [ 387.520855][T17419] !: entered promiscuous mode [ 387.620402][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 387.803001][T17427] batadv_slave_0: Caught tx_queue_len zero misconfig [ 387.838655][T17432] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 387.976587][T17441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.009688][T17445] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 388.057414][T17445] netlink: 'syz.0.2881': attribute type 1 has an invalid length. [ 388.123162][T17445] 8021q: adding VLAN 0 to HW filter on device bond15 [ 388.221657][T17445] bond15: (slave veth3): Enslaving as an active interface with a down link [ 388.482595][T17462] tipc: New replicast peer: 255.255.255.255 [ 388.502362][T17462] tipc: Enabled bearer , priority 10 [ 388.803935][T17474] netlink: 'syz.1.2891': attribute type 2 has an invalid length. [ 388.815046][T17474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2891'. [ 388.907626][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.929853][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.940782][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.951548][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.959909][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.109702][T17482] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 389.144241][T17476] lo speed is unknown, defaulting to 1000 [ 389.181090][T17476] wlan1 speed is unknown, defaulting to 1000 [ 389.237899][T17485] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2894'. [ 389.779207][T17495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2896'. [ 389.894754][T17479] netlink: 'syz.4.2892': attribute type 1 has an invalid length. [ 390.085681][T17479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.093759][T17508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.109851][T17476] lo speed is unknown, defaulting to 1000 [ 390.421960][T17524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2903'. [ 390.468062][T17524] netlink: 'syz.1.2903': attribute type 5 has an invalid length. [ 390.507085][T17524] netlink: 'syz.1.2903': attribute type 6 has an invalid length. [ 390.663612][T17530] : renamed from dummy0 [ 391.016036][ T5841] Bluetooth: hci5: command tx timeout [ 391.045082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 391.053186][ C1] lec:lec_tx_timeout: lec0 [ 391.058057][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.095941][T17548] geneve2: entered promiscuous mode [ 391.134727][T17548] geneve2: entered allmulticast mode [ 391.200300][T17541] lo speed is unknown, defaulting to 1000 [ 391.223473][T17551] ip6gretap2: entered promiscuous mode [ 391.246361][T17551] ip6gretap2: entered allmulticast mode [ 391.271482][T17541] wlan1 speed is unknown, defaulting to 1000 [ 391.589915][T17562] dvmrp12: entered allmulticast mode [ 391.677106][T17476] chnl_net:caif_netlink_parms(): no params data found [ 391.720707][T17566] dvmrp12: left allmulticast mode [ 392.164897][T17541] lo speed is unknown, defaulting to 1000 [ 392.357721][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.365440][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.372805][T17476] bridge_slave_0: entered allmulticast mode [ 392.382269][T17476] bridge_slave_0: entered promiscuous mode [ 392.393304][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.401824][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.409665][T17476] bridge_slave_1: entered allmulticast mode [ 392.418847][T17476] bridge_slave_1: entered promiscuous mode [ 392.603287][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.648199][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.811168][T17476] team0: Port device team_slave_0 added [ 392.839527][T17476] team0: Port device team_slave_1 added [ 393.021886][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.052033][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.095002][ T5841] Bluetooth: hci5: command tx timeout [ 393.171743][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.245860][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.252883][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.403661][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.509281][T17593] lo speed is unknown, defaulting to 1000 [ 393.542338][T17593] wlan1 speed is unknown, defaulting to 1000 [ 393.897846][T17476] hsr_slave_0: entered promiscuous mode [ 393.921022][T17476] hsr_slave_1: entered promiscuous mode [ 393.946629][T17476] debugfs: 'hsr0' already exists in 'hsr' [ 393.952421][T17476] Cannot create hsr debugfs directory [ 394.068350][T17601] __nla_validate_parse: 6 callbacks suppressed [ 394.068375][T17601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'. [ 394.236865][T17609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 394.623790][T17476] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.747484][T17476] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.816230][T17615] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 394.906768][T17476] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.969747][T17593] lo speed is unknown, defaulting to 1000 [ 395.056262][T17476] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.175179][ T5841] Bluetooth: hci5: command tx timeout [ 395.561509][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 395.585175][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 395.594189][T17630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2931'. [ 395.654629][T17476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.728420][T17476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.815239][T17476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.852925][T17476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.924765][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 396.026872][T17630] lo speed is unknown, defaulting to 1000 [ 396.049476][T17630] wlan1 speed is unknown, defaulting to 1000 [ 396.049498][T17641] lo speed is unknown, defaulting to 1000 [ 396.065345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.073384][ C1] lec:lec_tx_timeout: lec0 [ 396.078894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.131430][T17641] wlan1 speed is unknown, defaulting to 1000 [ 396.488012][T17476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.539285][T17476] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.570879][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.578100][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.626876][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.634038][ T6633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.031817][T17655] bridge0: entered allmulticast mode [ 397.151676][T17655] bridge_slave_1: left allmulticast mode [ 397.157709][T17655] bridge_slave_1: left promiscuous mode [ 397.163542][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.192607][T17655] bridge_slave_0: left promiscuous mode [ 397.199356][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.265456][ T5841] Bluetooth: hci5: command tx timeout [ 397.400161][T17476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.547513][T17476] veth0_vlan: entered promiscuous mode [ 397.579036][T17476] veth1_vlan: entered promiscuous mode [ 397.628200][T17666] syzkaller1: entered allmulticast mode [ 397.684388][T17476] veth0_macvtap: entered promiscuous mode [ 397.710930][T17476] veth1_macvtap: entered promiscuous mode [ 397.758394][T17476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.781000][T17476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.831009][ T6624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.852514][ T6624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.881181][ T6624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.896406][T17669] sctp: [Deprecated]: syz.2.2937 (pid 17669) Use of int in max_burst socket option deprecated. [ 397.896406][T17669] Use struct sctp_assoc_value instead [ 397.933579][ T6624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.982929][T17630] lo speed is unknown, defaulting to 1000 [ 398.144097][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.177970][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.331291][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.346579][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.777305][T17678] scsi_nl_rcv_msg: discarding partial skb [ 398.851882][T17641] lo speed is unknown, defaulting to 1000 [ 399.898428][T17703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'. [ 399.933134][T17703] netlink: 'syz.0.2945': attribute type 4 has an invalid length. [ 400.134078][T17697] lo speed is unknown, defaulting to 1000 [ 400.188912][T17697] wlan1 speed is unknown, defaulting to 1000 [ 400.376474][ T1771] block nbd0: Possible stuck request ffff8880268b8000: control (read@0,1024B). Runtime 150 seconds [ 400.387380][ T1771] block nbd0: Possible stuck request ffff8880268b8200: control (read@1024,1024B). Runtime 150 seconds [ 400.400724][ T1771] block nbd0: Possible stuck request ffff8880268b8400: control (read@2048,1024B). Runtime 150 seconds [ 400.412354][ T1771] block nbd0: Possible stuck request ffff8880268b8600: control (read@3072,1024B). Runtime 150 seconds [ 400.698609][T17723] netlink: 'syz.3.2949': attribute type 1 has an invalid length. [ 400.825190][T17725] macvtap1: entered promiscuous mode [ 400.835005][T17725] macvtap1: entered allmulticast mode [ 401.226386][T17733] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 401.540155][T17697] lo speed is unknown, defaulting to 1000 [ 401.894892][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 401.903034][ C1] lec:lec_tx_timeout: lec0 [ 401.909878][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.992050][T17765] block nbd0: NBD_DISCONNECT [ 402.001005][T17765] block nbd0: Send disconnect failed -32 [ 402.011705][T17765] block nbd0: shutting down sockets [ 402.042874][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.052686][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.061973][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.071757][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.079875][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.089459][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.097457][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.107082][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.117060][ T5827] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.128386][ T5827] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.139538][ T5827] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.152348][T17765] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2962'. [ 402.162099][ T5827] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.207615][ T5827] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.240977][ T5827] Buffer I/O error on dev nbd0, logical block 2, async page read [ 402.259962][ T5827] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.282633][ T5827] Buffer I/O error on dev nbd0, logical block 3, async page read [ 402.300764][ T5827] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.341992][ T5827] Buffer I/O error on dev nbd0, logical block 0, async page read [ 402.363193][ T5827] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 402.383725][ T5827] Buffer I/O error on dev nbd0, logical block 1, async page read [ 402.404777][ T5827] ldm_validate_partition_table(): Disk read failed. [ 402.413217][ T5827] Dev nbd0: unable to read RDB block 0 [ 402.430414][ T5827] nbd0: unable to read partition table [ 402.457526][ T5827] ldm_validate_partition_table(): Disk read failed. [ 402.494379][ T5827] Dev nbd0: unable to read RDB block 0 [ 402.520392][ T5827] nbd0: unable to read partition table [ 402.606320][T17779] openvswitch: netlink: Multiple metadata blocks provided [ 402.687656][T17774] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.698351][T17774] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 402.725187][T17774] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.731237][T17774] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 402.782824][T17774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.791316][T17774] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 402.827310][T17774] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 402.833464][T17774] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 403.058553][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.069509][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.098109][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.103100][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2969'. [ 403.106559][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.123509][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.206892][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.214332][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.222335][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.230541][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.238907][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.320761][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2970'. [ 403.528500][ T6620] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.675111][ T6620] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 403.694910][ T6620] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 403.726546][T17778] lo speed is unknown, defaulting to 1000 [ 403.745573][T17778] wlan1 speed is unknown, defaulting to 1000 [ 403.842040][ T6620] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.857625][ T6620] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 403.870346][ T6620] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 403.974774][ T6620] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.998853][ T6620] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 404.023369][T17811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2977'. [ 404.035004][ T6620] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.047756][T17812] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 404.065943][T17812] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.2975'. [ 404.137022][ T6620] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.195331][ T6620] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 404.299217][T17815] netlink: 'syz.3.2978': attribute type 4 has an invalid length. [ 404.310437][ T6620] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.344610][T17778] lo speed is unknown, defaulting to 1000 [ 404.459153][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 404.492127][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 404.518274][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 404.791927][ T6620] tipc: Resetting bearer [ 405.018874][T17837] Bluetooth: MGMT ver 1.23 [ 405.029291][T17837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.318645][ T6620] gretap0 (unregistering): left promiscuous mode [ 405.349766][ T5841] Bluetooth: hci1: command tx timeout [ 405.363980][ T6620] batman_adv: batadv0: Removing interface: gretap2 [ 405.442112][ T6620] bond15 (unregistering): (slave geneve3): Releasing active interface [ 405.706703][ T6620] tipc: Disabling bearer [ 405.980211][ T6620] bond1 (unregistering): Released all slaves [ 405.994244][ T6620] bond2 (unregistering): Released all slaves [ 406.008159][ T6620] bond3 (unregistering): Released all slaves [ 406.022915][ T6620] bond4 (unregistering): Released all slaves [ 406.043904][ T6620] bond5 (unregistering): Released all slaves [ 406.058180][ T6620] bond6 (unregistering): Released all slaves [ 406.079770][ T6620] bond7 (unregistering): Released all slaves [ 406.094169][ T6620] bond8 (unregistering): Released all slaves [ 406.107876][ T6620] bond9 (unregistering): Released all slaves [ 406.121524][ T6620] bond10 (unregistering): Released all slaves [ 406.148013][ T6620] bond11 (unregistering): Released all slaves [ 406.159212][ T6620] bond12 (unregistering): Released all slaves [ 406.173111][ T6620] bond13 (unregistering): Released all slaves [ 406.187081][ T6620] bond14 (unregistering): Released all slaves [ 406.202889][ T6620] bond15 (unregistering): Released all slaves [ 406.223331][ T6620] bond16 (unregistering): Released all slaves [ 406.243072][ T6620] bond0 (unregistering): Released all slaves [ 406.279395][T17848] netlink: 'syz.3.2990': attribute type 8 has an invalid length. [ 406.524729][ T6620] : left promiscuous mode [ 406.567353][ T6633] tipc: Subscription rejected, illegal request [ 406.638303][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 406.695525][ T6620] !9: left promiscuous mode [ 406.926714][ T6620] tipc: Left network mode [ 406.934921][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.943112][ C1] lec:lec_tx_timeout: lec0 [ 406.948846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.992785][T17778] chnl_net:caif_netlink_parms(): no params data found [ 407.079133][T17887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2997'. [ 407.226882][T17885] lo speed is unknown, defaulting to 1000 [ 407.321353][T17885] wlan1 speed is unknown, defaulting to 1000 [ 407.421392][ T5841] Bluetooth: hci1: command tx timeout [ 407.509421][T17894] ip6tnl1: entered promiscuous mode [ 407.679140][T17778] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.700226][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.708392][T17778] bridge_slave_0: entered allmulticast mode [ 407.716962][T17778] bridge_slave_0: entered promiscuous mode [ 407.750657][T17778] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.766645][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.777850][T17778] bridge_slave_1: entered allmulticast mode [ 407.788569][T17778] bridge_slave_1: entered promiscuous mode [ 407.897619][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.926570][T17885] lo speed is unknown, defaulting to 1000 [ 407.942134][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.110939][T17778] team0: Port device team_slave_0 added [ 408.139305][T17778] team0: Port device team_slave_1 added [ 408.240982][T17778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.265571][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.310762][T17778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.339773][T17778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.355215][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.405259][T17778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.674315][T17778] hsr_slave_0: entered promiscuous mode [ 408.704773][T17778] hsr_slave_1: entered promiscuous mode [ 408.717529][T17778] debugfs: 'hsr0' already exists in 'hsr' [ 408.733580][T17778] Cannot create hsr debugfs directory [ 408.760945][T17930] netlink: 'syz.1.3004': attribute type 29 has an invalid length. [ 408.776889][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 408.805423][T17940] openvswitch: netlink: Key type 30 is not supported [ 408.878508][T17933] netlink: 'syz.1.3004': attribute type 29 has an invalid length. [ 408.886571][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 408.930909][T17930] batman_adv: batadv0: Adding interface: macvtap1 [ 408.937955][T17930] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 408.965161][T17930] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 408.999037][T17946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3007'. [ 409.501052][ T5841] Bluetooth: hci1: command tx timeout [ 409.684025][T17966] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3013'. [ 409.714380][T17966] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 409.901933][T17979] netlink: 'syz.0.3014': attribute type 3 has an invalid length. [ 410.040893][T17979] tipc: Started in network mode [ 410.058303][T17979] tipc: Node identity 3e971700ba4e, cluster identity 4711 [ 410.092836][T17979] tipc: Enabled bearer , priority 0 [ 410.203080][ T6620] hsr_slave_0: left promiscuous mode [ 410.223151][ T6620] hsr_slave_1: left promiscuous mode [ 410.417839][ T6620] pim6reg (unregistering): left allmulticast mode [ 410.780482][T17997] netlink: 'syz.3.3016': attribute type 2 has an invalid length. [ 410.850189][T17979] tipc: Disabling bearer [ 411.125954][T18016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3019'. [ 411.192954][T18017] gtp2: entered allmulticast mode [ 411.384065][ T6620] IPVS: stop unused estimator thread 0... [ 411.575085][ T5841] Bluetooth: hci1: command tx timeout [ 411.729487][T18044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3024'. [ 411.743087][T17778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.778891][T17778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.799373][T17778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.926944][T17778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.965197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.973337][ C1] lec:lec_tx_timeout: lec0 [ 411.979073][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.023678][T18057] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3026'. [ 412.378919][T17778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.470859][T17778] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.503341][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.510595][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.590737][T18036] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 412.617058][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.624373][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.299114][T18112] lo speed is unknown, defaulting to 1000 [ 413.509622][T18129] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3033'. [ 413.542891][T18129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'. [ 413.571503][T18125] lo speed is unknown, defaulting to 1000 [ 413.672376][T18132] pim6reg1: entered promiscuous mode [ 413.689127][T18132] pim6reg1: entered allmulticast mode [ 413.791321][T17778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.943035][T18141] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3035'. [ 414.029005][T18112] lo speed is unknown, defaulting to 1000 [ 414.705950][T17778] veth0_vlan: entered promiscuous mode [ 414.743611][T17778] veth1_vlan: entered promiscuous mode [ 414.831443][T17778] veth0_macvtap: entered promiscuous mode [ 414.874676][T17778] veth1_macvtap: entered promiscuous mode [ 414.971604][T17778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.009556][T18125] lo speed is unknown, defaulting to 1000 [ 415.091239][T17778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.250462][ T6620] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.274978][ T6620] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.308398][ T6620] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.341064][ T6620] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.589573][ T6625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.618656][ T6625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.709320][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.732899][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.077021][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2964'. [ 416.108929][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 416.108929][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 416.994850][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 417.002946][ C1] lec:lec_tx_timeout: lec0 [ 417.008334][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.522563][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.542018][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.554077][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.562840][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.577664][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.672933][T18221] lo speed is unknown, defaulting to 1000 [ 417.751162][T18224] Bluetooth: MGMT ver 1.23 [ 417.867988][T18224] tap0: tun_chr_ioctl cmd 2148553947 [ 418.203560][T18221] lo speed is unknown, defaulting to 1000 [ 418.235983][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'. [ 418.501704][T18250] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3057'. [ 418.832659][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3059'. [ 418.874099][T18255] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 419.334153][T18276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'. [ 419.377991][T18221] chnl_net:caif_netlink_parms(): no params data found [ 419.523771][T18221] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.531614][T18221] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.539431][T18221] bridge_slave_0: entered allmulticast mode [ 419.551270][T18221] bridge_slave_0: entered promiscuous mode [ 419.566143][T18221] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.573466][T18221] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.582234][T18221] bridge_slave_1: entered allmulticast mode [ 419.593126][T18221] bridge_slave_1: entered promiscuous mode [ 419.606904][T18291] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3067'. [ 419.638545][T18221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.652297][T18221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.656740][T18290] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3067'. [ 419.664143][ T5841] Bluetooth: hci0: command tx timeout [ 419.710626][T18221] team0: Port device team_slave_0 added [ 419.723732][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'. [ 419.726990][T18221] team0: Port device team_slave_1 added [ 419.772623][T18221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.780570][T18221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.811913][T18221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.828209][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3067'. [ 419.830058][T18221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.845625][T18221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.877770][T18221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.036358][T18221] hsr_slave_0: entered promiscuous mode [ 420.058579][T18221] hsr_slave_1: entered promiscuous mode [ 420.280383][T18308] bond1 (unregistering): Released all slaves [ 420.453173][T18300] lo speed is unknown, defaulting to 1000 [ 420.546676][T18221] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.814288][T18300] lo speed is unknown, defaulting to 1000 [ 420.822646][T18221] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.900277][T18324] pimreg1: tun_chr_ioctl cmd 1074025672 [ 420.918878][T18324] pimreg1: ignored: set checksum disabled [ 420.956795][T18221] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.084632][T18324] macvlan0: entered allmulticast mode [ 421.123302][T18221] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.470163][T18347] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3083'. [ 421.566318][T18347] netlink: 'syz.2.3083': attribute type 4 has an invalid length. [ 421.574146][T18347] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3083'. [ 421.598699][T18221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.635440][T18221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.677706][T18221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.711494][T18221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.735600][ T5841] Bluetooth: hci0: command tx timeout [ 421.784303][T18347] .`: renamed from bond0 [ 421.900706][T18349] macsec4: entered promiscuous mode [ 421.908489][T18349] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 422.013608][T18359] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 422.021160][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 422.021194][ C1] lec:lec_tx_timeout: lec0 [ 422.031179][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.046504][T18359] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 422.572411][T18384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.855784][T18373] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 422.999183][ T65] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.007777][ T65] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.152410][ T65] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.162969][ T65] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.202448][T18221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.308827][T18221] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.332369][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.339630][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.355671][T18388] __nla_validate_parse: 1 callbacks suppressed [ 423.355691][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'. [ 423.396227][T18388] netlink: 'syz.0.3092': attribute type 13 has an invalid length. [ 423.396605][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.404320][T18388] netlink: 'syz.0.3092': attribute type 17 has an invalid length. [ 423.411397][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.563986][T18388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.816733][ T5841] Bluetooth: hci0: command tx timeout [ 425.344594][T18312] Set syz1 is full, maxelem 65536 reached [ 425.898457][ T5841] Bluetooth: hci0: command tx timeout [ 426.410860][T18421] tipc: Enabled bearer , priority 0 [ 426.514078][T18418] tipc: Disabling bearer [ 426.537106][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3103'. [ 426.647468][T18440] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 426.654898][T18442] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3106'. [ 426.801655][T18221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.892815][T18448] bond1: option arp_interval: invalid value (18446744073709551615) [ 426.901615][T18448] bond1: option arp_interval: allowed values 0 - 2147483647 [ 426.915482][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 426.949496][T18448] bond1 (unregistering): Released all slaves [ 426.982119][T18456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3110'. [ 426.992908][T18455] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 427.035204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 427.040425][T18221] veth0_vlan: entered promiscuous mode [ 427.043382][ C1] lec:lec_tx_timeout: lec0 [ 427.053666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.079669][T18221] veth1_vlan: entered promiscuous mode [ 427.167676][T18221] veth0_macvtap: entered promiscuous mode [ 427.208916][T18221] veth1_macvtap: entered promiscuous mode [ 427.271466][T18221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.309361][T18221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.331864][T18461] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 427.368185][ T6625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.397625][ T6625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.408828][T18463] lo speed is unknown, defaulting to 1000 [ 427.419332][ T6625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.458605][ T6625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.585907][ T6625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.616384][ T6625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.688726][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.706995][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.015917][T18487] xfrm1: entered allmulticast mode [ 428.093401][T18463] lo speed is unknown, defaulting to 1000 [ 428.262324][T18492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3122'. [ 428.376732][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.405123][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.423600][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.432142][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.440265][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.658252][T18499] lo speed is unknown, defaulting to 1000 [ 428.803328][T18513] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 428.843236][T18513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.907128][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 428.941640][T18512] macvtap0: entered promiscuous mode [ 428.949522][T18512] macvtap0: entered allmulticast mode [ 428.955877][T18512] veth0_macvtap: entered allmulticast mode [ 428.971438][T18518] veth0_macvtap: left allmulticast mode [ 428.985196][T18518] veth0_macvtap: left promiscuous mode [ 428.990890][T18518] macvtap0: left promiscuous mode [ 428.997038][T18518] macvtap0: left allmulticast mode [ 429.200184][T18499] lo speed is unknown, defaulting to 1000 [ 429.832765][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 430.007304][T18551] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 430.064675][ T65] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 430.107228][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 430.120009][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 430.153958][ T65] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 430.186882][ T65] bond10 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 430.208607][ T65] bond10 (unregistering): (slave ip6gretap2): Releasing backup interface [ 430.520213][ T65] bond5 (unregistering): (slave gretap1): Releasing active interface [ 430.536012][ T5843] Bluetooth: hci3: command tx timeout [ 430.689920][ T65] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 430.698319][ T65] bridge4 (unregistering): left promiscuous mode [ 431.079467][ T65] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.089772][ T65] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.099335][ T65] .` (unregistering): Released all slaves [ 431.110312][ T65] bond1 (unregistering): Released all slaves [ 431.125917][ T65] bond2 (unregistering): Released all slaves [ 431.139733][ T65] bond3 (unregistering): Released all slaves [ 431.158808][ T65] bond4 (unregistering): Released all slaves [ 431.171761][ T65] bond5 (unregistering): Released all slaves [ 431.193466][ T65] bond6 (unregistering): Released all slaves [ 431.207315][ T65] bond7 (unregistering): Released all slaves [ 431.224720][ T65] bond8 (unregistering): Released all slaves [ 431.241756][ T65] bond9 (unregistering): Released all slaves [ 431.263294][ T65] bond10 (unregistering): Released all slaves [ 431.277707][ T65] bond11 (unregistering): (slave wireguard0): Releasing backup interface [ 431.286340][ T65] wireguard0: left promiscuous mode [ 431.292858][ T65] bond11 (unregistering): (slave wireguard1): Releasing backup interface [ 431.303848][ T65] bond11 (unregistering): Released all slaves [ 431.319216][ T65] bond12 (unregistering): Released all slaves [ 431.345776][ T65] bond13 (unregistering): Released all slaves [ 431.402644][T18522] lo speed is unknown, defaulting to 1000 [ 431.542801][ T65] 5n: left promiscuous mode [ 431.619554][T18569] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 431.666495][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3140'. [ 431.692626][ T65] M: left promiscuous mode [ 431.849677][ T65] tipc: Left network mode [ 432.065446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 432.073512][ C1] lec:lec_tx_timeout: lec0 [ 432.078791][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 432.616203][ T5843] Bluetooth: hci3: command tx timeout [ 432.636555][T18605] bond14 (unregistering): Released all slaves [ 432.863917][T18608] veth0_to_team: entered promiscuous mode [ 432.872544][T18608] veth0_to_team: entered allmulticast mode [ 432.881770][T18522] lo speed is unknown, defaulting to 1000 [ 432.900993][T18499] chnl_net:caif_netlink_parms(): no params data found [ 433.335471][T18626] netlink: 'syz.1.3150': attribute type 6 has an invalid length. [ 433.485253][T18499] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.492456][T18499] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.550768][T18499] bridge_slave_0: entered allmulticast mode [ 433.578483][T18499] bridge_slave_0: entered promiscuous mode [ 433.616158][T18499] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.646493][T18499] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.664205][T18499] bridge_slave_1: entered allmulticast mode [ 433.685446][T18499] bridge_slave_1: entered promiscuous mode [ 433.827873][T18499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.887879][T18499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.208202][T18499] team0: Port device team_slave_0 added [ 434.241426][T18662] rdma_op ffff88807f76a9f0 conn xmit_rdma 0000000000000000 [ 434.271887][T18499] team0: Port device team_slave_1 added [ 434.316930][T18663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3157'. [ 434.660997][T18672] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3158'. [ 434.696104][ T5843] Bluetooth: hci3: command tx timeout [ 434.755127][T18499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.772295][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.834906][T18499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.889201][T18499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.915137][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.984938][T18499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.135285][ T65] hsr_slave_0: left promiscuous mode [ 435.144003][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.184550][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.631032][ T65] team0 (unregistering): Port device team_slave_1 removed [ 435.664182][ T65] team0 (unregistering): Port device team_slave_0 removed [ 435.896369][T18684] bridge_slave_0: entered promiscuous mode [ 435.902410][T18684] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 436.130057][T18697] syzkaller0: entered promiscuous mode [ 436.144572][T18697] syzkaller0: entered allmulticast mode [ 436.203566][T18499] hsr_slave_0: entered promiscuous mode [ 436.216368][T18499] hsr_slave_1: entered promiscuous mode [ 436.246277][T18499] debugfs: 'hsr0' already exists in 'hsr' [ 436.252078][T18499] Cannot create hsr debugfs directory [ 436.791515][ T5843] Bluetooth: hci3: command tx timeout [ 436.813220][T18718] netlink: 'syz.1.3169': attribute type 11 has an invalid length. [ 436.860481][T18716] ip6tnl1: entered allmulticast mode [ 436.959183][T18716] tipc: Started in network mode [ 436.995615][T18716] tipc: Node identity ac14140f, cluster identity 4711 [ 437.002744][T18716] tipc: New replicast peer: 255.255.255.255 [ 437.056330][T18716] tipc: Enabled bearer , priority 10 [ 437.219960][T18728] netlink: 'syz.3.3171': attribute type 14 has an invalid length. [ 437.330369][T18728] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 437.355097][T18728] pim6reg1: linktype set to 270 [ 437.401222][ T65] IPVS: stop unused estimator thread 0... [ 437.742313][T18746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 437.893629][T18751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3175'. [ 437.902685][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 437.902718][ C1] lec:lec_tx_timeout: lec0 [ 437.911345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 437.941821][T18756] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3178'. [ 437.965873][T18759] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3179'. [ 438.163583][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'. [ 438.174014][T18765] openvswitch: netlink: Missing key (keys=40, expected=80) [ 438.195966][T18765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3182'. [ 438.209134][ T8545] tipc: Node number set to 2886997007 [ 438.227353][T18765] netlink: 'syz.1.3182': attribute type 3 has an invalid length. [ 438.228587][T18767] tipc: Enabling of bearer rejected, failed to enable media [ 438.333674][ T796] lo speed is unknown, defaulting to 1000 [ 438.401668][T18770] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 438.416894][T18774] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 438.455698][T18770] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3183'. [ 438.464725][T18770] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3183'. [ 438.505620][T18770] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3183'. [ 438.609511][T18774] bond1: entered promiscuous mode [ 438.619938][T18774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.674313][T18499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.692645][T18499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.738579][T18499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.763146][T18786] netlink: 'syz.1.3186': attribute type 5 has an invalid length. [ 438.788114][T18499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.270000][T18499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.334237][T18499] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.381937][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.389260][ T6620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.438122][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.445408][ T6620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.058125][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.320655][T18855] netlink: 'syz.0.3199': attribute type 39 has an invalid length. [ 440.384091][T18499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.552596][T18499] veth0_vlan: entered promiscuous mode [ 440.590956][T18824] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 440.593968][T18499] veth1_vlan: entered promiscuous mode [ 440.631220][T18824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.733721][T18499] veth0_macvtap: entered promiscuous mode [ 440.749409][T18866] __nla_validate_parse: 2 callbacks suppressed [ 440.749431][T18866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3200'. [ 440.767613][T18499] veth1_macvtap: entered promiscuous mode [ 440.862559][T18499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.894286][T18499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.052643][ T6620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.088206][ T6620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.173841][ T6620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.230405][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 441.287078][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 441.316903][ T6620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.459976][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.470702][T18887] syzkaller1: entered promiscuous mode [ 441.479068][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.484899][T18887] syzkaller1: entered allmulticast mode [ 441.741456][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.756356][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.918065][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3210'. [ 442.206282][T18925] lo speed is unknown, defaulting to 1000 [ 442.236073][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 442.362066][T18938] netlink: 'syz.4.3213': attribute type 1 has an invalid length. [ 442.370199][T18938] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3213'. [ 442.722934][T18925] lo speed is unknown, defaulting to 1000 [ 442.925103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 442.933311][ C1] lec:lec_tx_timeout: lec0 [ 442.939087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 442.953633][T18945] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 443.218034][T18960] netlink: 'syz.1.3219': attribute type 8 has an invalid length. [ 443.515706][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 444.004157][T18955] scsi_nl_rcv_msg: discarding partial skb [ 444.585826][T19004] bridge0: port 3(veth0_to_bridge) entered blocking state [ 444.656519][T19004] bridge0: port 3(veth0_to_bridge) entered disabled state [ 444.677869][T19004] veth0_to_bridge: entered allmulticast mode [ 444.728981][T19004] veth0_to_bridge: entered promiscuous mode [ 444.736894][T19004] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.759504][T19004] bridge0: port 3(veth0_to_bridge) entered blocking state [ 444.766882][T19004] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 444.871123][T19011] sock: sock_set_timeout: `syz.2.3227' (pid 19011) tries to set negative timeout [ 445.020905][T19014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 445.031648][T19022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'. [ 445.414017][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.425544][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.436468][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.444763][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.453133][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.607876][T19036] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 445.637785][T19036] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3234'. [ 445.684364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.697684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.710868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.723452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.735572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.736191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.748133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 445.760122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 445.772208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.965816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 447.973880][ C1] lec:lec_tx_timeout: lec0 [ 447.978498][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 448.120006][ T5843] Bluetooth: hci2: command tx timeout [ 449.875196][ C0] net_ratelimit: 18946 callbacks suppressed [ 449.875222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.875291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.881616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.893533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.905572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.917579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.929420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.941393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.953405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.965478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.262524][ T5843] Bluetooth: hci2: command tx timeout [ 451.104261][ C0] sched: DL replenish lagged too much [ 452.329626][ T5843] Bluetooth: hci2: command tx timeout [ 452.506106][T19043] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 452.993190][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.001287][ C1] lec:lec_tx_timeout: lec0 [ 453.019983][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.884970][ C0] net_ratelimit: 22635 callbacks suppressed [ 454.884996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.884993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.885388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.891289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.903402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.915387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.927294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.939314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.951386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.963205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.538268][ T5843] Bluetooth: hci2: command tx timeout [ 458.049010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 458.057192][ C1] lec:lec_tx_timeout: lec0 [ 458.075937][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.894912][ C1] net_ratelimit: 20047 callbacks suppressed [ 459.894936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.894994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.901688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.913239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.925078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.937133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.949489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.960969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.972887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.984740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.915637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms [ 463.923705][ C1] lec:lec_tx_timeout: lec0 [ 463.941795][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.905012][ C0] net_ratelimit: 20832 callbacks suppressed [ 464.905038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.905127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.911376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.923708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.935230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.947036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.959124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.971407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.983041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.995001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.966029][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 468.974106][ C1] lec:lec_tx_timeout: lec0 [ 468.993126][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 469.914851][ C1] net_ratelimit: 20782 callbacks suppressed [ 469.914873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:12:fc:ff:5a:e1, vlan:0) [ 469.915150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.921291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.933433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.945452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.957328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.969139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.981332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.994006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.005486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.782542][ C0] ------------[ cut here ]------------ [ 470.788459][ C0] ODEBUG: free active (active state 0) object: ffff888033ccc490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 470.801400][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: kworker/u8:33/6619 [ 470.812424][ C0] Modules linked in: [ 470.816764][ C0] CPU: 0 UID: 0 PID: 6619 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 470.826554][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.836700][ C0] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 470.842995][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 470.849401][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 470.869086][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 470.875247][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a48a0f0 RCX: 0000000000000000 [ 470.883247][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 470.891387][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888033ccc490 R09: ffffffff8bcf5000 [ 470.899510][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888033ccc600 [ 470.907623][ C0] R13: ffffffff901bee60 R14: ffff888033ccc000 R15: ffff888033ccc490 [ 470.915660][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 470.924715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.931365][ C0] CR2: 00007f77fa4e58e0 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 470.939399][ C0] Call Trace: [ 470.942707][ C0] [ 470.945597][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 470.951380][ C0] kfree+0x13a/0x630 [ 470.955339][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 470.960497][ C0] rose_timer_expiry+0x4cb/0x600 [ 470.965500][ C0] ? call_timer_fn+0x178/0x640 [ 470.970297][ C0] call_timer_fn+0x192/0x640 [ 470.974975][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 470.980573][ C0] ? call_timer_fn+0xd4/0x640 [ 470.985331][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 470.990513][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.995798][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 471.001389][ C0] __run_timer_base+0x652/0x8b0 [ 471.006413][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 471.011827][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.017803][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 471.022780][ C0] run_timer_softirq+0xb7/0x170 [ 471.027704][ C0] handle_softirqs+0x22a/0x870 [ 471.032504][ C0] ? do_softirq+0x76/0xd0 [ 471.036994][ C0] ? rds_tcp_tune+0x224/0x930 [ 471.041713][ C0] do_softirq+0x76/0xd0 [ 471.046016][ C0] [ 471.048985][ C0] [ 471.052026][ C0] __local_bh_enable_ip+0xf8/0x130 [ 471.057206][ C0] rds_tcp_tune+0x224/0x930 [ 471.061753][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 471.066843][ C0] ? __sock_create+0x86d/0x9d0 [ 471.071656][ C0] rds_tcp_conn_path_connect+0x2f9/0x930 [ 471.077394][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 471.083588][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 471.088833][ C0] rds_connect_worker+0x1d8/0x290 [ 471.093892][ C0] ? process_scheduled_works+0xa25/0x1830 [ 471.099695][ C0] process_scheduled_works+0xb02/0x1830 [ 471.105338][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.111354][ C0] ? assign_work+0x3d5/0x5e0 [ 471.116033][ C0] worker_thread+0xa50/0xfc0 [ 471.120810][ C0] kthread+0x388/0x470 [ 471.124978][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.130127][ C0] ? __pfx_kthread+0x10/0x10 [ 471.134755][ C0] ret_from_fork+0x51e/0xb90 [ 471.139422][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.144582][ C0] ? __switch_to+0xc7d/0x1450 [ 471.149347][ C0] ? __pfx_kthread+0x10/0x10 [ 471.153988][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.158946][ C0] [ 471.162084][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 471.169473][ C0] CPU: 0 UID: 0 PID: 6619 Comm: kworker/u8:33 Not tainted syzkaller #0 PREEMPT(full) [ 471.179045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.189234][ C0] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 471.195435][ C0] Call Trace: [ 471.198743][ C0] [ 471.201607][ C0] vpanic+0x56c/0xa60 [ 471.205621][ C0] ? __pfx__printk+0x10/0x10 [ 471.210256][ C0] ? __pfx_vpanic+0x10/0x10 [ 471.215049][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 471.220373][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 471.225606][ C0] panic+0xc5/0xd0 [ 471.229413][ C0] ? __pfx_panic+0x10/0x10 [ 471.233905][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 471.238990][ C0] __warn+0x315/0x4f0 [ 471.243003][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 471.248933][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 471.254684][ C0] __report_bug+0x29a/0x540 [ 471.259235][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 471.265092][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 471.270848][ C0] ? __pfx___report_bug+0x10/0x10 [ 471.275919][ C0] ? run_timer_softirq+0xb7/0x170 [ 471.281071][ C0] ? handle_softirqs+0x22a/0x870 [ 471.286040][ C0] ? do_softirq+0x76/0xd0 [ 471.290402][ C0] ? rds_tcp_tune+0x224/0x930 [ 471.295108][ C0] ? rds_tcp_conn_path_connect+0x2f9/0x930 [ 471.300942][ C0] ? rds_connect_worker+0x1d8/0x290 [ 471.306176][ C0] ? process_scheduled_works+0xb02/0x1830 [ 471.311944][ C0] ? worker_thread+0xa50/0xfc0 [ 471.316827][ C0] report_bug_entry+0x19a/0x290 [ 471.321721][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 471.327472][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 471.333221][ C0] handle_bug+0xce/0x200 [ 471.337576][ C0] exc_invalid_op+0x1a/0x50 [ 471.342107][ C0] asm_exc_invalid_op+0x1a/0x20 [ 471.347070][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 471.353440][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 471.373185][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246 [ 471.379307][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a48a0f0 RCX: 0000000000000000 [ 471.387407][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 471.395500][ C0] RBP: ffffffff8bcf3ce0 R08: ffff888033ccc490 R09: ffffffff8bcf5000 [ 471.403498][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff888033ccc600 [ 471.411597][ C0] R13: ffffffff901bee60 R14: ffff888033ccc000 R15: ffff888033ccc490 [ 471.419601][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 471.425021][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 471.430737][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 471.436439][ C0] kfree+0x13a/0x630 [ 471.440365][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 471.445520][ C0] rose_timer_expiry+0x4cb/0x600 [ 471.450667][ C0] ? call_timer_fn+0x178/0x640 [ 471.455464][ C0] call_timer_fn+0x192/0x640 [ 471.460081][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 471.465569][ C0] ? call_timer_fn+0xd4/0x640 [ 471.470282][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 471.475458][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.480696][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 471.486279][ C0] __run_timer_base+0x652/0x8b0 [ 471.491178][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 471.496599][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 471.502435][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 471.507410][ C0] run_timer_softirq+0xb7/0x170 [ 471.512294][ C0] handle_softirqs+0x22a/0x870 [ 471.517194][ C0] ? do_softirq+0x76/0xd0 [ 471.521581][ C0] ? rds_tcp_tune+0x224/0x930 [ 471.526310][ C0] do_softirq+0x76/0xd0 [ 471.530517][ C0] [ 471.533491][ C0] [ 471.536461][ C0] __local_bh_enable_ip+0xf8/0x130 [ 471.541615][ C0] rds_tcp_tune+0x224/0x930 [ 471.546248][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 471.551336][ C0] ? __sock_create+0x86d/0x9d0 [ 471.556157][ C0] rds_tcp_conn_path_connect+0x2f9/0x930 [ 471.561849][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 471.568129][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 471.573290][ C0] rds_connect_worker+0x1d8/0x290 [ 471.578356][ C0] ? process_scheduled_works+0xa25/0x1830 [ 471.584208][ C0] process_scheduled_works+0xb02/0x1830 [ 471.589867][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.595981][ C0] ? assign_work+0x3d5/0x5e0 [ 471.600613][ C0] worker_thread+0xa50/0xfc0 [ 471.605272][ C0] kthread+0x388/0x470 [ 471.609367][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.614504][ C0] ? __pfx_kthread+0x10/0x10 [ 471.619121][ C0] ret_from_fork+0x51e/0xb90 [ 471.623748][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.628894][ C0] ? __switch_to+0xc7d/0x1450 [ 471.633776][ C0] ? __pfx_kthread+0x10/0x10 [ 471.638392][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.643309][ C0] [ 471.646706][ C0] Kernel Offset: disabled [ 471.651058][ C0] Rebooting in 86400 seconds..