last executing test programs: 8.843579226s ago: executing program 4 (id=9228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x7, 0x100, 0x9b, 0xfffa, 0xe, 0x401]}}]}]}]}, 0x30}}, 0x2400c090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x884) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r9, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={0x46c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x239}], @NL80211_ATTR_CSA_IES={0x418, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x7fff, 0x8, 0x7, 0x2, 0x800, 0x4a5b, 0x81, 0x1]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf8, 0x3, "bc106d2ed88b0380c06bab34fd94d874c1b9c585c74ae05af3002d235e9967bc20cb56f6ca51322e102d9fc63b3878307e44442b1d3c7a6ee97f4295c6ba2c51bc2a1c0c896c22421abd7863927892015166f05daaf76f5bad7fc7d0ae046e34dc24b1769bb829d7442ea00a133b6a0ee6ab7a9ff471dc7cb7d3e129f0e904dea82cb748e2cef875eb2f5bfdb1968a197dd5fc800de8ab69e0c680dbb05fa043f1e9a9d9f8a3f5ed93efe303dd79c8fe20c367aac145f48ee27d23f966369c9b272dc87f47cbdc44f0cc68b39d6a9ddb340743c24597600b6f8c70a838ed9260f872dd8dc84c8da1bcc048b5b5ccbb4dd22ded60"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x57, 0x3, "6201a1c2e8b4e9405c75302dc305fccf38891ad1c0db54e2f7be058c1b26b8a5d891eb07daab3a4f84a58b2e5d5fa49d5b87889faf91d6cf92c7f5cdae5df75a0c85b7d236a23a172b97ec5c74951810990e46"}, @NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "ebdd3da4c91f13765f2ad3322d7062d41c2843d5715ee9d6db1e66b61f8ad13fc4fd6c1161b3f5e8950865ab95dfb1a46b64799dd5dc7ea3c0dc9e8596bd9bb9bd467c4baa465a68020fa9883b38a4e999916f"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x6, 0x96f7, 0x101]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xe12, 0xb, 0x6, 0x7fff]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x11b, 0x7f, [@random_vendor={0xdd, 0xf9, "62d60ab09ef1ead8d362b05cd800287b87725fb4b31c85ee376723a0d5cddaa6d71d5f40c5ff393a90eb9310551eac3f9019c3e246de3ecdbae96efa29f1dd5d1c5f41d0435efdc16e9ccc86f8bd9b41b8706af30ee262c817b243791aedeca3c4f4a8aa165d3f72c0db2554e49eacf49546190680cb9580afe33a7402a82e481f052715242f6760384efc7a49efd4ddb5c9a005a42f5d6e215d11aebd3b7d88459a3b7a27a6a7711ac271f7e2623576f77fd89dc155871532dc955b4355a146782cadbc36cac9acae97222ef7d6ece9a739277ab6edf21e8cc5ba0ac2a7f63f666121286b56e50770d2ecd8c5c7739cdbb21ce3ef448b9501"}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x1, 0x0, {0x100000000, 0x9, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x380000, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x19, 0x80, [@mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x10}, @supported_rates={0x1, 0x7, [{0x24}, {0x4, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x24}, {0x4}]}]}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcd}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4004011}, 0x4004) 8.035822667s ago: executing program 4 (id=9233): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000020000100000000000000fde4a000fe0a00000000000000c186a3f508001b004e"], 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}}, 0x4044800) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$x25(r5, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x40, 0x700, 0xf86, 0x2, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x28, 0xcc, 0x0, 0x1, [0x400, 0x0, 0x7, 0x4, 0x7, 0xaf, 0x6, 0xfffffff9, 0xfffffff9]}, @generic={0x83, 0xf, "c92c0ee71a877dbf8bf655d7bc"}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r7, 0x25, 0x10, @val=@perf_event={0x7}}, 0x18) 5.124655488s ago: executing program 4 (id=9238): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.840902209s ago: executing program 4 (id=9243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000003000000000000000091121600000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x800) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000380)={&(0x7f0000000340), 0x0, 0x10, 0x4, 0xfff}) 4.197392864s ago: executing program 1 (id=9248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@gettaction={0x98, 0x32, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x2c0, 0x228, 0x98, 0x2c0, 0x0, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x4], 0x1}}, @common=@ah={{0x30}, {[0x4, 0x401], 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 4.195686735s ago: executing program 4 (id=9251): r0 = socket(0x25, 0x5, 0xb4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) (async) setsockopt$inet_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000640)=@gcm_256={{0x304}, "55b2bfe456f65ac5", "94933eabd65daad540f97d075c35dc3d0c5423c36a5a29e09986c18918a9d481", "ea6eda2b", "a3df11c174fa26bb"}, 0x38) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000280)={'macvlan0\x00', 0x1, 0x1000}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r6) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x8014) 4.194937195s ago: executing program 1 (id=9252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x52, 0x3, "06d25749220d4f2b663bdebb5aeddae801835ca311604f76fdc0ac178c35cd56cb2290d0d93ac42df0dc18f7b448ab9a91a49a9dc60b3a8c259e3dee5dfaf035270482bbd8a3400cbfbdd6dea000"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x94}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r4, 0x0, 0x30, 0x0, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 3.7823586s ago: executing program 3 (id=9255): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x14}}}}], 0x20}, 0xe900) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = accept(r0, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x80) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000b80)={0x0, 0x80000000, 0x85, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001e80)={r6, 0x3, 0x0, [0x0, 0x10001, 0x1, 0x6, 0x7ff], [0x8, 0x5, 0x2, 0x8, 0x4, 0x2d, 0xfffffffffffffffb, 0x6e, 0x8, 0x0, 0x0, 0x101, 0x7, 0x6, 0xfffffffffffff22c, 0xc3, 0x8, 0x0, 0xfffffffffffffffa, 0x2, 0x1, 0x4, 0x2, 0x5, 0x700, 0x3, 0x0, 0x9, 0x9, 0x6, 0x1, 0x0, 0x1, 0x5, 0x0, 0x6, 0xa, 0x1, 0x4, 0xf05f, 0x8, 0xffffffffffffffff, 0x2, 0x6, 0x9f1, 0x8, 0x4, 0x7, 0x6, 0x7ad, 0x3, 0xa, 0x5, 0x0, 0x201, 0x60, 0x2, 0xffffffffffff0001, 0x80000000, 0xfaa, 0x0, 0x6, 0x64d9e124, 0x1, 0x2, 0xe, 0x8, 0x7fffffffffffffff, 0x5, 0xffffffff, 0xffffffffffffffff, 0x8, 0x10001, 0x9, 0x7, 0x6, 0x6, 0x8000000000000000, 0x6, 0x7, 0x6, 0x5, 0x63, 0x8001, 0x80000001, 0x5, 0xfffffffffffff800, 0x3, 0x400, 0x405e, 0xffffffffffffff50, 0x7, 0xef, 0x2, 0x5, 0x9, 0x8, 0xb, 0x6, 0x2, 0x10000, 0xffffffffffffa98d, 0x7, 0x7, 0x3, 0x82fa, 0x8, 0xfffffffffffffff7, 0x7, 0x2, 0x6, 0x1, 0xfffffffffffffffa, 0x4, 0x50000000000000, 0x8, 0x2, 0x5, 0x8001, 0x8]}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x8}, 0xc) getsockopt(r0, 0x3, 0x9, &(0x7f0000000400)=""/70, &(0x7f00000004c0)=0x46) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendfile(r9, r8, 0x0, 0xf03a0005) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000006000000000000000200000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000570c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182b0000", @ANYRES32=0x1, @ANYBLOB="c2152fbb79a2c5b576f4a3bb17000000f5fc5a7900001ca947b60884c4ee00000000000000cfede0d332311bfa174fd9a02efd788e7f6aef386a0e978ce8272c4d07a0ccc39706cd8053ec3cc0e0a95913803df57675a6ab3884589f94c37d70a15d4349f18f934bdee3589b2ac8dabac86a933417ce34dcd35be24c8c16d446fe65a0fe10074c8106caad590000000000"], &(0x7f0000000480)='GPL\x00', 0xa5a6, 0x89, &(0x7f0000000540)=""/137, 0x41100, 0xe, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x2, 0x5, 0x3, 0x5}, {0x4, 0x3, 0x7, 0x1}, {0x4, 0x4, 0x5, 0x5}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) 3.612874821s ago: executing program 2 (id=9259): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x800, 0x5d04) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000008008"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x2, 0x8, {}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x2, 0x0, 0x0, "3da042368437c311"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(r2, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x709d25, 0x100003, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff3, 0x5}, {0xfff2, 0xe}}}, 0x24}}, 0x800) 2.784354347s ago: executing program 2 (id=9263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x15, 0xa, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r4, 0x8000) listen(r3, 0x5) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000180)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) (async) r7 = socket(0x21, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xffe0, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 2.690903201s ago: executing program 3 (id=9265): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000440), &(0x7f0000000480)=@udp=r1}, 0x20) close(0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = epoll_create1(0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000002c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0x2005, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5a, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) 2.576975448s ago: executing program 4 (id=9266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1, 0x0, 0x3, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "44478438da5cbd75"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @remote}]}, 0x54}}, 0x0) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 2.496368753s ago: executing program 2 (id=9267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x9c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r5, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) socket$inet6(0xa, 0x80000, 0x8) 1.61085226s ago: executing program 0 (id=9271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000104}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}}, 0x0) 1.165083628s ago: executing program 0 (id=9272): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000731143000000000085100000020000004cdcbc954b58ec5b7d3fc29a40b7000000000000009500c200000000009500001200000500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000731143000000000085100000020000004cdcbc954b58ec5b7d3fc29a40b7000000000000009500c200000000009500001200000500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) 1.077052348s ago: executing program 2 (id=9273): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2ac, 0x30, 0x20, 0x70bd29, 0x25dfdbfc, {0x15}, [@generic="9c557ad4927c24a851e7ba102a241f0874f7bce16e5e6e55cd552a734633904352f2b8260a3f5ee57855c3ea727ff5db609aca5c84db9e7c1a2b8cafc4", @nested={0x1bf, 0x11e, 0x0, 0x1, [@generic="173f4135ee29111197fb1fa68b44c0dcc81d8be6550e5b1556e5e154325010bd602ad8a12fa78a526b51f3c00427195ec2a5c2f3020709c788f802e75f3ede0f27c4fbf00ca5a4f8c9dd1c230a204a6c3b5a4d31546d0d7dd9a2b61e7ae4ca21392a1f0b8a0cfe4f9a05116a183dad12be4968425933aa39fc7d195c01db161b7fad8ea1e25bab9d7071fc1f1f5faca8bfffa5289d38f5eaec710eba3571", @typed={0x14, 0x83, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x6c}, @generic="59f878388bdc5f20787197da3a71663a25875b70d99cb0f7dce085e8d0e4278550e50ff8a21b08ccc64845043df45a096e02c44cdc241a64977c62dff92dad8c6ceae4480ffe3f628c580cea03a8723ee254f6ca1b4dcbeb6f6a9b230cb6f814a79d3cbaf8949da7a8fc1169137e07274ee5cb99f781e5d068e95a5dd22c93ebef1e61719b41e495f4d52108ae61daacceb9f1aef5af4bfdc78527110398a657d9fb3c2afcde05a436a56bfeb5bf9e2eb07dc6a1cf814a2ac15a6e42f9af6f3d711da3a3c7ebc9a3fe8cbaff1677ef9689fd52e56c6fe4992cb68a535c74cbef18920e9a747aa49c84", @typed={0x8, 0x60, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x103}]}, @generic="e967471d99ebb25180745dba887de814dc0b2498f2ba93f64b0f1358534dec73c285265efb17cd09b74a89d619f6ea674d7935b03b77cc71191a314e8eaacb0da531ece6d396ac48c9c064c229d40b4ee84b9d73cec2be", @nested={0x41, 0xea, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="ff92248f9e236d8c56ddb75daeeef3cfb06c2d42ead0d07393c2abff45bfcc7650b039b445fdc279f6d50e0d0da28a7829", @typed={0x8, 0xa8, 0x0, 0x0, @uid=r2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24048801}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8891) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.050238161s ago: executing program 1 (id=9274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0xc880}, 0x4c040) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 1.017270829s ago: executing program 0 (id=9275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x6, 0x4, 0x3) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100000a0000050002000600000008000500050000002c0004800800010000000004200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 968.868957ms ago: executing program 3 (id=9276): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x340060c1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000000)=0x3f9, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) 822.777676ms ago: executing program 3 (id=9277): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) (async) shutdown(r0, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="102a05f4ffffff000c001a8008000280040001"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) 813.220891ms ago: executing program 0 (id=9278): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/39, 0x27}], 0x1}, 0x9}], 0x2, 0x40010040, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc30e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) readv(r0, &(0x7f0000003900)=[{&(0x7f0000003580)=""/50, 0x32}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 684.973273ms ago: executing program 0 (id=9279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffea4, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x9, 0x7, 0xc, @loopback, @local, 0x1, 0x1, 0x3ff, 0x6}}) 500.383673ms ago: executing program 2 (id=9280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @llc={0x1a, 0x207, 0x40, 0x9, 0x80, 0x0, @broadcast}, @generic={0xf, "76d77065e5acefc5efddc8faa23d"}, @hci={0x1f, 0x2, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='veth1\x00', 0x40, 0x6, 0xba}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 449.6488ms ago: executing program 1 (id=9281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7ff}}, [0x58e4, 0x9, 0x101, 0x489, 0x6, 0x6, 0x1, 0x92, 0x9, 0xd68, 0x5, 0x8000000000000, 0x2, 0x4, 0x1]}, &(0x7f0000000240)=0x100) getpeername$inet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 364.827176ms ago: executing program 3 (id=9282): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="60000000100001000100000000000000000000000000000000000000000000000900030063616efdffffff00340012800800010063616e00280002802400090020a17de9d3a3ff5f0a7b0e0ccd71a60700"/96, 0x60) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000005c0)={r5, &(0x7f0000000300)='GPL\x00', 0x200000, &(0x7f0000000340)={@_ha_fsid={[0x401, 0x3]}, {0x10, 0x2, 0x4}}, 0xda, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x8}) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000b00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1cc, 0x15, 0x8, 0x70bd2a, 0x25dfdbff, {0x2b, 0xd}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "54c55bacd4db2b0a50c10a4ef6e2a28978543f580d4c331ce323fe0c18c3413f83cf57e6cecab4f34eb711e8ef2f18d8c7582ffcaa8f358595162fe6f976c2117be1a08b98b68d5e0d5be7c385c15462994bec88a510cf6150501083af16322c28025359f2effc3dce1c82f68edaa41b70a84b698158674c03845fccf048b2028358fe8ab87bd7391c67001634888e220862464e4e9f204f04f0456c4445f6fd1af1595bbfd00ea2396203498d3ecf1d1d6ca4643542ce66dd2593292b04f94233f7c48e39e631dc646e6d065878788627a85090b02f2d59bc710edf153b3deb373f69c193ede8d16caecc9394b8993f904d910a348d997b"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "0c076749d1f4a0bd69daec79dc618bde4842f1e870280ce2b8dc193f4202b28b04e04b6fb1aca041fe291b7f4b21388ec7380cab116dee0e5883adfbdf315fcf5dc8367fa9dfb03a19250014b5e6d07d2a16f64dbe40ce94a378879278b291751eeea76efb6645fa654faba8f2227788843b4443fa2facaa291d48bcfd43e9dd5874f8ce2cceb60883e5985244f98a72a7ae2a77930c7dc95ac7b513e073faa2db1e8ad4035d8e7678e58222083fda0d7674f365edb1"}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$netlink(0x10, 0x3, 0x4) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000200)=[{0x2, 0x5, 0x3, {0x2, 0x5}, 0x8000000000000001, 0xbbab}], 0x1, 0x40, 0xdf}, {&(0x7f0000000280)=[{0x8000, 0x9}], 0x1, 0x10, 0x81, 0x3}, {&(0x7f00000002c0)=[0x9, 0x0], 0x2, 0x8, 0x6, 0xfffffffffffffffe}, {&(0x7f00000003c0)=[{0xb, 0xfffffffffffffffa, 0x7ff, 0xdd, 0x800}, {0x6, 0x1, 0x9, 0x101, 0x3}, {0x0, 0xd6, 0x7, 0x7, 0x2}, {0xa7, 0x1, 0x7, 0x9, 0x464}], 0x4, 0x28, 0xa87e, 0xd}, {&(0x7f0000000480)=[0x5, 0xfffffffffffffffd], 0x2, 0x8, 0x759, 0x9}}) 361.026256ms ago: executing program 2 (id=9283): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) (async, rerun: 64) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="2e00330020180600080211000000080211000001"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) (async, rerun: 64) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000044000000060a010400000000000000008500100008000b40000000001c0004801800018008000100647570000c00028008000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800044000000000080002400000000d05100300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf252e00000008000300", @ANYRES32=r0, @ANYBLOB="050034000200000008004a000bac0f00"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 289.135321ms ago: executing program 1 (id=9284): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d0000000001000000000000000000000000000000005f10"], 0x0, 0x39}, 0x20) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@null, 0xb, 'batadv0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r2}, 0x8) 69.360501ms ago: executing program 3 (id=9285): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)="dcfb434ac23c173d3871b915d387120668e9fec610fe03b97fbfdc5cdda1ad79ee0cb2971c18c34264fce45434f0cf9dda7214cd2ce3e6b297c1d04bcc58f44f4b3bd6c229c33e981d94d95488bdbbda0fbb6c4486616c63fb4c1f1a7cc0124b611d07f97d35442500f0e5200afcb897e99f5295eced4245", 0x78}], 0x1}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x7101}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f00000001c0)="9f9553") r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x3, {0x2, 0x0, 0x1}}, 0x18) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) sendmmsg$alg(r8, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000020000d800000000010000b3f569a35c0d000000000000fdff00"], &(0x7f00000005c0)=""/96, 0x2e, 0x60, 0x1}, 0x1e) syz_emit_ethernet(0x1c3, &(0x7f00000006c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @dccp={{0x31, 0x4, 0x3, 0x9, 0x1b5, 0x66, 0x0, 0x40, 0x21, 0x0, @private=0xa010101, @empty, {[@rr={0x7, 0xb, 0x76, [@multicast1, @local]}, @timestamp={0x44, 0x24, 0xb3, 0x0, 0x3, [0x86, 0x11b, 0x38d0, 0x2, 0x3ff, 0x5, 0x1, 0x7]}, @lsrr={0x83, 0x7, 0xcf, [@local]}, @timestamp={0x44, 0x10, 0x72, 0x0, 0x8, [0x3, 0x5, 0x9]}, @cipso={0x86, 0x11, 0x1, [{0x0, 0xb, "b11945bf9781cee298"}]}, @rr={0x7, 0x13, 0x8a, [@multicast1, @remote, @loopback, @empty]}, @rr={0x7, 0x27, 0x7c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast, @multicast1, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp={0x44, 0x10, 0xbe, 0x0, 0xc, [0x3e3f, 0x1, 0xf3ab]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "6e82e125"}]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x6, "cd0472", 0x0, "ab0ad7"}, "64aef62f2fc9fc02f321c45089f4bf3e7d266c866051ff363ccf5d06a3e5125a00ab9db5a557e5d23ebf77fd39c435f54a012b978929abe30e90d167b60e5ce218d2b27f51b82b982280b2b9621ab104e8b7c563d675ce8c4532eed93be72344e0eaef05cdb5acafa2862c25c73bcf8651da14c21e0a2319dcec3fa97fe901d9cf1e09e9053afd80be404bdd98feba45e07b5bd1c07a33cf123265c358df85ccbccd23a7d32963baa01dadeb8a8b621d82362c656bcf618b5c7ef9b5603a32f0726545808f8dcc152e7c8c9da04d38fb0a942154e7b786335af5a9a8836414d158"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getqdisc={0x0, 0x26, 0x4, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0xd}, {0x5, 0xa}, {0x6, 0x6}}, [{}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 17.230529ms ago: executing program 0 (id=9286): syz_emit_ethernet(0x3a, &(0x7f0000000480)={@link_local, @random="50a245d5cde0", @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f148755"], 0x1c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f0000000000)='\xaa\xaa\xaa\xaa\xaa', 0x10000, &(0x7f0000000280)={@_ha_fsid={[0x9d, 0x3]}, {0x40, 0x0, 0x2e, 0x7fffffff}}, 0x1007be59, &(0x7f0000000300), &(0x7f0000000340)=0x240}, {[0x2d, 0x71, 0x6, 0x26bf]}, 0x81, 0x9, &(0x7f0000000380)=""/9}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000440)) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aed000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100002800c000140000000000000000814000000110001"], 0xa4}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@empty, @remote, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x1, 0x0, 0x2}}, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x14, 0x2, 0x0, 0x0, "05c6222ec1ab45018df2d36bc2dee464b86ecd253a12ebcded6e7d20ae48a292b983f4744cf0bf42cfc9ba88f38db5a9f5a0ba3ae6efb1196e1a9384211eed6e"}}}}, &(0x7f0000000240)={0x0, 0x3, [0x67c, 0x295, 0xdd, 0xa93]}) 0s ago: executing program 1 (id=9287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x51) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0xf9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xf266, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xe, &(0x7f0000000200)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60a}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1a4}, @jmp={0x5, 0x0, 0xb, 0x9, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797afb54062fa87e2acf67ad6cf8abc232000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x40000d2) kernel console output (not intermixed with test programs): 495989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.496253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.496527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.496791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.497077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.497350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.497594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.497882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.498140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1031.698345][ T5808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1032.511015][ T5826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8224'. [ 1032.621196][ T5826] bond0: (slave bond_slave_0): Releasing backup interface [ 1032.824724][ T5826] bond_slave_0: entered promiscuous mode [ 1032.824768][ T5826] bond_slave_0: entered allmulticast mode [ 1034.005915][ T5852] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8229'. [ 1035.887661][ T5886] can: request_module (can-proto-5) failed. [ 1035.959864][ T5886] can: request_module (can-proto-5) failed. [ 1036.503721][ T5849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.505459][ C1] net_ratelimit: 21409 callbacks suppressed [ 1036.505499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.505757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.505987][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.506232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.506451][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.506657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.506873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.507117][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.507331][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.507544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1037.786137][ T5918] netlink: 'syz.1.8244': attribute type 12 has an invalid length. [ 1038.095820][ T5918] bond6: option primary_reselect: invalid value (255) [ 1038.139631][ T5918] bond6 (unregistering): Released all slaves [ 1038.393866][ T5926] syzkaller0: entered promiscuous mode [ 1038.393936][ T5926] syzkaller0: entered allmulticast mode [ 1039.014245][ T5942] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8248'. [ 1039.971855][ T5964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1040.111642][ T5966] syz_tun: entered promiscuous mode [ 1040.675144][ T5974] x_tables: duplicate entry at hook 2 [ 1040.694701][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8254'. [ 1041.372199][ T5994] netlink: 200 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1041.515523][ C1] net_ratelimit: 19747 callbacks suppressed [ 1041.515584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.515832][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.516050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.516623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.516887][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.517121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.517335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.517569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.517804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.518013][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1041.903737][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1041.903780][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1042.010305][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1042.028844][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1042.524734][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8267'. [ 1042.566471][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8265'. [ 1042.567240][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8265'. [ 1042.620131][ T6017] netlink: 'syz.2.8266': attribute type 29 has an invalid length. [ 1042.696118][ T1390] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.708249][ T1390] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.708319][ T1390] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.708379][ T1390] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1045.308972][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1045.350404][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8287'. [ 1045.438002][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 1045.550833][ T6091] IPv6: NLM_F_CREATE should be specified when creating new route [ 1045.550974][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8288'. [ 1045.651808][ T6095] netlink: 'syz.2.8289': attribute type 1 has an invalid length. [ 1045.651852][ T6095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8289'. [ 1046.302473][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8291'. [ 1046.525470][ C1] net_ratelimit: 20338 callbacks suppressed [ 1046.525528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.525802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.526062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.526441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.526703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.526977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.527257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.527509][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.527764][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1046.528024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.492069][ T6157] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001 [ 1048.601826][ T6157] sctp: [Deprecated]: syz.0.8301 (pid 6157) Use of int in max_burst socket option. [ 1048.601826][ T6157] Use struct sctp_assoc_value instead [ 1048.932536][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8303'. [ 1049.849831][ T6188] sctp: [Deprecated]: syz.1.8308 (pid 6188) Use of int in max_burst socket option deprecated. [ 1049.849831][ T6188] Use struct sctp_assoc_value instead [ 1049.891195][ T6182] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1049.977779][ T6182] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1050.072612][ T6180] tipc: New replicast peer: 255.255.255.255 [ 1050.081987][ T6180] tipc: Enabled bearer , priority 10 [ 1050.224801][ T6195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8311'. [ 1050.932132][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1050.943626][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8314'. [ 1051.122835][ T6216] netlink: 'syz.4.8316': attribute type 23 has an invalid length. [ 1051.197430][T30435] tipc: Node number set to 816761796 [ 1051.535617][ C1] net_ratelimit: 19223 callbacks suppressed [ 1051.535672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.535900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.536144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.536338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.536561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.536767][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.537009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.537218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.537491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1051.537698][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1052.038284][ T6229] gtp1: entered promiscuous mode [ 1052.038333][ T6229] gtp1: entered allmulticast mode [ 1052.161435][ T6229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8319'. [ 1053.260865][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8329'. [ 1053.282240][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8329'. [ 1053.294264][ T6272] netlink: 'syz.2.8329': attribute type 14 has an invalid length. [ 1053.294289][ T6272] netlink: 'syz.2.8329': attribute type 13 has an invalid length. [ 1053.775639][ T6279] netlink: 'syz.0.8330': attribute type 10 has an invalid length. [ 1056.244932][ T6279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.269686][ T6279] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 1056.383122][ T6304] syzkaller0: entered promiscuous mode [ 1056.383165][ T6304] syzkaller0: entered allmulticast mode [ 1056.454016][ T6310] sctp: [Deprecated]: syz.3.8336 (pid 6310) Use of int in maxseg socket option. [ 1056.454016][ T6310] Use struct sctp_assoc_value instead [ 1056.487081][ T6310] syzkaller0: entered promiscuous mode [ 1056.494315][ T6310] syzkaller0: entered allmulticast mode [ 1056.545495][ C1] net_ratelimit: 22028 callbacks suppressed [ 1056.545548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.545893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.546201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.546471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.546811][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.547088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.547360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.547653][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.549282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1056.549557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.226557][ T6319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1057.754775][ T6319] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1061.194976][ T6409] syzkaller1: entered promiscuous mode [ 1061.202626][ T6409] syzkaller1: entered allmulticast mode [ 1061.555442][ C1] net_ratelimit: 20647 callbacks suppressed [ 1061.555493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.555850][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.556129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.556397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.556680][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.556919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.557134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.557384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.557636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.558031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1061.803551][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8353'. [ 1062.309459][ T6431] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1062.581083][ T6437] netlink: 'syz.3.8358': attribute type 32 has an invalid length. [ 1063.039682][ T6451] netlink: 'syz.4.8360': attribute type 2 has an invalid length. [ 1063.070128][ T6454] netlink: 'syz.3.8362': attribute type 16 has an invalid length. [ 1063.082272][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8362'. [ 1063.488263][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1063.662077][ T6449] netlink: 'syz.3.8362': attribute type 2 has an invalid length. [ 1064.627697][ T6479] rdma_op ffff888076e85238 conn xmit_rdma 0000000000000000 [ 1065.396874][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8376'. [ 1065.510619][ T6499] xt_nfacct: accounting object `syz0' does not exist [ 1065.861032][ T6502] netlink: 'syz.1.8377': attribute type 1 has an invalid length. [ 1065.975781][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8377'. [ 1066.073036][ T6505] netlink: 'syz.1.8377': attribute type 1 has an invalid length. [ 1066.565563][ C1] net_ratelimit: 19589 callbacks suppressed [ 1066.565613][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.565837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.566036][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.566282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.566506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.566700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.566900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.567104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.567324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1066.567523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1067.241466][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8380'. [ 1067.501444][ T6540] nbd: socks must be embedded in a SOCK_ITEM attr [ 1069.082274][ T6576] netlink: 'syz.3.8389': attribute type 12 has an invalid length. [ 1069.606249][ T6592] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:0 [ 1070.130269][ T6595] netlink: 'syz.2.8392': attribute type 2 has an invalid length. [ 1071.575398][ C1] net_ratelimit: 20743 callbacks suppressed [ 1071.575479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.575750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.576010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.576290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.576552][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.576807][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.577213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.577515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.577801][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1071.578129][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1072.192160][ T6630] xt_hashlimit: size too large, truncated to 1048576 [ 1072.495191][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8404'. [ 1072.690052][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8403'. [ 1072.939386][ T6648] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1072.970939][ T6650] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1073.573817][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1074.278200][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8415'. [ 1074.375061][ T6682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8415'. [ 1074.447686][ T6690] x_tables: unsorted underflow at hook 3 [ 1074.554446][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1074.554692][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1074.554906][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1074.555081][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1074.555269][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8417'. [ 1074.657977][ T6693] tipc: Started in network mode [ 1074.658028][ T6693] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1074.658201][ T6693] tipc: Enabled bearer , priority 10 [ 1074.761438][ T6697] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1075.023415][ T6705] syzkaller0: entered promiscuous mode [ 1075.023459][ T6705] syzkaller0: entered allmulticast mode [ 1075.773156][ T6732] lo: entered allmulticast mode [ 1075.841197][T17079] tipc: Node number set to 10136234 [ 1076.585545][ C1] net_ratelimit: 20755 callbacks suppressed [ 1076.585604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.585810][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.586047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.586262][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.586479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.586687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.586914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.587121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.587328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1076.587541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1077.100539][ T6760] IPv6: Can't replace route, no match found [ 1078.511007][ T6788] __nla_validate_parse: 50 callbacks suppressed [ 1078.519007][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8439'. [ 1078.535793][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8439'. [ 1078.551525][ T6792] netlink: 'syz.1.8441': attribute type 49 has an invalid length. [ 1078.623540][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8439'. [ 1078.814858][ T6790] h: entered promiscuous mode [ 1079.287803][ T6814] netlink: 'syz.0.8447': attribute type 12 has an invalid length. [ 1079.812722][ T6823] netlink: 'syz.0.8451': attribute type 1 has an invalid length. [ 1079.961667][ T6823] bond4: entered promiscuous mode [ 1079.971638][ T6823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1080.054307][ T6823] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1080.349161][ T6823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1080.360500][ T6823] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1080.378572][ T6823] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1080.418426][ T6823] bond4: (slave xfrm1): making interface the new active one [ 1080.427486][ T6823] xfrm1: entered promiscuous mode [ 1080.445958][ T6823] xfrm1: left promiscuous mode [ 1080.725056][ T1365] batman_adv: batadv0: Interface deactivated: gretap0 [ 1081.494221][ T6860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8457'. [ 1081.595543][ C1] net_ratelimit: 20201 callbacks suppressed [ 1081.595595][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.595902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.596172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.596448][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.596756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.597024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.597281][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.597538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.597837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.598117][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.845983][ T5614] Bluetooth: hci3: command 0x0405 tx timeout [ 1081.901689][ T1365] batman_adv: batadv0: Removing interface: gretap0 [ 1082.130337][ T1365] bond3 (unregistering): (slave bridge3): Releasing active interface [ 1082.222044][ T1365]  (unregistering): Released all slaves [ 1082.239027][ T1365] bond1 (unregistering): Released all slaves [ 1082.266735][ T1365] bond2 (unregistering): (slave veth9): Releasing active interface [ 1082.290760][ T1365] bond2 (unregistering): Released all slaves [ 1082.328185][ T1365] bond3 (unregistering): Released all slaves [ 1082.350699][ T1365] bond0 (unregistering): Released all slaves [ 1082.383173][ T1365] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1082.418731][ T1365] bond4 (unregistering): Released all slaves [ 1082.820805][ T1365] : left promiscuous mode [ 1083.011325][ T6863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8459'. [ 1083.161550][ T1365] tipc: Left network mode [ 1083.324925][ T6877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8461'. [ 1083.352960][ T6867] netlink: 'syz.4.8460': attribute type 2 has an invalid length. [ 1083.368595][ T6876] netlink: 'syz.2.8462': attribute type 12 has an invalid length. [ 1083.532522][ T6891] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1083.934872][ T6897] netlink: 'syz.3.8467': attribute type 9 has an invalid length. [ 1084.040656][ T6904] xt_esp: unknown flags DD [ 1084.473680][ T1365] batman_adv: batadv0: Removing interface: wlan1 [ 1084.605842][ T6911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8471'. [ 1084.840312][ T6903] syzkaller0: entered promiscuous mode [ 1084.846954][ T6903] syzkaller0: entered allmulticast mode [ 1084.929730][ T6924] netlink: 'syz.3.8475': attribute type 32 has an invalid length. [ 1084.929777][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1085.052284][ T6925] netlink: 'syz.3.8475': attribute type 32 has an invalid length. [ 1085.052322][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8475'. [ 1085.304503][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1085.318929][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1085.319010][ T6937] netlink: 'syz.4.8476': attribute type 7 has an invalid length. [ 1085.319039][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8476'. [ 1085.352974][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8478'. [ 1086.610295][ C1] net_ratelimit: 22074 callbacks suppressed [ 1086.610342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.610641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.610902][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.611147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.611408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.611689][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.611944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.612235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.612510][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1086.612775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.637050][ C1] net_ratelimit: 24383 callbacks suppressed [ 1091.637134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.637459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.637648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.637858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.638063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.638284][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.638490][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.638703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.638947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1091.639164][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.478508][ T6924] bond3: option coupled_control: invalid value (192) [ 1095.524393][ T6924] bond3 (unregistering): Released all slaves [ 1095.591307][ T6925] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1095.821139][ T6941] bond11: entered promiscuous mode [ 1095.842450][ T6941] bond11: entered allmulticast mode [ 1095.931590][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8479'. [ 1096.648530][ C1] net_ratelimit: 26330 callbacks suppressed [ 1096.648607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.648796][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.648971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.649175][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.649353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.649566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.649762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.649964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.650192][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.650378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1096.950970][ T6963] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1096.959943][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8479'. [ 1097.028036][ T6968] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1097.028139][ T6968] gretap2: entered promiscuous mode [ 1097.028174][ T6968] gretap2: entered allmulticast mode [ 1098.023025][ T1365] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1098.267954][ T1365] batman_adv: batadv0: Removing interface: ipvlan2 [ 1098.974693][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8494'. [ 1099.140382][ T1365] veth1_vlan: left allmulticast mode [ 1099.152774][ T1365] veth1_macvtap: left promiscuous mode [ 1099.152833][ T1365] veth0_macvtap: left promiscuous mode [ 1099.153009][ T1365] veth1_vlan: left promiscuous mode [ 1099.153082][ T1365] veth0_vlan: left promiscuous mode [ 1100.490303][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1100.499515][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1100.500221][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 1101.519251][ T7052] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8500'. [ 1101.611256][ T7053] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8499'. [ 1101.622583][ T7054] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8499'. [ 1101.655454][ C1] net_ratelimit: 20492 callbacks suppressed [ 1101.655520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.655778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.656604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.656920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.657157][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.657394][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.657632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.657881][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.658640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1101.658936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1102.439809][ T7064] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8502'. [ 1102.559176][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8504'. [ 1102.793480][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1102.923438][ T1365] IPVS: stop unused estimator thread 0... [ 1103.750213][ T7085] netlink: 'syz.1.8510': attribute type 83 has an invalid length. [ 1103.784256][ T7087] netlink: 'syz.2.8511': attribute type 39 has an invalid length. [ 1103.800839][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8512'. [ 1105.489071][ T7098] vlan3: entered allmulticast mode [ 1105.489117][ T7098] bond0: entered allmulticast mode [ 1105.489145][ T7098] batadv1: entered allmulticast mode [ 1106.069562][ T7120] netlink: 'syz.1.8517': attribute type 21 has an invalid length. [ 1106.203758][ T7120] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8517'. [ 1106.560070][ T7130] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8523'. [ 1106.665545][ C1] net_ratelimit: 23342 callbacks suppressed [ 1106.665635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.665846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.666041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.666235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.666435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.666654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.666856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.667052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.667254][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1106.667466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1107.124761][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1108.023912][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1108.048098][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1108.075017][ T7167] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1108.099220][ T7168] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8532'. [ 1110.930786][ T7223] Bluetooth: hci0: unsupported parameter 5134 [ 1110.930834][ T7223] Bluetooth: hci0: unsupported parameter 8192 [ 1110.930864][ T7223] Bluetooth: hci0: unsupported parameter 5134 [ 1110.930879][ T7223] Bluetooth: hci0: unsupported parameter 8192 [ 1111.272405][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8545'. [ 1111.338417][ T7211] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8542'. [ 1111.389078][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8542'. [ 1111.510642][ T7214] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1111.625163][ T7239] netlink: 'syz.3.8548': attribute type 21 has an invalid length. [ 1111.675479][ C1] net_ratelimit: 20670 callbacks suppressed [ 1111.675529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.675765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.676010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.676248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.676541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.676783][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.677031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.677277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.677538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.677781][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1111.930709][ T7239] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1112.022824][ T7239] bond3 (unregistering): Released all slaves [ 1112.075777][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 1112.115014][ T7247] netlink: 'syz.0.8549': attribute type 10 has an invalid length. [ 1112.523607][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8550'. [ 1112.928106][ T7268] veth1_to_bond: entered allmulticast mode [ 1112.978090][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8555'. [ 1113.144163][ T7266] veth1_to_bond: left allmulticast mode [ 1113.590055][ T7279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8558'. [ 1114.945699][ T7308] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1114.945746][ T7308] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8568'. [ 1115.620614][ T7318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1115.947418][ T7327] netlink: 'syz.4.8574': attribute type 83 has an invalid length. [ 1116.453944][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1116.641224][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8579'. [ 1116.685515][ C1] net_ratelimit: 19760 callbacks suppressed [ 1116.685562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.685849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.686127][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.686419][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.686703][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.686989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.687273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.687551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.688660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1116.688999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1117.847842][ T7376] netlink: 'syz.1.8586': attribute type 1 has an invalid length. [ 1117.847912][ T7376] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1117.847956][ T7376] netlink: 'syz.1.8586': attribute type 1 has an invalid length. [ 1117.925883][ T7383] netlink: 'syz.1.8586': attribute type 1 has an invalid length. [ 1117.925970][ T7383] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8586'. [ 1117.926015][ T7383] netlink: 'syz.1.8586': attribute type 1 has an invalid length. [ 1118.111437][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.111479][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.251166][ T7380] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1118.264382][ T7377] xfrm0: Caught tx_queue_len zero misconfig [ 1118.549313][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.549392][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.549565][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.549583][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.549722][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.549739][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.549876][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.549915][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.590824][ T7385] netlink: 'syz.0.8587': attribute type 4 has an invalid length. [ 1118.590848][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.591051][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.591199][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1118.849068][ C0] Unknown status report in ack skb [ 1118.914561][ T7402] gretap0: entered promiscuous mode [ 1121.695396][ C1] net_ratelimit: 19486 callbacks suppressed [ 1121.695458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.695723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.696024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.696312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.696592][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.696829][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.697302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.697835][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.698135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1121.698384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1123.062731][ T7494] __nla_validate_parse: 6 callbacks suppressed [ 1123.062795][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8608'. [ 1123.124944][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8609'. [ 1123.140007][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8609'. [ 1123.294273][ T7496] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1123.501474][ T7500] macvlan2: entered promiscuous mode [ 1123.513275][ T7500] macvlan2: entered allmulticast mode [ 1123.561816][ T7500] bond12: entered allmulticast mode [ 1123.561915][ T7500] bond12: entered promiscuous mode [ 1123.612634][ T7500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1123.792698][ T7500] team0: Port device macvlan2 added [ 1123.912328][ T7501] macvlan3: entered promiscuous mode [ 1123.933973][ T7501] macvlan3: entered allmulticast mode [ 1123.951234][ T7501] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1124.009475][ T7501] team0: Port device macvlan3 added [ 1124.236960][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1124.269226][ T7524] IPv6: NLM_F_CREATE should be specified when creating new route [ 1124.269376][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1124.697297][ T7538] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1124.840683][ T7538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1125.182566][ T7530] veth5: entered allmulticast mode [ 1125.607011][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8622'. [ 1125.808513][ T7563] validate_nla: 3 callbacks suppressed [ 1125.808561][ T7563] netlink: 'syz.1.8623': attribute type 10 has an invalid length. [ 1125.896693][ T7563] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 1125.896959][ T7563] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 1126.373656][ T7573] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1126.705488][ C1] net_ratelimit: 18792 callbacks suppressed [ 1126.705543][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.705835][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.706101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.706386][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.706667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.706986][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.707255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.707534][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.707816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1126.708078][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1127.071682][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8628'. [ 1129.414268][ T7626] tunl0: Caught tx_queue_len zero misconfig [ 1129.522829][ T7627] __nla_validate_parse: 2 callbacks suppressed [ 1129.522928][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8641'. [ 1129.912544][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8644'. [ 1130.391939][ T7649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1130.634526][ T7657] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8648'. [ 1131.179757][ T7629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8642'. [ 1131.715575][ C1] net_ratelimit: 19541 callbacks suppressed [ 1131.715632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.715922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.716156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.716405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.718201][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.718457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.718730][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.718967][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.719405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1131.719706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1132.284589][ T7683] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8655'. [ 1132.469531][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8656'. [ 1132.750505][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1132.794428][ T7693] vxcan0: tx address claim with dest, not broadcast [ 1132.858681][ T1389] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1132.944246][ T7706] netlink: 'syz.0.8662': attribute type 1 has an invalid length. [ 1133.583929][ T7706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1133.610457][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.633517][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.772865][ T7708] bond6: (slave batadv_slave_0): making interface the new active one [ 1133.803709][ T7708] bond6: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1134.389745][ T7739] netlink: 'syz.2.8669': attribute type 3 has an invalid length. [ 1134.700837][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8670'. [ 1134.973552][ T7748] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1135.012202][ T7748] bond13 (unregistering): Released all slaves [ 1135.541639][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8676'. [ 1135.541707][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8676'. [ 1135.740817][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1136.412672][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8683'. [ 1136.591467][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8684'. [ 1136.608096][ T7801] xt_cgroup: path and classid specified [ 1136.725543][ C1] net_ratelimit: 18984 callbacks suppressed [ 1136.725643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.725916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.726133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.726383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.726624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.726848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.727200][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.727504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.727766][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1136.728016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1137.369721][ T7818] netlink: 'syz.0.8688': attribute type 1 has an invalid length. [ 1137.797179][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8691'. [ 1138.092055][ T7833] xt_hashlimit: size too large, truncated to 1048576 [ 1138.257178][ T7837] netlink: 'syz.2.8695': attribute type 10 has an invalid length. [ 1139.575200][ T7865] netlink: 'syz.0.8701': attribute type 28 has an invalid length. [ 1139.575245][ T7865] netlink: 'syz.0.8701': attribute type 3 has an invalid length. [ 1139.575275][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8701'. [ 1139.627252][ T7871] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8703'. [ 1139.810047][ T7871] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8703'. [ 1139.900607][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1140.592096][ T7891] netlink: 'syz.3.8708': attribute type 1 has an invalid length. [ 1140.884186][ T7891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1141.735548][ C1] net_ratelimit: 20200 callbacks suppressed [ 1141.735599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.735852][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.736092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.736358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.736602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.736848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.737089][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.737362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.737614][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.737876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.973608][ T7913] netlink: 'syz.1.8711': attribute type 2 has an invalid length. [ 1142.226500][ T7915] dvmrp0: entered allmulticast mode [ 1142.485263][ T7927] ip6t_rt: unknown flags 36 [ 1142.532441][ T7929] netlink: 'syz.0.8713': attribute type 5 has an invalid length. [ 1145.254276][ T7951] netlink: 'syz.1.8721': attribute type 1 has an invalid length. [ 1145.254321][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8721'. [ 1145.709805][ T7956] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 1146.227206][ T7980] netlink: 'syz.3.8728': attribute type 14 has an invalid length. [ 1146.313938][ T7985] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 1146.745637][ C1] net_ratelimit: 19952 callbacks suppressed [ 1146.745702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.746022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.746320][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.746586][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.746859][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.747956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.748216][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.748439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.748668][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.748920][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1147.265066][ T7998] netlink: 'syz.2.8731': attribute type 49 has an invalid length. [ 1147.823199][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8735'. [ 1147.863320][ T7981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1147.863405][ T7981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1147.970227][ T8017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1147.989139][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8736'. [ 1148.075259][ T8013] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1148.663286][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8740'. [ 1148.760640][ T8039] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1148.792502][ T8042] netlink: 'syz.2.8743': attribute type 1 has an invalid length. [ 1148.817854][ T8039] bond4 (unregistering): Released all slaves [ 1148.864601][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8743'. [ 1148.893623][ T8048] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8744'. [ 1149.134783][ T8048] tipc: Enabled bearer , priority 0 [ 1149.135801][ T8045] syzkaller0: entered promiscuous mode [ 1149.135830][ T8045] syzkaller0: entered allmulticast mode [ 1149.408719][ T5614] block nbd6: Receive control failed (result -32) [ 1149.464633][ T8048] tipc: Resetting bearer [ 1149.520541][ T8043] tipc: Resetting bearer [ 1149.701677][ T8043] tipc: Disabling bearer [ 1150.674134][ T8087] __nla_validate_parse: 1 callbacks suppressed [ 1150.674182][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8754'. [ 1150.929981][ T8101] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1150.971919][ T8095] IPVS: stopping master sync thread 8101 ... [ 1151.251131][ T8108] netlink: 'syz.1.8758': attribute type 1 has an invalid length. [ 1151.755524][ C1] net_ratelimit: 19884 callbacks suppressed [ 1151.755575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.755880][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.756156][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.756426][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.756713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.756984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.757223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.757470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.757751][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.758011][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1152.243789][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8761'. [ 1152.332012][ T8122] netlink: 'syz.2.8761': attribute type 2 has an invalid length. [ 1153.020616][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8768'. [ 1153.100087][ T8143] bond4: entered promiscuous mode [ 1153.109387][ T8143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1153.144425][ T8143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1153.159321][ T8143] bond4: (slave sit4): The slave device specified does not support setting the MAC address [ 1153.175255][ T8143] bond4: (slave sit4): Error -95 calling set_mac_address [ 1153.550343][ T8159] netlink: 420 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1154.016875][ T8159] xfrm1: entered allmulticast mode [ 1154.548098][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8779'. [ 1156.203519][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8788'. [ 1156.222327][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8788'. [ 1156.765512][ C1] net_ratelimit: 19710 callbacks suppressed [ 1156.765573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.765828][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.766087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.766346][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.766641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.766911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.767175][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.767443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.767730][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.767997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.158350][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1157.178041][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1157.203670][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1157.266744][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1157.275116][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1157.469396][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1157.483789][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1157.504533][ T8233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1157.541412][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1157.541454][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1157.723527][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8793'. [ 1158.332527][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1158.383020][ T8270] batadv_slave_0: entered promiscuous mode [ 1158.893000][ T8262] batadv_slave_0: left promiscuous mode [ 1159.437638][ T5851] Bluetooth: hci1: command tx timeout [ 1159.786555][ T8307] netlink: 'syz.4.8804': attribute type 83 has an invalid length. [ 1161.515873][ T5851] Bluetooth: hci1: command tx timeout [ 1161.698601][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.698731][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.699104][ T8239] bridge_slave_0: entered allmulticast mode [ 1161.737468][ T8239] bridge_slave_0: entered promiscuous mode [ 1161.764402][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.772376][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.779872][ C1] net_ratelimit: 20192 callbacks suppressed [ 1161.779900][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.780110][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.780336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.780544][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.780741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.780935][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.781131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.781346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.781649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.782080][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.904112][ T8239] bridge_slave_1: entered allmulticast mode [ 1162.001382][ T8239] bridge_slave_1: entered promiscuous mode [ 1162.110116][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.126559][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.241604][ T8239] team0: Port device team_slave_0 added [ 1162.257785][ T8239] team0: Port device team_slave_1 added [ 1162.324411][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.333371][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.368942][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.390533][ T8302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.439699][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.439775][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.439804][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.969449][ T8239] hsr_slave_0: entered promiscuous mode [ 1162.999135][ T8239] hsr_slave_1: entered promiscuous mode [ 1163.011468][ T8239] debugfs: 'hsr0' already exists in 'hsr' [ 1163.017831][ T8239] Cannot create hsr debugfs directory [ 1163.156413][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8809'. [ 1163.597131][ T5851] Bluetooth: hci1: command tx timeout [ 1163.979429][ T8358] syzkaller0: entered promiscuous mode [ 1163.993752][ T8358] syzkaller0: entered allmulticast mode [ 1165.689124][ T5851] Bluetooth: hci1: command tx timeout [ 1166.785430][ C1] net_ratelimit: 20974 callbacks suppressed [ 1166.785483][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.785713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.785983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.786251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.786453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.787707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.787979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.788257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.788498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.788745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.807396][ C1] net_ratelimit: 22520 callbacks suppressed [ 1171.807482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.807777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.808157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.808463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.808741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.809044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.809340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.809612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.809908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.810168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.611076][ T8367] kthread_run failed with err -4 [ 1174.110616][ T8385] ipvlan0: Caught tx_queue_len zero misconfig [ 1174.177746][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1174.599950][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8821'. [ 1174.857565][ T8239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.884450][ T8239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.161516][ T8385] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1175.209216][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8819'. [ 1175.209272][ T8411] block nbd7: Unsupported socket: should be TCP or UNIX. [ 1175.880112][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8825'. [ 1176.046402][ T8428] netlink: 'syz.3.8823': attribute type 10 has an invalid length. [ 1176.100531][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8826'. [ 1176.119584][ T8239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.131636][ T8239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.815638][ C1] net_ratelimit: 20780 callbacks suppressed [ 1176.815689][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.815975][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.817251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.817520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.817794][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.818051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.818314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.818700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.818972][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.819283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.054255][ T8239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.066204][ T8239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.747712][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1178.115712][ T8475] netlink: 'syz.1.8837': attribute type 9 has an invalid length. [ 1178.126802][ T8239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.138949][ T8239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.323428][ T8483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.949216][ T8491] veth0_macvtap: entered allmulticast mode [ 1179.063527][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8841'. [ 1179.075051][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8841'. [ 1180.282506][ T8239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1180.320393][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1180.359521][ T8239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1180.423309][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1180.439110][ T8239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1180.467266][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1180.491428][ T8239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1180.527055][ T8239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1180.541692][ T8529] netlink: 'syz.1.8850': attribute type 1 has an invalid length. [ 1180.621205][ T8529] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1180.693018][ T8529] bond7: (slave ip6gretap0): making interface the new active one [ 1180.741568][ T8546] netlink: 'syz.1.8850': attribute type 1 has an invalid length. [ 1180.766188][ T8529] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1181.122060][ T8550] bond1: option mode: unable to set because the bond device is up [ 1181.280666][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8852'. [ 1181.691760][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.825429][ C1] net_ratelimit: 19772 callbacks suppressed [ 1181.825481][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.825727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.825952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.826188][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.826428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.826642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.826850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.827073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.827299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.827555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1182.169122][ T8239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.224037][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.224160][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.422798][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.422966][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.970293][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8859'. [ 1183.030541][ T8591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8859'. [ 1183.595139][ T8602] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8864'. [ 1184.582524][ T8616] syzkaller0: left promiscuous mode [ 1184.634421][ T8616] syzkaller0: left allmulticast mode [ 1184.713186][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8866'. [ 1184.822674][ T8625] sctp: [Deprecated]: syz.0.8870 (pid 8625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1184.822674][ T8625] Use struct sctp_sack_info instead [ 1185.831831][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8874'. [ 1186.167082][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1186.181080][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1186.432686][T30435] hid-generic 0005:0458:0A0E.0003: item fetching failed at offset 0/1 [ 1186.450623][T30435] hid-generic 0005:0458:0A0E.0003: probe with driver hid-generic failed with error -22 [ 1186.764580][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8878'. [ 1186.835541][ C1] net_ratelimit: 19450 callbacks suppressed [ 1186.835584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.835869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.836282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.836529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.836740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.836977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.837239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.837458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.837693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.837956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1187.112412][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.432668][ T8674] bridge6: entered promiscuous mode [ 1187.453038][ T8674] bridge6: entered allmulticast mode [ 1188.001184][ T8239] veth0_vlan: entered promiscuous mode [ 1188.097504][ T8239] veth1_vlan: entered promiscuous mode [ 1188.234593][ T8691] syzkaller1: entered promiscuous mode [ 1188.234638][ T8691] syzkaller1: entered allmulticast mode [ 1188.677911][ T8705] SET target dimension over the limit! [ 1188.841834][ T8706] macvlan0: entered promiscuous mode [ 1189.070960][ T8239] veth0_macvtap: entered promiscuous mode [ 1189.147415][ T8239] veth1_macvtap: entered promiscuous mode [ 1189.301700][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.369932][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.528475][ T8719] IPv6: sit3: Disabled Multicast RS [ 1189.552049][ T8719] sit3: entered allmulticast mode [ 1189.732784][ T1333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.732927][ T1333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.732984][ T1333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.747977][T31504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.889628][ T8722] sctp: [Deprecated]: syz.4.8891 (pid 8722) Use of int in maxseg socket option. [ 1189.889628][ T8722] Use struct sctp_assoc_value instead [ 1190.504638][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.504691][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.983659][ T8732] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1191.491584][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8897'. [ 1191.528202][ T8732] team0: Port device dummy0 removed [ 1191.609935][ T8758] netlink: 'syz.3.8898': attribute type 1 has an invalid length. [ 1191.624675][ T8758] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8898'. [ 1191.653310][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.665735][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.845579][ C1] net_ratelimit: 19885 callbacks suppressed [ 1191.845651][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.845908][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.846153][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.846369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.846598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.846832][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.847076][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.847291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.847545][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.847772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1192.384043][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8900'. [ 1192.981610][ T8757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1192.991264][ T8757] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1193.298052][ T8773] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1193.311636][ T8773] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1193.324464][ T8773] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.846868][T30194] veth1_to_bridge: left allmulticast mode [ 1193.846960][T30194] veth1_to_bridge: left promiscuous mode [ 1193.847180][T30194] bridge0: port 4(veth1_to_bridge) entered disabled state [ 1193.890742][T30194] team0: left allmulticast mode [ 1193.903763][T30194] team_slave_0: left allmulticast mode [ 1193.913626][T30194] team_slave_1: left allmulticast mode [ 1193.951942][T30194] team0: left promiscuous mode [ 1193.951990][T30194] team_slave_0: left promiscuous mode [ 1193.952414][T30194] team_slave_1: left promiscuous mode [ 1193.993184][T30194] bridge0: port 3(team0) entered disabled state [ 1194.010485][T30194] bridge_slave_1: left allmulticast mode [ 1194.010708][T30194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.046337][T30194] bridge_slave_0: left allmulticast mode [ 1194.046413][T30194] bridge_slave_0: left promiscuous mode [ 1194.047291][T30194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.048972][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8903'. [ 1194.162273][T30194] pimreg: left allmulticast mode [ 1194.641906][T30194] batman_adv: batadv0: Removing interface: gretap1 [ 1194.682113][T30194] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1194.709451][T30194] bond3 (unregistering): (slave ipip0): Releasing backup interface [ 1194.709522][T30194] ipip0 (unregistering): left promiscuous mode [ 1194.811872][T30194] bond0 (unregistering): (slave bridge3): Releasing active interface [ 1194.842675][T30194]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.867575][T30194]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.880731][T30194]  (unregistering): (slave bond5): Releasing backup interface [ 1194.890371][T30194]  (unregistering): Released all slaves [ 1194.901016][T30194] bond1 (unregistering): Released all slaves [ 1194.912265][T30194] bond2 (unregistering): Released all slaves [ 1194.926299][T30194] bond3 (unregistering): Released all slaves [ 1194.953071][T30194] bond4 (unregistering): Released all slaves [ 1194.969007][T30194] bond5 (unregistering): Released all slaves [ 1194.982180][T30194] bond6 (unregistering): Released all slaves [ 1194.999202][T30194] bond0 (unregistering): Released all slaves [ 1195.022479][T30194] bond7 (unregistering): Released all slaves [ 1195.035038][T30194] bond8 (unregistering): Released all slaves [ 1195.052213][T30194] bond9 (unregistering): Released all slaves [ 1195.064228][T30194] bond10 (unregistering): Released all slaves [ 1195.082624][T30194] bond11 (unregistering): Released all slaves [ 1195.102006][T30194] bond12 (unregistering): left allmulticast mode [ 1195.102037][T30194] bond12 (unregistering): left promiscuous mode [ 1195.123714][T30194] team0: Port device macvlan2 removed [ 1195.133648][T30194] team0: Port device macvlan3 removed [ 1195.144560][T30194] bond12 (unregistering): Released all slaves [ 1195.160109][T30194] bond13 (unregistering): Released all slaves [ 1195.172194][T30194] bond14 (unregistering): Released all slaves [ 1195.396977][ T8757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1195.397030][ T8757] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1195.399784][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.564200][ T8757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.574587][ T8757] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1195.807738][ T8757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1195.807783][ T8757] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1195.899369][T30194] tipc: Disabling bearer [ 1195.925558][T30194] tipc: Left network mode [ 1196.049857][ T8815] netlink: 'syz.2.8910': attribute type 1 has an invalid length. [ 1196.173039][ T8822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8910'. [ 1196.440900][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1196.469658][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1196.484055][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1196.520238][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1196.544183][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1196.710864][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1196.725095][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1196.736505][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1196.740183][ T8833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1196.740209][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1196.764097][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1196.775185][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1196.852338][ T8839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1196.873237][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8912'. [ 1197.485574][ T5277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.142272][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1198.276611][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8923'. [ 1198.897609][ T5614] Bluetooth: hci0: command tx timeout [ 1198.932054][ T8915] bond8: (slave vlan4): Opening slave failed [ 1199.579469][ T8943] netlink: 'syz.2.8930': attribute type 1 has an invalid length. [ 1199.609961][T30194] hsr_slave_0: left promiscuous mode [ 1199.616626][T30194] hsr_slave_1: left promiscuous mode [ 1199.617654][T30194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.617675][T30194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.624104][T30194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.624125][T30194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.665831][T30194] veth1_macvtap: left promiscuous mode [ 1199.671809][T30194] veth0_macvtap: left promiscuous mode [ 1199.678254][T30194] veth1_vlan: left promiscuous mode [ 1199.683765][T30194] veth0_vlan: left promiscuous mode [ 1199.697796][ T8948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1200.100862][T30194] team0 (unregistering): Port device team_slave_1 removed [ 1200.111827][T30194] team0 (unregistering): Port device team_slave_0 removed [ 1200.303154][ T8952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8935'. [ 1200.327282][ T8952] netlink: 'syz.3.8935': attribute type 33 has an invalid length. [ 1200.376251][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1200.764058][T30194] IPVS: stop unused estimator thread 0... [ 1200.949242][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8942'. [ 1200.962246][ T5614] Bluetooth: hci0: command tx timeout [ 1201.034447][ T8981] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8943'. [ 1201.059160][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.068128][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.068322][ T8793] bridge_slave_0: entered allmulticast mode [ 1201.083514][ T8975] netlink: 'syz.4.8944': attribute type 1 has an invalid length. [ 1201.090659][ T8793] bridge_slave_0: entered promiscuous mode [ 1201.103038][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.103148][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.110929][ T8793] bridge_slave_1: entered allmulticast mode [ 1201.119966][ T8793] bridge_slave_1: entered promiscuous mode [ 1201.230309][ T8982] bond2: (slave bridge7): making interface the new active one [ 1201.238206][ T8982] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 1201.308216][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.332386][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1201.373981][ T8989] xt_LOG: prefix is not null-terminated [ 1201.454848][ T8793] team0: Port device team_slave_0 added [ 1201.484417][ T8793] team0: Port device team_slave_1 added [ 1201.620572][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.620618][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.620642][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.630453][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.630472][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.630496][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.868070][ T8793] hsr_slave_0: entered promiscuous mode [ 1201.875050][ T8793] hsr_slave_1: entered promiscuous mode [ 1201.882494][ T8793] debugfs: 'hsr0' already exists in 'hsr' [ 1201.890520][ T8793] Cannot create hsr debugfs directory [ 1202.561424][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8953'. [ 1203.035849][ T5614] Bluetooth: hci0: command tx timeout [ 1205.116616][ T5614] Bluetooth: hci0: command tx timeout [ 1205.452528][ T8793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.531995][ T9033] netlink: 'syz.1.8958': attribute type 5 has an invalid length. [ 1205.650107][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 1205.819938][ T8793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1205.827526][ T9062] netlink: 'syz.4.8961': attribute type 11 has an invalid length. [ 1205.827549][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8961'. [ 1205.854750][ T8793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1205.868623][ T8793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.020626][ T8793] .`: (slave netdevsim1): Releasing backup interface [ 1206.032423][ T8793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1206.032484][ T8793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1206.032526][ T8793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.314384][ T8793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 1206.327624][ T8793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1206.340873][ T8793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.502936][ T9092] netlink: 'syz.4.8970': attribute type 3 has an invalid length. [ 1206.842975][ T9101] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8972'. [ 1206.843028][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8972'. [ 1206.947805][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8974'. [ 1207.002170][ T9109] netlink: 'syz.2.8974': attribute type 1 has an invalid length. [ 1207.017047][ T9108] netlink: 'syz.2.8974': attribute type 10 has an invalid length. [ 1207.017089][ T9108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8974'. [ 1207.017172][ T9108] dummy0: entered promiscuous mode [ 1207.088888][ T9081] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1207.112892][ T9111] vlan0: entered promiscuous mode [ 1207.154795][ T8793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1207.170820][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8976'. [ 1207.188515][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1207.204275][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8977'. [ 1207.230970][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8976'. [ 1207.267260][ T9119] gtp0: entered promiscuous mode [ 1207.277897][ T9119] gtp0: entered allmulticast mode [ 1207.291866][ T8793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1207.327141][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1207.337159][ T8793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1207.349432][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1207.366843][ T8793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1207.388055][ T8793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1207.536401][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.572178][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.601963][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.602082][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.612608][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8982'. [ 1207.671377][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.671505][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.316402][ T5614] Bluetooth: hci0: command 0x0401 tx timeout [ 1208.351934][ T9174] vlan4: entered allmulticast mode [ 1208.351990][ T9174] bond0: entered allmulticast mode [ 1208.352046][ T9174] bond_slave_1: entered allmulticast mode [ 1208.804272][ T9201] netlink: 'syz.2.8991': attribute type 8 has an invalid length. [ 1209.328996][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.484438][ T8793] veth0_vlan: entered promiscuous mode [ 1209.501585][ T8793] veth1_vlan: entered promiscuous mode [ 1209.561509][ T8793] veth0_macvtap: entered promiscuous mode [ 1209.579679][ T8793] veth1_macvtap: entered promiscuous mode [ 1209.632684][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.648810][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.737754][ T1329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.738366][ T1329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.738408][ T1329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.738440][ T1329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.083710][ T9255] netlink: 'syz.1.9003': attribute type 4 has an invalid length. [ 1210.129743][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.129788][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.149305][ T9255] netlink: 'syz.1.9003': attribute type 4 has an invalid length. [ 1210.300726][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.300775][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.405228][ T9264] netlink: 'syz.1.9005': attribute type 7 has an invalid length. [ 1210.846474][ T9298] C: renamed from lo (while UP) [ 1210.879304][ T9298] net_ratelimit: 10080 callbacks suppressed [ 1210.879370][ T9298] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1210.930073][ T9298] openvswitch: netlink: Flow key attribute not present in set flow. [ 1211.071679][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1211.091085][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1211.101263][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1211.113119][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1211.134376][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1211.271571][ T9307] netlink: 'syz.4.9015': attribute type 16 has an invalid length. [ 1211.271615][ T9307] netlink: 'syz.4.9015': attribute type 2 has an invalid length. [ 1211.271660][ T9307] __nla_validate_parse: 10 callbacks suppressed [ 1211.271673][ T9307] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.9015'. [ 1211.456742][ T9326] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9016'. [ 1211.456793][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9016'. [ 1211.521140][ T9290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1211.911388][ T1384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1211.924937][ T1384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1211.941667][ T1384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.346574][ T1384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1212.346670][ T1384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1212.346693][ T1384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.577571][ T1384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1212.604159][ T1384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1212.618046][ T1384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.733589][ T1384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1212.751180][ T1384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1212.764808][ T1384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.892758][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1212.963117][ T9383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1212.979970][ T9383] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1212.982810][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9032'. [ 1213.007529][ T9390] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1213.007981][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.009188][ T9390] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9032'. [ 1213.276851][ T5851] Bluetooth: hci4: command tx timeout [ 1213.370336][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.414666][ T9404] xt_cgroup: invalid path, errno=-2 [ 1213.463423][ T9407] bridge0: port 3(syz_tun) entered disabled state [ 1213.472595][ T9407] syz_tun: left allmulticast mode [ 1213.478657][ T9407] bridge0: port 3(syz_tun) entered disabled state [ 1213.503718][ T9407] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1213.517589][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.523247][ T1351] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.552997][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.653449][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.665049][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.681770][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.712834][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.712996][ T9407] netlink: 'syz.4.9037': attribute type 10 has an invalid length. [ 1213.736497][T30194] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.774985][T30194] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.849075][ T1351] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.990176][ T1384] lo: left allmulticast mode [ 1214.004946][ T1384] dvmrp8: left allmulticast mode [ 1215.090328][ T1384] .` (unregistering): Released all slaves [ 1215.117522][ T1384] bond1 (unregistering): Released all slaves [ 1215.149667][ T1384] bond0 (unregistering): Released all slaves [ 1215.177059][ T1384] bond2 (unregistering): Released all slaves [ 1215.188525][ T1384] bond3 (unregistering): Released all slaves [ 1215.200853][ T1384] bond4 (unregistering): Released all slaves [ 1215.403761][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1215.464022][ T1384] : left promiscuous mode [ 1215.809923][ T1384] tipc: Disabling bearer [ 1215.829241][ T1384] tipc: Left network mode [ 1215.849639][ T9485] dvmrp0: entered allmulticast mode [ 1215.938776][ T9492] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1216.288292][ T9503] addrtype_mt_checkentry_v1: 23 callbacks suppressed [ 1216.288360][ T9503] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1216.703453][ T9497] syzkaller1: entered promiscuous mode [ 1216.703501][ T9497] syzkaller1: entered allmulticast mode [ 1216.850671][ T9544] openvswitch: netlink: IP tunnel dst address not specified [ 1216.850737][ T9544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.896127][ T9535] bond3 (unregistering): Released all slaves [ 1216.944670][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.944848][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.945055][ T9305] bridge_slave_0: entered allmulticast mode [ 1216.952212][ T9305] bridge_slave_0: entered promiscuous mode [ 1217.060457][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.060572][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.060762][ T9305] bridge_slave_1: entered allmulticast mode [ 1217.067795][ T9305] bridge_slave_1: entered promiscuous mode [ 1217.158082][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.177018][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.189273][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.204797][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.218509][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1217.231216][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.261099][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.261496][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.261706][ T9550] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1217.276242][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1217.276279][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1217.414186][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.427799][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.668994][ T9567] Unsupported ieee802154 address type: 0 [ 1217.698337][ T9305] team0: Port device team_slave_0 added [ 1217.704968][ T9555] team_slave_0: entered promiscuous mode [ 1217.705024][ T9555] team_slave_0: entered allmulticast mode [ 1217.748129][ T9305] team0: Port device team_slave_1 added [ 1217.762746][ T9570] validate_nla: 57 callbacks suppressed [ 1217.762805][ T9570] netlink: 'syz.0.9064': attribute type 1 has an invalid length. [ 1218.021879][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.021924][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.021947][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.031396][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.031415][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.031440][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.348373][ T9305] hsr_slave_0: entered promiscuous mode [ 1218.357312][ T9305] hsr_slave_1: entered promiscuous mode [ 1218.364238][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 1218.372104][ T9305] Cannot create hsr debugfs directory [ 1218.646241][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1218.919631][ T1384] hsr_slave_0: left promiscuous mode [ 1218.930259][ T1384] hsr_slave_1: left promiscuous mode [ 1219.077578][ T1384] veth1_vlan: left promiscuous mode [ 1220.491816][ T9648] netlink: 'syz.1.9080': attribute type 3 has an invalid length. [ 1220.571003][ T9653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.455682][ T9305] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.617114][ T9701] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1221.731032][ T1384] IPVS: stop unused estimator thread 0... [ 1222.020191][ T9305] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.110928][ T9710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1222.353679][ T9305] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.647914][ T9305] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.820923][ T9735] syzkaller0: entered promiscuous mode [ 1222.831626][ T9735] syzkaller0: entered allmulticast mode [ 1223.003984][ T9735] netlink: 'syz.1.9101': attribute type 1 has an invalid length. [ 1223.036909][ T9735] netlink: ct_mark mask cannot be 0 [ 1223.036961][ T9735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.512086][ T9305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1223.552108][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1223.563408][ T9305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1223.602203][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.613869][ T9305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1223.640200][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.666856][ T9305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1223.704611][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.049422][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.127586][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.168942][T30194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.169055][T30194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.247684][T30194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.247818][T30194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.484123][ T9305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.776596][ T9806] bond11: Removing last arp target with arp_interval on [ 1224.854768][ T9815] __nla_validate_parse: 33 callbacks suppressed [ 1224.867186][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9114'. [ 1224.925297][ T9818] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1224.934893][ T9818] syzkaller1: linktype set to 823 [ 1224.991300][ T9825] Bluetooth: MGMT ver 1.23 [ 1224.997789][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9118'. [ 1225.201699][ T9829] veth1_to_bond: entered allmulticast mode [ 1225.264730][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.302159][ T9828] veth1_to_bond: left allmulticast mode [ 1225.326936][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.354863][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.368134][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.432531][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.455028][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.468255][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.470814][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1225.991075][ T9868] netlink: 'syz.2.9125': attribute type 1 has an invalid length. [ 1226.031716][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.150450][ T9878] netlink: 'syz.2.9129': attribute type 2 has an invalid length. [ 1226.392309][ T9891] netlink: 'syz.0.9130': attribute type 1 has an invalid length. [ 1226.672013][ T9891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1226.684221][ T9305] veth0_vlan: entered promiscuous mode [ 1226.769277][ T9305] veth1_vlan: entered promiscuous mode [ 1226.885097][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.064459][ T9305] veth0_macvtap: entered promiscuous mode [ 1227.102301][ T9910] dvmrp8: entered allmulticast mode [ 1227.126941][ T9305] veth1_macvtap: entered promiscuous mode [ 1227.227740][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.266331][ T9920] bond0: Caught tx_queue_len zero misconfig [ 1227.275212][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.451393][ T1390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.451507][ T1390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.451539][ T1390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.451563][ T1390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.840567][T31504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.840648][T31504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.908229][T30194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.908279][T30194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.966554][ T9942] netlink: 'syz.0.9142': attribute type 4 has an invalid length. [ 1227.966595][ T9942] netlink: 'syz.0.9142': attribute type 7 has an invalid length. [ 1227.968017][ T9942] syzkaller0: entered promiscuous mode [ 1227.968044][ T9942] syzkaller0: entered allmulticast mode [ 1228.009852][ T9942] tipc: Started in network mode [ 1228.009915][ T9942] tipc: Node identity 328137bc5eaf, cluster identity 4711 [ 1228.010052][ T9942] tipc: Enabled bearer , priority 0 [ 1228.227956][ T9956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1228.281689][ T9941] tipc: Resetting bearer [ 1228.359240][ T9941] tipc: Disabling bearer [ 1228.420609][ T9964] tipc: Enabled bearer , priority 0 [ 1228.509373][ T9955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1228.588726][ T9962] vlan0: entered promiscuous mode [ 1228.594753][ T9962] bond3: entered promiscuous mode [ 1228.594968][ T9962] vlan0: entered allmulticast mode [ 1228.594984][ T9962] bond3: entered allmulticast mode [ 1228.634206][ T9968] tipc: Enabling of bearer rejected, already enabled [ 1228.661076][ T9965] bond3: (slave gtp1): refused to change device type [ 1228.755112][ T9981] syzkaller0: entered promiscuous mode [ 1228.755158][ T9981] syzkaller0: entered allmulticast mode [ 1229.334325][T10022] syzkaller0: entered promiscuous mode [ 1229.344915][T10022] syzkaller0: entered allmulticast mode [ 1229.424066][T10030] block nbd3: NBD_DISCONNECT [ 1229.430154][T10030] block nbd3: Send disconnect failed -32 [ 1229.439666][T10030] block nbd3: shutting down sockets [ 1229.549607][T10040] netlink: 'syz.2.9161': attribute type 1 has an invalid length. [ 1229.709271][T10040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1229.790010][T30194] IPVS: starting estimator thread 0... [ 1229.795175][T10040] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1229.896400][T10032] bond2: (slave geneve2): making interface the new active one [ 1229.905157][T10032] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1229.917649][T10055] IPVS: using max 39 ests per chain, 93600 per kthread [ 1230.271786][T10068] netlink: NAT attribute has 5 unknown bytes [ 1230.271840][T10068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1230.294658][T10068] __nla_validate_parse: 32 callbacks suppressed [ 1230.294714][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9168'. [ 1230.701074][T10080] Cannot find add_set index 34 as target [ 1230.973265][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1230.973312][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1230.977303][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1230.977327][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9173'. [ 1230.984302][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9171'. [ 1231.011863][T10095] netlink: 'syz.0.9172': attribute type 2 has an invalid length. [ 1231.619706][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9180'. [ 1231.627047][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.629692][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.662754][T10124] hsr_slave_0: left promiscuous mode [ 1231.672841][T10124] hsr_slave_1: left promiscuous mode [ 1231.725072][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9185'. [ 1231.844485][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9185'. [ 1232.950046][T10192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9199'. [ 1233.141079][T30433] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 1233.232534][T10216] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1233.572782][T10229] netlink: 'syz.1.9206': attribute type 1 has an invalid length. [ 1233.585094][T10229] netlink: 'syz.1.9206': attribute type 2 has an invalid length. [ 1233.816748][T10247] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1233.879379][T10249] syzkaller1: entered promiscuous mode [ 1233.885327][T10249] syzkaller1: entered allmulticast mode [ 1234.689813][T10296] netlink: 'syz.4.9220': attribute type 1 has an invalid length. [ 1236.187571][T10213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.464522][T10316] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1236.713115][T10339] __nla_validate_parse: 6 callbacks suppressed [ 1236.729305][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1236.729362][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1236.759062][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9224'. [ 1237.061130][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1237.719363][T10381] pimreg3: entered allmulticast mode [ 1240.155143][T10354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1240.390721][T10387] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1240.409849][T10387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1240.683053][T10404] netlink: 'syz.1.9244': attribute type 3 has an invalid length. [ 1240.923760][T10418] x_tables: duplicate underflow at hook 1 [ 1241.087152][T10420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9249'. [ 1241.832333][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1241.909466][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9260'. [ 1242.029122][T10463] 8021q: adding VLAN 0 to HW filter on device team1 [ 1242.731826][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.894599][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.894865][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.895083][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.895261][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.898187][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.898384][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1242.903089][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1243.308636][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1243.319478][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1243.333203][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1243.353722][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1243.354393][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1243.574752][T30208] bond0: (slave syz_tun): Releasing backup interface [ 1243.741601][T10470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.760111][T10470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.884622][T10470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.899699][T10470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.999593][T10470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.013458][T10470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.085129][T10429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1244.406015][T10470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.406071][T10470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.482956][T10525] C: entered promiscuous mode [ 1244.499816][T10525] tunl0: entered promiscuous mode [ 1244.570780][T10536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.578221][T10525] gre0: entered promiscuous mode [ 1244.632835][T10525] gretap0: entered promiscuous mode [ 1244.732359][T10525] erspan0: entered promiscuous mode [ 1244.761616][T10525] ip_vti0: entered promiscuous mode [ 1245.435962][ T5851] Bluetooth: hci5: command tx timeout [ 1245.504485][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.504667][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.505664][T10499] bridge_slave_0: entered allmulticast mode [ 1245.507657][T10499] bridge_slave_0: entered promiscuous mode [ 1245.520371][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.520591][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.520753][T10499] bridge_slave_1: entered allmulticast mode [ 1245.523242][T10499] bridge_slave_1: entered promiscuous mode [ 1245.636826][T10470] bridge_slave_1: left promiscuous mode [ 1245.637057][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.663510][T10470] bridge_slave_0: left allmulticast mode [ 1245.670740][T10470] bridge_slave_0: left promiscuous mode [ 1245.677820][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.689625][T10470] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI [ 1245.705995][T10470] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 1245.715820][T10470] CPU: 1 UID: 0 PID: 10470 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1245.726096][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1245.736427][T10470] Workqueue: netns cleanup_net [ 1245.741810][T10470] RIP: 0010:br_del_frame+0xd1/0x160 [ 1245.749472][T10470] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 3b 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 40 3c 84 f7 4d 89 37 4d 85 f6 74 [ 1245.774913][T10470] RSP: 0018:ffffc90003c577c0 EFLAGS: 00010a06 [ 1245.781186][T10470] RAX: 1bd5a00000000024 RBX: ffffffff907bdc58 RCX: ffff88807e96ddc0 [ 1245.791170][T10470] RDX: 0000000000000000 RSI: ffffffff907bdc40 RDI: ffffffff907bdc50 [ 1245.803469][T10470] RBP: 000000000000001c R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 1245.811646][T10470] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: dffffc0000000000 [ 1245.822457][T10470] R13: 1ffffffff20f7b8b R14: 0000000000000000 R15: dead000000000122 [ 1245.835314][T10470] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1245.845735][T10470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1245.854420][T10470] CR2: 00007f92484fffe8 CR3: 00000000952da000 CR4: 00000000003526f0 [ 1245.868684][T10470] Call Trace: [ 1245.872174][T10470] [ 1245.875473][T10470] br_cfm_port_del+0x106/0x1a0 [ 1245.880452][T10470] del_nbp+0x178/0x9f0 [ 1245.885114][T10470] br_dev_delete+0x6e/0x130 [ 1245.889942][T10470] br_net_exit_rtnl+0xb1/0x120 [ 1245.895698][T10470] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 1245.901285][T10470] ops_undo_list+0x319/0x8d0 [ 1245.906456][T10470] ? __pfx_ops_undo_list+0x10/0x10 [ 1245.912210][T10470] ? idr_destroy+0x227/0x290 [ 1245.916914][T10470] cleanup_net+0x572/0x810 [ 1245.921791][T10470] ? __pfx_cleanup_net+0x10/0x10 [ 1245.926934][T10470] ? rcu_is_watching+0x16/0xb0 [ 1245.931814][T10470] ? process_scheduled_works+0x97a/0x1630 [ 1245.938628][T10470] process_scheduled_works+0xc3d/0x1630 [ 1245.945812][T10470] ? __pfx_process_scheduled_works+0x10/0x10 [ 1245.953650][T10470] ? assign_work+0x3cf/0x5d0 [ 1245.959875][T10470] worker_thread+0xa47/0xfb0 [ 1245.965798][T10470] ? __kthread_parkme+0x71/0x1f0 [ 1245.971208][T10470] kthread+0x38b/0x480 [ 1245.975485][T10470] ? __pfx_worker_thread+0x10/0x10 [ 1245.981172][T10470] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1245.985798][T10470] ret_from_fork+0x514/0xb70 [ 1245.990593][T10470] ? __pfx_ret_from_fork+0x10/0x10 [ 1245.996799][T10470] ? __switch_to+0xc89/0x1420 [ 1246.001706][T10470] ? __pfx_kthread+0x10/0x10 [ 1246.006313][T10470] ret_from_fork_asm+0x1a/0x30 [ 1246.012012][T10470] [ 1246.015402][T10470] Modules linked in: [ 1246.022954][T10470] ---[ end trace 0000000000000000 ]--- [ 1246.3043 ** replaying previous printk message ** [ 1246.304308][T10470] RIP: 0010:br_del_frame+0xd1/0x160 [ 1246.304375][T10470] Code: f7 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 3b 84 f7 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 40 3c 84 f7 4d 89 37 4d 85 f6 74 [ 1246.304391][T10470] RSP: 0018:ffffc90003c577c0 EFLAGS: 00010a06 [ 1246.304406][T10470] RAX: 1bd5a00000000024 RBX: ffffffff907bdc58 RCX: ffff88807e96ddc0 [ 1246.304416][T10470] RDX: 0000000000000000 RSI: ffffffff907bdc40 RDI: ffffffff907bdc50 [ 1246.304425][T10470] RBP: 000000000000001c R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 1246.304439][T10470] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: dffffc0000000000 [ 1246.304464][T10470] R13: 1ffffffff20f7b8b R14: 0000000000000000 R15: dead000000000122 [ 1246.304480][T10470] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1246.304494][T10470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.304506][T10470] CR2: 00007fe5e0ccf368 CR3: 000000007d1ce000 CR4: 00000000003526f0 [ 1246.304535][T10470] Kernel panic - not syncing: Fatal exception [ 1246.423674][T10470] Kernel Offset: disabled [ 1246.428112][T10470] Rebooting in 86400 seconds..