last executing test programs: 2.461382213s ago: executing program 4 (id=5032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x44050) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f00000003c0)) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom(r3, &(0x7f0000000140)=""/107, 0x6b, 0x40000000, &(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x80) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0x9c80291dcb0e0848}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48808}, 0x20004804) (async) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 1.976226906s ago: executing program 4 (id=5042): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0x7a, "688cdc091ddd321da7993ce7c2781061af511aa80adb460a2a6085200acd2bebf09f539122dea148fddea2e93f065df5a77ded1397cae724d9650813a64c463dffe4b2c14358a8f0d0453e8477eca1d7e6e7518297c4b0a82e141a51f11fe2889505a6f5cef3d0042734beb88a79b7fc679e72d7e1f8ff1a5012"}, &(0x7f0000000200)=0x82) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x58, &(0x7f00000004c0)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x5, @local, 0x7}, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in={0x2, 0x4e23, @empty}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000040)="dc1617712d8e88a2798a72e462b0a876390fff4c7a85289236a04ad040d53e0e1d0dc28b8f3c7483f8a964164386d0e414fd76d583fc414f0b552dd1be6738422a13bb0f38b6a7222ee0d1", 0x4b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x24000090) 1.602038544s ago: executing program 4 (id=5047): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 64) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x2, {r2, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) 1.317368316s ago: executing program 2 (id=5053): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) socket$inet(0x2, 0x3, 0x2) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) (async) 1.235565366s ago: executing program 2 (id=5056): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x2, 0x8, 0x400, 0xfffffffd, 0x4}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xf, 0x6, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 1.127352055s ago: executing program 4 (id=5059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x15, 0x3, 'sed\x00', 0x2b, 0x1, 0x3e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xfffffffa, 0x4, 0x8}}, 0x44) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvmsg(r11, 0x0, 0x40000000) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r10, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x15, 0xa9, @random="ad93002848d07e00a9fd2a47532dddaadb"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r9, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@mpls_newroute={0x204, 0x18, 0x400, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x20, 0x80, 0x81, 0x0, 0x3, 0xfe, 0x9, 0x100}, [@RTA_NEWDST={0x84, 0x13, [{0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x5}, {0x8}, {0xa00}, {0x9c4}, {0x8}, {0x1ff, 0x0, 0x1}, {0x7}, {0xffff8}, {0x4b1a, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x7498, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x29c}, {0x800}, {0x3, 0x0, 0x1}, {0xe}, {0xff}, {0x7}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xb}, {0x8000}, {0x887, 0x0, 0x1}, {0x8f}, {0x1, 0x0, 0x1}, {}, {0xb611, 0x0, 0x1}, {0x10, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x2a, "2d9cc4824674002e82079c2803e0"}}, @RTA_MULTIPATH={0xc, 0x9, {0xc, 0x20, 0x5, r4}}, @RTA_VIA={0x14, 0x12, {0x28, "b6813749fc12fffe8dcab156db59"}}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0xf, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3ff}, {0x401}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x916}, {0x9d, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xf3924}, {0xb818, 0x0, 0x1}, {0x7}, {0xb7, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x9}, {0x400f}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xff}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xffff3}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x400}, {0x7}, {0x8001}, {0x7, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x2, 0x5, r9}}, @RTA_OIF={0x8, 0x4, r13}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0x3}, {0x6}, {0x86efd}, {0x1, 0x0, 0x1}, {0xcd03, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0xd}, {0x8, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff5, 0x0, 0x1}, {0xf6c5, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x1}, {0x8}, {0xd9, 0x0, 0x1}, {0xffffb, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x9}]}, @RTA_VIA={0x14, 0x12, {0x1e, "da67bc079e8c944a7cd45ad146c9"}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 984.401554ms ago: executing program 2 (id=5061): accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000480)=0x80, 0x80000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8cc}, @IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYRESOCT=r3], 0x48}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xf3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24048000}, 0x80) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002f00)={'wlan0\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r13, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="012027bd7000ffdbdf254b00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x74, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7, 0x31}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x39, 0xbe, "48496799bd7f53f13db713e195dcdd45d8723c505c0b6c994e3b8e93210e5ce2c826c33b1bdb10b3ab4ab71e24cdf98e39bbd0e1fe"}]}, 0x74}}, 0x4000000) 983.77631ms ago: executing program 0 (id=5062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r0 = getpid() (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000068000ff028bd700000000000020000f49d6d399938ffffff"], 0x1c}}, 0x0) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) bind$xdp(r2, &(0x7f0000000100), 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) close(0x3) (async) recvmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x23e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018224502082c00fe800000000000000000000000bbfe8000000000000000000000000000aa2b000009000000008700054166000000893d00000000000007e7a8e931add6793d7684bbe89117df82c9a3411a855b8711b17424a70ade2ddeb80838e43aaf511c7be6f8712ed928da9cd975031807407d10fe61ca7ec3a9b3a607c399461217d095123335dd39c369a0c9112b295a9989e8c409c67cdbc9e53d784d63a7cd310ece460d18cc6c82a650d966e08173efbc1f7929af86ea824c34011ab6383cbc879ca2b7ae9b9edd053427a1fc7ecba8c5152ab3882dd078f78c55fed0b04000607b1782bc14d9fa756939eff196452ba1f834dce41518190b6f38be504e5b5b6f62b7c66930cfefe03fcb9874fb61ed810abb13b206680f3c8e785a547867512c536395cf52335b04051d48872ef8903eb929e36074e42df7e4d62e2b3edd4aa283ec154890edb28ae83ce4f4a4c3448649a5f6a4f932970c1e03d6efb74e18c59a2ae6e5e26dd118afa4537fe01b99b4ea10030faba731183d6681f6d6d39de5b1a8eb660e6969d48896cb024e304e8f1cb617e96b537729153ae563f02dd8e3b9202ec04ed032a02335a4d0974f39b9720f049998bf8672774f802a0cc40f88a288c0e5c9d22e201b63e1755dd622af1701e0a2f196ffff047fededbac361f954b4d881246b9e0858e49078d53badd4c63d4993bfab6b7232ddf5edeecf065f141259972d9a6f27af3c211d842452ffc4fd3b03565eff718596b405989010bb000000000000000000d697"], 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6018232500282cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa840202"], 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x455}, {0x0}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e6", 0x87}, {&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {0x0}, {&(0x7f0000000dc0)="f50266", 0x3}], 0x7, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) (async, rerun: 64) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}, 0xfd}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB="0a0001"], 0x48}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000014c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) (async) r11 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r11, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r0, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 950.900922ms ago: executing program 1 (id=5063): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) write$tun(r2, &(0x7f0000000440)={@val={0x0, 0x19}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "d095c2", 0x141a, 0x2f, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x6c, 0x3, '\x00', [@ra={0x5, 0x2, 0x200}, @pad1, @hao={0xc9, 0x10, @private2}]}, @srh={0x0, 0xa, 0x4, 0x5, 0x81, 0x38, 0x7, [@local, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @dstopts={0x2e, 0x226, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x1, 0x1000, "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"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7, 0x6, [0xff, 0x46, 0x9, 0xc, 0x2]}}, @jumbo={0xc2, 0x4, 0xbe8f}, @ra={0x5, 0x2, 0xb}, @calipso={0x7, 0x20, {0x1, 0x6, 0x12, 0x790, [0x4, 0x2d8e, 0xfffffffffffeffff]}}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0xb4, "9aa0e4120a848a81d15b4ae171916c8bde68397b5e9135391f90f6095003136f6d74e6816eea2ddcb849aaf2d50b24a7120e12eefed63432a1dec909f31fd29c27c8889854ba2dd60c1ba5aacf50790df2e3fa31a5edee591a08b86610e98a773fa5f705783e1dfb2785634861692ebcbe0b9ea48f9849d750cea45035d6b9c38f316e9f4381a271591122768bea34a6b700aa475c1902b48aa8f51c1b3fc2e6a24304ced19a49497a5aac733a35c23143ab6cd7"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @routing={0x2c, 0x2, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @fragment={0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4, 0x1, [], "a7545b60"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x0, 0x81], "9ae0428fba3bafc37347647a47a0f5db38e596ea7b039470a9d9425c8de5111f269e1f1bb6fe2a3e8b2810e5cc2b28424ba310823a1882e517b40c38daf1c7e46869a7cd303e35205714c1a5fa41658329fe6bc1f2e8bc7f46e766a51caae934cb9f9440e1f106b1aae57197d7341553fa4baaa177ed8a3a9fa5de1507e74d89481e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x22, 0x1, 0xd6e], "494380dfb9ed678d2e67eaa0ce12c9659bc3ea4c4b9dfb780807b02575b73e9bd5815a2ab4bbefb41aae4d8780a55171f2b2a0e8f74034ee89b5c5bb13e4b97a2e904b05069013015034c18483b73eae1015b9c561fbcb8a4b5db41e4d39b3b8ee756b69b66847dcb75cc3b842eeed822016684b4a7afba334374b8d2e55b6b41d21f1b17520950fea0b6e9b36039a66f226c9f4f7d7afb2c41cfe5b63abaaef71f61c45b43983fc1e87f99dd78142488fc589a827682b93"}, {0x8, 0x88be, 0x1, {{0x9, 0x1, 0x8, 0x0, 0x0, 0x2, 0x3, 0x4}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2, {0x9, 0x0, 0x1, 0x16, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "7a9e11f2e2ece284f74d0206778585d7aef85dd9977723039824e06170de88430277680c9d102f73c0337412ff0f0acab4cecd6dca761da3c4a66076b9f593561e60eecc03c15b6f92d37c92941291db5221149160cafbcae3222efb3823dd261549f29dff8fe91e02ef415d49516da0bc1ddc6016b3d98744b590f340d0481c436478f5cdc21948389dba69b5845da63aa7bc8588355c75139d015eb77a25586e3ae6398aa168cf2c55b853cb64"}}}}}}}}, 0x145c) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "4acede967c288ef4"}}, 0x20000408}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0xff, 0x0, 0x0, 0x1}, 0x20) 840.968478ms ago: executing program 1 (id=5064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 764.966088ms ago: executing program 2 (id=5066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40400d1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x74}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a0862369da20601983f14d5447"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040080) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaf4a10611e4118b2}, 0x408c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 754.946407ms ago: executing program 0 (id=5067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000200)=""/160, &(0x7f0000000000)=0xa0) 737.906368ms ago: executing program 1 (id=5068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000200000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa18}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 636.572576ms ago: executing program 4 (id=5069): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r6, 0x0) ppoll(&(0x7f0000000000)=[{r5}, {r6, 0x1008}], 0x2, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40d1}, 0x40084) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000100)="70ca9111208aa589ac633a5b09bf74d57933f2323c37c22b51a68f22ecc97547ef575ee04a44dd4f9b5c82a465eca3492db34794635973f8ec363fe19aebdb5d93b82522f69443be0fda5db6403e54751400421d812e8afe0ca9c85f66bd33cde2e90d1fa14a6ea2d0e685", 0x6b}, {&(0x7f0000000180)="ee4919bdc099411227e5de8ca412532e47356e268aa49b7f46e469796770641d86f5efd1c2dc674ba2fffe5179a2248c", 0x30}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000001c0)="0edf07c4c371a1077083720ac98e3871c12dc4d7f5e68c88f6820354f5aeee7ed93509eef7f251006d6d88f500e2c2a0eca0eff311ecf6805232c5b2d8d1e2861cb7e60b2cfe9c87364eeef5ed37a19198869fdbc10b93a010d537c0b0dc2cb950b0b8a71052158d5fc1076a72e1719cc4d2def7ffeebb9ce806fc57c814cc66b6e493a55d4a73e71d24cb9a74fd69802a8d2b3921ad7bc815f03d1b431af69a3f24dc79ce9e3f7f466eac7b5c", 0xad}, {&(0x7f0000001340)="04629fc5c6358222fcd303ebaa25723f7a49e511a16963644a19f2f7ec51fe08c89c05b35b5246e91faa3b2414fd5b8938146cea3ffcdc46dd90dd94f18c9a57b463db45dbeb12ef11d6dd832dc2644d95da977bf8ce2d427fddbd18c65d273a1ee33e94851222f38c78c4bf32a62eda6b021ee4ad6c274b85584ff81585f9c383d8e7f760a8f95e9382d0e8b243ac38a602be8b29e963", 0x97}, {&(0x7f0000000280)="1be217c61c4c84382f37d83237", 0xd}, {&(0x7f0000001400)="4d944f2d34207388c3c21e5010356d67faf8de4264f69ec4ad9af5fa35c5831eb8a376591ceb39c40277b043dddf30f5936fefa659ce5e301ca0a929cd0aadc83d6b37bcf2a8ccdf5171fe15f9a84728375f6621e1282234322f9f7c7ba6dbe03c8eacf9d11bf5b4d524a526098332c686f571f1c5706ba84c3d39a103b8666fed7c15e4e86dcd2fc85c422b01ef7a587da64bed31e26c2174a2cd84ad473e6114584e217acb6e5dda54510bd04ddfa34f8402112fec22ec036419aa34de03a237467c57191e6efe9abae273", 0xcc}, {&(0x7f0000001500)="b47a47", 0x3}], 0x8, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x2d, 0x3, [{0x2, 0x3, "b5"}, {0x7, 0xc, "ad4928424db1e2bea409"}, {0x2, 0xc, "eedb5bd5e2be865073f6"}, {0x9fda14e95b04099b, 0xc, "01d127bd80c9c47f45ae"}]}, @timestamp_prespec={0x44, 0x44, 0xb5, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}, {@rand_addr=0x64010101}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@local}, {@broadcast, 0x4}, {@multicast1, 0x1f}, {@multicast2, 0xecc}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x120}, 0x48841) 589.210284ms ago: executing program 2 (id=5071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r3, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) 501.438665ms ago: executing program 0 (id=5072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0fd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) close(r1) 500.523564ms ago: executing program 3 (id=5073): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) (async) socket$kcm(0x29, 0x6, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x1, 0x0, 0x69, 0x4, 0x517c}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@srh={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) 423.758026ms ago: executing program 1 (id=5074): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) 397.486904ms ago: executing program 0 (id=5075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in6=@remote}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 329.943083ms ago: executing program 3 (id=5076): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 326.366501ms ago: executing program 1 (id=5077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x4, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) 301.011128ms ago: executing program 2 (id=5078): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x43eae5a61608ca7, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x42}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x50}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6c04ed390ebfa566}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x24}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xf8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x88}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8080) r7 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b0404000000000108001300", @ANYRES32=0x0, @ANYBLOB="08002e0004000000"], 0x30}}, 0x88890) 289.692372ms ago: executing program 0 (id=5079): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r4, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x800, @vifc_lcl_ifindex=r9, @multicast2}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000002206030000000000000000007b3f670426d77ab3ae80080006010006000000050005000200000005000400000000000900000300"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x4000874) 218.055458ms ago: executing program 1 (id=5080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000007e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000380)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x0, {0x2, 0xe, 0x3}}, 0x18) 217.708085ms ago: executing program 3 (id=5081): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket(0x1e, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1a}, {0xa, 0x4e23, 0x8c54, @mcast1, 0x3}, 0x1, {[0x10001, 0xffffff7f, 0x5, 0x200, 0x2, 0x3, 0x81, 0x80]}}, 0x5c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 20.779067ms ago: executing program 4 (id=5082): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @rose={'rose', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async, rerun: 64) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) syz_emit_ethernet(0x106e, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) (rerun: 32) 19.241617ms ago: executing program 3 (id=5083): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) (async) sendfile(r0, r1, &(0x7f0000000140)=0x76a9, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r8}, 0x38) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r10}]}, 0x1c}}, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x10, @loopback}, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26}) (async) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) (async) sendmsg$nl_xfrm(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r12, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x12) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x14, r14, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 19.075527ms ago: executing program 3 (id=5084): syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @empty}}}}}}, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x8000, @empty, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="3ce34f16160ef35988deede6cddeeb956fcb192aed3849e88058dec259e86a92db5e4c4f71f25600f1cc2c7dade5afe617162628d50cd04c9cf929dfd8f88b92b84b9746ee4ac900909ecc18d8257064a5d11a475673dd0d5ca8ca9a8066ed88bd87e7366f72f7c1ed755877e9f551e18b38543ce5a32ff0828bd286b35f970c958a6df252baa67ff792ac015a128712e03a72c0feb44618b2fdbc03dd99d7cf29c73a182ac69b3285227cf9a0ec7bd5960d22c330a08b48a9206bd3839521b778f2202065144ac013de80cfffd04dceda75", 0xd2}, {&(0x7f00000001c0)="60296509a6e8861e40f1c5336209e7bdd10340b5ef4d434db2ba49aaa181fdd75985af49e2328f17d8458351aaa0a6b5dd459a3132367308174b3f2076ccb26a3d4c2f63bc722d7dae9a8678ca29c637287ddac9e2c3e27fe52b007189844d15e39f6edea13d2fa136a21aeb436c6e3ed8c614ab9f7b4aea7c4058d9ddb59e0ede3132d7c8f212ec7521a46f2770883e8a6347a7526a59edce42e68024d1f095b453b88329544248872b1858e911b0923545c489bbb7b6ed2d882521157c4a6c12bb876b49c868", 0xc7}], 0x2, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x2, 0x0, 0x0, [@mcast2, @mcast2, @rand_addr=' \x01\x00']}}}], 0x60}}], 0x1, 0x18) 15.449018ms ago: executing program 0 (id=5085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@empty, 0x14, r9}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xd, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) 0s ago: executing program 3 (id=5086): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe59, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x7, 0x0, 0xfff, 0x7fffffff}, {0x96, 0x2, 0x9, 0x7f, 0x80d8, 0x7}, 0x8, 0x9, 0x17eb}}]}}]}, 0x58}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x9, {{0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff38}}}, 0x108) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) openat$cgroup_ro(r11, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x20000014) (async) sendmmsg$inet(r5, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x20000014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc3, 0x6f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc3, 0x6f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4005) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2888bce783b571158b5b0b34a2000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fedbdf258800000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x82c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) kernel console output (not intermixed with test programs): [ 390.247574][T17161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 390.258409][T17161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.268981][T17161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 390.297897][T17342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.441107][T17365] __nla_validate_parse: 9 callbacks suppressed [ 390.441128][T17365] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3105'. [ 390.479466][T17363] netlink: 'syz.3.3104': attribute type 10 has an invalid length. [ 390.510141][T17365] bond12 (unregistering): Released all slaves [ 390.521834][T17373] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3105'. [ 390.541698][T17363] veth0_macvtap: left promiscuous mode [ 390.569707][T17369] netlink: 'syz.2.3106': attribute type 4 has an invalid length. [ 390.579823][T17161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.601930][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'. [ 390.606792][T17161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.638075][T17161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.697362][T17361] hsr_slave_1 (unregistering): left promiscuous mode [ 390.764717][T17161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.977906][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'. [ 391.121535][T17406] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3113'. [ 391.155053][T17161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.208056][T17161] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.231236][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3107'. [ 391.253399][T17375] lec:lec_atm_close: lec0: Shut down! [ 391.271517][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.278743][T12253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.354184][T14382] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.361433][T14382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.367563][ T5837] Bluetooth: hci0: command tx timeout [ 391.545750][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 391.644571][T17427] syzkaller0: entered promiscuous mode [ 391.654086][T17427] syzkaller0: entered allmulticast mode [ 391.702823][T17425] hsr_slave_0 (unregistering): left promiscuous mode [ 392.315323][T17445] openvswitch: netlink: Missing key (keys=40, expected=80) [ 393.441195][ T5837] Bluetooth: hci0: command tx timeout [ 393.585537][T17161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.681787][T17161] veth0_vlan: entered promiscuous mode [ 393.699509][T17161] veth1_vlan: entered promiscuous mode [ 393.754837][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 393.761550][T17161] veth0_macvtap: entered promiscuous mode [ 393.788708][T17161] veth1_macvtap: entered promiscuous mode [ 393.841927][T17161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.874667][T17161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.922881][T14383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.958892][T14383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.008153][T14383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.113606][T14383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.338261][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 394.350634][T14383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.383407][T14383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.415240][T17475] bond4: (slave vcan0): Releasing backup interface [ 394.432199][T17482] xt_cgroup: invalid path, errno=-2 [ 394.457736][T17475] bond4: Destroying bond [ 394.483465][T17475] bond4 (unregistering): Released all slaves [ 394.656855][T14382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.677882][T14382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.763410][T17495] netlink: 'syz.0.3135': attribute type 62 has an invalid length. [ 394.844878][T17497] netlink: 'syz.4.3140': attribute type 1 has an invalid length. [ 394.877881][T17497] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3140'. [ 394.899897][T17506] delete_channel: no stack [ 395.394582][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.405450][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.413897][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.425473][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.436227][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.661302][T17532] C speed is unknown, defaulting to 1000 [ 395.856865][ T5824] syz_tun (unregistering): left allmulticast mode [ 396.145290][T17562] netlink: 'syz.3.3151': attribute type 2 has an invalid length. [ 396.153816][T17562] netlink: 'syz.3.3151': attribute type 2 has an invalid length. [ 396.173555][T17532] chnl_net:caif_netlink_parms(): no params data found [ 396.236227][T17582] bridge0: port 3(gretap0) entered blocking state [ 396.268966][T17582] bridge0: port 3(gretap0) entered disabled state [ 396.286766][T17582] gretap0: entered allmulticast mode [ 396.300460][T17582] gretap0: entered promiscuous mode [ 396.307286][T17582] bridge0: port 3(gretap0) entered blocking state [ 396.313861][T17582] bridge0: port 3(gretap0) entered forwarding state [ 396.429474][T17582] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.460420][T17582] bond1: (slave lo): Enslaving as an active interface with an up link [ 396.473558][T17582] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 396.521039][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.540740][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.566484][T17532] bridge_slave_0: entered allmulticast mode [ 396.587566][T17532] bridge_slave_0: entered promiscuous mode [ 396.617948][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.629287][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.639425][T17532] bridge_slave_1: entered allmulticast mode [ 396.646716][T17532] bridge_slave_1: entered promiscuous mode [ 396.673595][T17532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.680632][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 396.687922][T17532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.696121][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 396.730264][T17532] team0: Port device team_slave_0 added [ 396.739530][T17532] team0: Port device team_slave_1 added [ 396.847767][T17532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.857087][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.885439][T17532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.898602][T17532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.906327][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.932706][T17532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.996569][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 397.030632][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3165'. [ 397.036128][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 397.047639][ C0] lec:lec_tx_timeout: lec0 [ 397.052544][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.109702][T17532] hsr_slave_0: entered promiscuous mode [ 397.133947][T17532] hsr_slave_1: entered promiscuous mode [ 397.141765][T17532] debugfs: 'hsr0' already exists in 'hsr' [ 397.147840][T17532] Cannot create hsr debugfs directory [ 397.191695][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 397.201684][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 397.203773][T17618] C speed is unknown, defaulting to 1000 [ 397.407858][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'. [ 397.517411][ T5837] Bluetooth: hci1: command tx timeout [ 397.519323][T17632] bond1: entered promiscuous mode [ 397.615225][T17632] macvlan2: entered promiscuous mode [ 397.667822][T17632] macvlan2: entered allmulticast mode [ 397.674955][T17632] bond1: (slave macvlan2): Opening slave failed [ 397.729018][T17532] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.832923][T17648] pimreg: entered allmulticast mode [ 397.866732][T17532] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.168004][T17532] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.221840][T17532] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.632277][T17532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.687686][T17683] syz_tun: entered allmulticast mode [ 398.712118][T17532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.763864][T17532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.812093][T17680] C speed is unknown, defaulting to 1000 [ 398.813682][T17532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.985272][T17698] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 399.008911][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 399.050654][T17700] xt_TCPMSS: Only works on TCP SYN packets [ 399.282802][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 399.308747][T17707] netlink: 'syz.3.3192': attribute type 10 has an invalid length. [ 399.332344][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.428365][T17532] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.464022][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.471239][T14387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.561082][T17726] netlink: 'syz.3.3198': attribute type 21 has an invalid length. [ 399.571093][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.578281][T12253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.596384][ T5837] Bluetooth: hci1: command tx timeout [ 399.687319][T17726] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3198'. [ 399.748500][T17726] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 399.776456][T17726] bond13 (unregistering): Released all slaves [ 399.988516][T17742] syzkaller0: entered promiscuous mode [ 400.015227][T17742] syzkaller0: entered allmulticast mode [ 400.042570][T17746] IPVS: length: 239 != 24 [ 400.069779][T17750] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 400.203606][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.253421][T17752] netlink: 'syz.3.3203': attribute type 2 has an invalid length. [ 400.341054][T17754] veth17: entered promiscuous mode [ 400.392489][T17532] veth0_vlan: entered promiscuous mode [ 400.413330][T17532] veth1_vlan: entered promiscuous mode [ 400.536671][T17532] veth0_macvtap: entered promiscuous mode [ 400.597921][T17532] veth1_macvtap: entered promiscuous mode [ 400.664985][T17532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.685671][T17532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.720207][T14383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.744834][T14383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.834283][T14383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.871977][T14383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.992598][T12253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.023704][T12253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.118064][ T1934] block nbd3: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 60 seconds [ 401.129219][ T1934] block nbd3: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 60 seconds [ 401.140714][T14383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.148729][ T1934] block nbd3: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 60 seconds [ 401.161398][ T1934] block nbd3: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 60 seconds [ 401.182976][T14383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.539264][T17811] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 401.677940][ T5837] Bluetooth: hci1: command tx timeout [ 401.701378][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 401.720090][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 401.737026][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 401.766964][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 401.781505][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.854063][T17823] C speed is unknown, defaulting to 1000 [ 401.886167][T17830] tap0: tun_chr_ioctl cmd 1074025672 [ 401.891684][T17830] tap0: ignored: set checksum disabled [ 401.937345][T17831] netlink: 'syz.2.3225': attribute type 3 has an invalid length. [ 402.070451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 402.078543][ C0] lec:lec_tx_timeout: lec0 [ 402.084040][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.092349][ T5828] syz_tun (unregistering): left allmulticast mode [ 402.222964][T17823] chnl_net:caif_netlink_parms(): no params data found [ 402.318980][T17845] netlink: 'syz.1.3230': attribute type 17 has an invalid length. [ 402.330209][T17845] __nla_validate_parse: 5 callbacks suppressed [ 402.330228][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 402.347552][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3230'. [ 402.357148][T17823] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.364511][T17823] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.372145][T17823] bridge_slave_0: entered allmulticast mode [ 402.379733][T17823] bridge_slave_0: entered promiscuous mode [ 402.402074][T17823] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.410753][T17823] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.418160][T17823] bridge_slave_1: entered allmulticast mode [ 402.425587][T17823] bridge_slave_1: entered promiscuous mode [ 402.533511][T17823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.560814][T17823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.655061][T17823] team0: Port device team_slave_0 added [ 402.664596][T17823] team0: Port device team_slave_1 added [ 402.696359][T17853] netlink: 'syz.4.3234': attribute type 83 has an invalid length. [ 402.827265][T17823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.844508][T17823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.915882][T17823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.950315][T17823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.978953][T17823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.053468][T17823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.109543][T17859] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 403.119679][T17855] syzkaller0: entered promiscuous mode [ 403.127974][T17855] syzkaller0: entered allmulticast mode [ 403.147959][T17868] bond0: (slave rose0): Error: Device can not be enslaved while up [ 403.281601][T17876] netlink: 'syz.4.3238': attribute type 4 has an invalid length. [ 403.292290][T17876] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3238'. [ 403.627978][T17881] netlink: 'syz.1.3239': attribute type 58 has an invalid length. [ 403.636817][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3239'. [ 403.769934][ T5837] Bluetooth: hci1: command tx timeout [ 403.837677][ T5837] Bluetooth: hci2: command tx timeout [ 405.031308][T17876] wlan1: mtu less than device minimum [ 405.192826][T17823] hsr_slave_0: entered promiscuous mode [ 405.212867][T17823] hsr_slave_1: entered promiscuous mode [ 405.224791][T17823] debugfs: 'hsr0' already exists in 'hsr' [ 405.255910][T17823] Cannot create hsr debugfs directory [ 405.370794][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 405.418639][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 405.418888][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3244'. [ 405.430806][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 405.474836][T17903] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3247'. [ 405.486217][T17897] veth0_macvtap: left promiscuous mode [ 405.760084][T17823] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.785675][T17823] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 1792 - 0 [ 405.826008][T17823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38346 - 0 [ 405.855282][T17823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 405.912598][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 405.922435][ T5837] Bluetooth: hci2: command tx timeout [ 405.966178][T17927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.256173][T17823] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.266486][T17823] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 1792 - 0 [ 406.277348][T17823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38346 - 0 [ 406.288105][T17823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.304439][T17936] tipc: Enabling of bearer rejected, failed to enable media [ 406.381202][T17823] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.405986][T17823] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 1792 - 0 [ 406.421272][T17823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38346 - 0 [ 406.447495][T17823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.493386][T17948] ipt_REJECT: TCP_RESET invalid for non-tcp [ 406.552592][T17823] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.562710][T17823] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 1792 - 0 [ 406.572947][T17823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38346 - 0 [ 406.600777][T17823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 406.908278][T17955] C speed is unknown, defaulting to 1000 [ 407.095849][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 407.104326][ C0] lec:lec_tx_timeout: lec0 [ 407.109338][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 407.339864][T17971] bond2 (unregistering): Released all slaves [ 407.382346][T17974] syzkaller0: entered promiscuous mode [ 407.388103][T17974] syzkaller0: entered allmulticast mode [ 407.579953][T17982] __nla_validate_parse: 7 callbacks suppressed [ 407.579972][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 407.688802][T17823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.736151][T17982] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3269'. [ 407.787178][T17823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.832904][T17823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.882579][T17823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.996148][ T5837] Bluetooth: hci2: command tx timeout [ 408.119675][T14381] bond0: (slave bond_slave_0): interface is now down [ 408.138058][T14381] bond0: (slave bond_slave_1): interface is now down [ 408.177320][T17823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.213430][T17823] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.237365][T14387] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.244566][T14387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.298096][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.305299][T14388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.367893][T18008] gre1: entered promiscuous mode [ 408.372892][T18008] gre1: entered allmulticast mode [ 408.520794][T18013] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3280'. [ 408.538522][T18015] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3279'. [ 408.843095][T18032] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3284'. [ 408.870602][T17823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.891263][T18031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.974725][T17823] veth0_vlan: entered promiscuous mode [ 408.999615][T17823] veth1_vlan: entered promiscuous mode [ 409.053307][T17823] veth0_macvtap: entered promiscuous mode [ 409.075559][T17823] veth1_macvtap: entered promiscuous mode [ 409.104251][T17823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.182340][T17823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.207199][T18050] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3288'. [ 409.235260][T14390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.255274][T14390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.311048][T14390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.323538][T14390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.570498][T18064] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3292'. [ 409.712374][T18073] IPv6: NLM_F_CREATE should be specified when creating new route [ 409.720655][T18073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.727934][T18073] IPv6: NLM_F_CREATE should be set when creating new route [ 409.736597][T18070] netlink: 'syz.2.3293': attribute type 8 has an invalid length. [ 410.079160][ T5837] Bluetooth: hci2: command tx timeout [ 410.723194][T14390] bond0: (slave bond_slave_0): interface is now down [ 410.730041][T14390] bond0: (slave bond_slave_1): interface is now down [ 411.370370][T12253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.421944][T12253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.509513][T18081] Bluetooth: MGMT ver 1.23 [ 411.523504][T14382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.536963][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 411.546565][T14382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.576561][T18081] bridge_slave_1: left allmulticast mode [ 411.599569][T18081] bridge_slave_1: left promiscuous mode [ 411.605403][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.626945][T18081] bridge_slave_0: left allmulticast mode [ 411.632710][T18081] bridge_slave_0: left promiscuous mode [ 411.638996][T18082] netlink: 'syz.1.3295': attribute type 13 has an invalid length. [ 411.646409][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 411.647824][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.817665][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 412.116199][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 412.124330][ C0] lec:lec_tx_timeout: lec0 [ 412.129023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 412.231361][T18107] Cannot find add_set index 0 as target [ 412.324812][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.340376][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.349005][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.389988][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.406926][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.540595][T18121] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 412.541103][T18110] C speed is unknown, defaulting to 1000 [ 412.617358][T18124] netlink: zone id is out of range [ 412.622538][T18124] netlink: zone id is out of range [ 412.662344][T18120] netlink: set zone limit has 4 unknown bytes [ 412.780035][ T5823] syz_tun (unregistering): left allmulticast mode [ 412.887062][T18139] netlink: 'syz.2.3313': attribute type 32 has an invalid length. [ 413.279937][T14387] bond0: (slave bond_slave_0): interface is now down [ 413.298944][T14387] bond0: (slave bond_slave_1): interface is now down [ 413.404956][T14388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 413.431790][T14388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 413.679712][T14388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 413.696214][T14388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 413.794417][ T5897] IPVS: starting estimator thread 0... [ 413.795165][T14388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 413.816742][T14388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 413.882007][T18110] chnl_net:caif_netlink_parms(): no params data found [ 413.908554][T18187] sock: sock_set_timeout: `syz.2.3326' (pid 18187) tries to set negative timeout [ 413.922130][T18181] IPVS: using max 32 ests per chain, 76800 per kthread [ 414.136737][T18199] __nla_validate_parse: 2 callbacks suppressed [ 414.136755][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 414.153985][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'. [ 414.212175][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3330'. [ 414.223525][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3331'. [ 414.232960][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 414.267617][T12253] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.286671][T18204] vxcan2: entered allmulticast mode [ 414.340342][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.347792][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.355202][T18110] bridge_slave_0: entered allmulticast mode [ 414.364065][T18110] bridge_slave_0: entered promiscuous mode [ 414.384291][T18192] syzkaller0: entered promiscuous mode [ 414.397106][T18192] syzkaller0: entered allmulticast mode [ 414.434050][T14381] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.450605][T18215] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3334'. [ 414.461533][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.476701][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.478358][ T5837] Bluetooth: hci4: command tx timeout [ 414.498157][T18110] bridge_slave_1: entered allmulticast mode [ 414.503728][T18218] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 414.514511][T18110] bridge_slave_1: entered promiscuous mode [ 414.600022][T18204] syzkaller1: entered promiscuous mode [ 414.605546][T18204] syzkaller1: entered allmulticast mode [ 414.628045][T14381] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.669978][T12253] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.698719][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.722477][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.856467][T14388] bridge_slave_0: left promiscuous mode [ 414.862329][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.024718][T18241] IPVS: set_ctl: invalid protocol: 135 172.20.20.58:20002 [ 415.063310][T18241] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 415.210185][T18252] atomic_op ffff888029388998 conn xmit_atomic 0000000000000000 [ 415.465963][T14388] gretap0 (unregistering): left promiscuous mode [ 415.544127][T14388] dvmrp6 (unregistering): left allmulticast mode [ 415.699275][T14388] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 415.707775][T14388] bridge1 (unregistering): left promiscuous mode [ 415.809605][T14388] bond5 (unregistering): (slave bridge3): Releasing active interface [ 415.837094][T14381] bond0: (slave bond_slave_0): interface is now down [ 415.843940][T14381] bond0: (slave bond_slave_1): interface is now down [ 416.069799][T14388] bond0 (unregistering): left promiscuous mode [ 416.077177][T14388] bond_slave_0: left promiscuous mode [ 416.082915][T14388] bond_slave_1: left promiscuous mode [ 416.088851][T14388] bridge_slave_1: left promiscuous mode [ 416.094568][T14388] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 416.111158][T14388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.120351][T14388] bond_slave_0: left allmulticast mode [ 416.128840][T14388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.138971][T14388] bond_slave_1: left allmulticast mode [ 416.145650][T14388] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 416.155167][T14388] bridge_slave_1: left allmulticast mode [ 416.164150][T14388] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 416.174831][T14388] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 416.185700][T14388] bond0 (unregistering): Released all slaves [ 416.196076][T14388] bond1 (unregistering): Released all slaves [ 416.209323][T14388] bond2 (unregistering): Released all slaves [ 416.223809][T14388] bond3 (unregistering): Released all slaves [ 416.239687][T14388] bond4 (unregistering): Released all slaves [ 416.259047][T14388] bond5 (unregistering): Released all slaves [ 416.272315][T14388] bond6 (unregistering): (slave veth5): Releasing active interface [ 416.281053][T14388] bond6 (unregistering): Released all slaves [ 416.298731][T14388] bond7 (unregistering): Released all slaves [ 416.311619][T14388] bond8 (unregistering): Released all slaves [ 416.325242][T14388] bond9 (unregistering): Released all slaves [ 416.347462][T14388] bond10 (unregistering): Released all slaves [ 416.360142][T14388] bond11 (unregistering): Released all slaves [ 416.386758][T18110] team0: Port device team_slave_0 added [ 416.446966][T18110] team0: Port device team_slave_1 added [ 416.559098][ T5837] Bluetooth: hci4: command tx timeout [ 416.582851][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.603560][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.631358][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.647339][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.654538][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.681720][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.696845][T14388] tipc: Disabling bearer [ 416.703859][T18276] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.711529][T14388] tipc: Left network mode [ 416.745248][T18286] netlink: 'syz.2.3350': attribute type 21 has an invalid length. [ 416.756733][T18286] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.764736][T18286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.772009][T18286] IPv6: NLM_F_CREATE should be set when creating new route [ 416.779511][T18286] IPv6: NLM_F_CREATE should be set when creating new route [ 416.786805][T18286] IPv6: NLM_F_CREATE should be set when creating new route [ 416.863433][T18291] netlink: zone id is out of range [ 416.905700][T18291] netlink: zone id is out of range [ 416.916142][T18291] netlink: zone id is out of range [ 416.921872][T18291] netlink: zone id is out of range [ 416.940074][T18291] netlink: zone id is out of range [ 416.949375][T18291] netlink: zone id is out of range [ 416.963765][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3353'. [ 417.067423][T18295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3352'. [ 417.136142][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.144272][ C0] lec:lec_tx_timeout: lec0 [ 417.149448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.188326][T18110] hsr_slave_0: entered promiscuous mode [ 417.221174][T18110] hsr_slave_1: entered promiscuous mode [ 417.239748][T18110] debugfs: 'hsr0' already exists in 'hsr' [ 417.260837][T18110] Cannot create hsr debugfs directory [ 417.451392][T18324] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3360'. [ 417.528803][T18327] SET target dimension over the limit! [ 417.545735][T18323] ip6gre1: entered allmulticast mode [ 417.712312][T14388] hsr_slave_0: left promiscuous mode [ 417.729545][T14388] hsr_slave_1: left promiscuous mode [ 417.750649][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'. [ 417.854417][T18343] netlink: 'syz.3.3364': attribute type 4 has an invalid length. [ 418.154958][T18340] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 418.164603][T18343] .`: renamed from bond0 [ 418.293991][T18110] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.397885][T12253] bond0: (slave bond_slave_0): interface is now down [ 418.404624][T12253] bond0: (slave bond_slave_1): interface is now down [ 418.431706][T12253] bond0: now running without any active interface! [ 418.479838][T18110] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.636669][ T5825] Bluetooth: hci4: command tx timeout [ 418.730338][T18110] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.790561][T18381] net_ratelimit: 6 callbacks suppressed [ 418.790665][T18381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.914147][T18389] team0 (unregistering): Port device team_slave_0 removed [ 418.970387][T18389] team0 (unregistering): Port device team_slave_1 removed [ 419.024508][T18110] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.089517][T18385] team0 (unregistering): Port device team_slave_0 removed [ 419.104863][T18385] team0 (unregistering): Port device team_slave_1 removed [ 419.196399][T18386] C speed is unknown, defaulting to 1000 [ 419.332334][T18405] x_tables: duplicate underflow at hook 3 [ 419.357131][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 419.363286][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 419.485467][T18410] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.494411][T18409] syz_tun: entered allmulticast mode [ 419.531416][T18409] __nla_validate_parse: 5 callbacks suppressed [ 419.531447][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 419.574188][T18409] syz_tun (unregistering): left allmulticast mode [ 419.591969][T18110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.627725][T18110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.663558][T18110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.700216][T18110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.923131][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 419.999761][T18445] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 420.036213][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.089562][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.113988][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.121198][T14388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.141150][T18451] netlink: 'syz.3.3384': attribute type 21 has an invalid length. [ 420.161513][T18451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3384'. [ 420.178242][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.185499][T14388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.204355][T18453] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 420.231461][T18110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.256062][T18110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.287646][T18451] netlink: 'syz.3.3384': attribute type 4 has an invalid length. [ 420.295411][T18451] netlink: 'syz.3.3384': attribute type 5 has an invalid length. [ 420.314970][T18451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3384'. [ 420.749674][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'. [ 420.767028][ T5837] Bluetooth: hci4: command tx timeout [ 420.836075][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'. [ 420.877205][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.966253][T18495] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 421.004623][T18495] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3391'. [ 421.040868][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 421.094640][T18500] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 421.453240][T18519] x_tables: duplicate underflow at hook 2 [ 421.590880][T18110] veth0_vlan: entered promiscuous mode [ 421.667327][T18110] veth1_vlan: entered promiscuous mode [ 421.712783][T18110] veth0_macvtap: entered promiscuous mode [ 421.790307][T18110] veth1_macvtap: entered promiscuous mode [ 421.914007][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.954251][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.030995][T14387] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.041305][T14387] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.088048][T14387] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.119830][T14387] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.156091][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 422.164135][ C0] lec:lec_tx_timeout: lec0 [ 422.168785][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 422.183401][T18555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3409'. [ 422.337374][T14381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.364323][T14381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.447705][T14389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.465287][T14389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.621092][T18574] syzkaller1: entered promiscuous mode [ 422.647359][T18574] syzkaller1: entered allmulticast mode [ 422.816815][T18594] sctp: [Deprecated]: syz.1.3417 (pid 18594) Use of int in max_burst socket option deprecated. [ 422.816815][T18594] Use struct sctp_assoc_value instead [ 422.892995][T18592] bond0: entered promiscuous mode [ 422.899131][T18592] bond0: entered allmulticast mode [ 422.909508][T18592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.962490][T18593] IPv6: sit1: Disabled Multicast RS [ 422.980720][T18593] sit1: entered allmulticast mode [ 423.260805][T18609] syzkaller0: entered promiscuous mode [ 423.293740][T18609] syzkaller0: entered allmulticast mode [ 423.376848][T18617] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3425'. [ 423.390160][T18617] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 423.484464][T18631] SET target dimension over the limit! [ 423.931101][T18645] xt_CT: No such helper "pptp" [ 424.380497][T18666] netlink: 'syz.3.3435': attribute type 21 has an invalid length. [ 424.611532][T18666] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 424.638904][T18666] bond2 (unregistering): Released all slaves [ 424.706759][T18706] __nla_validate_parse: 5 callbacks suppressed [ 424.706777][T18706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3445'. [ 424.759267][T18691] veth1_vlan: entered allmulticast mode [ 424.795302][T18699] gre1: entered promiscuous mode [ 424.799226][T18711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3446'. [ 424.826251][T18699] gre1: entered allmulticast mode [ 424.862712][T18708] : entered promiscuous mode [ 425.187473][T18736] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 425.222812][T18736] bond2: entered promiscuous mode [ 425.228079][T18736] bond2: entered allmulticast mode [ 425.233666][T18736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.244580][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3456'. [ 425.266179][T18739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3456'. [ 425.328617][T18736] veth5: entered allmulticast mode [ 425.364076][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3457'. [ 425.415389][T18741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3457'. [ 425.801001][T18772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 425.821319][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 425.828274][T18770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3464'. [ 425.884441][T18774] hsr_slave_0 (unregistering): left promiscuous mode [ 426.047696][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 426.097313][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3474'. [ 426.606962][T18827] netlink: 'syz.0.3486': attribute type 29 has an invalid length. [ 426.654183][T18827] netlink: 'syz.0.3486': attribute type 29 has an invalid length. [ 426.795558][T18837] bond1: (slave vlan0): Enslaving as a backup interface with a down link [ 426.814732][T18834] xt_l2tp: missing protocol rule (udp|l2tpip) [ 426.836014][T18842] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 426.861513][T18842] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 426.978079][T18837] netlink: 'syz.4.3489': attribute type 29 has an invalid length. [ 426.987428][T18837] netlink: 'syz.4.3489': attribute type 29 has an invalid length. [ 427.175836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 427.183921][ C0] lec:lec_tx_timeout: lec0 [ 427.524856][T18879] lo: Caught tx_queue_len zero misconfig [ 427.874926][T18898] tipc: Failed to obtain node identity [ 427.881745][T18898] tipc: Enabling of bearer rejected, failed to enable media [ 427.950278][T18908] syzkaller0: entered promiscuous mode [ 427.955997][T18908] syzkaller0: entered allmulticast mode [ 428.242777][T18922] xt_bpf: check failed: parse error [ 428.275447][T18924] openvswitch: netlink: Invalid VLAN frame [ 428.451512][T18936] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 428.485194][T18936] veth0: entered promiscuous mode [ 428.498007][T18936] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.510885][T18936] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 428.524279][T18936] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 428.581044][T18944] xfrm1: entered promiscuous mode [ 428.592752][T18944] xfrm1: entered allmulticast mode [ 428.610322][T18935] veth0: left promiscuous mode [ 428.626373][T18947] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 429.077621][T18974] x_tables: unsorted entry at hook 2 [ 429.474286][T19003] netlink: 'syz.3.3540': attribute type 16 has an invalid length. [ 429.484284][T19003] netlink: 'syz.3.3540': attribute type 17 has an invalid length. [ 429.578765][T19003] 8021q: adding VLAN 0 to HW filter on device .` [ 429.598939][T19003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.783157][T19020] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 430.089011][T19037] __nla_validate_parse: 16 callbacks suppressed [ 430.089034][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 430.113268][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3548'. [ 430.139727][T19040] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3549'. [ 430.203400][T19044] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 430.354206][T19053] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 430.366914][T19053] netlink: 'syz.2.3552': attribute type 2 has an invalid length. [ 430.374781][T19053] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 430.405920][T19053] netlink: 'syz.2.3552': attribute type 3 has an invalid length. [ 430.458959][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 430.696871][T14388] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.708149][T14390] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.719502][T14390] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.749178][T14390] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.887070][T19098] netlink: 'syz.2.3563': attribute type 12 has an invalid length. [ 431.010485][T19098] bond2: option primary_reselect: invalid value (255) [ 431.039343][T19098] bond2 (unregistering): Released all slaves [ 431.199633][ T1934] block nbd3: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 90 seconds [ 431.210740][ T1934] block nbd3: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 90 seconds [ 431.221866][ T1934] block nbd3: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 90 seconds [ 431.232955][ T1934] block nbd3: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 90 seconds [ 431.254442][T19108] 8021q: VLANs not supported on ip_vti0 [ 431.264320][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.318799][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.325752][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.345235][T19111] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.453891][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.494399][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.507064][T19135] netlink: 'syz.4.3571': attribute type 1 has an invalid length. [ 431.510622][T19136] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 431.525155][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.548079][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.593747][T19135] bond3: entered promiscuous mode [ 431.603745][T19135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.640577][T19149] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 431.680290][T19149] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 431.693173][T19149] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 431.723348][T19140] bond3: (slave bridge1): making interface the new active one [ 431.731602][T19140] bridge1: entered promiscuous mode [ 431.739383][T19140] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 431.754810][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.777188][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.785062][T19111] hsr0 speed is unknown, defaulting to 1000 [ 431.793155][T19111] hsr0 speed is unknown, defaulting to 1000 [ 432.048050][T19174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.205411][T19190] openvswitch: netlink: IP tunnel dst address not specified [ 432.219785][T19185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.228305][T19188] ip6tnl0: Caught tx_queue_len zero misconfig [ 432.281968][T19191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.285709][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 432.291845][T19191] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 432.313159][T19191] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 432.363319][T19185] veth7: entered promiscuous mode [ 432.372583][T19185] bond3: (slave veth7): Enslaving as an active interface with a down link [ 432.434114][T19198] vlan2: entered allmulticast mode [ 432.452278][T19198] bond3: entered allmulticast mode [ 432.489833][T19206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3589'. [ 432.752762][T19220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3595'. [ 432.786558][T19221] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3595'. [ 432.928478][T19231] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3598'. [ 433.246449][T19254] bond4: Removing last ns target with arp_interval on [ 433.504470][T19271] validate_nla: 3 callbacks suppressed [ 433.504488][T19271] netlink: 'syz.0.3610': attribute type 3 has an invalid length. [ 433.531082][T19271] bridge0: port 3(ipvlan2) entered blocking state [ 433.538378][T19271] bridge0: port 3(ipvlan2) entered disabled state [ 433.545442][T19271] ipvlan2: entered allmulticast mode [ 433.551296][T19271] bridge0: entered allmulticast mode [ 433.559401][T19271] ipvlan2: left allmulticast mode [ 433.564847][T19271] bridge0: left allmulticast mode [ 433.863070][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 434.085019][T19284] bond5: entered promiscuous mode [ 434.406411][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.424950][T19315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.450726][T19317] vlan2: entered promiscuous mode [ 434.461487][T19317] bridge0: entered promiscuous mode [ 434.469490][T19318] erspan0: entered promiscuous mode [ 434.822239][T19339] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.195372][T19260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.744610][T19373] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 436.756486][T19369] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 436.851769][T19378] __nla_validate_parse: 5 callbacks suppressed [ 436.851788][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3643'. [ 436.998769][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3645'. [ 437.086088][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 437.348272][T19416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 437.375419][T19416] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 437.408967][T19416] gretap1: entered promiscuous mode [ 437.419977][T19416] gretap1: entered allmulticast mode [ 437.557465][T19431] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3658'. [ 437.584816][T19435] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 437.659203][T19436] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 437.661373][T19440] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3660'. [ 437.678453][T19440] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 437.755750][T19445] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3661'. [ 438.611657][T19467] nbd: must specify at least one socket [ 438.645968][T19473] netlink: 'syz.4.3669': attribute type 1 has an invalid length. [ 438.682273][T19467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.892577][T19481] C speed is unknown, defaulting to 1000 [ 438.900835][T19481] hsr0 speed is unknown, defaulting to 1000 [ 438.932846][T19490] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3674'. [ 438.976952][T19497] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3676'. [ 439.102507][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 439.209228][T19511] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 439.223806][T19510] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3678'. [ 439.249103][T19504] vlan2: entered allmulticast mode [ 439.254377][T19504] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 439.647798][T19540] C speed is unknown, defaulting to 1000 [ 439.694769][T19540] hsr0 speed is unknown, defaulting to 1000 [ 440.053851][T14390] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.062770][T14390] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.100738][T14387] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.141752][T14387] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.173675][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.182522][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 440.641162][T19601] x_tables: ip_tables: ah match: only valid for protocol 51 [ 440.652170][T19602] Unsupported ieee802154 address type: 0 [ 440.710626][T19605] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 440.775367][T19609] netlink: 'syz.0.3705': attribute type 29 has an invalid length. [ 440.889801][T19609] netlink: 'syz.0.3705': attribute type 29 has an invalid length. [ 440.926234][T19609] netlink: 'syz.0.3705': attribute type 29 has an invalid length. [ 440.957839][T19609] netlink: 'syz.0.3705': attribute type 29 has an invalid length. [ 440.996412][T19609] netlink: 'syz.0.3705': attribute type 29 has an invalid length. [ 441.117204][T19630] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 441.217385][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.491959][T19668] sctp: [Deprecated]: syz.2.3719 (pid 19668) Use of int in max_burst socket option. [ 441.491959][T19668] Use struct sctp_assoc_value instead [ 444.074352][T19630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.317967][T19710] __nla_validate_parse: 8 callbacks suppressed [ 444.317986][T19710] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3726'. [ 444.352321][ T29] audit: type=1107 audit(1772943395.276:5): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P™Ú."Ü·¹™' [ 444.360262][T19710] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3726'. [ 444.413992][T19713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.444565][T19713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.464413][T19721] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3727'. [ 444.502978][T19713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.535888][T19713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.780033][T19729] C speed is unknown, defaulting to 1000 [ 444.792317][T19736] netlink: 'syz.3.3731': attribute type 10 has an invalid length. [ 444.818776][T19737] Cannot find set identified by id 0 to match [ 444.849609][T19729] hsr0 speed is unknown, defaulting to 1000 [ 445.050580][T19749] sctp: [Deprecated]: syz.3.3733 (pid 19749) Use of int in max_burst socket option deprecated. [ 445.050580][T19749] Use struct sctp_assoc_value instead [ 445.206148][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 445.214267][ C0] lec:lec_tx_timeout: lec0 [ 445.699883][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3740'. [ 445.709043][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3740'. [ 445.883155][T19786] syzkaller1: entered allmulticast mode [ 446.279933][T19808] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 446.322420][T19814] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 446.351141][T19814] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 446.533947][T19833] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3756'. [ 446.611622][T19841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3755'. [ 446.728233][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 446.752037][T19848] block nbd6: Unsupported socket: should be TCP or UNIX. [ 446.855022][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'. [ 446.864129][T19855] gretap0: left allmulticast mode [ 446.869398][T19855] gretap0: left promiscuous mode [ 446.875391][T19855] bridge0: port 3(gretap0) entered disabled state [ 446.907547][T19855] bridge_slave_1: left allmulticast mode [ 446.913244][T19855] bridge_slave_1: left promiscuous mode [ 446.921895][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.945090][T19855] bridge_slave_0: left allmulticast mode [ 446.963037][T19855] bridge_slave_0: left promiscuous mode [ 446.970113][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.422860][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3768'. [ 447.505944][T19890] tipc: Started in network mode [ 447.510854][T19890] tipc: Node identity f66c6da086a9, cluster identity 4711 [ 447.531186][T19890] tipc: Enabled bearer , priority 0 [ 447.546733][T19890] syzkaller0: entered promiscuous mode [ 447.552338][T19890] syzkaller0: entered allmulticast mode [ 447.572596][T19889] tipc: Enabling of bearer rejected, already enabled [ 447.696463][T19890] tipc: Resetting bearer [ 447.720527][T19889] xt_hashlimit: size too large, truncated to 1048576 [ 447.848543][T19890] C speed is unknown, defaulting to 1000 [ 447.885327][T19890] hsr0 speed is unknown, defaulting to 1000 [ 447.987640][T19911] netlink: 'syz.0.3777': attribute type 9 has an invalid length. [ 448.040105][T19888] tipc: Resetting bearer [ 448.074240][T19888] tipc: Disabling bearer [ 448.349835][T19928] veth0: entered promiscuous mode [ 448.375724][T19926] veth0: left promiscuous mode [ 448.744482][T19953] netlink: 'syz.1.3793': attribute type 1 has an invalid length. [ 449.033307][T19983] netlink: 'syz.0.3800': attribute type 11 has an invalid length. [ 449.054351][T19983] netlink: 'syz.0.3800': attribute type 4 has an invalid length. [ 449.227223][T19992] ipt_rpfilter: unknown options [ 449.299371][T19996] sctp: [Deprecated]: syz.3.3806 (pid 19996) Use of int in maxseg socket option. [ 449.299371][T19996] Use struct sctp_assoc_value instead [ 449.393518][T20003] __nla_validate_parse: 8 callbacks suppressed [ 449.393537][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3807'. [ 450.002594][T20029] netlink: 'syz.4.3814': attribute type 10 has an invalid length. [ 450.032607][T20032] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3819'. [ 450.052628][T20029] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3814'. [ 450.073672][T20032] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3819'. [ 450.395235][T20055] C speed is unknown, defaulting to 1000 [ 450.464521][T20055] hsr0 speed is unknown, defaulting to 1000 [ 450.711816][T20074] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.253861][T20110] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3837'. [ 451.492795][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 451.564111][T20129] hsr_slave_0: left promiscuous mode [ 451.581408][T20129] hsr_slave_1: left promiscuous mode [ 451.669082][T20132] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3848'. [ 451.712319][T20132] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3848'. [ 451.735342][T20132] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 451.812410][T20135] bond6: entered promiscuous mode [ 451.822920][T20135] bond6: entered allmulticast mode [ 451.834878][T20135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.860119][T20141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3850'. [ 452.044710][T20156] netlink: 'syz.3.3855': attribute type 32 has an invalid length. [ 452.082179][T20154] syzkaller1: entered promiscuous mode [ 452.082851][T20160] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 452.088011][T20154] syzkaller1: entered allmulticast mode [ 452.153278][T20160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.243933][T20174] syzkaller1: left promiscuous mode [ 452.250909][T20174] syzkaller1: left allmulticast mode [ 452.419599][T20182] xt_connbytes: Forcing CT accounting to be enabled [ 452.591210][T20193] netlink: 'syz.2.3864': attribute type 13 has an invalid length. [ 452.667018][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 453.108702][T20214] netlink: 'syz.2.3874': attribute type 4 has an invalid length. [ 453.147957][T20214] netlink: 'syz.2.3874': attribute type 4 has an invalid length. [ 453.386561][T20230] netlink: 'syz.2.3879': attribute type 23 has an invalid length. [ 453.439682][T20237] xt_l2tp: wrong L2TP version: 0 [ 453.490431][T20229] bond4 (unregistering): Released all slaves [ 453.662461][T20245] bridge4: port 1(veth3) entered blocking state [ 453.678081][T20245] bridge4: port 1(veth3) entered disabled state [ 453.705698][T20245] veth3: entered allmulticast mode [ 453.733712][T20245] veth3: entered promiscuous mode [ 453.763891][T20249] bridge4: port 2(veth0_to_bond) entered blocking state [ 453.771163][T20249] bridge4: port 2(veth0_to_bond) entered disabled state [ 453.778623][T20249] veth0_to_bond: entered allmulticast mode [ 453.788309][T20249] veth0_to_bond: entered promiscuous mode [ 453.801087][T20256] openvswitch: netlink: Invalid VLAN frame [ 453.989274][T20273] syzkaller0: entered promiscuous mode [ 453.995148][T20273] syzkaller0: entered allmulticast mode [ 454.026772][T20275] netlink: 'syz.1.3893': attribute type 10 has an invalid length. [ 454.034986][T20272] tipc: Enabled bearer , priority 0 [ 454.048176][T20275] team0: Device vxcan1 is of different type [ 454.140426][T20272] tipc: Resetting bearer [ 454.191685][T20272] tipc: Disabling bearer [ 454.324980][T20294] sctp: [Deprecated]: syz.4.3899 (pid 20294) Use of int in max_burst socket option. [ 454.324980][T20294] Use struct sctp_assoc_value instead [ 454.344456][T20296] netlink: 'syz.3.3900': attribute type 8 has an invalid length. [ 454.355246][T20296] sch_fq: defrate 0 ignored. [ 454.630915][T20318] __nla_validate_parse: 3 callbacks suppressed [ 454.630937][T20318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3905'. [ 457.557890][T20311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.570581][T20327] netlink: 'syz.2.3906': attribute type 1 has an invalid length. [ 457.591564][T20327] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3906'. [ 457.612786][T20327] netlink: 'syz.2.3906': attribute type 1 has an invalid length. [ 457.644230][T20327] netlink: 'syz.2.3906': attribute type 8 has an invalid length. [ 457.652976][T20327] netlink: 606 bytes leftover after parsing attributes in process `syz.2.3906'. [ 457.662775][T20327] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3906'. [ 457.793769][T20345] ieee802154 phy1 wpan1: encryption failed: -126 [ 457.795390][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 457.811318][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3913'. [ 457.856847][T20353] ip6t_srh: unknown srh invflags 4000 [ 457.893824][T20346] netlink: 'syz.3.3913': attribute type 10 has an invalid length. [ 457.930184][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.937959][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.997586][T20346] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.004805][T20346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.012542][T20346] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.019861][T20346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.039186][T20346] .`: (slave bridge0): Enslaving as an active interface with an up link [ 458.507734][T20393] netlink: 'syz.0.3925': attribute type 1 has an invalid length. [ 458.689590][T20393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.813143][T20416] openvswitch: netlink: IP tunnel dst address not specified [ 458.818566][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3929'. [ 458.833895][T20420] openvswitch: netlink: IP tunnel dst address not specified [ 459.086316][T20431] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3936'. [ 459.194744][T20431] netlink: 'syz.4.3936': attribute type 1 has an invalid length. [ 459.326179][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 459.372427][T20456] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3936'. [ 459.426717][T20431] bond4: entered promiscuous mode [ 459.432252][T20431] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.583302][T20453] syzkaller0: entered promiscuous mode [ 459.592729][T20453] syzkaller0: entered allmulticast mode [ 459.603424][T20470] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 459.901520][T20490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3950'. [ 459.993936][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3949'. [ 461.281494][ T1934] block nbd3: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 120 seconds [ 461.294022][ T1934] block nbd3: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 120 seconds [ 461.307898][ T1934] block nbd3: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 120 seconds [ 461.319024][ T1934] block nbd3: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 120 seconds [ 461.865194][T20512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3954'. [ 461.884343][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3958'. [ 461.976773][T20527] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3954'. [ 462.244042][T20534] bond4: (slave vcan0): refused to change device type [ 462.313639][T20547] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3961'. [ 462.334503][T20553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3963'. [ 462.417982][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 462.626120][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3967'. [ 462.677750][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 462.723770][T20584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.808229][T14388] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.854631][T20571] syzkaller0: entered promiscuous mode [ 462.860698][T20571] syzkaller0: entered allmulticast mode [ 462.878613][T14388] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.916032][T14388] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.972602][T20590] delete_channel: no stack [ 463.056315][T14388] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.085396][T20596] wireguard0: entered promiscuous mode [ 463.125846][T20596] wireguard0: entered allmulticast mode [ 463.132824][T20603] sctp: [Deprecated]: syz.4.3976 (pid 20603) Use of int in max_burst socket option. [ 463.132824][T20603] Use struct sctp_assoc_value instead [ 463.262087][T20603] netlink: 'syz.4.3976': attribute type 21 has an invalid length. [ 463.295905][T20603] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.578163][T20575] infiniband syz1: set active [ 463.600956][T20575] infiniband syz1: added bond_slave_0 [ 463.710140][T20575] RDS/IB: syz1: added [ 463.715083][T20575] smc: adding ib device syz1 with port count 1 [ 463.726162][T20575] smc: ib device syz1 port 1 has no pnetid [ 464.029745][T20605] lec:lec_atm_close: lec0: Shut down! [ 464.308727][T20669] netlink: 'syz.3.3992': attribute type 1 has an invalid length. [ 464.447617][T20677] "syz.1.3993" (20677) uses obsolete ecb(arc4) skcipher [ 464.992222][T20705] __nla_validate_parse: 5 callbacks suppressed [ 464.992241][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4003'. [ 465.282001][T20723] --map-set only usable from mangle table [ 465.378061][T20732] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 465.400792][T20734] x_tables: unsorted underflow at hook 4 [ 465.407720][T20733] x_tables: unsorted underflow at hook 4 [ 465.455976][T20728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4009'. [ 465.548305][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4012'. [ 465.940775][T20759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4017'. [ 465.991561][T20759] xt_TCPMSS: Only works on TCP SYN packets [ 466.199624][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 466.238285][T20774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4020'. [ 466.430234][T20781] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4023'. [ 466.474511][T20781] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4023'. [ 466.533786][T20785] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 466.553878][T20788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4023'. [ 466.915264][T20800] bond5 (unregistering): Released all slaves [ 466.969211][T20803] syzkaller0: entered allmulticast mode [ 467.058926][T20809] openvswitch: netlink: IP tunnel dst address not specified [ 467.397251][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4039'. [ 467.704368][ T5897] IPVS: starting estimator thread 0... [ 467.815871][T20844] IPVS: using max 37 ests per chain, 88800 per kthread [ 468.042139][T20858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.071324][T20858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.095302][T20854] syzkaller0: entered promiscuous mode [ 468.101146][T20854] syzkaller0: entered allmulticast mode [ 468.303063][T20858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.328109][T20858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.490886][T20858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.525612][T20858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.603204][T20890] netlink: 'syz.0.4058': attribute type 2 has an invalid length. [ 468.648086][T20858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.666840][T20890] sctp: [Deprecated]: syz.0.4058 (pid 20890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.666840][T20890] Use struct sctp_sack_info instead [ 468.676152][T20858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.706397][T20901] netlink: 'syz.2.4059': attribute type 11 has an invalid length. [ 468.728823][T14381] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.748343][T14381] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.781675][T14381] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.806515][T14381] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.935392][T14390] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.945305][T14390] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.994888][T14389] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.009146][T14389] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.045891][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 469.053995][ C0] lec:lec_tx_timeout: lec0 [ 469.104706][T20920] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 469.331476][T20916] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.132488][ T5831] hsr0 speed is unknown, defaulting to 1000 [ 470.132609][T12253] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.141262][ T5831] syz2: Port: 1 Link DOWN [ 470.183247][T12253] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.202707][T12253] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.227046][T12253] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.256068][T12253] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.257352][T20945] ipt_REJECT: ECHOREPLY no longer supported. [ 470.275294][T12253] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.304126][T12253] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.323927][T12253] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.346619][T12253] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.377892][T12253] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.388341][T20954] xt_time: unknown flags 0xf4 [ 470.421982][T12253] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.431010][T12253] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.579897][T20965] __nla_validate_parse: 8 callbacks suppressed [ 470.579916][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'. [ 470.629580][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'. [ 470.648949][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 470.659911][T20969] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 470.671065][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'. [ 470.686066][T20969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4079'. [ 470.740229][T20974] hsr_slave_0 (unregistering): left promiscuous mode [ 470.791725][T20981] x_tables: unsorted entry at hook 3 [ 470.936599][T20990] netlink: 'syz.2.4084': attribute type 10 has an invalid length. [ 471.016429][T20990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 471.093415][T20997] bond5 (unregistering): Released all slaves [ 471.172010][T21010] IPv6: NLM_F_REPLACE set, but no existing node found! [ 471.187820][T21013] IPv6: NLM_F_REPLACE set, but no existing node found! [ 471.238608][T21015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'. [ 471.259122][T21015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'. [ 471.269772][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4092'. [ 471.542905][T12253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.555885][T12253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.589475][T21032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.599706][T21031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.602035][T21022] syzkaller0: entered promiscuous mode [ 471.626179][T21022] syzkaller0: entered allmulticast mode [ 472.288825][T21056] Cannot find add_set index 2 as target [ 472.506594][T21034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.822245][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'. [ 472.921967][T21082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4111'. [ 472.995068][T21090] netlink: 'syz.0.4113': attribute type 4 has an invalid length. [ 473.492919][T21102] netlink: 'syz.4.4118': attribute type 1 has an invalid length. [ 473.539554][T21102] tipc: Started in network mode [ 473.550238][T21102] tipc: Node identity e0000001, cluster identity 4711 [ 473.563917][T21102] tipc: Enabling of bearer rejected, failed to enable media [ 473.581798][T21108] tipc: Failed to remove unknown binding: 66,0,0/0:458567692/458567693 [ 473.602111][T21108] tipc: Failed to remove unknown binding: 66,0,0/0:458567692/458567693 [ 473.874807][T21125] netlink: 'syz.0.4124': attribute type 21 has an invalid length. [ 473.960047][T21125] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 474.013444][T21125] bond5 (unregistering): Released all slaves [ 474.769106][T21190] syzkaller0: entered promiscuous mode [ 474.798804][T21190] syzkaller0: entered allmulticast mode [ 475.080629][T21217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.229756][T21227] netlink: 'syz.2.4152': attribute type 4 has an invalid length. [ 475.245155][T21230] geneve2: entered promiscuous mode [ 475.276264][T21228] netlink: 'syz.2.4152': attribute type 4 has an invalid length. [ 475.328104][T21227] netlink: 'syz.2.4152': attribute type 4 has an invalid length. [ 475.528843][T21227] erspan0: left promiscuous mode [ 475.887092][T21265] __nla_validate_parse: 11 callbacks suppressed [ 475.887112][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4158'. [ 476.114659][T21227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.518718][T21265] bridge0: entered promiscuous mode [ 476.525342][T21265] macsec1: entered promiscuous mode [ 476.535511][T21265] macsec1: entered allmulticast mode [ 476.543453][T21265] bridge0: entered allmulticast mode [ 476.549845][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 476.551432][T21265] bridge0: port 1(macsec1) entered blocking state [ 476.571819][T21265] bridge0: port 1(macsec1) entered disabled state [ 476.581601][T21265] bridge0: left allmulticast mode [ 476.587443][T21265] bridge0: left promiscuous mode [ 476.598555][T14388] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.610228][T14388] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.623435][T14388] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.633309][T14388] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.675321][T21276] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 476.684522][T14388] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.707872][T14388] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.743367][T14388] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.775883][T14388] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.912892][T21295] siw: device registration error -23 [ 477.137887][T21317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4168'. [ 477.384669][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 477.447363][T21335] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4171'. [ 477.456449][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4172'. [ 477.471455][T21335] netlink: 'syz.3.4171': attribute type 1 has an invalid length. [ 477.480209][T21335] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4171'. [ 477.480296][T21337] batadv_slave_1: default FDB implementation only supports local addresses [ 477.531467][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4172'. [ 477.541310][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4172'. [ 477.654115][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 477.836858][T21364] bond0: (slave bond_slave_0): Releasing backup interface [ 477.878084][T21367] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 477.896915][T21364] bond0: (slave bond_slave_1): Releasing backup interface [ 477.913493][T21364] team0: Port device team_slave_0 removed [ 477.934562][T21364] team0: Port device team_slave_1 removed [ 477.959027][T21364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.974396][T21364] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 478.349585][T21398] netlink: 'syz.4.4185': attribute type 1 has an invalid length. [ 478.913647][T21427] erspan0: entered allmulticast mode [ 478.987412][T21432] syzkaller0: entered promiscuous mode [ 479.004274][T21432] syzkaller0: entered allmulticast mode [ 479.127891][T21441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.901806][T21491] veth0: entered promiscuous mode [ 479.930301][T21493] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 479.948752][T21493] bond5 (unregistering): Released all slaves [ 480.031066][T21501] netlink: 'syz.4.4212': attribute type 9 has an invalid length. [ 480.054161][T21501] netlink: 'syz.4.4212': attribute type 11 has an invalid length. [ 480.115829][T21501] netlink: 'syz.4.4212': attribute type 12 has an invalid length. [ 480.144747][T21492] veth0 (unregistering): left promiscuous mode [ 480.272970][T21508] openvswitch: netlink: Message has 6 unknown bytes. [ 480.310882][T21514] openvswitch: netlink: EtherType 50a is less than min 600 [ 480.475917][T21525] netlink: 'syz.2.4218': attribute type 1 has an invalid length. [ 480.525325][T21525] netlink: 'syz.2.4218': attribute type 1 has an invalid length. [ 480.544930][T21525] netlink: 'syz.2.4218': attribute type 2 has an invalid length. [ 480.705585][T21535] openvswitch: netlink: IP tunnel dst address not specified [ 480.858257][T12275] lec:lec_start_xmit: lec0:No lecd attached [ 481.215048][T21562] nftables ruleset with unbound set [ 481.387059][T21576] __nla_validate_parse: 16 callbacks suppressed [ 481.387080][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 481.651399][T21600] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4238'. [ 481.686403][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 481.738693][T21609] netlink: 'syz.2.4239': attribute type 1 has an invalid length. [ 481.773538][T21609] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4239'. [ 481.982811][T21618] netlink: 'syz.0.4241': attribute type 8 has an invalid length. [ 482.037277][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 482.255718][T21644] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.4247'. [ 482.288843][T21640] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4245'. [ 482.334601][T21644] netlink: Unknown conntrack attr (type=2304, max=9) [ 482.944935][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 482.980407][T21699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.018745][T21699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.708593][T21760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.729909][T21752] xt_hashlimit: max too large, truncated to 1048576 [ 485.995847][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms [ 486.003966][ C0] lec:lec_tx_timeout: lec0 [ 486.516313][T21738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.692330][T21800] netlink: 'syz.3.4285': attribute type 2 has an invalid length. [ 486.705535][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'. [ 486.707172][T21800] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4285'. [ 486.726559][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'. [ 486.757218][T21802] netlink: 'syz.1.4284': attribute type 1 has an invalid length. [ 486.765106][T21802] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4284'. [ 486.837397][T21811] : entered promiscuous mode [ 486.911371][T21813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4290'. [ 487.270464][T21839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4297'. [ 487.298760][T21843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 487.336125][T21843] openvswitch: netlink: Missing key (keys=40, expected=80) [ 487.346849][T21845] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4298'. [ 487.506580][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 487.522817][T21858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4301'. [ 487.684392][T21862] netlink: 'syz.1.4303': attribute type 83 has an invalid length. [ 487.721132][T21867] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 487.732677][T21867] bond3 (unregistering): Released all slaves [ 487.835206][T21862] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 487.850042][T21862] bond3 (unregistering): Released all slaves [ 488.228370][T21909] 8021q: VLANs not supported on ip6_vti0 [ 488.237604][T21908] netlink: 'syz.4.4313': attribute type 3 has an invalid length. [ 488.291838][T21908] netlink: set zone limit has 4 unknown bytes [ 488.299390][T21908] netlink: zone id is out of range [ 488.304568][T21908] netlink: zone id is out of range [ 488.330505][T21908] netlink: zone id is out of range [ 488.335668][T21908] netlink: zone id is out of range [ 488.346279][T21908] netlink: zone id is out of range [ 488.351447][T21908] netlink: zone id is out of range [ 488.369048][T21908] netlink: zone id is out of range [ 488.497473][T21933] macvtap1: entered promiscuous mode [ 488.503662][T21933] macvtap1: entered allmulticast mode [ 488.539663][T21932] macvtap2: entered promiscuous mode [ 488.545600][T21932] macvtap2: entered allmulticast mode [ 488.571736][T21931] macvtap2: entered promiscuous mode [ 488.577820][T21931] macvtap2: entered allmulticast mode [ 488.603803][T21933] syzkaller0: entered promiscuous mode [ 488.611888][T21933] syzkaller0: entered allmulticast mode [ 488.986249][T21958] bond5: entered promiscuous mode [ 488.995320][T21957] tipc: Started in network mode [ 489.018513][T21957] tipc: Node identity e0000001, cluster identity 4711 [ 489.044341][T21957] tipc: Enabling of bearer rejected, failed to enable media [ 489.294110][T21974] IPVS: Scheduler module ip_vs_sip not found [ 489.370438][T21986] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 489.379144][T21987] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 489.607622][T21991] xt_CT: No such helper "snmp_trap" [ 489.823995][T22007] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 490.217406][T22036] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 490.371796][T22043] dvmrp6: entered allmulticast mode [ 491.335233][T22101] xt_TCPMSS: Only works on TCP SYN packets [ 491.358323][ T1934] block nbd3: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 150 seconds [ 491.369639][ T1934] block nbd3: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 150 seconds [ 491.380750][ T1934] block nbd3: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 150 seconds [ 491.392685][ T1934] block nbd3: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 150 seconds [ 491.418562][T22104] policy can only be matched on NF_INET_PRE_ROUTING [ 491.418585][T22104] unable to load match [ 491.549820][T22068] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 492.170599][T22156] lo: entered promiscuous mode [ 492.180795][T22156] netlink: 'syz.1.4392': attribute type 2 has an invalid length. [ 492.196425][T22156] net_ratelimit: 1 callbacks suppressed [ 492.196441][T22156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.796186][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 493.282324][T22243] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 493.450152][T22256] netlink: 'syz.4.4423': attribute type 29 has an invalid length. [ 493.463910][T22258] netlink: 'syz.4.4423': attribute type 29 has an invalid length. [ 493.486627][T22256] netlink: 'syz.4.4423': attribute type 29 has an invalid length. [ 493.497152][T22256] netlink: 'syz.4.4423': attribute type 29 has an invalid length. [ 493.499287][T22250] PKCS7: Unknown OID: [4] (bad) [ 493.508321][T22256] netlink: 'syz.4.4423': attribute type 29 has an invalid length. [ 493.511567][T22250] PKCS7: Only support pkcs7_signedData type [ 493.600502][T22264] __nla_validate_parse: 16 callbacks suppressed [ 493.600530][T22264] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4425'. [ 493.793384][T22275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4430'. [ 493.811512][T22275] syzkaller1: entered promiscuous mode [ 493.818914][T22275] syzkaller1: entered allmulticast mode [ 493.819311][T22276] netlink: 'syz.0.4429': attribute type 39 has an invalid length. [ 493.967253][T22284] netlink: 'syz.3.4433': attribute type 12 has an invalid length. [ 494.031334][T22286] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.4434'. [ 494.248620][T22295] netlink: 'syz.2.4436': attribute type 11 has an invalid length. [ 494.269965][T22295] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4436'. [ 494.349923][T22297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4437'. [ 494.419382][T22297] bridge5: port 1(veth11) entered blocking state [ 494.429948][T22297] bridge5: port 1(veth11) entered disabled state [ 494.437642][T22299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4438'. [ 494.447728][T22297] veth11: entered allmulticast mode [ 494.453156][T22299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4438'. [ 494.467232][T22297] veth11: entered promiscuous mode [ 494.479259][T22300] bridge5: port 2(veth0_to_bond) entered blocking state [ 494.487775][T22300] bridge5: port 2(veth0_to_bond) entered disabled state [ 494.511164][T22300] veth0_to_bond: entered allmulticast mode [ 494.519437][T22300] veth0_to_bond: entered promiscuous mode [ 494.529391][T22299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4438'. [ 494.588947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888086efec00: rx timeout, send abort [ 494.597749][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888086efec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 494.699457][T22305] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 494.979867][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'. [ 495.008726][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4443'. [ 495.156937][T22331] xt_hashlimit: invalid interval [ 495.248239][T12253] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.278021][T12253] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.306594][T12253] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.340685][T22342] IPv6: sit1: Disabled Multicast RS [ 495.391753][T22342] sit1: entered allmulticast mode [ 495.419067][T12253] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 495.968431][T22385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.299949][T22411] openvswitch: netlink: Invalid VLAN frame [ 496.480950][T22420] ip6tnl0: Master is either lo or non-ether device [ 496.569622][T22428] x_tables: unsorted entry at hook 2 [ 497.638904][ T5194] udevd[5194]: worker [8945] /devices/virtual/block/nbd3 is taking a long time [ 498.337206][T22516] validate_nla: 8 callbacks suppressed [ 498.337228][T22516] netlink: 'syz.1.4508': attribute type 33 has an invalid length. [ 498.377024][T22516] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 498.390150][T22516] bond3 (unregistering): Released all slaves [ 498.722712][T22533] netlink: 'syz.1.4512': attribute type 9 has an invalid length. [ 498.990194][T22541] netlink: 'syz.0.4516': attribute type 13 has an invalid length. [ 499.113956][T22541] lec:lec_start_xmit: lec0:No lecd attached [ 499.291697][T22560] bridge0: entered allmulticast mode [ 499.359311][T22567] netlink: 'syz.1.4522': attribute type 16 has an invalid length. [ 499.380265][T22567] netlink: 'syz.1.4522': attribute type 17 has an invalid length. [ 499.397785][T22567] lo: left promiscuous mode [ 499.454125][T22567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.477735][T22567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.835566][T22582] __nla_validate_parse: 16 callbacks suppressed [ 499.835586][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4528'. [ 499.890842][T22580] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4527'. [ 499.960136][T22586] syzkaller0: entered promiscuous mode [ 499.965652][T22586] syzkaller0: entered allmulticast mode [ 499.988857][T22583] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4527'. [ 501.603598][ T1302] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 502.937516][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 503.117483][T22637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4536'. [ 503.431473][T22668] netlink: 'syz.1.4542': attribute type 10 has an invalid length. [ 503.452304][T22668] veth0_macvtap: left promiscuous mode [ 503.593632][T22614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.816008][T22679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4546'. [ 503.888589][T22684] netlink: 'syz.0.4549': attribute type 1 has an invalid length. [ 503.938513][T22684] bond6: entered promiscuous mode [ 503.957303][T22684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 503.980876][T22685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 503.999464][T22686] bond6: (slave bridge6): making interface the new active one [ 504.017320][T22686] bridge6: entered promiscuous mode [ 504.033213][T22686] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 504.060867][T22684] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.077385][T22684] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 504.126803][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 504.134857][ C0] lec:lec_tx_timeout: lec0 [ 504.145893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 504.666655][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 504.804497][T22710] bond1: (slave vlan0): Releasing backup interface [ 504.941369][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 504.976768][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4560'. [ 505.050332][T22723] netlink: 'syz.2.4558': attribute type 4 has an invalid length. [ 505.086266][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4563'. [ 505.113379][T22741] syzkaller0: entered promiscuous mode [ 505.119588][T22741] syzkaller0: entered allmulticast mode [ 505.233928][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 505.288765][T22758] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 505.344655][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4567'. [ 505.354706][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 506.797092][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 507.250399][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 507.272714][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 507.341346][T22776] syz.4.4570 (22776) used obsolete PPPIOCDETACH ioctl [ 507.379506][T22785] netlink: 'syz.2.4572': attribute type 3 has an invalid length. [ 507.441643][T22788] netlink: 'syz.3.4573': attribute type 1 has an invalid length. [ 507.450855][T22788] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4573'. [ 507.461236][T22788] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4573'. [ 507.765098][T22811] dummy0: Caught tx_queue_len zero misconfig [ 508.071880][T22835] netlink: 'syz.0.4588': attribute type 2 has an invalid length. [ 508.323285][T22852] netlink: 'syz.0.4593': attribute type 10 has an invalid length. [ 508.358538][T22852] netlink: 'syz.0.4593': attribute type 1 has an invalid length. [ 508.404721][T22854] xt_CONNSECMARK: invalid mode: 0 [ 508.417796][T22858] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.426633][T22858] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.796178][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 508.800885][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 509.108046][T22898] delete_channel: no stack [ 509.155805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 509.164350][ C0] lec:lec_tx_timeout: lec0 [ 509.196794][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 509.202635][T22905] syzkaller0: entered allmulticast mode [ 509.220059][T22905] syzkaller0 (unregistering): left allmulticast mode [ 509.547233][T22930] openvswitch: netlink: IP tunnel dst address not specified [ 509.582872][T22930] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 510.011392][T22953] __nla_validate_parse: 13 callbacks suppressed [ 510.011410][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4624'. [ 510.370489][T22969] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4629'. [ 510.384386][T22971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4628'. [ 510.493082][T22969] openvswitch: netlink: Key type 60 is out of range max 32 [ 510.517689][T22985] netlink: 'syz.2.4633': attribute type 1 has an invalid length. [ 510.622193][T22985] bond5: entered promiscuous mode [ 510.687134][T22985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.731586][T22995] bond5: (slave bridge4): making interface the new active one [ 510.740163][T22995] bridge4: entered promiscuous mode [ 510.762469][T22996] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4636'. [ 510.762469][T22995] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 510.915246][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4639'. [ 510.978794][T23024] netlink: 'syz.2.4643': attribute type 2 has an invalid length. [ 510.986766][T23024] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4643'. [ 512.021358][T23058] netlink: 'syz.1.4650': attribute type 1 has an invalid length. [ 512.136762][T23065] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4652'. [ 512.221305][T23069] netlink: 'syz.1.4653': attribute type 29 has an invalid length. [ 513.894791][T23019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.021764][ T818] IPVS: starting estimator thread 0... [ 514.167480][T23079] IPVS: using max 35 ests per chain, 84000 per kthread [ 514.206295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 514.214390][ C0] lec:lec_tx_timeout: lec0 [ 514.235874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 514.440884][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'. [ 514.451137][T23113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'. [ 514.630393][T23123] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4672'. [ 514.655876][T23123] netlink: 'syz.0.4672': attribute type 3 has an invalid length. [ 514.669695][T23123] netlink: 'syz.0.4672': attribute type 2 has an invalid length. [ 514.902910][T23141] netlink: 'syz.4.4677': attribute type 83 has an invalid length. [ 515.019378][T23149] __nla_validate_parse: 5 callbacks suppressed [ 515.019400][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 515.044224][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 515.055007][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 515.076931][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'. [ 515.093324][T23157] netlink: 'syz.1.4682': attribute type 12 has an invalid length. [ 515.108785][T23149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4679'. [ 515.186393][T23149] 8021q: adding VLAN 0 to HW filter on device bond9 [ 515.241764][T23155] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 515.253515][T23170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.470765][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4688'. [ 515.489099][T23180] netlink: 'syz.0.4688': attribute type 30 has an invalid length. [ 515.510302][T14383] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.536159][T14383] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.545378][T14383] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.558845][T14383] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.766044][T23210] netlink: 'syz.3.4695': attribute type 1 has an invalid length. [ 515.777030][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4692'. [ 515.874118][T23210] 8021q: adding VLAN 0 to HW filter on device bond10 [ 515.902365][T23217] netlink: 'syz.4.4697': attribute type 12 has an invalid length. [ 515.927496][T23209] bond10: (slave veth15): Enslaving as an active interface with a down link [ 515.936535][T23212] veth0_to_bond: left allmulticast mode [ 515.942707][T23212] veth0_to_bond: left promiscuous mode [ 515.949289][T23212] bridge5: port 2(veth0_to_bond) entered disabled state [ 515.962438][T23212] bond10: (slave veth0_to_bond): making interface the new active one [ 515.972634][T23212] veth0_to_bond: entered promiscuous mode [ 515.979303][T23212] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 516.037255][T23217] bond7: option primary_reselect: invalid value (255) [ 516.056248][T23217] bond7 (unregistering): Released all slaves [ 516.134301][T23226] erspan1: entered allmulticast mode [ 516.176040][T23236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4699'. [ 516.262103][T23240] netlink: 'syz.1.4703': attribute type 1 has an invalid length. [ 516.276148][T23240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4703'. [ 516.751331][T23274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.811386][T23283] netlink: 'syz.4.4716': attribute type 4 has an invalid length. [ 516.822731][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4715'. [ 516.839522][T23283] netlink: 'syz.4.4716': attribute type 16 has an invalid length. [ 516.856669][T23283] netlink: 'syz.4.4716': attribute type 17 has an invalid length. [ 516.870629][T23283] erspan0: left allmulticast mode [ 516.908760][T23286] xt_hashlimit: size too large, truncated to 1048576 [ 516.909177][T23283] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.922736][T23283] bridge0: port 2(bridge_slave_1) entered listening state [ 516.930215][T23283] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.937430][T23283] bridge0: port 1(bridge_slave_0) entered listening state [ 517.078380][T23299] netlink: 'syz.4.4716': attribute type 3 has an invalid length. [ 517.138692][T23283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.196278][T23292] –: renamed from vxcan1 (while UP) [ 517.464196][T23320] netlink: 'syz.0.4725': attribute type 1 has an invalid length. [ 517.495123][T23320] netlink: 'syz.0.4725': attribute type 2 has an invalid length. [ 517.526850][T23320] netlink: 'syz.0.4725': attribute type 1 has an invalid length. [ 517.540513][T23325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.878000][T23342] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.894751][T23342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.902078][T23342] IPv6: NLM_F_CREATE should be set when creating new route [ 517.909440][T23342] IPv6: NLM_F_CREATE should be set when creating new route [ 517.916966][T23342] IPv6: NLM_F_CREATE should be set when creating new route [ 517.957965][T23346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.254246][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.650285][T23397] TCP: TCP_TX_DELAY enabled [ 518.911683][T23419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.496353][T23458] openvswitch: netlink: Flow key attribute not present in set flow. [ 519.564777][T23456] C speed is unknown, defaulting to 1000 [ 519.589664][T23456] hsr0 speed is unknown, defaulting to 1000 [ 519.935064][T23480] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 520.163447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5920 ms [ 520.171545][ C0] lec:lec_tx_timeout: lec0 [ 520.177548][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 520.192610][T23495] __nla_validate_parse: 101 callbacks suppressed [ 520.192633][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 520.435183][T23499] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 520.452823][T23499] bond7 (unregistering): Released all slaves [ 520.504749][T23513] syzkaller0: entered promiscuous mode [ 520.515240][T23513] syzkaller0: entered allmulticast mode [ 520.671382][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 520.798363][T23530] validate_nla: 4 callbacks suppressed [ 520.798381][T23530] netlink: 'syz.0.4789': attribute type 1 has an invalid length. [ 520.823705][T23529] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 520.967906][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'. [ 521.081075][T23536] bond7: (slave bridge8): making interface the new active one [ 521.099307][T23536] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 521.126541][T23537] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 521.300537][T23557] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4797'. [ 521.455394][ T1934] block nbd3: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 180 seconds [ 521.467751][ T1934] block nbd3: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 180 seconds [ 521.480008][ T1934] block nbd3: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 180 seconds [ 521.491510][ T1934] block nbd3: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 180 seconds [ 521.709039][T23584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4802'. [ 521.719536][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4802'. [ 521.758339][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.899814][T23589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4804'. [ 521.931042][T23595] openvswitch: netlink: Flow actions attr not present in new flow. [ 522.012643][T23597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.093499][T23599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4807'. [ 522.282182][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'. [ 524.156032][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 524.164231][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 524.242279][T23629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4814'. [ 524.379193][T23646] netlink: 'syz.0.4819': attribute type 3 has an invalid length. [ 524.581884][T23654] C speed is unknown, defaulting to 1000 [ 524.610076][T23654] hsr0 speed is unknown, defaulting to 1000 [ 524.714940][T23667] netlink: 'syz.0.4826': attribute type 4 has an invalid length. [ 524.981312][T23675] bridge0: entered promiscuous mode [ 524.989188][T23675] bridge0: entered allmulticast mode [ 525.074430][T23684] bridge0: entered promiscuous mode [ 525.088837][T23684] macsec1: entered promiscuous mode [ 525.103738][T23684] macsec1: entered allmulticast mode [ 525.137625][T23684] bridge0: port 3(macsec1) entered blocking state [ 525.144185][T23684] bridge0: port 3(macsec1) entered disabled state [ 525.165304][T23684] bridge0: left promiscuous mode [ 525.183243][T23680] C speed is unknown, defaulting to 1000 [ 525.189042][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 525.189078][ C0] lec:lec_tx_timeout: lec0 [ 525.273369][T23697] netlink: 'syz.3.4833': attribute type 1 has an invalid length. [ 525.295293][T23695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.362764][T23680] hsr0 speed is unknown, defaulting to 1000 [ 525.481323][T23695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.555172][T23712] __nla_validate_parse: 2 callbacks suppressed [ 525.555190][T23712] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.4836'. [ 525.671170][T23695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.970749][T23695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.029809][T23730] syzkaller1: entered promiscuous mode [ 526.059567][T23730] syzkaller1: entered allmulticast mode [ 526.251995][T23747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4840'. [ 526.370163][T12253] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.449524][T23754] netlink: 'syz.4.4841': attribute type 4 has an invalid length. [ 526.456523][T12253] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.522821][T12253] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.711583][T12253] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.780871][T23769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4846'. [ 526.989380][T23784] xt_CONNSECMARK: invalid mode: 0 [ 527.100985][T23784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4850'. [ 527.172003][T23795] netlink: 'syz.0.4854': attribute type 21 has an invalid length. [ 527.181037][T23795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4854'. [ 527.181065][T23794] netlink: 'syz.0.4854': attribute type 21 has an invalid length. [ 527.213625][T23795] netlink: 'syz.0.4854': attribute type 4 has an invalid length. [ 527.223792][T23791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4853'. [ 527.237596][T23796] netlink: 'syz.0.4854': attribute type 21 has an invalid length. [ 527.255187][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'. [ 527.259258][T23796] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4854'. [ 527.294946][T23795] netlink: 'syz.0.4854': attribute type 5 has an invalid length. [ 527.306143][T23794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4854'. [ 527.334009][T23795] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4854'. [ 527.359737][T23794] netlink: 'syz.0.4854': attribute type 4 has an invalid length. [ 527.367664][T23794] netlink: 'syz.0.4854': attribute type 5 has an invalid length. [ 527.405981][T23796] netlink: 'syz.0.4854': attribute type 4 has an invalid length. [ 527.414086][T23796] netlink: 'syz.0.4854': attribute type 5 has an invalid length. [ 527.485903][T14383] veth0_to_bond: left promiscuous mode [ 527.621099][T23818] C speed is unknown, defaulting to 1000 [ 527.644605][T23813] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 527.682670][T23818] hsr0 speed is unknown, defaulting to 1000 [ 528.010356][T23837] tipc: Invalid UDP bearer configuration [ 528.010409][T23837] tipc: Enabling of bearer rejected, failed to enable media [ 528.240710][T23851] syzkaller0: entered promiscuous mode [ 528.259198][T23851] syzkaller0: entered allmulticast mode [ 528.531749][T23880] tipc: Failed to remove unknown binding: 66,1,1/0:3870805234/3870805236 [ 528.547880][T23880] tipc: Failed to remove unknown binding: 66,1,1/0:3870805234/3870805236 [ 528.674240][T23871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.687267][T23871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.842685][T23871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.854772][T23871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.972316][T23871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.983583][T23871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.072580][T23871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.083766][T23871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.168457][T14381] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.177767][T14381] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.201347][T23900] SET target dimension over the limit! [ 529.215184][T14381] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.224756][T14381] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.233584][T14381] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.242537][T14381] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.260643][T14381] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.269742][T14381] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.356445][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 529.389401][T23902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.208669][T23958] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.240930][T23958] bridge_slave_0 (unregistering): left allmulticast mode [ 530.249037][T23958] bridge_slave_0 (unregistering): left promiscuous mode [ 530.265771][T23958] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.314350][T23967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 530.623237][T23989] __nla_validate_parse: 15 callbacks suppressed [ 530.623260][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 530.793021][T24001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4913'. [ 530.902828][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.914515][T23994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.998201][T23989] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 531.010963][T23989] bond7 (unregistering): Released all slaves [ 531.028235][T24003] IPVS: Unknown mcast interface: pimreg1 [ 531.037864][T14390] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.058140][T14390] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.069099][T14390] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.078763][T14390] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.263340][T24024] team0 (unregistering): Port device team_slave_0 removed [ 531.279316][T24024] team0 (unregistering): Port device team_slave_1 removed [ 531.718921][T24057] syzkaller0: entered promiscuous mode [ 531.746354][T24057] syzkaller0: entered allmulticast mode [ 532.124366][T24098] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4937'. [ 532.147912][T24088] syzkaller0: entered promiscuous mode [ 532.152019][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4942'. [ 532.165987][T24088] syzkaller0: entered allmulticast mode [ 532.282576][T24110] validate_nla: 3 callbacks suppressed [ 532.282597][T24110] netlink: 'syz.0.4940': attribute type 1 has an invalid length. [ 532.287675][T24115] vcan0: entered allmulticast mode [ 534.864897][T24175] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 535.003360][T24181] siw: device registration error -23 [ 535.035818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 535.043904][ C0] lec:lec_tx_timeout: lec0 [ 535.049661][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 535.178354][T24200] openvswitch: netlink: Unknown key attributes 2 [ 535.296384][T24204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4968'. [ 535.690444][T24177] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 535.845501][T24238] syzkaller0: entered promiscuous mode [ 535.851132][T24238] syzkaller0: entered allmulticast mode [ 535.862469][T24236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4979'. [ 535.884003][T24238] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 535.894893][T24238] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 535.962257][T24241] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4981'. [ 536.075540][T24252] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4983'. [ 536.086210][T24254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4982'. [ 536.181170][T24259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4984'. [ 536.298145][T24263] C speed is unknown, defaulting to 1000 [ 536.359249][T24269] bridge8: entered promiscuous mode [ 536.364506][T24269] bridge8: entered allmulticast mode [ 536.381897][T24263] hsr0 speed is unknown, defaulting to 1000 [ 536.864928][T24295] bond6: entered promiscuous mode [ 536.872086][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4996'. [ 536.882262][T24295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4996'. [ 536.956303][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 537.417276][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 537.598691][T24337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5003'. [ 537.833304][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5008'. [ 538.141160][T24363] netlink: 'syz.3.5013': attribute type 3 has an invalid length. [ 538.202066][T24363] hsr_slave_0: left promiscuous mode [ 538.269553][T24363] hsr_slave_1: left promiscuous mode [ 538.455385][T24375] bridge0: port 3(vlan3) entered blocking state [ 538.501700][T24375] bridge0: port 3(vlan3) entered disabled state [ 538.509881][T24375] vlan3: entered allmulticast mode [ 538.526806][T24375] bridge0: entered allmulticast mode [ 538.547142][T24375] vlan3: left allmulticast mode [ 538.568474][T24375] bridge0: left allmulticast mode [ 538.681963][T24399] xt_NFQUEUE: number of total queues is 0 [ 538.754892][T24400] vlan0: entered promiscuous mode [ 538.774626][T24400] bridge0: entered promiscuous mode [ 538.841198][T24408] netlink: 'syz.2.5021': attribute type 3 has an invalid length. [ 539.067587][T24421] netlink: 'syz.2.5028': attribute type 62 has an invalid length. [ 539.220457][T24426] team_slave_0: entered allmulticast mode [ 539.227740][T24426] team_slave_0: entered promiscuous mode [ 539.326666][T24432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 539.601834][T24452] syzkaller0: entered promiscuous mode [ 539.628995][T24452] syzkaller0: entered allmulticast mode [ 540.056250][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 540.064362][ C0] lec:lec_tx_timeout: lec0 [ 540.312308][T24494] bond5: entered promiscuous mode [ 540.320664][T24494] bond5: entered allmulticast mode [ 540.332467][T24494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.439537][T24510] bond7 (unregistering): Released all slaves [ 540.513097][T24501] bond0: entered promiscuous mode [ 540.520937][T24501] bond_slave_0: entered promiscuous mode [ 540.537928][T24501] bond_slave_1: entered promiscuous mode [ 540.546759][T24501] gretap0: entered promiscuous mode [ 540.553375][T24501] hsr1: entered promiscuous mode [ 540.563017][T24518] netlink: 'syz.4.5059': attribute type 4 has an invalid length. [ 540.623277][T24523] netlink: 'syz.4.5059': attribute type 4 has an invalid length. [ 540.668926][T10005] IPVS: starting estimator thread 0... [ 540.677990][T24518] IPVS: ip_vs_add_dest(): server weight less than zero [ 540.773529][T24531] IPVS: using max 33 ests per chain, 79200 per kthread [ 540.785982][T24529] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.930890][T24547] __nla_validate_parse: 45 callbacks suppressed [ 540.930910][T24547] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5068'. [ 540.946017][T24546] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 540.983126][T24548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5068'. [ 541.006954][T24550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.014467][T24550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.099859][T24550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.108295][T24550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.449593][T24590] bond0: Error: Cannot enslave bond to itself. [ 541.511039][T24582] dvmrp0: entered allmulticast mode [ 541.618206][T24612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5086'. [ 541.642171][T24596] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 541.654208][T24596] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 541.662741][T24596] CPU: 0 UID: 0 PID: 24596 Comm: syz.4.5082 Not tainted syzkaller #0 PREEMPT(full) [ 541.672134][T24596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.682271][T24596] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 541.688135][T24596] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 541.707754][T24596] RSP: 0018:ffffc90004eff768 EFLAGS: 00010207 [ 541.713827][T24596] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888076540000 [ 541.721787][T24596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033869000 [ 541.729746][T24596] RBP: ffff888033869000 R08: ffff888076540000 R09: 0000000000000008 [ 541.737709][T24596] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 541.745668][T24596] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff920009dff0c [ 541.753633][T24596] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 541.762555][T24596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.769125][T24596] CR2: 000000110c3cbcb1 CR3: 000000001ba84000 CR4: 00000000003526f0 [ 541.777094][T24596] Call Trace: [ 541.780366][T24596] [ 541.783293][T24596] ? __alloc_skb+0x4e5/0x7d0 [ 541.787994][T24596] ? skb_put+0x11b/0x210 [ 541.792232][T24596] rose_write_internal+0x1256/0x1b60 [ 541.797515][T24596] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.802715][T24596] ? __pfx_rose_write_internal+0x10/0x10 [ 541.808337][T24596] ? timer_delete+0x245/0x340 [ 541.813046][T24596] rose_release+0x25b/0x510 [ 541.817551][T24596] sock_close+0xc3/0x240 [ 541.821913][T24596] ? __pfx_sock_close+0x10/0x10 [ 541.826751][T24596] __fput+0x44f/0xa70 [ 541.830747][T24596] task_work_run+0x1d9/0x270 [ 541.835338][T24596] ? __pfx_task_work_run+0x10/0x10 [ 541.840448][T24596] ? kmem_cache_free+0x187/0x630 [ 541.845391][T24596] ? do_exit+0x70a/0x23c0 [ 541.849715][T24596] do_exit+0x70f/0x23c0 [ 541.853866][T24596] ? __pfx_do_exit+0x10/0x10 [ 541.858443][T24596] ? cgroup1_freezing+0x20/0x350 [ 541.863395][T24596] ? cgroup1_freezing+0x20/0x350 [ 541.868324][T24596] do_group_exit+0x21b/0x2d0 [ 541.872908][T24596] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.878176][T24596] get_signal+0x1284/0x1330 [ 541.882681][T24596] arch_do_signal_or_restart+0xbc/0x830 [ 541.888268][T24596] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 541.894415][T24596] exit_to_user_mode_loop+0x86/0x480 [ 541.899689][T24596] ? rcu_is_watching+0x15/0xb0 [ 541.904447][T24596] do_syscall_64+0x32d/0xf80 [ 541.909072][T24596] ? trace_irq_disable+0x3b/0x150 [ 541.914119][T24596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.920170][T24596] ? clear_bhb_loop+0x40/0x90 [ 541.924834][T24596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.930713][T24596] RIP: 0033:0x7f460319c799 [ 541.935125][T24596] Code: Unable to access opcode bytes at 0x7f460319c76f. [ 541.942165][T24596] RSP: 002b:00007f4604111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.950565][T24596] RAX: 00000000000000c7 RBX: 00007f4603415fa0 RCX: 00007f460319c799 [ 541.958525][T24596] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 541.966483][T24596] RBP: 00007f4603232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 541.974446][T24596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.982402][T24596] R13: 00007f4603416038 R14: 00007f4603415fa0 R15: 00007ffe93868618 [ 541.990368][T24596] [ 541.993384][T24596] Modules linked in: [ 541.998934][T24596] ---[ end trace 0000000000000000 ]--- [ 542.009617][T24596] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 542.016704][T24596] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 542.036917][T24596] RSP: 0018:ffffc90004eff768 EFLAGS: 00010207 [ 542.043151][T24596] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888076540000 [ 542.051826][T24596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033869000 [ 542.059921][T24596] RBP: ffff888033869000 R08: ffff888076540000 R09: 0000000000000008 [ 542.068371][T24596] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 542.076731][T24596] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff920009dff0c [ 542.085302][T24596] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 542.094324][T24596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.101577][T24596] CR2: 000000110c3cbcb1 CR3: 0000000029e76000 CR4: 00000000003526f0 [ 542.110043][T24596] Kernel panic - not syncing: Fatal exception [ 542.116453][T24596] Kernel Offset: disabled [ 542.120788][T24596] Rebooting in 86400 seconds..