last executing test programs: 13.193969483s ago: executing program 1 (id=3315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003240)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pim6reg1\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ppoll(&(0x7f0000000300)=[{r4, 0x81}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x2004c000) 12.597677422s ago: executing program 1 (id=3320): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) (async) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f00000020c0)={0x7767, {{0xa, 0x4e24, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f00000020c0)={0x7767, {{0xa, 0x4e24, 0xc8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000000c0)={0x0, "6d4b9898296b2b44e077d5cb66316eae"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000010c0)={{r1}, r3, 0x4, @inherit={0x60, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x13, {0x9, 0x5, 0x6a, 0x6, 0x2}, [0x5, 0x3, 0x100000001]}}, @name="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"}) 1.428472471s ago: executing program 0 (id=3414): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0xffffffffffffffbb, 0x40012052, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000001040)=""/169, 0xa9}, 0xffffffff}], 0x1, 0x40000000, 0x0) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaeaaaabbbbbbbbbbbb08004563003c0065000009069078ffffffffffffffff0000000000000000000000ef0000000300e74d2000004e21000000010000000200000000000000007e6838528ea25cdb6c174aa2aa4bccb60f56f1e25bdba39c84d8b57566dfc4a2e19af829"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x5, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0xffffffffffffff8c) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000100)={0x2, 0x80000001, 0xbf, &(0x7f0000001100)=""/191}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd983ef3ceccb3d18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xe}, 0x10}, 0x94) 1.383366261s ago: executing program 2 (id=3415): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x7}, 0xc) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x0, 0x0}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) getpeername$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async, rerun: 32) r4 = accept(r3, 0x0, &(0x7f0000000000)) shutdown(r4, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) (async) close(r2) 1.333107731s ago: executing program 4 (id=3416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) pread64(r4, &(0x7f0000000040)=""/28, 0x1c, 0x3) (async) pread64(r4, &(0x7f0000000040)=""/28, 0x1c, 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) 1.224045774s ago: executing program 3 (id=3417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000083b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.192873115s ago: executing program 4 (id=3418): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) r6 = getgid() r7 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001680)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) r9 = getgid() r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={0x0, 0x8, 0x8}, 0xc) r11 = socket$phonet(0x23, 0x2, 0x1) r12 = gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) sendmsg$netlink(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000340)={0x1154, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@generic="21174cb8917edf5806b6bb95dc0f062f767fe34e13508cc485dbe435ad65d4ce6703378a58053cda28c403518f473fe68bcf4b7b8d79a8114e2e08a2dca7aafe74ae802a00aee9ff9a3aa721108349101885bb2fabcf3a729f81ce348326cee6e084ddc168d3bafe723d554df3b2a858ba05f525db2c3daeb499bb7f785a190509341e08d5b474f3d75ba1c5b564d212060be3ae0ca36ef34bed54a78e1fe733e606fb51689c25e0b99b3984df7bd6c1866aac00696242fefa6da0414e9860e5b0e76aa90430acc687d1cc52db54b3e0ac977e3539e99fe16a7246cd726fe5554fe5bd4d15b6be27", @generic="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", @nested={0x5c, 0x5d, 0x0, 0x1, [@typed={0x56, 0xcb, 0x0, 0x0, @binary="92b75ac3104393c3f9630a9d870fc8b4c63d34dead1eb131128837754297c24f4a4a72229541fb677f1890dc8aa31cf2517d6290d5d97bfca9eae48cf297bfec378be79f93e59c11a96e42b0c97a08ea5680"}]}]}, 0x1154}, {&(0x7f00000001c0)={0x18, 0x40, 0x20, 0x70bd26, 0x25dfdbfb, "", [@nested={0x8, 0x20, 0x0, 0x1, [@nested={0x4, 0x7e}]}]}, 0x18}, {&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, "", [@generic="617d71546627e13ca072"]}, 0x1c}, {&(0x7f0000000280)={0x10, 0x34, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x10}, {&(0x7f00000014c0)={0x130, 0x20, 0x10, 0x70bd27, 0x25dfdbfd, "", [@generic="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", @typed={0x8, 0x1b, 0x0, 0x0, @fd=r1}, @nested={0x1c, 0x130, 0x0, 0x1, [@nested={0x4, 0x124}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x130}], 0x5, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r1, r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13}}}], 0xc8, 0x40000}, 0x40000) r14 = socket(0x2a, 0x2, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2}, 0x98) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001fff00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000885203003c0012800c0001006d6163766c616e002c000280280005800a000400ffffffffffff22000a000400950b8948db6000000a0d04004ee980a8c3100000"], 0x5c}}, 0x4000080) 1.131743673s ago: executing program 2 (id=3419): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000300)) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x6fb4, {{0xa, 0x4e21, 0x5, @mcast2, 0x8}}, 0x1}, 0x90) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r3, 0x16842e9bd142d0d5}], 0x1, 0x94) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="070300030f0000002cbd7000fbdbdf250300090080000000af0000000000b1000000000000000000030006000000000002004e22ac1414bb00000000ddffffff01000100000000000000070c01000000030005000000000002004e21ac6463522feb0074091b05ca42187f3f38b6655532d91479d761d81e01010000000000000000020013000300000028bd700001350000e5d00e19ab550c58955a1077ecb7"], 0x78}, 0x1, 0x7}, 0x0) 1.13140497s ago: executing program 0 (id=3420): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x7b38, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2d, 0x9, 0x3, 0x7fff, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x700, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29f2906956f9a0b2, 0x9, 0x9, 0x0, 0x0, @empty, @mcast1, 0x40, 0x20, 0x1000, 0x81}}) 1.008760816s ago: executing program 3 (id=3421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) (async) 959.201355ms ago: executing program 0 (id=3422): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x9205f028e2577316) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695f839, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x4009, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="44e9d331f17286a49c792cfc4a180300002b8b4089d6e2ed8c2b196a7fb1f4a03c50064751fb723af86c368b4eb11c5a85f5b903f95d021aad24469be316f3a8e3d6952fae450ab78b810d6a442334c1be13358f30eff43f710980bb0324055c427bdaeafec04c9e29395b60451354c9276d6a856aec18644bd699aa639c2673bd6ec01f252a2429bff5ee56df2ff4dec7afc54925f3817236a9131d551cba8f86a499", @ANYRES16=r2, @ANYBLOB="030b00000000000000001300000004000980", @ANYRESOCT=0x0, @ANYBLOB="7374e9773a81979f", @ANYBLOB="aa66c6eae50d26b016f1da5eed45e217c81819c60cfc141aecd54e7a8c2e01c058a2921c0b8f6e310a6566b75d032f063360e09d583499d9cce0ebbfc9f24d6161779b4244ad7c941765f6023bf61a4f5a4660b05d3a1afeb61adeacdf2caa467465f493c6f68e25073094f937babaad18965305f93523668dd38810316910b8ce9b80ee140572313153ad3b09787645d56aac219ee2e691070d7a424ae1ccddef5d4c44645312788ee99df36addc06b728186416a24058f0f35e8eb5ecb3afcb21a012fe9182f64da6093501aa5", @ANYBLOB="ea51914037252a662e315877d8a12e2b245adb9dd12f377a97574949f62be8d6121af72a297dcc95c87809078f62e0308d88fbccf1c157c19166438b846f5bfd7d"], 0x18}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000d1bc9f13035bb162891b2d8bd4f4ff8f5d9f74e78712b3a7e05e37c69f30c8be8a797cb796a7bb54d62b0e366219eea94fb5d024fc63047413848e9a8519cc08d6a15e14da1f62ac3d617ebcbc6cb73f7dd323d8fa3a32e94ee2d7de4d8553f3019ce810969d7e1a2e1ef61bb2f4e04c88a4b0e2fbe1a7deac1864584dea7d9c59dd4ba875f5548a07976d2492d82acdf3ab3472e53fd87f3aa5fba1874bbbf4147b5f2f8fda03bf043d", @ANYRES16=r2, @ANYBLOB="04002bbd7000fedbdf25160000000c00038008000200e0010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xb8, 0x700001b, 0x148, 0x0, 0x148, 0x188, 0x206, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x1, 0x0, 0x74}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x4, 0xa, 0x0, 0x2], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111330000000000851000000285000000050000009500fc00000000009500a505800000005a"], &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000580)={0xa, &(0x7f0000000500)=[{0x8, 0x3, 0x13, 0x7}, {0x9, 0x2, 0x0, 0xfffffffe}, {0xee4, 0xa5, 0x80, 0xffff2ed4}, {0xa, 0x7, 0x27, 0x1}, {0x5, 0x81, 0x1, 0xfffffff9}, {0x4, 0xf, 0x7, 0x9}, {0x401, 0x6, 0x40, 0x3ff}, {0x1ff, 0x9, 0x73, 0x8}, {0x0, 0x2, 0xee, 0x8}, {0x5, 0x5, 0xc2, 0x7f47}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) getpid() socket$kcm(0x10, 0x2, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800b700", @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf252b0000000c0005000201aaaaaaaaaaaa0a0001007770616e310000000c0005000202aaaaaaaaaaaa"], 0x38}, 0x1, 0x0, 0x0, 0x10800}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f00000008c0)={0x1}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000005c0)={0x101, [0xeb4e, 0x4], 0x2}, 0x10) 829.848416ms ago: executing program 2 (id=3423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000200), 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x4124}, &(0x7f0000000100)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 829.19329ms ago: executing program 4 (id=3424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001000370425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0b913e7c6ff8ff184dd4fa4404000000000008002e0000000000d192df481b16c3"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x8800, &(0x7f00000000c0)={@_ha_fsid={[0x81, 0x6]}, {0x3, 0xda, 0x2}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xd}) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000001c0)=0xffffffff, 0x4) socket(0x2000000000000021, 0x2, 0x10000000000002) 749.373222ms ago: executing program 3 (id=3425): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x2005d850) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xa7ba) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) (rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="aaebc0be0f59e6e1ffdbdf253b0000000800c89224731b951455da3f6b72d8f229ea6773fc55adb9ce5ea6b72a14362f74ec9601021a26b322a270ca67637f5d33385c9888d148e4d50591f33945d63b0933db801a789e92fb4190516dfa52a3a2e52f4d110ef09b009edf5bf7c0051429dab30d03d3a36ad9067a00d449d181885980ee5512b05f2faa4b565cf7e92ac5574e4a44a89c98337c377fdcfc55077ed2198a0a3d97b3deffcd8eb546f31f694a41479f36e3cf095c31fd6f0eff31f4c79e4d7a2904e574c30288e3b22285af906d7897a28de47a70926fe0ee7d2b04ace2052dbe8391b7c3d78419a71ba1f0add97de745bb12ba5a54dca4dda24849b718da735f1822a288ea4a", @ANYRES32=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4008800) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000f05d25a806c8c6394f90324fc60100000000a000200053782c137153e3704020180fc5409000c6f", 0x2e}], 0x1}, 0x0) (rerun: 64) 702.982741ms ago: executing program 1 (id=3332): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a00)={{r3}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000020160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xe, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r7, &(0x7f00000008c0)="47a6d8e3bbec95aa289f131d1b0740c6e61002b4cb5e22f852e9d3b841e237b16c54e40a7ea3eda7a92af6dbbda103d5c43ed6e9608043ad8e7e6974b9ef6e2a7fee3b9eab0e5f7ba1acb4fa17d8a5f677c23fd4070ee3ee493d71a4aef968de02901f17a1540410c4edd472090af3858cd714b8246e3c2a"}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200070f8bdc0e90000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000380)=""/229, &(0x7f00000002c0)=0xe5) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000001c0)={r0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r10, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r10, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r10, 0x400448e7, &(0x7f0000000080)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x4}, 0x844) 631.200338ms ago: executing program 4 (id=3426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0) 620.303376ms ago: executing program 3 (id=3427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) 538.92048ms ago: executing program 2 (id=3428): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 410.089354ms ago: executing program 0 (id=3429): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}], 0x1}], 0x1, 0x40800) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000008c0)="617aed47a604ad954cec08a19392ef76cab19ab0ef648bc7279d08591a6dc0f28741c67f5d9b60abfc83ca37df21e7802c3b25e41fa72c2750b19b3d17f3eb85be78af62cf5e9c090eddbcb5a4186568f58f6d89730085b06e9a76b385637444a87ab08e46daefcd0853c9412bed0a845e2fb01074991aad9937d6e1a1e4241b3bd36976ca71eb2bcb51dbdffa23fddb415a1cd5dfe7befe0f221e8a40f8c2eb83e61c2dad34cce7e2b97e0a3aee44289ddaede88cd53634539f6ff48d49620fc9a0b53ff6c8ead0171fb76491acb194de37f4b9878c6bd1e1226d7a8e42aa61ec", 0xe1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 409.765322ms ago: executing program 1 (id=3430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800ff85b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 409.274408ms ago: executing program 3 (id=3431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) 335.005706ms ago: executing program 4 (id=3432): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x412003, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x110) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 255.959191ms ago: executing program 0 (id=3433): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', r4, 0x40, 0x80, 0x0, 0x100, {{0xa, 0x4, 0x1, 0x19, 0x28, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x94, 0x12, "521f9a181511b46edf54e89452a703c0"}]}}}}}) splice(r3, &(0x7f0000000a00)=0x8, r3, &(0x7f0000000a40)=0x7, 0x7, 0x4) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x360, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x604}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x800}, 0x40d4) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x40) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f00007d7000/0x400000)=nil, 0x400000, 0xb635773f07ebbeef, 0x10, r0, 0x215eb000) socket$netlink(0x10, 0x3, 0x15) (async) socket(0x14, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) write$nci(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="41000201"], 0x5) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000011c0)={{0xffffffffffffffff, &(0x7f0000000a80)=')#&P\x00', 0x400000, &(0x7f0000000ac0)={@align=0x7, {0x7, 0xfff8, 0x10, 0xa4f}}, 0x8, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x9}, 0x6, &(0x7f0000001100)=[{0x3, 0x8, &(0x7f0000000b80)='team\x00', &(0x7f0000000bc0)="16cdb03e577f3c93ff31b16ad5814d220f7e2c1363b4f0c386be467d5c6ca53a620f54951dc4ce473d04c6765db2601d52fee83376f9126736241538bc94aaba617e93f736feef53708e32a1f692dd40e43edf2504fde6332f5cf05a3a302d5c28e21531c7c970e59794", 0x6a, 0xa}, {0x1, 0x0, &(0x7f0000000c40)='activeport\x00', &(0x7f0000000c80)="da9def17b65bfdc3b1623f406cc7ad8fefb3d323f1a547d72f7647a27eef1fd3302b385b2895ac647c6121e00968c2a581f6619d0c0084eeba6e1ec1197cfc6fbd0d211cded2ee017240d22848b69952c4f13bdedb7cd5d2bf7a9a11e2f001b6e5a4558140fc9cdd696e2de00293006db773d13b00a4318edaa488647438ea398a8dfb1dc5c79ce63c0a564db5d03a1be5d31b3d3c3458e245d989e2ef5ff48cbff57180ef7678e97ef3743de00eee512f72da44d7c2106536d8fe9f94038128ccb4dd60e7264122cf", 0xc9, 0x30}, {0x1, 0xffffff98, &(0x7f0000000d80)='erspan0\x00', &(0x7f0000000dc0)="a67e1b183f8344", 0x7, 0x1a}, {0x2, 0x6, &(0x7f0000000e00)='ns/cgroup\x00', &(0x7f0000000e40)="3a0bcb4853ebea1b75b91497759c447696eb6233162fed004dd64f8d080491627a5058b22c0f36c3ab4748d70fd32654cb7225d84bfa34805d5d754d7e49f8b45d72b5d191f7980e7035ced0af0f586465f36907b518a7cd6db9d948c5302ab7c039d34d4b049c961f0b91463c0f3daf869602626053cad2dab5a56ac339ce", 0x7f, 0x30}, {0x3, 0x565b, &(0x7f0000000ec0)='&\x00', &(0x7f0000000f00)="a41691398c8ef9e454761ccda696b7ccd47867147de53b667e3a5aa9dae5d02eb0c55e5576d6f4887c00fb435dfdd4726b632bb59d0fe8a6b8de8f90d4dd1b8d6f71226ef76904da5ebce0b125510f49d82f8dfbfdf55ceebe5bc91e8a11a3db418245ed41b283a34f4388dcfda64b9909b14b9565efb505c88c58c6f370d23e2dfc548bef38c0bf6baa92e2596b5fa5c0780fa080b8bee950d7954de2e3ce5e609a1297c40c5d1732a3646ce3", 0xad}, {0x2, 0x0, &(0x7f0000000fc0)='ns/cgroup\x00', &(0x7f0000001000)="36bd218cfc396b7801e7368075cb3a246fc64a44ed6fd1bca22be8b7e26bc8167053d0164376c4bebcd10236a7965ffa5198fea6fe263ea4af67a6ce281f3f52580090b5c64f532b01db2234e38bcb19b4bb52fa97d135286c635381571e61a6036e40a6b467b9ae73160a069ecee2c51f5abbace2231d13bd3093d24eb1139819ba4687a167e9f6f22d7f42c17fefc969da82e1f211e5705383ced3fac0c013a33ebbb37464be0e5a93c6bcfa5d210b3a708f1ee32c1483d553c11bd91b9aa361716d3f12c8", 0xc6, 0x22}]}) 203.179028ms ago: executing program 1 (id=3434): r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x4c, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000180), 0x8, 0x77, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipmr_delroute={0x4c, 0x19, 0x4, 0x70bd2a, 0x25dfdbfe, {0x80, 0x80, 0x0, 0x2, 0xfd, 0x3, 0xff, 0xa, 0xa00}, [@RTA_GATEWAY={0x8, 0x5, @broadcast}, @RTA_ENCAP_TYPE={0x6}, @RTA_IIF={0x8, 0x3, r2}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_PRIORITY={0x8, 0x6, 0x456}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 202.406031ms ago: executing program 3 (id=3435): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x38, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040}, 0x4080) 150.969827ms ago: executing program 2 (id=3436): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) socket(0x1a, 0x6, 0x3f0b8395) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6af5a0840700000069101600000000009500000000f7000000004ba1f0e778bf"], &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x3}) 141.353336ms ago: executing program 1 (id=3437): r0 = socket(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000300000000040800010001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async, rerun: 64) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00c800000000000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000ff7fffff200000001076709ef273278e", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2400c8c1) (async) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000380)={0x0, 0x5, 0x1, 0xb28}, 0x10) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="017f000000000766bc9d963db27bf1"], 0x18}}, 0x4000) (async, rerun: 32) r9 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="620ac4ff000000007110180000000000950000000000003da38aea82cb676a97e6dc3c00"], &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0xffff}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000800) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r13, r11, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r14, 0x0, 0x8000000000000c, 0x0, 0x0) 96.257297ms ago: executing program 4 (id=3438): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x3, 0xa, 0x3, 0xfffffff9}, {0x5, 0x0, 0x8, 0xc}, {0x8, 0x3c, 0x0, 0x5}, {0x3ff, 0xf8, 0x80, 0x6}, {0x8000, 0x0, 0x37, 0x9}, {0x3, 0x8, 0x4, 0x7}, {0x2, 0x0, 0x9, 0xfffffa04}, {0x0, 0x9, 0x2, 0x2}]}) sendmsg$802154_dgram(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)="04", 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0x270, 0x138, 0x1d8, 0x138, 0x1d8, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x3, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) vmsplice(r3, &(0x7f0000000d00)=[{&(0x7f00000002c0)="f193ab7d53b70832fea3cc8fb090630a8826e4fed7e135301679716aa7213e1e82bda7489f241d2c6a10361586f41b5bc1d65507b1c7565930212fd972e8235dc03bb80be287bc91f7b508dd4b3f46194630fb61e872a67851626f6594e72f0ff473f0f891320ba2edff41e49b9cccc78093925e37900687e22e756b93c15ba42d817e8705758ac088f23caa53d712e796e61c07ca6d0ae53a4e8ad4fa099d1c93275dba3ddd44a2faa429274ce43dc3fc873b11fc772616c483da23f741e2cd92b0bb493d7ae511e3ab3bb6fb40938ee56a0e1fe86a89b81b0c8d97", 0xdc}, {&(0x7f0000000400)="5c93f999dc226a7e14a25e78d921530514a2dc81d348ac49e02eee3cc1c9150c16c64133a4fba0f37fd436acf5b0c9a6f8690874d04e1034b5e3d765faccaf7dfbbf0a4f2d0565802e25e32b6ac421582f1331c445b4b42ee782c31128d111a4d6ea6bb399fde6fcb21ad52fda522e467317a6cf37aed242e99731ee11bcf682e63afebc9088ec1c474c69597823bea68df9bc8ef4f07802e542604fd5fc3ce2c994282bfc23", 0xa6}, {&(0x7f00000004c0)="a789f1f7846a649e0de9a8b783137195c716a616c87827bd91f577698a66ac259339666be1c42daf4e090ca77e4ae5574abde30662f99b120f2bbd5998f57c01dfd145e013c0cc527f87693450f8b37a1379f306d4b39cb18fcf01e120f65f21f87890fefb21da6ef588a3923836df146624ed8bf532491848d2fbe6cdf0a18f50b3bc6f28d576fbe3891d59a20004486fa7a78896ed0605b018e8042cb87470deb639c82b4b37f9248fada98e5c877a8d1124c15a1bc75485039d3bd9bae4758ab6dabaed20fbfafd70923481fb32465ab195f7e0f90b3807c22423eeb705408d64c09fa11f010a0d1f", 0xea}, {&(0x7f00000005c0)="bd1c33c0bdd3009961dd284ba0042e190ea56df57876d6ca1798a49fea30ddc37aa18f0bd76363dfa7c825dac5f58a3e3fa4684bcff4f2550f916ded8c565fdc30dffd88029ffb5310d421223e029eda89ecd3568ba27ea32fc01ba5a289f4ea9f7d5f2f543dd8a16e64fad3fe0f6eaada", 0x71}, {&(0x7f0000000640)="4f2347dee79b3297abd7cb4e2bdb9a6f824d8b07993d6e955242e1707cd8dab9904b396f33f545a084e3f75df30666122bd6b3b10aa309ac9fd25ad48712e7f4ab5da2c82a7ceb6fbf38d06fb670907d6c4eb292d1a7caf2bd6cd0140d712ad806ea46155f2f6a3107d7e6e7", 0x6c}, {&(0x7f0000000040)="64c678a3d0f936c13b31148ed5757b067d06", 0x12}, {&(0x7f0000000b80)="87f275407b937233236de918f25e8c4e1e1bc0155c4d03faf2ec4216ec279721f291f05910e5b9e247f5273007a147e76fee831053832dc3bf2dbb653bb1b592251ae0cbaafca45d80293c9a3ae0b0e9d8f5cc6caa1cdf4bf9772b67e17bc3b9fa9ecddeb133f216dc6e2e34a6619ebb86f85543d09ead3c498a24e9204bc143050d72e47bb592821c7080521366ecbf05a42c280e156132fa516fd4d6ee2e4f35488b77a2fac02b55d423989d97ae320b4505705ddd7ceddaf4e637570be9747e", 0xc1}], 0x7, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xb4, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 51.254842ms ago: executing program 0 (id=3439): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) unshare(0x20000400) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') write(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r4, 0x0, 0x40800) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000001380)=0x4) 0s ago: executing program 2 (id=3440): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f00000052c0)=@nameseq={0x1e, 0x4, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) kernel console output (not intermixed with test programs): ? do_raw_spin_unlock+0xf5/0x210 [ 343.797149][T12441] try_charge_memcg+0xc53/0x1560 [ 343.797174][T12441] ? __lock_acquire+0x6b5/0x2cf0 [ 343.797230][T12441] ? __pfx_try_charge_memcg+0x10/0x10 [ 343.797251][T12441] ? xa_load+0x60/0x210 [ 343.797293][T12441] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 343.797334][T12441] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 343.797363][T12441] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 343.797397][T12441] __swap_cache_prepare_and_add+0x52a/0x700 [ 343.797449][T12441] swap_cache_alloc_folio+0xf1/0x240 [ 343.797486][T12441] swap_cluster_readahead+0x369/0x690 [ 343.797525][T12441] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 343.797571][T12441] ? get_vma_policy+0x27b/0x3c0 [ 343.797601][T12441] swapin_readahead+0x196/0xc50 [ 343.797647][T12441] ? __pfx_swapin_readahead+0x10/0x10 [ 343.797682][T12441] ? swap_table_get+0x1e/0x260 [ 343.797710][T12441] ? swap_table_get+0x1e/0x260 [ 343.797741][T12441] ? swap_table_get+0x1e/0x260 [ 343.797771][T12441] ? swap_table_get+0x216/0x260 [ 343.797803][T12441] ? swap_cache_get_folio+0x513/0x520 [ 343.797841][T12441] do_swap_page+0x54f/0x58d0 [ 343.797871][T12441] ? __lock_acquire+0x6b5/0x2cf0 [ 343.797922][T12441] ? do_swap_page+0x12c/0x58d0 [ 343.797950][T12441] ? __pfx_do_swap_page+0x10/0x10 [ 343.797977][T12441] ? __pte_offset_map+0x1ae/0x240 [ 343.798013][T12441] ? pte_offset_map_rw_nolock+0xea/0x160 [ 343.798050][T12441] handle_mm_fault+0x12d2/0x3310 [ 343.798098][T12441] ? handle_mm_fault+0xee/0x3310 [ 343.798144][T12441] ? __pfx_handle_mm_fault+0x10/0x10 [ 343.798172][T12441] ? lock_vma_under_rcu+0x45a/0x500 [ 343.798225][T12441] do_user_addr_fault+0xa73/0x1340 [ 343.798263][T12441] ? rcu_is_watching+0x15/0xb0 [ 343.798294][T12441] ? trace_page_fault_user+0x84/0x210 [ 343.798333][T12441] exc_page_fault+0x6a/0xc0 [ 343.798368][T12441] asm_exc_page_fault+0x26/0x30 [ 343.798389][T12441] RIP: 0033:0x7f9a93c6a14c [ 343.798410][T12441] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 343.798429][T12441] RSP: 002b:00007ffd33b3da90 EFLAGS: 00010202 [ 343.798449][T12441] RAX: 0000000000000000 RBX: 00007f9a94016090 RCX: 0000555560a09808 [ 343.798464][T12441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.798476][T12441] RBP: 00007f9a94017da0 R08: 0000000000000000 R09: 0000000000000000 [ 343.798489][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000053dab [ 343.798502][T12441] R13: 00007f9a9401609c R14: 0000000000053aeb R15: 00007f9a94016090 [ 343.798539][T12441] [ 343.800716][T12441] memory: usage 307200kB, limit 307200kB, failcnt 571 [ 343.955669][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.961691][T12441] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 343.962275][ C0] lec:lec_tx_timeout: lec0 [ 343.967755][T12441] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 343.972838][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.977742][T12441] Memory cgroup stats for /syz4: [ 344.175097][T12441] cache 0 [ 344.255550][T12441] rss 0 [ 344.258393][T12441] rss_huge 0 [ 344.280546][T12441] shmem 0 [ 344.283683][T12441] mapped_file 0 [ 344.305844][T12441] dirty 0 [ 344.319354][T12441] writeback 0 [ 344.322711][T12441] workingset_refault_anon 2 [ 344.349787][T12441] workingset_refault_file 0 [ 344.354442][T12441] swap 188416 [ 344.369126][T12441] swapcached 192512 [ 344.382694][T12441] pgpgin 26619 [ 344.389012][T12491] IPVS: set_ctl: invalid protocol: 59 172.30.1.3:20000 [ 344.399670][T12491] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 344.401145][T12441] pgpgout 26618 [ 344.414672][T12441] pgfault 69159 [ 344.430992][T12441] pgmajfault 4 [ 344.434443][T12441] inactive_anon 4096 [ 344.448801][T12441] active_anon 0 [ 344.455934][T12441] inactive_file 0 [ 344.459635][T12441] active_file 0 [ 344.473471][T12441] unevictable 0 [ 344.477919][T12497] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 344.481194][T12441] hierarchical_memory_limit 314572800 [ 344.501023][T12441] hierarchical_memsw_limit 9223372036854771712 [ 344.514968][T12441] total_cache 0 [ 344.522532][T12441] total_rss 0 [ 344.529938][T12441] total_rss_huge 0 [ 344.534208][T12441] total_shmem 0 [ 344.549855][T12441] total_mapped_file 0 [ 344.553996][T12441] total_dirty 0 [ 344.557823][T12441] total_writeback 0 [ 344.562925][T12441] total_workingset_refault_anon 2 [ 344.570183][T12441] total_workingset_refault_file 0 [ 344.575827][T12441] total_swap 188416 [ 344.579767][T12441] total_swapcached 192512 [ 344.590081][T12441] total_pgpgin 26619 [ 344.594121][T12441] total_pgpgout 26618 [ 344.599103][T12441] total_pgfault 69159 [ 344.603232][T12441] total_pgmajfault 4 [ 344.608025][T12441] total_inactive_anon 4096 [ 344.612740][T12441] total_active_anon 0 [ 344.617261][T12441] total_inactive_file 0 [ 344.621588][T12441] total_active_file 0 [ 344.626479][T12441] total_unevictable 0 [ 344.630641][T12441] anon_cost 0 [ 344.634068][T12441] file_cost 0 [ 344.638200][T12441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1782,pid=12441,uid=0 [ 344.655531][T12441] Memory cgroup out of memory: Killed process 12441 (syz.4.1782) total-vm:102284kB, anon-rss:1244kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 345.033884][T12512] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1799'. [ 345.106766][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1801'. [ 345.419810][T12525] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 345.452878][T12525] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.1803'. [ 345.536006][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 345.988274][T12557] ksmbd: Unknown IPC event: 3, ignore. [ 346.030145][T12557] netlink: 'syz.2.1814': attribute type 33 has an invalid length. [ 346.171945][T12557] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 346.243107][T12557] bond7 (unregistering): Released all slaves [ 346.412350][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 346.564556][T12586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.572018][T12586] IPv6: NLM_F_CREATE should be set when creating new route [ 346.579381][T12586] IPv6: NLM_F_CREATE should be set when creating new route [ 346.586679][T12586] IPv6: NLM_F_CREATE should be set when creating new route [ 346.617621][T12589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.138969][T12602] lo: entered promiscuous mode [ 347.146022][T12602] tunl0: entered promiscuous mode [ 347.172336][T12602] gre0: entered promiscuous mode [ 347.239037][T12602] erspan0: entered promiscuous mode [ 347.249551][T12602] ip_vti0: entered promiscuous mode [ 347.279051][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 347.473098][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 347.499322][T12626] IPv6: sit4: Disabled Multicast RS [ 347.634054][T12635] netlink: 'syz.0.1830': attribute type 13 has an invalid length. [ 348.351850][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 348.393999][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 348.428801][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 348.465923][T12668] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1839'. [ 348.487267][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 348.524154][T12671] nbd: couldn't find a device at index 0 [ 348.930123][T12708] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1844'. [ 348.985507][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.993621][ C0] lec:lec_tx_timeout: lec0 [ 348.999841][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.194954][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1851'. [ 349.218377][T12717] bond8: option resend_igmp: invalid value (32767) [ 349.224995][T12717] bond8: option resend_igmp: allowed values 0 - 255 [ 349.261155][T12717] bond8 (unregistering): Released all slaves [ 349.327862][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1855'. [ 349.485679][T12737] ip6tnl2: entered promiscuous mode [ 349.733672][T12756] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1859'. [ 349.760241][T12761] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 349.832679][T12758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.905224][T12769] IPVS: length: 8 != 1152 [ 350.388900][T12809] sctp: [Deprecated]: syz.3.1869 (pid 12809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.388900][T12809] Use struct sctp_sack_info instead [ 352.899053][T12769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.911284][T12796] netlink: 'syz.4.1866': attribute type 1 has an invalid length. [ 352.927141][T12796] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1866'. [ 352.936981][T12796] netlink: 'syz.4.1866': attribute type 1 has an invalid length. [ 352.944871][T12796] netlink: 'syz.4.1866': attribute type 8 has an invalid length. [ 352.954878][T12796] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1866'. [ 352.980150][T12796] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1866'. [ 353.176332][T12830] netlink: 'syz.1.1873': attribute type 21 has an invalid length. [ 353.191359][T12829] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1875'. [ 353.201662][T12830] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1873'. [ 353.226430][T12829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1875'. [ 353.238865][T12831] netlink: 'syz.1.1873': attribute type 21 has an invalid length. [ 353.248885][T12831] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1873'. [ 353.308652][T12835] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1876'. [ 353.413838][T12844] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 353.461872][T12847] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1881'. [ 353.476245][T12844] bond8: entered promiscuous mode [ 353.481823][T12844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.545412][T12844] bond8: (slave bridge8): making interface the new active one [ 353.554652][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 353.591519][T12844] bridge8: entered promiscuous mode [ 353.603098][T12844] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 353.905739][T12870] ip6tnl0: Caught tx_queue_len zero misconfig [ 354.015512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 354.023640][ C0] lec:lec_tx_timeout: lec0 [ 354.028709][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.127810][T12888] bridge_slave_1: default FDB implementation only supports local addresses [ 354.406209][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.426483][ T29] IPVS: starting estimator thread 0... [ 354.492824][T12898] netlink: 'syz.0.1893': attribute type 1 has an invalid length. [ 354.517761][T12904] IPVS: using max 27 ests per chain, 64800 per kthread [ 354.662316][T12913] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.674284][T12913] bond3: (slave bond4): making interface the new active one [ 354.687087][T12913] bond3: (slave bond4): Enslaving as an active interface with an up link [ 354.696863][T12908] 0: renamed from hsr_slave_1 (while UP) [ 354.717958][T12908] 0: entered allmulticast mode [ 354.723577][T12908] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 354.755153][T12898] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 354.769585][T12923] syz_tun: entered allmulticast mode [ 354.809116][T12908] sock: sock_set_timeout: `syz.2.1898' (pid 12908) tries to set negative timeout [ 354.827592][T12913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.864969][T12928] dvmrp8: entered allmulticast mode [ 354.915586][T12923] pimreg: left allmulticast mode [ 354.926626][T12923] dvmrp8: left allmulticast mode [ 355.028322][T12907] syz_tun: left allmulticast mode [ 355.137129][T12943] sctp: [Deprecated]: syz.3.1908 (pid 12943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.137129][T12943] Use struct sctp_sack_info instead [ 355.191706][T12943] sctp: [Deprecated]: syz.3.1908 (pid 12943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.191706][T12943] Use struct sctp_sack_info instead [ 355.314318][T12948] team0: Device gtp0 is up. Set it down before adding it as a team port [ 355.403451][T12961] tipc: Started in network mode [ 355.428039][T12961] tipc: Node identity , cluster identity 4711 [ 355.444395][T12961] tipc: Failed to obtain node identity [ 355.457719][T12961] tipc: Enabling of bearer rejected, failed to enable media [ 355.697279][T12982] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 355.854142][T12993] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 355.920936][T12993] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 356.006913][T13001] xt_cgroup: path and classid specified [ 356.346712][T13016] syzkaller0: entered promiscuous mode [ 356.355329][T13016] syzkaller0: entered allmulticast mode [ 356.374956][T13016] vlan2: entered allmulticast mode [ 356.386109][T13016] geneve1: entered allmulticast mode [ 356.509460][T12979] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 356.544314][T13023] netlink: 'syz.2.1930': attribute type 15 has an invalid length. [ 356.895018][T13045] tipc: Failed to remove unknown binding: 66,0,0/0:4137837611/4137837612 [ 356.934018][T13045] tipc: Failed to remove unknown binding: 66,0,0/0:4137837611/4137837612 [ 357.050742][T13050] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.216588][T13058] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 357.253378][T13058] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 357.827044][T13089] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 358.008919][T13095] netlink: 'syz.3.1951': attribute type 15 has an invalid length. [ 358.021433][T13096] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 358.028281][T13092] xt_hashlimit: size too large, truncated to 1048576 [ 358.058432][T13101] : renamed from vxcan1 (while UP) [ 358.097068][T13095] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 358.558013][T13121] openvswitch: netlink: Message has 1 unknown bytes. [ 358.565403][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.752253][T13133] __nla_validate_parse: 15 callbacks suppressed [ 358.752306][T13133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 358.928594][T13139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 359.035549][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.043653][ C0] lec:lec_tx_timeout: lec0 [ 359.048591][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.602530][T13181] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1977'. [ 359.693609][T13184] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1978'. [ 359.895386][T13193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1981'. [ 359.934138][T13194] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1981'. [ 360.347422][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 360.451473][T13241] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1993'. [ 360.599207][T13251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1996'. [ 360.932537][T13274] syzkaller0: entered promiscuous mode [ 360.940719][T13274] syzkaller0: entered allmulticast mode [ 361.446418][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 361.571731][T13297] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2010'. [ 361.795365][T13312] tap0: tun_chr_ioctl cmd 1074025672 [ 361.811188][T13312] tap0: ignored: set checksum disabled [ 361.892654][T13312] xt_limit: Overflow, try lower: 271964/0 [ 362.553126][T13340] IPVS: Scheduler module ip_vs_sip not found [ 363.000969][T13364] bridge6: entered promiscuous mode [ 363.007841][T13364] bridge6: entered allmulticast mode [ 363.053384][T13367] delete_channel: no stack [ 363.078972][T13368] netlink: 'syz.1.2031': attribute type 5 has an invalid length. [ 363.210072][T13372] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.325865][T13378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.845633][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.852918][ C0] bridge0: topology change detected, propagating [ 364.055553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 364.063689][ C0] lec:lec_tx_timeout: lec0 [ 364.068340][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.203033][T13408] __nla_validate_parse: 7 callbacks suppressed [ 364.203053][T13408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2045'. [ 364.229176][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2044'. [ 364.268298][T13408] delete_channel: no stack [ 364.301983][T13412] netlink: 'syz.2.2046': attribute type 10 has an invalid length. [ 364.388471][T13412] team0 (unregistering): Port device team_slave_1 removed [ 364.449233][T13412] team0 (unregistering): Port device batadv1 removed [ 364.635806][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 364.653324][T13420] vlan4: entered allmulticast mode [ 364.674630][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2051'. [ 364.689910][T13420] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 364.706862][T13427] netlink: 'syz.1.2052': attribute type 17 has an invalid length. [ 364.715058][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2052'. [ 364.737619][T13427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2052'. [ 364.757431][T13430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2053'. [ 364.843475][T13433] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 364.914392][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.942374][T13433] bridge_slave_1: left allmulticast mode [ 364.954236][T13433] bridge_slave_1: left promiscuous mode [ 364.963027][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.995130][T13433] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 365.062674][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 365.113330][T13433] vcan0 (unregistering): left allmulticast mode [ 365.464468][T13469] wg1 speed is unknown, defaulting to 1000 [ 365.482876][T13470] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.536812][T13469] lo speed is unknown, defaulting to 1000 [ 365.544580][T13470] syzkaller0: entered promiscuous mode [ 365.569390][T13470] syzkaller0: entered allmulticast mode [ 365.589832][T13479] SET target dimension over the limit! [ 365.638953][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 365.648207][T13479] SET target dimension over the limit! [ 365.725975][T13486] openvswitch: netlink: Invalid VLAN frame [ 365.918682][T13494] block nbd0: NBD_DISCONNECT [ 366.309826][T10984] udevd[10984]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 366.360854][T13507] netlink: 'syz.2.2076': attribute type 4 has an invalid length. [ 366.435405][T13515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.442956][T13515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.455989][T13515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.464181][T13515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.472076][T13516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 366.484032][T13516] openvswitch: netlink: IP tunnel TTL not specified. [ 366.507586][T13516] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 366.644003][T13516] bond9: entered promiscuous mode [ 366.652185][T13516] 8021q: adding VLAN 0 to HW filter on device bond9 [ 366.701198][T13526] bond9: (slave bridge9): making interface the new active one [ 366.709545][T13526] bridge9: entered promiscuous mode [ 366.719696][T13526] bridge9: left promiscuous mode [ 366.726132][T13531] netlink: 'syz.2.2083': attribute type 6 has an invalid length. [ 366.882910][T13537] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 367.137143][T13548] lo: Caught tx_queue_len zero misconfig [ 367.247157][T13553] pim6reg: entered allmulticast mode [ 367.682861][T13577] netlink: 'syz.1.2098': attribute type 21 has an invalid length. [ 367.692417][T13577] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.703436][T13577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.710771][T13577] IPv6: NLM_F_CREATE should be set when creating new route [ 367.718147][T13577] IPv6: NLM_F_CREATE should be set when creating new route [ 367.725412][T13577] IPv6: NLM_F_CREATE should be set when creating new route [ 367.737225][T13585] netlink: 'syz.1.2098': attribute type 21 has an invalid length. [ 367.748503][T13585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.192955][T13616] xt_hashlimit: size too large, truncated to 1048576 [ 368.851236][T13633] netlink: 'syz.2.2111': attribute type 13 has an invalid length. [ 368.871302][T13633] C: entered promiscuous mode [ 368.879647][T13633] C: entered allmulticast mode [ 368.938081][T13641] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 368.980436][T13633] tunl0: entered promiscuous mode [ 369.003229][T13633] tunl0: entered allmulticast mode [ 369.011002][T13633] gre0: entered promiscuous mode [ 369.016653][T13633] gre0: entered allmulticast mode [ 369.022783][T13633] gretap0: entered promiscuous mode [ 369.026400][T13645] netlink: 'syz.0.2114': attribute type 83 has an invalid length. [ 369.029809][T13633] gretap0: entered allmulticast mode [ 369.067359][T13633] erspan0: entered promiscuous mode [ 369.083091][T13633] erspan0: entered allmulticast mode [ 369.110281][T13633] ip_vti0: entered promiscuous mode [ 369.125708][T13633] ip_vti0: entered allmulticast mode [ 369.148318][T13633] ip6_vti0: entered promiscuous mode [ 369.153690][T13633] ip6_vti0: entered allmulticast mode [ 369.168499][T13633] sit0: entered allmulticast mode [ 369.202167][T13657] netlink: 'syz.3.2117': attribute type 142 has an invalid length. [ 369.247319][T13633] ip6tnl0: entered promiscuous mode [ 369.262875][T13633] ip6tnl0: entered allmulticast mode [ 369.276696][T13633] ip6gre0: entered promiscuous mode [ 369.281973][T13633] ip6gre0: entered allmulticast mode [ 369.303136][T13633] syz_tun: entered allmulticast mode [ 369.335167][T13633] ip6gretap0: entered promiscuous mode [ 369.352921][T13633] ip6gretap0: entered allmulticast mode [ 369.380229][T13633] bridge0: entered promiscuous mode [ 369.400631][T13633] bond0: entered promiscuous mode [ 369.414875][T13633] bond_slave_0: entered promiscuous mode [ 369.468452][T13633] bond_slave_1: entered promiscuous mode [ 369.474592][T13633] bridge_slave_1: entered promiscuous mode [ 369.493524][T13633] bond0: entered allmulticast mode [ 369.548704][T13633] bond_slave_0: entered allmulticast mode [ 369.554592][T13633] bond_slave_1: entered allmulticast mode [ 369.562618][T13633] bridge_slave_1: entered allmulticast mode [ 369.574474][T13633] dummy0: entered promiscuous mode [ 369.580227][T13633] dummy0: entered allmulticast mode [ 369.589206][T13633] nlmon0: entered promiscuous mode [ 369.594407][T13633] nlmon0: entered allmulticast mode [ 369.606472][T13633] caif0: entered promiscuous mode [ 369.611730][T13633] caif0: entered allmulticast mode [ 369.617529][T13633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.712147][T13646] wg1 speed is unknown, defaulting to 1000 [ 369.723158][T13653] wg1 speed is unknown, defaulting to 1000 [ 369.736919][T13646] lo speed is unknown, defaulting to 1000 [ 369.966203][T13695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 370.075058][T13702] __nla_validate_parse: 7 callbacks suppressed [ 370.075079][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 370.126474][T13705] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 370.194397][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 370.247140][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6180 ms [ 370.255213][ C0] lec:lec_tx_timeout: lec0 [ 370.265600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 370.327340][T13653] lo speed is unknown, defaulting to 1000 [ 370.715808][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 370.824842][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 371.407949][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 371.426765][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2144'. [ 371.445365][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 371.511127][T13751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2144'. [ 371.549020][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 371.589558][T13755] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2145'. [ 372.653618][T13814] syzkaller0: entered promiscuous mode [ 372.659558][T13814] syzkaller0: entered allmulticast mode [ 375.854534][T13832] ip6tnl0: Caught tx_queue_len zero misconfig [ 375.984898][T13843] IPVS: length: 8 != 1152 [ 375.999851][T13842] IPVS: length: 8 != 1152 [ 376.015495][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 376.023557][ C0] lec:lec_tx_timeout: lec0 [ 376.028967][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.161972][T13860] __nla_validate_parse: 5 callbacks suppressed [ 376.161994][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2176'. [ 376.207136][T13860] dummy0: left allmulticast mode [ 376.224309][T13846] xt_CT: No such helper "pptp" [ 376.229144][T13860] bridge0: port 1(dummy0) entered disabled state [ 376.243343][T13860] bridge_slave_1: left allmulticast mode [ 376.262447][T13860] bridge_slave_1: left promiscuous mode [ 376.288310][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.607455][T13887] netlink: 'syz.4.2181': attribute type 33 has an invalid length. [ 376.616641][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 376.702281][T13887] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 376.720687][T13887] bond10 (unregistering): Released all slaves [ 376.913267][T13906] netlink: 'syz.3.2189': attribute type 29 has an invalid length. [ 376.924316][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 376.956905][T13911] netlink: 'syz.4.2190': attribute type 83 has an invalid length. [ 377.067048][T13916] netlink: 30 bytes leftover after parsing attributes in process `syz.4.2192'. [ 377.579907][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 377.646876][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 377.840756][T13974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.980315][T13978] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 377.993678][T13978] bond10 (unregistering): Released all slaves [ 378.097836][T13986] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2209'. [ 378.470188][T14005] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 378.573116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.581259][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.603907][T14019] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2222'. [ 378.879642][T14037] x_tables: duplicate underflow at hook 1 [ 379.337007][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 379.381201][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 379.393504][T14067] bridge0: Caught tx_queue_len zero misconfig [ 379.683700][T14079] xt_CT: No such helper "syz1" [ 379.885107][T14092] netlink: 'syz.1.2247': attribute type 1 has an invalid length. [ 379.954334][T14092] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.536924][T14144] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 380.584609][T14144] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 380.858591][T10011] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 380.989390][T14169] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 381.035512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.044271][ C0] lec:lec_tx_timeout: lec0 [ 381.049317][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.230844][T14180] netlink: 'syz.4.2270': attribute type 6 has an invalid length. [ 381.300751][T14186] __nla_validate_parse: 8 callbacks suppressed [ 381.300776][T14186] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2271'. [ 381.414975][T14192] netlink: 'syz.0.2272': attribute type 9 has an invalid length. [ 381.595584][T14154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.888776][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'. [ 381.946519][T14217] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2280'. [ 381.982216][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2279'. [ 382.000429][T14225] netlink: 'syz.1.2279': attribute type 7 has an invalid length. [ 382.030635][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 382.036050][T14225] netlink: 'syz.1.2279': attribute type 8 has an invalid length. [ 382.071924][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 382.227466][T14233] team0: Device ip6gre1 is of different type [ 382.788501][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2291'. [ 382.849836][T14267] netlink: 'syz.3.2293': attribute type 19 has an invalid length. [ 383.037279][T14282] netlink: 'syz.3.2297': attribute type 10 has an invalid length. [ 383.054925][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2294'. [ 383.071167][T14282] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 383.107665][T14282] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 383.213086][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2297'. [ 383.330642][T14297] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2300'. [ 383.461409][T14301] netlink: 'syz.1.2301': attribute type 15 has an invalid length. [ 383.533214][T14301] bond11: entered promiscuous mode [ 383.539010][T14301] bond11: entered allmulticast mode [ 383.544962][T14301] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.380917][T14346] openvswitch: netlink: Key type 105 is out of range max 32 [ 384.421544][T14346] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 384.606123][T14350] nbd3: detected capacity change from 0 to 127 [ 384.616980][ T5840] block nbd3: Receive control failed (result -32) [ 384.640592][T14023] block nbd3: Dead connection, failed to find a fallback [ 384.648462][T14023] block nbd3: shutting down sockets [ 384.653798][T14023] blk_print_req_error: 138 callbacks suppressed [ 384.653825][T14023] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.669963][T14023] buffer_io_error: 138 callbacks suppressed [ 384.669983][T14023] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.683896][T14023] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.694182][T14023] Buffer I/O error on dev nbd3, logical block 1, async page read [ 384.702106][T14023] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.713273][T14023] Buffer I/O error on dev nbd3, logical block 2, async page read [ 384.724948][T14361] netlink: 'syz.4.2317': attribute type 4 has an invalid length. [ 384.753338][T14361] netlink: 'syz.4.2317': attribute type 4 has an invalid length. [ 384.761352][T14023] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.772441][T14353] syzkaller1: entered promiscuous mode [ 384.794007][T14023] Buffer I/O error on dev nbd3, logical block 3, async page read [ 384.806685][T14353] syzkaller1: entered allmulticast mode [ 384.843877][T14023] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.847158][T14353] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 384.899558][T14023] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.919949][T14023] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 384.943420][T14023] Buffer I/O error on dev nbd3, logical block 1, async page read [ 384.994291][T14023] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.008639][T14023] Buffer I/O error on dev nbd3, logical block 2, async page read [ 385.034732][T14023] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.087778][T14023] Buffer I/O error on dev nbd3, logical block 3, async page read [ 385.096731][T14023] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.124678][T14023] Buffer I/O error on dev nbd3, logical block 0, async page read [ 385.143925][T14023] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 385.173977][T14023] Buffer I/O error on dev nbd3, logical block 1, async page read [ 385.203603][T14379] netlink: 'syz.2.2320': attribute type 23 has an invalid length. [ 385.225244][T14023] ldm_validate_partition_table(): Disk read failed. [ 385.246202][T14023] Dev nbd3: unable to read RDB block 0 [ 385.262946][T14023] nbd3: unable to read partition table [ 385.312542][T14023] ldm_validate_partition_table(): Disk read failed. [ 385.337442][T14023] Dev nbd3: unable to read RDB block 0 [ 385.343618][T14023] nbd3: unable to read partition table [ 385.603103][T14391] dvmrp8: entered allmulticast mode [ 385.622057][T14391] dvmrp0: left allmulticast mode [ 385.629502][T14391] dvmrp8: left allmulticast mode [ 385.898331][T14413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.055493][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.063598][ C0] lec:lec_tx_timeout: lec0 [ 386.068752][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.512620][T14448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.703513][T14463] __nla_validate_parse: 6 callbacks suppressed [ 386.703536][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 386.808485][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 386.838113][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'. [ 386.873755][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 386.893368][T14474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2344'. [ 387.179867][T14485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2345'. [ 387.209316][T14484] xt_l2tp: missing protocol rule (udp|l2tpip) [ 387.340983][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2350'. [ 387.386221][T14498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2350'. [ 388.316245][T14552] wg1 speed is unknown, defaulting to 1000 [ 388.324017][T14552] lo speed is unknown, defaulting to 1000 [ 388.365399][T14561] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2368'. [ 388.421650][T14561] tap0: tun_chr_ioctl cmd 1074025672 [ 388.441999][T14561] tap0: ignored: set checksum disabled [ 388.573381][T14565] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2370'. [ 388.650812][T14569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 388.789027][T14576] syzkaller1: entered promiscuous mode [ 388.805067][T14576] syzkaller1: entered allmulticast mode [ 389.340881][T14608] netlink: 'syz.3.2386': attribute type 1 has an invalid length. [ 389.442369][T14613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 389.452713][T14607] syzkaller0: entered promiscuous mode [ 389.486384][T14607] syzkaller0: entered allmulticast mode [ 389.498861][T14607] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 389.817759][ T5899] IPVS: starting estimator thread 0... [ 389.922261][T14625] bridge_slave_1: default FDB implementation only supports local addresses [ 389.935627][T14635] IPVS: using max 27 ests per chain, 64800 per kthread [ 390.001049][T14642] netlink: 'syz.1.2395': attribute type 4 has an invalid length. [ 390.029598][T14642] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.123743][T14647] batadv0: entered allmulticast mode [ 390.201116][T14649] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 390.215390][T14653] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 390.254156][T14649] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 390.318165][T14659] bond12: (slave gretap2): making interface the new active one [ 390.342220][T14659] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 390.393476][T14661] tipc: Started in network mode [ 390.401922][T14661] tipc: Node identity fa8e2550a1d1, cluster identity 4711 [ 390.410039][T14661] tipc: Enabled bearer , priority 0 [ 390.420008][T14661] tipc: Enabling of bearer rejected, already enabled [ 390.428952][T14661] tipc: Enabling of bearer rejected, already enabled [ 390.437863][T14661] tipc: Enabling of bearer rejected, already enabled [ 390.462393][T14662] syzkaller0: entered promiscuous mode [ 390.488503][T14662] syzkaller0: entered allmulticast mode [ 390.571198][T14662] tipc: Resetting bearer [ 390.604874][T14662] tipc: Disabling bearer [ 390.729637][T14671] gretap4: entered promiscuous mode [ 390.734944][T14671] gretap4: entered allmulticast mode [ 390.759348][T14681] syzkaller1: entered promiscuous mode [ 390.765290][T14681] syzkaller1: entered allmulticast mode [ 390.890763][T14689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.045268][T14696] TCP: TCP_TX_DELAY enabled [ 391.421235][T14713] IPv6: sit4: Disabled Multicast RS [ 391.437655][T14713] sit4: entered allmulticast mode [ 391.856752][T14736] __nla_validate_parse: 22 callbacks suppressed [ 391.856776][T14736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2427'. [ 391.896588][T14739] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 392.005541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 392.013685][ C0] lec:lec_tx_timeout: lec0 [ 392.018415][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.071853][T14746] 8021q: VLANs not supported on caif0 [ 392.092377][T14755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2431'. [ 392.102738][T14755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2431'. [ 392.112390][T14755] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2431'. [ 392.263304][T14757] netlink: 'syz.1.2433': attribute type 58 has an invalid length. [ 392.279441][T14759] nbd: must specify a size in bytes for the device [ 392.303867][T14757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2433'. [ 392.409850][T14770] IPv6: addrconf: prefix option has invalid lifetime [ 392.909495][T14798] x_tables: duplicate underflow at hook 2 [ 392.989172][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 393.010265][T14801] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.042421][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'. [ 393.148881][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 393.380001][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 393.416407][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2455'. [ 393.451256][T14822] netlink: 'syz.1.2455': attribute type 15 has an invalid length. [ 393.460279][T14823] netlink: 'syz.1.2455': attribute type 15 has an invalid length. [ 393.601269][T14839] netlink: 'syz.3.2458': attribute type 2 has an invalid length. [ 393.745308][T14842] netlink: 'syz.2.2460': attribute type 4 has an invalid length. [ 394.127475][T14879] sit0: entered promiscuous mode [ 394.133344][T14879] sit0: left allmulticast mode [ 395.124438][T14902] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 396.945969][T14862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.025524][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 397.033623][ C0] lec:lec_tx_timeout: lec0 [ 397.038229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.222179][T14916] syzkaller1: entered promiscuous mode [ 397.253877][T14916] syzkaller1: entered allmulticast mode [ 397.273690][T14916] __nla_validate_parse: 3 callbacks suppressed [ 397.273709][T14916] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2478'. [ 397.345017][T14922] raw_sendmsg: syz.4.2482 forgot to set AF_INET. Fix it! [ 397.398031][T14929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2484'. [ 397.618195][T14939] validate_nla: 1 callbacks suppressed [ 397.618215][T14939] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 397.621518][T14941] syzkaller1: entered promiscuous mode [ 397.638057][T14941] syzkaller1: entered allmulticast mode [ 397.982815][T14956] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2492'. [ 398.636233][T14988] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2503'. [ 398.696639][T14995] xt_hashlimit: size too large, truncated to 1048576 [ 398.854264][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 398.889724][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2507'. [ 399.061265][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2508'. [ 399.090456][T15022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2508'. [ 399.494877][T15046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2513'. [ 399.543969][T15043] syzkaller0: entered promiscuous mode [ 399.562597][T15043] syzkaller0: entered allmulticast mode [ 399.613816][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2519'. [ 399.776179][T15057] vlan1: entered allmulticast mode [ 399.781554][T15057] erspan0: entered allmulticast mode [ 399.810380][T15057] netlink: 'syz.4.2520': attribute type 1 has an invalid length. [ 399.818816][T15064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 400.427265][T15089] netlink: 'syz.0.2531': attribute type 39 has an invalid length. [ 400.714827][T15099] syzkaller0: entered promiscuous mode [ 400.722334][T15099] syzkaller0: entered allmulticast mode [ 400.741966][T15099] netlink: 'syz.4.2535': attribute type 2 has an invalid length. [ 400.754607][T15099] 0: reclassify loop, rule prio 0, protocol 800 [ 401.002851][T15116] netlink: 'syz.0.2538': attribute type 4 has an invalid length. [ 401.108407][T15121] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 401.119704][T15121] bond13 (unregistering): Released all slaves [ 401.152331][T15116] .`: renamed from bond0 (while UP) [ 401.767725][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 402.046065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 402.054128][ C0] lec:lec_tx_timeout: lec0 [ 402.058758][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.818983][T15147] syzkaller0: entered promiscuous mode [ 402.824509][T15147] syzkaller0: entered allmulticast mode [ 403.508221][T15158] __nla_validate_parse: 5 callbacks suppressed [ 403.508237][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 403.523906][T15158] netlink: 'syz.1.2552': attribute type 7 has an invalid length. [ 403.532994][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'. [ 403.671690][T15100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.862796][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 403.887806][T15169] netlink: 'syz.1.2553': attribute type 10 has an invalid length. [ 403.892239][T15168] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 403.907165][T15169] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2553'. [ 403.924770][T15170] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 403.951553][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 403.998502][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 404.019170][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 404.028573][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 404.043823][T15168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 404.053818][T15165] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 404.211380][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2560'. [ 404.231148][T15182] openvswitch: netlink: Flow key attr not present in new flow. [ 404.451337][T15204] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 404.529106][T15205] 8021q: adding VLAN 0 to HW filter on device bond10 [ 404.556169][T15210] vlan5: entered promiscuous mode [ 404.561596][T15210] bond10: entered promiscuous mode [ 404.569079][T15210] vlan5: entered allmulticast mode [ 404.574266][T15210] bond10: entered allmulticast mode [ 404.585744][T15211] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2568'. [ 404.613069][T15205] bond10: (slave bridge8): making interface the new active one [ 404.621135][T15205] bridge8: entered promiscuous mode [ 404.626867][T15205] bridge8: entered allmulticast mode [ 404.638282][T15205] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 404.658375][T15215] IPVS: length: 8 != 422245006464 [ 404.781922][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 404.924977][T15226] xt_limit: Overflow, try lower: 271964/0 [ 404.976289][T15223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'. [ 404.985373][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 405.154478][T15242] delete_channel: no stack [ 405.262831][T15253] bond0: (slave syz_tun): Releasing backup interface [ 405.291130][T15253] bond0: (slave bridge0): Releasing backup interface [ 405.299890][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.346520][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 405.362595][T15253] bridge_slave_0: left allmulticast mode [ 405.379983][T15253] bridge_slave_0: left promiscuous mode [ 405.397096][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.413097][T15253] bond0: (slave bridge_slave_1): Releasing backup interface [ 405.426721][T15253] bridge_slave_1: left promiscuous mode [ 405.432842][T15253] bridge_slave_1: left allmulticast mode [ 405.487185][T15253] bond0: (slave bond_slave_0): Releasing backup interface [ 405.507696][T15253] bond_slave_0: left promiscuous mode [ 405.518205][T15253] bond_slave_0: left allmulticast mode [ 405.558390][T15253] bond0: (slave bond_slave_1): Releasing backup interface [ 405.567136][T15253] bond_slave_1: left promiscuous mode [ 405.572795][T15253] bond_slave_1: left allmulticast mode [ 405.584548][T15253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.593353][T15253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.603840][T15253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.899436][T15279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2587'. [ 406.011696][T15284] tipc: Enabling of bearer rejected, failed to enable media [ 406.243095][T15294] : entered promiscuous mode [ 406.993994][T15358] nbd: must specify at least one socket [ 407.177617][T15371] syz.3.2618 uses old SIOCAX25GETINFO [ 407.845482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 407.853577][ C0] lec:lec_tx_timeout: lec0 [ 407.863913][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.554919][T15454] validate_nla: 30 callbacks suppressed [ 408.554942][T15454] netlink: 'syz.4.2643': attribute type 4 has an invalid length. [ 408.576036][ T5899] syzkaller1: tun_net_xmit 90 [ 408.602672][T15454] netlink: 'syz.4.2643': attribute type 4 has an invalid length. [ 408.641289][T15454] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 408.649718][T15454] syzkaller1: Linktype set failed because interface is up [ 408.905613][T15477] netlink: 'syz.0.2651': attribute type 3 has an invalid length. [ 408.940375][T15477] __nla_validate_parse: 9 callbacks suppressed [ 408.940396][T15477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2651'. [ 409.187112][T15486] syzkaller0: entered promiscuous mode [ 409.199304][T15486] syzkaller0: entered allmulticast mode [ 409.610479][T15510] bond13: entered promiscuous mode [ 409.615949][T15510] bond13: entered allmulticast mode [ 409.621712][T15510] 8021q: adding VLAN 0 to HW filter on device bond13 [ 410.064375][T15545] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 410.105595][T15545] netlink: 'syz.0.2669': attribute type 4 has an invalid length. [ 410.113587][T15545] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2669'. [ 410.563191][T15574] netlink: 'syz.2.2681': attribute type 33 has an invalid length. [ 410.603360][T15574] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 410.616977][T15574] bond8 (unregistering): Released all slaves [ 410.663935][T15578] syzkaller0: entered promiscuous mode [ 410.670492][T15578] syzkaller0: entered allmulticast mode [ 410.835738][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2684'. [ 410.870529][T15593] tipc: Enabled bearer , priority 0 [ 410.909246][T15593] syzkaller0: MTU too low for tipc bearer [ 410.915235][T15593] tipc: Disabling bearer [ 410.946779][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2685'. [ 411.503470][T15635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.514845][T15638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2699'. [ 411.583240][T15635] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 411.597632][T15635] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 411.608824][T15635] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 411.618639][T15635] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 411.634384][T15637] tipc: Failed to remove unknown binding: 66,0,0/0:3616462305/3616462306 [ 411.643608][T15637] tipc: Failed to remove unknown binding: 66,0,0/0:3616462305/3616462306 [ 411.801230][T15650] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2701'. [ 411.853454][T15654] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 411.917269][T15650] syzkaller1: entered promiscuous mode [ 411.923688][T15650] syzkaller1: entered allmulticast mode [ 412.090989][T15665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2706'. [ 412.106050][T15666] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2706'. [ 412.380781][T15685] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 412.649272][T15698] netlink: 9052 bytes leftover after parsing attributes in process `syz.0.2712'. [ 412.885727][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 412.893891][ C0] lec:lec_tx_timeout: lec0 [ 412.898671][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 413.104956][T15727] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2720'. [ 414.069634][T15789] validate_nla: 1 callbacks suppressed [ 414.069655][T15789] netlink: 'syz.4.2741': attribute type 4 has an invalid length. [ 414.083783][T15789] __nla_validate_parse: 6 callbacks suppressed [ 414.083802][T15789] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2741'. [ 414.273223][T15795] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2744'. [ 414.283393][T15780] syz.3.2737 (15780) used greatest stack depth: 17472 bytes left [ 414.341044][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 414.350641][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'. [ 414.360990][T15801] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2742'. [ 414.371673][T15792] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2742'. [ 414.399003][T15798] SET target dimension over the limit! [ 414.663192][T15796] infiniband : set down [ 414.676370][T15796] infiniband : added ipvlan0 [ 414.757241][T15796] RDS/IB: : added [ 414.778246][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 414.787465][T15796] smc: adding ib device  with port count 1 [ 414.794407][T15796] smc: ib device  port 1 has no pnetid [ 415.357207][T15839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2758'. [ 415.506727][T15845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2760'. [ 415.633609][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 415.729256][T15858] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 415.729830][T15860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.956696][T15868] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.786744][T15916] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 416.821387][T15916] bridge0: entered allmulticast mode [ 416.843249][T15916] openvswitch: netlink: Message has 1 unknown bytes. [ 416.880501][T15916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.151156][T15923] syzkaller0: entered promiscuous mode [ 417.187512][T15923] syzkaller0: entered allmulticast mode [ 417.238009][T15923] 0: reclassify loop, rule prio 0, protocol 800 [ 417.622327][T15950] bridge0: port 1(ipvlan0) entered blocking state [ 417.661692][T15950] bridge0: port 1(ipvlan0) entered disabled state [ 417.684077][T15950] ipvlan0: entered allmulticast mode [ 417.707044][T15950] bridge0: entered allmulticast mode [ 417.727731][T15950] ipvlan0: left allmulticast mode [ 417.736145][T15950] bridge0: left allmulticast mode [ 417.765955][ T5489] veth1_macvtap: left promiscuous mode [ 417.905489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 417.913598][ C0] lec:lec_tx_timeout: lec0 [ 417.918318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 418.502395][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.511626][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.520332][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.556733][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.567240][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.649498][T15990] syzkaller0: entered promiscuous mode [ 418.655087][T15990] syzkaller0: entered allmulticast mode [ 418.665862][T15990] 0: reclassify loop, rule prio 0, protocol 800 [ 418.869267][T15984] wg1 speed is unknown, defaulting to 1000 [ 418.945565][T15984] lo speed is unknown, defaulting to 1000 [ 419.187563][ T6070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.399358][ T6070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.578871][ T6070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.724021][ T6070] bond0: (slave netdevsim0): Releasing backup interface [ 419.790755][T16035] __nla_validate_parse: 5 callbacks suppressed [ 419.790775][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 419.816798][ T6070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.888331][T16037] syzkaller0: entered promiscuous mode [ 419.896629][T16037] syzkaller0: entered allmulticast mode [ 420.648809][ T5837] Bluetooth: hci5: command tx timeout [ 421.152786][T16071] lec:lec_atm_close: lec0: Shut down! [ 421.264924][T16098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2814'. [ 421.281102][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.292998][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.302862][ T6070] bond0 (unregistering): Released all slaves [ 421.324051][T16050] tipc: Enabled bearer , priority 0 [ 421.334494][T16053] syzkaller0: entered promiscuous mode [ 421.341060][T16053] syzkaller0: entered allmulticast mode [ 421.349778][T16077] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 421.398232][T16084] tipc: Resetting bearer [ 421.445410][T16048] tipc: Resetting bearer [ 421.478323][T16048] tipc: Disabling bearer [ 421.504423][ T6070] tipc: Left network mode [ 421.533816][T16100] syzkaller0: entered promiscuous mode [ 421.566370][T16100] syzkaller0: entered allmulticast mode [ 421.578856][T16100] 0: reclassify loop, rule prio 0, protocol 800 [ 421.622721][T16103] --map-set only usable from mangle table [ 421.777457][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2817'. [ 421.916347][T16114] pim6reg: entered allmulticast mode [ 421.978852][T16108] dvmrp0: entered allmulticast mode [ 422.283361][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 422.301457][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 422.408760][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 422.502378][T16141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 422.631211][T15984] chnl_net:caif_netlink_parms(): no params data found [ 422.726718][ T5837] Bluetooth: hci5: command tx timeout [ 423.001260][T16159] 0: reclassify loop, rule prio 0, protocol 800 [ 423.078772][T16163] vlan1: entered allmulticast mode [ 423.105792][T16163] geneve1: entered allmulticast mode [ 423.378427][T15984] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.385897][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.393277][T15984] bridge_slave_0: entered allmulticast mode [ 423.433936][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 423.459099][T15984] bridge_slave_0: entered promiscuous mode [ 423.477264][T15984] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.484527][T15984] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.515767][T15984] bridge_slave_1: entered allmulticast mode [ 423.547548][T15984] bridge_slave_1: entered promiscuous mode [ 423.560226][T16186] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2834'. [ 423.633723][ T6070] hsr_slave_0: left promiscuous mode [ 423.679702][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.733617][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.153311][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 424.184787][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 424.437903][T15984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.490548][T15984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.553851][T15984] team0: Port device team_slave_0 added [ 424.564947][T15984] team0: Port device team_slave_1 added [ 424.706505][T16219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2841'. [ 424.718368][T15984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.725386][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.799215][T15984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.812397][ T5837] Bluetooth: hci5: command tx timeout [ 424.843146][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 424.848704][T15984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.873804][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'. [ 424.875800][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.909702][T15984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.963052][T16224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2841'. [ 424.999270][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 425.105190][ T6070] IPVS: stop unused estimator thread 0... [ 425.151267][T15984] hsr_slave_0: entered promiscuous mode [ 425.179515][T15984] hsr_slave_1: entered promiscuous mode [ 425.322509][T16240] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 425.526735][T16251] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2849'. [ 425.749579][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2852'. [ 426.218098][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 426.227784][T16287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2858'. [ 426.431127][T16297] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2859'. [ 426.759100][T15984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.803535][T15984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.844205][T15984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 426.876759][T16309] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 426.884592][T16309] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2863'. [ 426.894440][ T5837] Bluetooth: hci5: command tx timeout [ 426.895739][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 426.907955][ C0] lec:lec_tx_timeout: lec0 [ 426.913512][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 426.931812][T15984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.349960][T16345] xt_socket: unknown flags 0xe4 [ 427.500810][T15984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.603079][T15984] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.680163][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.687449][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.740439][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.747736][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.906911][T15984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.024696][T16367] wg1 speed is unknown, defaulting to 1000 [ 428.099625][T16367] lo speed is unknown, defaulting to 1000 [ 428.431572][T15984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.569978][T15984] veth0_vlan: entered promiscuous mode [ 428.613208][T15984] veth1_vlan: entered promiscuous mode [ 428.742273][T15984] veth0_macvtap: entered promiscuous mode [ 428.780170][T15984] veth1_macvtap: entered promiscuous mode [ 428.878064][T15984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.918901][T15984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.958125][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.986261][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.053960][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.093374][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.112246][T16392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.144656][T16411] wg1 speed is unknown, defaulting to 1000 [ 429.160319][T16411] lo speed is unknown, defaulting to 1000 [ 429.436128][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.447652][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.541824][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.555642][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.989067][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 430.232320][T16434] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 430.241151][T16436] xt_l2tp: wrong L2TP version: 0 [ 430.247887][T16434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2888'. [ 430.258055][T16434] dummy0: entered promiscuous mode [ 430.268861][T16434] batman_adv: batadv0: Interface activated: dummy0 [ 430.295203][T16434] batadv0: mtu less than device minimum [ 430.312666][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.324972][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.336822][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.348631][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.360473][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.372462][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.384291][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.396219][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.408042][T16434] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 430.451628][T16434] batman_adv: batadv0: Interface deactivated: dummy0 [ 430.463391][T16434] batman_adv: batadv0: Removing interface: dummy0 [ 430.472900][T16434] bridge0: port 3(dummy0) entered blocking state [ 430.479508][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2891'. [ 430.479979][T16434] bridge0: port 3(dummy0) entered disabled state [ 430.496964][T16434] dummy0: entered allmulticast mode [ 430.533172][T16434] bridge0: port 3(dummy0) entered blocking state [ 430.539744][T16434] bridge0: port 3(dummy0) entered forwarding state [ 430.673720][T16443] netlink: 'syz.3.2891': attribute type 83 has an invalid length. [ 430.684620][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 430.819127][T16450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 430.859969][T16450] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 430.873769][T16450] gretap5: entered promiscuous mode [ 430.881603][T16450] gretap5: entered allmulticast mode [ 431.249908][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'. [ 431.259382][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'. [ 431.556428][T16484] veth9: entered promiscuous mode [ 431.573275][T16484] veth9: entered allmulticast mode [ 431.820612][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 431.925516][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 431.933604][ C0] lec:lec_tx_timeout: lec0 [ 431.938807][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 432.239071][T16517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2909'. [ 432.540896][T16539] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2916'. [ 432.613017][T16544] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2918'. [ 433.231784][T16576] netlink: 'syz.1.2929': attribute type 1 has an invalid length. [ 433.267103][T16576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 433.288993][T16576] vlan3: entered promiscuous mode [ 433.294098][T16576] bond14: entered promiscuous mode [ 433.299918][T16576] vlan3: entered allmulticast mode [ 433.305136][T16576] bond14: entered allmulticast mode [ 433.552178][T16601] netlink: 'syz.0.2937': attribute type 12 has an invalid length. [ 433.581613][T16595] 8021q: adding VLAN 0 to HW filter on device bond11 [ 433.690775][T16595] macvlan5: entered promiscuous mode [ 433.716800][T16595] macvlan5: entered allmulticast mode [ 433.722833][T16595] bond11: entered allmulticast mode [ 433.728399][T16595] bond11: entered promiscuous mode [ 433.734428][T16595] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 433.744247][T16595] team0: Port device macvlan5 added [ 433.801653][T16611] syz.0.2942 (16611) used obsolete PPPIOCDETACH ioctl [ 433.932987][T16618] netlink: 'syz.4.2944': attribute type 33 has an invalid length. [ 433.979827][T16618] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 433.998348][T16619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.009907][T16618] bond12 (unregistering): Released all slaves [ 434.079316][T16629] netlink: 'syz.3.2947': attribute type 1 has an invalid length. [ 434.433535][T16646] veth13: entered allmulticast mode [ 434.452030][T16652] ksmbd: Unknown IPC event: 3, ignore. [ 434.557200][T16654] netlink: 'syz.0.2961': attribute type 6 has an invalid length. [ 434.624531][T16660] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 434.652122][T16660] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 434.970638][T16629] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 435.013908][T16679] netlink: 'syz.4.2967': attribute type 1 has an invalid length. [ 435.037252][T16679] __nla_validate_parse: 15 callbacks suppressed [ 435.037753][T16679] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2967'. [ 435.323105][T16695] netlink: 'syz.4.2972': attribute type 11 has an invalid length. [ 435.357330][T16695] netlink: 'syz.4.2972': attribute type 11 has an invalid length. [ 435.396196][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2972'. [ 435.461079][T16699] netlink: 'syz.1.2975': attribute type 33 has an invalid length. [ 435.488867][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.503115][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.512129][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.524857][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.542081][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.781976][T16713] tipc: Enabled bearer , priority 0 [ 435.830873][T16705] wg1 speed is unknown, defaulting to 1000 [ 435.844924][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'. [ 435.883853][T16705] lo speed is unknown, defaulting to 1000 [ 435.989944][ T6070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.136690][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 436.259849][ T6070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.402358][ T6070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.608640][ T6070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.945516][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 436.953644][ C0] lec:lec_tx_timeout: lec0 [ 436.960638][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.122818][ T6070] bridge_slave_1: left allmulticast mode [ 437.145554][ T6070] bridge_slave_1: left promiscuous mode [ 437.169575][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.254260][ T6070] veth5: left allmulticast mode [ 437.285815][ T6070] veth5: left promiscuous mode [ 437.292401][ T6070] bridge2: port 1(veth5) entered disabled state [ 437.606027][ T5840] Bluetooth: hci2: command tx timeout [ 437.839551][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 437.860243][T16817] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3006'. [ 437.900889][ T6070] bond1 (unregistering): (slave gretap1): Releasing active interface [ 437.938099][ T6070] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 438.301615][ T6070] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.312231][ T6070] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.322356][ T6070] .` (unregistering): Released all slaves [ 438.333710][ T6070] bond1 (unregistering): Released all slaves [ 438.354103][ T6070] bond2 (unregistering): Released all slaves [ 438.371694][ T6070] bond3 (unregistering): (slave bond4): Releasing backup interface [ 438.390801][ T6070] bond3 (unregistering): Released all slaves [ 438.406349][ T6070] bond4 (unregistering): Released all slaves [ 438.421033][ T6070] bond0 (unregistering): Released all slaves [ 438.439719][ T6070] bond5 (unregistering): Released all slaves [ 438.465379][T16789] : entered promiscuous mode [ 438.836945][ T6070] tipc: Disabling bearer [ 438.860217][ T6070] tipc: Left network mode [ 439.067450][T16847] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.084667][T16841] IPVS: Unknown mcast interface: lo [ 439.138962][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 439.149083][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 439.160571][T16852] netlink: 'syz.1.3014': attribute type 1 has an invalid length. [ 439.214336][T16705] chnl_net:caif_netlink_parms(): no params data found [ 439.400824][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3017'. [ 439.417235][T16862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3017'. [ 439.686263][ T5840] Bluetooth: hci2: command tx timeout [ 439.828606][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.838537][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.847500][T16705] bridge_slave_0: entered allmulticast mode [ 439.859145][T16705] bridge_slave_0: entered promiscuous mode [ 439.921796][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.941461][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.963600][T16705] bridge_slave_1: entered allmulticast mode [ 439.983911][T16885] netlink: 'syz.4.3020': attribute type 1 has an invalid length. [ 439.994463][T16705] bridge_slave_1: entered promiscuous mode [ 440.016866][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.102130][ T5489] veth0_macvtap: left promiscuous mode [ 440.332054][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.397983][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.684952][T16705] team0: Port device team_slave_0 added [ 440.703686][T16916] netlink: 'syz.2.3027': attribute type 11 has an invalid length. [ 440.802864][T16705] team0: Port device team_slave_1 added [ 441.178676][T16924] netlink: 'syz.3.3029': attribute type 3 has an invalid length. [ 441.290879][T16942] netlink: 'syz.2.3032': attribute type 9 has an invalid length. [ 441.325850][T16942] netlink: 'syz.2.3032': attribute type 11 has an invalid length. [ 441.362616][T16942] netlink: 'syz.2.3032': attribute type 12 has an invalid length. [ 441.375228][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.403011][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.415604][T16942] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3032'. [ 441.447166][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.462708][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.470888][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.499160][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.518193][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 441.587754][T16954] netlink: 'syz.4.3033': attribute type 3 has an invalid length. [ 441.768270][ T5840] Bluetooth: hci2: command tx timeout [ 441.811736][T16705] hsr_slave_0: entered promiscuous mode [ 441.827085][T16705] hsr_slave_1: entered promiscuous mode [ 441.840289][T16705] debugfs: 'hsr0' already exists in 'hsr' [ 441.850043][T16705] Cannot create hsr debugfs directory [ 441.952191][ T6070] hsr_slave_0: left promiscuous mode [ 441.964080][ T6070] hsr_slave_1: left promiscuous mode [ 441.975513][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 441.983573][ C0] lec:lec_tx_timeout: lec0 [ 441.988216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.783038][T16973] geneve2: entered promiscuous mode [ 442.908165][T10007] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 47832 - 0 [ 442.945562][T10007] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 47832 - 0 [ 442.969374][T17005] sctp: [Deprecated]: syz.3.3041 (pid 17005) Use of int in max_burst socket option. [ 442.969374][T17005] Use struct sctp_assoc_value instead [ 443.004696][T17002] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3041'. [ 443.076313][T10007] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 47832 - 0 [ 443.090400][T10007] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 47832 - 0 [ 443.148296][T17018] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 443.182068][T17017] ip6gre0: Caught tx_queue_len zero misconfig [ 443.220286][T17017] tipc: Enabling of bearer rejected, media not registered [ 443.687082][ T6070] IPVS: stop unused estimator thread 0... [ 443.780230][T17043] netlink: 'syz.4.3051': attribute type 1 has an invalid length. [ 443.846291][ T5840] Bluetooth: hci2: command tx timeout [ 443.869156][T17041] macvlan6: entered promiscuous mode [ 443.874639][T17041] macvlan6: entered allmulticast mode [ 443.882342][T17041] bond12: entered promiscuous mode [ 443.889502][T17041] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 443.927250][T17041] bond12: left promiscuous mode [ 443.958761][T17054] netlink: 'syz.2.3054': attribute type 21 has an invalid length. [ 444.031362][T17054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3054'. [ 444.077470][T17054] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3054'. [ 444.344104][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 444.632653][T16705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.645187][T16705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.662849][T16705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.689912][T16705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.812873][T17091] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 444.823015][T17091] netlink: 'syz.1.3061': attribute type 4 has an invalid length. [ 444.834949][T17091] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3061'. [ 445.170940][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.225571][T17114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 445.235129][T17113] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3065'. [ 445.258158][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 445.299852][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.352209][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.359468][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.387164][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.394372][T10008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.320421][T17177] x_tables: unsorted entry at hook 1 [ 446.370130][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.748689][T17196] net_ratelimit: 11 callbacks suppressed [ 446.748794][T17196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.832091][T17202] __nla_validate_parse: 3 callbacks suppressed [ 446.832111][T17202] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3085'. [ 446.860448][T16705] veth0_vlan: entered promiscuous mode [ 446.903108][T16705] veth1_vlan: entered promiscuous mode [ 446.938019][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3087'. [ 446.994818][T16705] veth0_macvtap: entered promiscuous mode [ 447.005484][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 447.013761][ C0] lec:lec_tx_timeout: lec0 [ 447.018758][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 447.033051][T16705] veth1_macvtap: entered promiscuous mode [ 447.124545][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.211066][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.252718][ T6070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.281533][T17218] tap0: tun_chr_ioctl cmd 1074025672 [ 447.297025][T17218] tap0: ignored: set checksum disabled [ 447.310818][ T6070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.324274][T17224] delete_channel: no stack [ 447.350481][ T6070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.390888][ T6070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.666536][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.674608][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.789334][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.815674][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.923597][T17240] netlink: 'syz.2.3096': attribute type 1 has an invalid length. [ 447.957429][T17240] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3096'. [ 448.311780][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2969'. [ 448.674805][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.697302][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.708036][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.718070][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.732385][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.799084][T17267] wg1 speed is unknown, defaulting to 1000 [ 448.821435][T17267] lo speed is unknown, defaulting to 1000 [ 448.884041][T17275] nbd: illegal input index 2958377 [ 448.990971][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3103'. [ 449.671958][T17311] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 449.853729][T17311] 8021q: adding VLAN 0 to HW filter on device bond15 [ 449.886267][T17320] bond5: (slave veth0_to_bond): Releasing active interface [ 449.922513][T17320] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 450.008127][T17330] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.026279][T10008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.038748][T10008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.105291][T17320] 8021q: adding VLAN 0 to HW filter on device bond16 [ 450.117012][T17320] bond15: (slave bond16): Enslaving as an active interface with a down link [ 450.238557][T10008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.262634][T10008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.308646][T17334] vlan2: entered allmulticast mode [ 450.408699][T10008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.441886][T10008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.545258][T10008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.568036][T10008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.648266][T17344] netlink: 'syz.1.3119': attribute type 1 has an invalid length. [ 450.817039][ T5840] Bluetooth: hci1: command tx timeout [ 450.843327][T17363] netlink: 'syz.3.3123': attribute type 11 has an invalid length. [ 450.873693][T17361] tipc: Resetting bearer [ 450.882277][T17361] syzkaller0: left promiscuous mode [ 450.899893][T17363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3123'. [ 450.911396][T17361] syzkaller0: left allmulticast mode [ 451.006934][T17365] netlink: 'syz.3.3123': attribute type 11 has an invalid length. [ 451.014823][T17365] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3123'. [ 451.154056][T10008] bridge_slave_0: left promiscuous mode [ 451.175769][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.451095][T17394] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3129'. [ 451.608798][T10008] bond3 (unregistering): (slave gretap1): Releasing active interface [ 451.631184][T10008] bond7 (unregistering): (slave gretap2): Releasing active interface [ 451.717083][T10008] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 451.853362][T10008] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 451.862197][T10008] bridge3 (unregistering): left promiscuous mode [ 452.021035][T10008] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 452.029256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 452.029291][ C0] lec:lec_tx_timeout: lec0 [ 452.029436][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 452.048821][T10008] bridge6 (unregistering): left promiscuous mode [ 452.139963][T10008] bond10 (unregistering): (slave bridge8): Releasing active interface [ 452.148433][T10008] bridge8 (unregistering): left promiscuous mode [ 452.155344][T10008] bridge8 (unregistering): left allmulticast mode [ 452.201587][T10008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.213141][T10008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.225346][T10008] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 452.238677][T10008] bond0 (unregistering): Released all slaves [ 452.250988][T10008] bond1 (unregistering): Released all slaves [ 452.265662][T10008] bond2 (unregistering): Released all slaves [ 452.280075][T10008] bond3 (unregistering): Released all slaves [ 452.296153][T10008] bond4 (unregistering): Released all slaves [ 452.313112][T10008] bond5 (unregistering): Released all slaves [ 452.332363][T10008] bond6 (unregistering): Released all slaves [ 452.351651][T10008] bond7 (unregistering): Released all slaves [ 452.369405][T10008] bond8 (unregistering): Released all slaves [ 452.394423][T10008] bond9 (unregistering): Released all slaves [ 452.419807][T10008] bond10 (unregistering): Released all slaves [ 452.435631][T10008] bond11 (unregistering): left allmulticast mode [ 452.442130][T10008] bond11 (unregistering): left promiscuous mode [ 452.452419][T10008] team0: Port device macvlan5 removed [ 452.464209][T10008] bond11 (unregistering): Released all slaves [ 452.480044][T10008] bond12 (unregistering): Released all slaves [ 452.503312][T17267] chnl_net:caif_netlink_parms(): no params data found [ 452.632310][T17389] vlan3: entered promiscuous mode [ 452.639990][T17389] vlan3: entered allmulticast mode [ 452.804260][T10008] 9: left promiscuous mode [ 452.885763][ T5840] Bluetooth: hci1: command tx timeout [ 452.994554][T10008] tipc: Disabling bearer [ 453.009376][T10008] tipc: Disabling bearer [ 453.022766][T10008] tipc: Left network mode [ 453.028446][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 453.048636][T17423] xt_ecn: cannot match TCP bits for non-tcp packets [ 453.113798][T17267] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.121282][T17267] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.128732][T17267] bridge_slave_0: entered allmulticast mode [ 453.136752][T17267] bridge_slave_0: entered promiscuous mode [ 453.147492][T17267] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.154752][T17267] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.162134][T17267] bridge_slave_1: entered allmulticast mode [ 453.169841][T17267] bridge_slave_1: entered promiscuous mode [ 453.318393][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.468238][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.861336][T10007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.895553][T10007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.998190][T17267] team0: Port device team_slave_0 added [ 454.036760][T17267] team0: Port device team_slave_1 added [ 454.122910][T17467] netlink: 'syz.1.3145': attribute type 1 has an invalid length. [ 454.144966][T17467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.278088][T17474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3147'. [ 454.376795][T17480] openvswitch: netlink: Duplicate key (type 2). [ 454.440418][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.462484][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.514480][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'. [ 454.551309][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.600720][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'. [ 454.602404][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.665513][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.732051][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.963321][T17511] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 454.966216][ T5840] Bluetooth: hci1: command tx timeout [ 455.038986][T17267] hsr_slave_0: entered promiscuous mode [ 455.058341][T17267] hsr_slave_1: entered promiscuous mode [ 455.064805][T17267] debugfs: 'hsr0' already exists in 'hsr' [ 455.071265][T17267] Cannot create hsr debugfs directory [ 455.390576][T17520] netlink: 'syz.2.3155': attribute type 9 has an invalid length. [ 455.652918][T17545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3159'. [ 455.723618][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.731970][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.002750][T17556] netlink: 'syz.2.3161': attribute type 11 has an invalid length. [ 456.042300][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.071460][T10008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.104148][T17559] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3162'. [ 456.114491][T17559] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 456.132774][T10008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.157764][T10008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.211593][T10008] veth1_macvtap: left promiscuous mode [ 456.228961][T10008] veth0_macvtap: left promiscuous mode [ 456.234673][T10008] veth1_vlan: left promiscuous mode [ 456.254034][T10008] veth0_vlan: left promiscuous mode [ 456.263205][T17570] siw: device registration error -23 [ 456.559806][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3166'. [ 456.655250][T10008] pim6reg (unregistering): left allmulticast mode [ 456.919382][T10008] team0 (unregistering): Port device 26 removed [ 456.941328][T10008] team0 (unregistering): Port device team_slave_0 removed [ 457.035451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 457.043594][ C0] lec:lec_tx_timeout: lec0 [ 457.045768][ T5840] Bluetooth: hci1: command tx timeout [ 457.049488][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 457.223047][T17588] gtp0: entered promiscuous mode [ 457.230162][T17588] gtp0: entered allmulticast mode [ 457.317993][T17605] IPv6: sit3: Disabled Multicast RS [ 457.335733][T17605] sit3: entered allmulticast mode [ 457.643288][T17619] netlink: 'syz.0.3170': attribute type 5 has an invalid length. [ 457.686615][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3170'. [ 457.697849][T17626] openvswitch: netlink: Flow key attribute not present in set flow. [ 458.004953][T17637] IPv6: sit1: Disabled Multicast RS [ 458.019321][T17637] sit1: entered allmulticast mode [ 458.093822][T17644] veth0: entered promiscuous mode [ 458.138635][T10008] IPVS: stop unused estimator thread 0... [ 458.203425][T17635] veth0: left promiscuous mode [ 458.446536][T17660] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3178'. [ 458.461372][T17659] syz_tun: entered promiscuous mode [ 458.468216][T17661] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3178'. [ 458.469691][T17659] macvtap1: entered promiscuous mode [ 458.509216][T17659] syz_tun: left promiscuous mode [ 458.610753][T17267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.636947][T17267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.682630][T17267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.736571][T17267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.989712][T17267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.041633][T17267] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.080625][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.087870][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.143336][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.150713][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.272284][T17703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3188'. [ 459.322204][T17703] syzkaller1: entered promiscuous mode [ 459.330786][T17703] syzkaller1: entered allmulticast mode [ 459.494485][T17716] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.665224][T17267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.019788][T16302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.304839][T17753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3201'. [ 460.361430][T17267] veth0_vlan: entered promiscuous mode [ 460.394670][T17267] veth1_vlan: entered promiscuous mode [ 460.461366][T17765] syzkaller1: entered promiscuous mode [ 460.468200][T17765] syzkaller1: entered allmulticast mode [ 460.494679][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.564881][T17267] veth0_macvtap: entered promiscuous mode [ 460.608340][T17267] veth1_macvtap: entered promiscuous mode [ 460.652807][T17267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.669490][T17769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.685155][T17769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.694982][T17769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.705818][T17770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.765701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.780036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.814591][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3207'. [ 460.829918][T17267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.837428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.860438][ T130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.892495][ T130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.931067][ T130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.954879][ T130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.052849][T17782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.074085][T17784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3210'. [ 461.088237][T17784] tipc: Invalid UDP bearer configuration [ 461.088296][T17784] tipc: Enabling of bearer rejected, failed to enable media [ 461.120373][T10011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.153660][T10011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.212019][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.232381][T17793] xt_hashlimit: size too large, truncated to 1048576 [ 461.235811][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.315999][T17795] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 461.996810][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.010773][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.019065][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.027484][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.035135][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.088019][T17828] wg1 speed is unknown, defaulting to 1000 [ 462.096742][T17828] lo speed is unknown, defaulting to 1000 [ 462.541831][T17846] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3227'. [ 462.574337][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 462.607043][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3228'. [ 462.885500][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 462.893576][ C0] lec:lec_tx_timeout: lec0 [ 462.898613][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 463.239817][T17868] bridge0: port 4(gretap0) entered blocking state [ 463.251455][T17868] bridge0: port 4(gretap0) entered disabled state [ 463.275742][T17868] gretap0: entered allmulticast mode [ 463.293864][T17868] gretap0: entered promiscuous mode [ 463.562744][T17879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'. [ 463.719786][T17828] chnl_net:caif_netlink_parms(): no params data found [ 463.737788][T17889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 463.872870][T17898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3244'. [ 464.049098][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.065342][T17910] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 464.086585][ T5840] Bluetooth: hci3: command tx timeout [ 464.103401][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.116772][T17828] bridge_slave_0: entered allmulticast mode [ 464.124811][T17828] bridge_slave_0: entered promiscuous mode [ 464.176783][T17910] bond1: entered promiscuous mode [ 464.183204][T17910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.197927][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.240873][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.277066][T17828] bridge_slave_1: entered allmulticast mode [ 464.304831][T17828] bridge_slave_1: entered promiscuous mode [ 464.468465][T17910] bond1: (slave bridge1): making interface the new active one [ 464.478958][T17910] bridge1: entered promiscuous mode [ 464.494829][T17910] bridge1: left promiscuous mode [ 464.616793][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.632878][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.767334][T17828] team0: Port device team_slave_0 added [ 464.787279][T17828] team0: Port device team_slave_1 added [ 464.890774][T17949] netlink: 'syz.3.3256': attribute type 4 has an invalid length. [ 464.913059][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.944137][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.985637][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.010475][T17949] netlink: 'syz.3.3256': attribute type 4 has an invalid length. [ 465.024917][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.045064][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.081491][T17957] net_ratelimit: 10 callbacks suppressed [ 465.081511][T17957] openvswitch: netlink: Flow key attr not present in new flow. [ 465.096848][T17958] openvswitch: netlink: Flow key attr not present in new flow. [ 465.110185][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.222540][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.435803][T17828] hsr_slave_0: entered promiscuous mode [ 465.442621][T17828] hsr_slave_1: entered promiscuous mode [ 465.451824][T17828] debugfs: 'hsr0' already exists in 'hsr' [ 465.460360][T17828] Cannot create hsr debugfs directory [ 465.628563][T17980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3265'. [ 465.781394][T17986] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3267'. [ 466.171193][ T5840] Bluetooth: hci3: command tx timeout [ 466.235061][T17987] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 466.804766][T17828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.818685][T17828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.829310][T17828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47832 - 0 [ 466.980229][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3269'. [ 467.294146][T17828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.308740][T17828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.319355][T17828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47832 - 0 [ 467.384412][T18025] macvtap0: entered promiscuous mode [ 467.396349][T18025] macvtap0: entered allmulticast mode [ 467.757217][T18047] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3283'. [ 467.775916][T18047] openvswitch: netlink: Flow actions attr not present in new flow. [ 467.816892][T17828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.837934][T17828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.857021][T18049] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3284'. [ 467.869337][T17828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47832 - 0 [ 467.905454][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 467.913516][ C0] lec:lec_tx_timeout: lec0 [ 467.918274][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 467.975170][T18052] bond1: entered promiscuous mode [ 468.033146][T18057] FAULT_INJECTION: forcing a failure. [ 468.033146][T18057] name failslab, interval 1, probability 0, space 0, times 0 [ 468.045925][T18057] CPU: 1 UID: 0 PID: 18057 Comm: syz.0.3287 Not tainted syzkaller #0 PREEMPT(full) [ 468.045963][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.045982][T18057] Call Trace: [ 468.046012][T18057] [ 468.046079][T18057] dump_stack_lvl+0xe8/0x150 [ 468.046219][T18057] should_fail_ex+0x412/0x560 [ 468.046314][T18057] should_failslab+0xa8/0x100 [ 468.046366][T18057] ? skb_clone+0x212/0x3a0 [ 468.046520][T18057] kmem_cache_alloc_noprof+0x87/0x650 [ 468.046563][T18057] ? __bpf_redirect+0xcb4/0x12a0 [ 468.046628][T18057] skb_clone+0x212/0x3a0 [ 468.046665][T18057] bpf_clone_redirect+0x16a/0x4b0 [ 468.046691][T18057] ? bpf_test_run+0x1d1/0x830 [ 468.046771][T18057] ? bpf_test_run+0x1d1/0x830 [ 468.046796][T18057] bpf_prog_c03e980fa1fae53b+0x22/0x2a [ 468.046818][T18057] bpf_test_run+0x354/0x830 [ 468.046867][T18057] ? __pfx_bpf_test_run+0x10/0x10 [ 468.046903][T18057] ? trace_kmem_cache_alloc+0x29/0xf0 [ 468.046935][T18057] ? slab_build_skb+0x52/0x410 [ 468.046972][T18057] ? __kasan_krealloc+0xeb/0x110 [ 468.046996][T18057] ? eth_type_trans+0x35e/0x6d0 [ 468.047071][T18057] ? convert___skb_to_skb+0x3d/0x5b0 [ 468.047100][T18057] bpf_prog_test_run_skb+0xd22/0x1c90 [ 468.047140][T18057] ? __fget_files+0x2a/0x420 [ 468.047186][T18057] ? __fget_files+0x3a0/0x420 [ 468.047214][T18057] ? __fget_files+0x2a/0x420 [ 468.047250][T18057] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 468.047276][T18057] bpf_prog_test_run+0x2c7/0x340 [ 468.047327][T18057] __sys_bpf+0x643/0x950 [ 468.047361][T18057] ? __pfx___sys_bpf+0x10/0x10 [ 468.047411][T18057] ? ksys_write+0x242/0x270 [ 468.047447][T18057] ? __pfx_ksys_write+0x10/0x10 [ 468.047477][T18057] __x64_sys_bpf+0x7c/0x90 [ 468.047508][T18057] do_syscall_64+0x14d/0xf80 [ 468.047591][T18057] ? trace_irq_disable+0x3b/0x150 [ 468.047633][T18057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.047675][T18057] ? clear_bhb_loop+0x40/0x90 [ 468.047702][T18057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.047728][T18057] RIP: 0033:0x7f973c59c799 [ 468.047777][T18057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.047796][T18057] RSP: 002b:00007f973d38a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.047847][T18057] RAX: ffffffffffffffda RBX: 00007f973c815fa0 RCX: 00007f973c59c799 [ 468.047863][T18057] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 468.047877][T18057] RBP: 00007f973d38a090 R08: 0000000000000000 R09: 0000000000000000 [ 468.047890][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.047902][T18057] R13: 00007f973c816038 R14: 00007f973c815fa0 R15: 00007ffe67da76a8 [ 468.047938][T18057] [ 468.324890][ T5840] Bluetooth: hci3: command tx timeout [ 468.402585][T17828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.417695][T17828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.428696][T17828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47832 - 0 [ 468.491297][T18063] Cannot find set identified by id 0 to match [ 468.503162][T18063] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 468.599179][T17828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.673143][T17828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.688689][T17828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.729365][T17828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.953214][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3296'. [ 469.070007][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.143576][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.157986][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.165229][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.340873][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.349953][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.469064][T18095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 469.520921][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.528165][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.589398][T18117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 469.756507][T18121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.791716][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 469.818527][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 469.840561][T18121] netlink: 'syz.4.3308': attribute type 15 has an invalid length. [ 469.900317][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3308'. [ 469.932252][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 469.963066][T18121] netlink: 'syz.4.3308': attribute type 15 has an invalid length. [ 469.984145][T10011] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 470.004492][T10011] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 470.221706][T18143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3314'. [ 470.277084][T10011] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 470.304563][T10011] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 470.348481][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.407248][ T5840] Bluetooth: hci3: command tx timeout [ 470.461082][T17828] veth0_vlan: entered promiscuous mode [ 470.465232][T18148] nbd: couldn't find a device at index 0 [ 470.488186][T17828] veth1_vlan: entered promiscuous mode [ 470.557871][T17828] veth0_macvtap: entered promiscuous mode [ 470.578189][T17828] veth1_macvtap: entered promiscuous mode [ 470.632729][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.668286][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.716857][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.733966][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.756722][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.783120][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.959613][T10011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.006239][T10011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.071110][T10008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.088125][T10008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.240330][T18176] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 471.403084][T18176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.525384][T18176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3322'. [ 471.625150][T18184] bond2: (slave veth3): Enslaving as an active interface with a down link [ 472.081060][T18212] syzkaller0: entered promiscuous mode [ 472.116080][T18212] syzkaller0: entered allmulticast mode [ 472.470959][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.483398][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.494980][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.504863][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.513173][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.928101][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 472.936257][ C0] lec:lec_tx_timeout: lec0 [ 472.940988][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 474.422704][T18234] wg1 speed is unknown, defaulting to 1000 [ 474.484937][T18234] lo speed is unknown, defaulting to 1000 [ 474.573422][ T5837] Bluetooth: hci4: command tx timeout [ 474.669614][T18274] sctp: [Deprecated]: syz.4.3343 (pid 18274) Use of int in max_burst socket option deprecated. [ 474.669614][T18274] Use struct sctp_assoc_value instead [ 474.887300][T18281] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3344'. [ 474.963799][T18288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3346'. [ 475.073372][T18293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.123056][T18293] netlink: 'syz.2.3348': attribute type 21 has an invalid length. [ 475.149866][T18293] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3348'. [ 475.166863][T18293] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3348'. [ 475.334479][T18300] netlink: 'syz.2.3350': attribute type 1 has an invalid length. [ 476.323181][T18234] chnl_net:caif_netlink_parms(): no params data found [ 476.646263][ T5837] Bluetooth: hci4: command tx timeout [ 476.699672][T18350] bond1 (unregistering): Released all slaves [ 476.827986][T18234] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.845560][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.852890][T18234] bridge_slave_0: entered allmulticast mode [ 476.875618][T18234] bridge_slave_0: entered promiscuous mode [ 476.898344][T18234] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.925658][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.933095][T18234] bridge_slave_1: entered allmulticast mode [ 476.964405][T18234] bridge_slave_1: entered promiscuous mode [ 477.030188][T18381] sock: sock_set_timeout: `syz.0.3370' (pid 18381) tries to set negative timeout [ 477.096582][T18234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.120265][T18386] x_tables: unsorted underflow at hook 1 [ 477.130959][T18234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.250946][T18234] team0: Port device team_slave_0 added [ 477.267402][T18234] team0: Port device team_slave_1 added [ 477.404787][T18234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.415637][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.472583][T18234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.506171][T18403] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.514077][T18403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.521658][T18403] IPv6: NLM_F_CREATE should be set when creating new route [ 477.534700][T18234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.557389][T18234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.563361][T18406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.591034][T18406] IPv6: NLM_F_CREATE should be set when creating new route [ 477.631039][T18234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.662841][T18411] netlink: 'syz.4.3378': attribute type 9 has an invalid length. [ 477.704068][T18411] netlink: 'syz.4.3378': attribute type 11 has an invalid length. [ 477.739151][T18411] netlink: 'syz.4.3378': attribute type 12 has an invalid length. [ 477.748859][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 477.759194][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3380'. [ 477.773573][T18411] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3378'. [ 477.790511][T18234] hsr_slave_0: entered promiscuous mode [ 477.797748][T18234] hsr_slave_1: entered promiscuous mode [ 477.799107][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 477.808983][T18234] debugfs: 'hsr0' already exists in 'hsr' [ 477.818225][T18234] Cannot create hsr debugfs directory [ 477.838948][ T6070] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.839066][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 477.839095][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3380'. [ 477.882559][ T6070] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.914399][ T6070] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.953829][ T6070] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.962661][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 477.962695][ C0] lec:lec_tx_timeout: lec0 [ 477.971168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 478.149542][T18234] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.161386][T18234] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.178398][T18234] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 478.260580][T18234] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.270666][T18234] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.284193][T18234] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 478.296242][T18436] openvswitch: netlink: Duplicate or invalid key (type 0). [ 478.311004][T18436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.371917][T18234] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.382664][T18234] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.392999][T18234] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 478.429882][T18234] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.441055][T18234] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.451240][T18234] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 478.725937][ T5837] Bluetooth: hci4: command tx timeout [ 480.470582][T18403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.497331][T18234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.550822][T18234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.621292][T18234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.658987][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 480.669283][T18234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.723480][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3389'. [ 480.805915][ T5837] Bluetooth: hci4: command tx timeout [ 480.855126][T18459] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 480.877322][T18460] xt_ipcomp: unknown flags 1D [ 481.008582][T18234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.032119][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.081756][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.088953][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.197319][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.204608][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.544803][T18485] netlink: 'syz.0.3402': attribute type 3 has an invalid length. [ 481.589060][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3404'. [ 481.845393][T18509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3409'. [ 481.935366][T18234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.049516][T18234] veth0_vlan: entered promiscuous mode [ 482.069341][T18234] veth1_vlan: entered promiscuous mode [ 482.100614][T18515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3412'. [ 482.152813][T18234] veth0_macvtap: entered promiscuous mode [ 482.187207][T18234] veth1_macvtap: entered promiscuous mode [ 482.219219][T18234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.263797][T18234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.275115][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'. [ 482.297659][T10007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.369100][T10007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.408534][T10007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.444860][T10007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.588709][T10008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.616764][T10008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.695063][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.710718][T18544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.719646][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.769327][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 482.823330][T18549] sctp: [Deprecated]: syz.2.3423 (pid 18549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.823330][T18549] Use struct sctp_sack_info instead [ 482.956214][T18558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3332'. [ 482.975491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 482.983617][ C0] lec:lec_tx_timeout: lec0 [ 482.998773][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'. [ 483.042940][T18560] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3426'. [ 483.052091][T18562] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 483.083794][T18560] bridge_slave_1: default FDB implementation only supports local addresses [ 483.563319][T18596] [ 483.565719][T18596] ====================================================== [ 483.572766][T18596] WARNING: possible circular locking dependency detected [ 483.579963][T18596] syzkaller #0 Not tainted [ 483.584436][T18596] ------------------------------------------------------ [ 483.591488][T18596] syz.4.3438/18596 is trying to acquire lock: [ 483.597589][T18596] ffffffff8fd48c18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 483.606921][T18596] [ 483.606921][T18596] but task is already holding lock: [ 483.614398][T18596] ffff888075a45270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 483.623680][T18596] [ 483.623680][T18596] which lock already depends on the new lock. [ 483.623680][T18596] [ 483.634108][T18596] [ 483.634108][T18596] the existing dependency chain (in reverse order) is: [ 483.643242][T18596] [ 483.643242][T18596] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 483.651481][T18596] _raw_spin_lock_bh+0x36/0x50 [ 483.656909][T18596] nr_rt_device_down+0x153/0x860 [ 483.662468][T18596] nr_device_event+0x137/0x150 [ 483.667790][T18596] notifier_call_chain+0x1be/0x400 [ 483.673496][T18596] __dev_notify_flags+0x16d/0x310 [ 483.679167][T18596] netif_change_flags+0xe8/0x1a0 [ 483.684685][T18596] dev_change_flags+0x130/0x260 [ 483.690180][T18596] dev_ioctl+0x7b4/0x1150 [ 483.695204][T18596] sock_do_ioctl+0x23e/0x320 [ 483.700383][T18596] sock_ioctl+0x5c6/0x7f0 [ 483.705264][T18596] __se_sys_ioctl+0xfc/0x170 [ 483.710401][T18596] do_syscall_64+0x14d/0xf80 [ 483.715534][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.721979][T18596] [ 483.721979][T18596] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 483.729829][T18596] _raw_spin_lock_bh+0x36/0x50 [ 483.735155][T18596] nr_rt_device_down+0xbe/0x860 [ 483.740563][T18596] nr_device_event+0x137/0x150 [ 483.745893][T18596] notifier_call_chain+0x1be/0x400 [ 483.751556][T18596] __dev_notify_flags+0x16d/0x310 [ 483.757126][T18596] netif_change_flags+0xe8/0x1a0 [ 483.762620][T18596] dev_change_flags+0x130/0x260 [ 483.768022][T18596] dev_ioctl+0x7b4/0x1150 [ 483.772917][T18596] sock_do_ioctl+0x23e/0x320 [ 483.778066][T18596] sock_ioctl+0x5c6/0x7f0 [ 483.782938][T18596] __se_sys_ioctl+0xfc/0x170 [ 483.788074][T18596] do_syscall_64+0x14d/0xf80 [ 483.793210][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.799664][T18596] [ 483.799664][T18596] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 483.807700][T18596] __lock_acquire+0x15a5/0x2cf0 [ 483.813226][T18596] lock_acquire+0xf0/0x2e0 [ 483.818190][T18596] _raw_spin_lock_bh+0x36/0x50 [ 483.823501][T18596] nr_rt_ioctl+0x40c/0xf90 [ 483.828453][T18596] sock_do_ioctl+0x101/0x320 [ 483.833585][T18596] sock_ioctl+0x5c6/0x7f0 [ 483.838450][T18596] __se_sys_ioctl+0xfc/0x170 [ 483.843594][T18596] do_syscall_64+0x14d/0xf80 [ 483.848750][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.855199][T18596] [ 483.855199][T18596] other info that might help us debug this: [ 483.855199][T18596] [ 483.865538][T18596] Chain exists of: [ 483.865538][T18596] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 483.865538][T18596] [ 483.879494][T18596] Possible unsafe locking scenario: [ 483.879494][T18596] [ 483.887044][T18596] CPU0 CPU1 [ 483.892430][T18596] ---- ---- [ 483.897817][T18596] lock(&nr_node->node_lock); [ 483.902784][T18596] lock(nr_node_list_lock); [ 483.910017][T18596] lock(&nr_node->node_lock); [ 483.917346][T18596] lock(nr_neigh_list_lock); [ 483.922055][T18596] [ 483.922055][T18596] *** DEADLOCK *** [ 483.922055][T18596] [ 483.930221][T18596] 2 locks held by syz.4.3438/18596: [ 483.935449][T18596] #0: ffffffff8fd48c78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 483.944986][T18596] #1: ffff888075a45270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 483.954679][T18596] [ 483.954679][T18596] stack backtrace: [ 483.960684][T18596] CPU: 1 UID: 0 PID: 18596 Comm: syz.4.3438 Not tainted syzkaller #0 PREEMPT(full) [ 483.960708][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.960720][T18596] Call Trace: [ 483.960735][T18596] [ 483.960744][T18596] dump_stack_lvl+0xe8/0x150 [ 483.960773][T18596] print_circular_bug+0x2e1/0x300 [ 483.960804][T18596] check_noncircular+0x12e/0x150 [ 483.960835][T18596] __lock_acquire+0x15a5/0x2cf0 [ 483.960859][T18596] ? kasan_save_track+0x4f/0x80 [ 483.960885][T18596] lock_acquire+0xf0/0x2e0 [ 483.960906][T18596] ? nr_rt_ioctl+0x40c/0xf90 [ 483.960926][T18596] ? nr_rt_ioctl+0x40c/0xf90 [ 483.960941][T18596] _raw_spin_lock_bh+0x36/0x50 [ 483.960965][T18596] ? nr_rt_ioctl+0x40c/0xf90 [ 483.960980][T18596] nr_rt_ioctl+0x40c/0xf90 [ 483.961001][T18596] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 483.961023][T18596] ? apparmor_capable+0x126/0x170 [ 483.961172][T18596] ? capable+0x88/0xe0 [ 483.961206][T18596] ? nr_ioctl+0x1b1/0x3b0 [ 483.961232][T18596] sock_do_ioctl+0x101/0x320 [ 483.961253][T18596] ? __pfx_sock_do_ioctl+0x10/0x10 [ 483.961270][T18596] ? do_futex+0x333/0x420 [ 483.961303][T18596] sock_ioctl+0x5c6/0x7f0 [ 483.961322][T18596] ? __pfx_sock_ioctl+0x10/0x10 [ 483.961339][T18596] ? __fget_files+0x2a/0x420 [ 483.961363][T18596] ? __fget_files+0x3a0/0x420 [ 483.961387][T18596] ? __fget_files+0x2a/0x420 [ 483.961413][T18596] ? bpf_lsm_file_ioctl+0x9/0x20 [ 483.961444][T18596] ? __pfx_sock_ioctl+0x10/0x10 [ 483.961460][T18596] __se_sys_ioctl+0xfc/0x170 [ 483.961481][T18596] do_syscall_64+0x14d/0xf80 [ 483.961497][T18596] ? trace_irq_disable+0x3b/0x150 [ 483.961522][T18596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.961540][T18596] ? clear_bhb_loop+0x40/0x90 [ 483.961560][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.961578][T18596] RIP: 0033:0x7f66c419c799 [ 483.961595][T18596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.961611][T18596] RSP: 002b:00007f66c511f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.961632][T18596] RAX: ffffffffffffffda RBX: 00007f66c4415fa0 RCX: 00007f66c419c799 [ 483.961645][T18596] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 483.961656][T18596] RBP: 00007f66c4232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 483.961668][T18596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.961679][T18596] R13: 00007f66c4416038 R14: 00007f66c4415fa0 R15: 00007ffda84008b8 [ 483.961701][T18596] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.827547][ T130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.838372][ T130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.921554][ T130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.932096][ T130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.082954][ T130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.096420][ T130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.179853][ T130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.190365][ T130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.280932][ T130] bridge_slave_1: left allmulticast mode [ 485.290104][ T130] bridge_slave_1: left promiscuous mode [ 485.296165][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.306914][ T130] bridge_slave_0: left promiscuous mode [ 485.312679][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.499411][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.510658][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.520578][ T130] bond0 (unregistering): Released all slaves [ 485.529485][ T130] bond1 (unregistering): Released all slaves [ 485.958511][ T130] hsr_slave_0: left promiscuous mode [ 485.966572][ T130] hsr_slave_1: left promiscuous mode [ 485.973135][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.981457][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.990208][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.998940][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.009387][ T130] veth1_macvtap: left promiscuous mode [ 486.015015][ T130] veth0_macvtap: left promiscuous mode [ 486.021900][ T130] veth1_vlan: left promiscuous mode [ 486.027463][ T130] veth0_vlan: left promiscuous mode [ 486.198306][ T130] team0 (unregistering): Port device team_slave_1 removed [ 486.211365][ T130] team0 (unregistering): Port device team_slave_0 removed [ 486.655190][ T130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.719304][ T130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.795170][ T130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.842451][ T130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.950726][ T130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.013454][ T130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.071468][ T130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.141037][ T130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.231510][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 487.241886][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.311794][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 487.324488][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.392100][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 487.402854][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.442110][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 487.457058][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.536881][ T130] bridge_slave_1: left allmulticast mode [ 487.543225][ T130] bridge_slave_1: left promiscuous mode [ 487.550029][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.560228][ T130] bridge_slave_0: left allmulticast mode [ 487.566248][ T130] bridge_slave_0: left promiscuous mode [ 487.571999][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.582480][ T130] bridge_slave_1: left allmulticast mode [ 487.588387][ T130] bridge_slave_1: left promiscuous mode [ 487.594112][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.604216][ T130] bridge_slave_0: left allmulticast mode [ 487.610573][ T130] bridge_slave_0: left promiscuous mode [ 487.616417][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.626270][ T130] bridge_slave_1: left allmulticast mode [ 487.631958][ T130] bridge_slave_1: left promiscuous mode [ 487.637927][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.647462][ T130] bridge_slave_0: left allmulticast mode [ 487.653150][ T130] bridge_slave_0: left promiscuous mode [ 487.661883][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.860315][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.870956][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.881130][ T130] bond0 (unregistering): Released all slaves [ 487.980283][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.991025][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.000870][ T130] bond0 (unregistering): Released all slaves [ 488.058837][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.072384][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.082413][ T130] bond0 (unregistering): Released all slaves [ 489.053580][ T130] hsr_slave_0: left promiscuous mode [ 489.059634][ T130] hsr_slave_1: left promiscuous mode [ 489.077402][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.091834][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.102217][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.110028][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.120723][ T130] hsr_slave_0: left promiscuous mode [ 489.131952][ T130] hsr_slave_1: left promiscuous mode [ 489.138199][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.146746][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.154767][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.163866][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.174839][ T130] hsr_slave_0: left promiscuous mode [ 489.181209][ T130] hsr_slave_1: left promiscuous mode [ 489.187670][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.199353][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.208837][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.216574][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.234657][ T130] veth1_macvtap: left promiscuous mode [ 489.240339][ T130] veth0_macvtap: left promiscuous mode [ 489.246344][ T130] veth1_vlan: left promiscuous mode [ 489.251639][ T130] veth0_vlan: left promiscuous mode [ 489.258053][ T130] veth1_macvtap: left promiscuous mode [ 489.263581][ T130] veth0_macvtap: left promiscuous mode [ 489.270143][ T130] veth1_vlan: left promiscuous mode [ 489.276838][ T130] veth0_vlan: left promiscuous mode [ 489.287607][ T130] veth1_macvtap: left promiscuous mode [ 489.293612][ T130] veth0_macvtap: left promiscuous mode [ 489.300486][ T130] veth1_vlan: left promiscuous mode [ 489.307362][ T130] veth0_vlan: left promiscuous mode [ 489.588910][ T130] team0 (unregistering): Port device team_slave_1 removed [ 489.603947][ T130] team0 (unregistering): Port device team_slave_0 removed [ 489.723475][ T130] team0 (unregistering): Port device team_slave_1 removed [ 489.734568][ T130] team0 (unregistering): Port device team_slave_0 removed [ 489.850315][ T130] team0 (unregistering): Port device team_slave_1 removed [ 489.861640][ T130] team0 (unregistering): Port device team_slave_0 removed