last executing test programs: 10.162727748s ago: executing program 0 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x2, 0x5, {0x1, @struct={0x7, 0x4}, 0x0, 0xf3, 0x4, 0x0, 0x9, 0x200, 0x200, @struct={0x9, 0x9}, 0x5, 0x2, [0x5, 0x7fffffff, 0x9, 0x5, 0x1000000000000, 0x996]}, {0x7, @usage=0x2, 0x0, 0xfffffffffffff20c, 0x9, 0x1, 0xa, 0x8, 0x0, @usage=0x1, 0x9, 0x5, [0x2, 0x43ce, 0x3, 0x10000, 0x10, 0x40]}, {0xfff, @usage=0xa6, 0x0, 0xbb9e, 0x1, 0xf3, 0xc, 0x401, 0x10, @struct={0xffffffe3, 0xe}, 0x5, 0xea6b, [0x38c, 0x3, 0x80000000, 0x47f2f236, 0x2, 0x3]}, {0x8, 0x8000000000000000, 0x8001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b40)={0x0, 0x0, 0x0, [0x6, 0x200, 0x1000, 0x4, 0x1ff], [0x100000000000000, 0xffffffff80000000, 0x7, 0x10001, 0x2, 0x9, 0x3, 0x8001, 0x10, 0x8, 0x1, 0x2, 0x4, 0x2, 0x9, 0x80, 0x7fff, 0xffff, 0x1, 0x7fff, 0x8, 0x1, 0x2, 0x5, 0xffffffffffffffff, 0x4, 0x9058, 0x101, 0x8000000000000001, 0x5, 0xfffffffffffffffa, 0x9, 0x8, 0x1, 0x1, 0x800, 0x4a0, 0x8, 0x4, 0x0, 0x9, 0x3, 0x4, 0xd, 0x245, 0x0, 0x7, 0x2c27e49, 0x8, 0xff, 0x6, 0x5, 0x5, 0x2, 0x8, 0x9, 0x4, 0x40, 0x7, 0x1c, 0x40, 0x4, 0x0, 0x3, 0x7, 0x6, 0x4, 0xe, 0x5, 0x100, 0x18, 0x9, 0x0, 0xffffffffffffffff, 0x8001, 0x1, 0x7, 0x0, 0xfe08, 0x9, 0xffffffff, 0x0, 0x89, 0x39f, 0x5, 0x3, 0x5, 0xe44, 0x5, 0x9, 0x1ccc, 0x72a9, 0x9bf2, 0x7, 0x8, 0xfffffffffffffff9, 0x8001, 0xffffffffffff20ad, 0x94, 0x1, 0x301, 0x5, 0x7, 0xffffffff, 0x10001, 0x3, 0xffffffffffffff80, 0x7, 0x4, 0x6, 0x80000000, 0x3, 0x6, 0xc6b, 0x2, 0x3, 0xe000000000000000, 0x0, 0x2, 0xbbd0, 0x9]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000f80)={0x10, 0x4, {0x1e20, @usage=0x5, r2, 0x9, 0x6, 0x1000, 0x8, 0x4, 0x2, @usage=0x80, 0xfff, 0x200, [0x4, 0x4, 0x0, 0x9, 0x492, 0x4]}, {0x0, @struct={0xe, 0x9}, r3, 0x9, 0x1ef9, 0xfffffffffffffffb, 0xcc12, 0x800, 0x0, @struct={0xa, 0x9}, 0x7f, 0x81, [0x7f, 0x4, 0x7636, 0x9, 0x4, 0x1]}, {0x6, @struct={0x8, 0x1}, r4, 0xf, 0x2, 0xda2, 0x3, 0x1, 0x98, @struct={0x9, 0x5}, 0x3, 0x8, [0x1ff, 0x8000000000000000, 0x0, 0x5, 0x2, 0x9]}, {0x1, 0x4, 0x6}}) 9.976228746s ago: executing program 0 (id=3022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0xfffffd2a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000440009000ff70000000000000300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044) r2 = accept4(r0, 0x0, 0x0, 0x800) write$nbd(r2, &(0x7f0000000400)=ANY=[], 0xb4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000004}, 0x8800) 9.658383357s ago: executing program 0 (id=3025): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x1, @mcast2, 0x80000000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="18972142be13850117a2d909e7ea97dea9b430320e2ee224605444969e3021a72ef01f31d62586dc1814187d42ef4557a602c332d7a15fc162cfb9c9eba7a6e473920964fb78236023f2ecb95d5c08c8c498f902ffee373c46f625f19b21932ae7a4e3e141a86bd9f9d08362b4b3f08700685b6fdff9f6b9500d5b3904f290a44973988806b400e247abb05997293a9caf1f2ba9483a395677cfdaca554509d4b11635a96624fe27dee9ac32785acde2fbbafab1ae7ffa005ae691ad7f88f2048bba035ed1b9e9644b0f46d5ae59866ef703fed577f42655ebaea0f7f17ca6f61e75c38349bbc573cf1bb003", 0xec}, {&(0x7f0000000280)="8cabe778584926be189a761a2b3f93030538693c420095da96adce29eaeeac689bfad17ac2d8efb415faa860713c7925e79a519ccef3c747b54143fd6a96b49fdbcfe6358ba93e1db396c11395c5e07d024046d64b29d77d11f1384bdecaf44bcaae5b68a45f4b8162", 0x69}], 0x2, &(0x7f0000000340)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x16, 0xd, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x1, [0xd4]}}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xd}}], 0xa0}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0xa, @local, 0xc}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000540)="e019d18b24f87f8d1d685c1b82105a2b28f8415b78a3333791947cfe5aa48a1f6ded7f18ebe04d088fb14fc1773689b6482355ba82d85509122dfd31ea417c95098c06e89c86091ed15f1818393c57048c765cba15c1840e2af6417a94c9f55e54cae79ad43a536577ce20628edc8dce5919350e84daf46e8a98e9cd85f1a3f96282d9cecdea2360bc5d8008871837374a1b2f0a3a6a2a8e5fec6a72fdee5724c9d4ac1739a4bbb84236df04db35dc9276176cfa464265a9f038b92f", 0xbc}, {&(0x7f0000000100)="7700f49343ea54c968a9ec41d1", 0xd}, {&(0x7f0000000640)="0a860b30c86ef738a9ee316c55e804e0d987cdb367a3c3ab5f169ba33223e283f589dc8a23ea2e40ce4c32a1218f1074e19349e56ff8dfba18b52883a4e81682054bdc37e287cf077f9b6e7f64e6ae2eef221720d222f95ee3f922a90445213a19bd984ef450cc66ef64dd220c8b5dfccf774c407f3b711fe96871b1e466c5e0edfabbb62fe5c7efbe8965e1c017f585564f2e9ef192134e26fb8408716c2b302edd8a6e1c388332dc799c9636c09bdc76e9bd233e8ac297dc62e7d1131470940b002340762bb94328abf29b0366daf72f9904d60afc9b", 0xd7}], 0x4, &(0x7f0000000780)=[@rthdr={{0xb8, 0x29, 0x39, {0x2f, 0x14, 0x1, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private0, @loopback]}}}, @hopopts={{0x58, 0x29, 0x36, {0x84, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0xf7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @dstopts={{0xf8, 0x29, 0x37, {0x11, 0x1b, '\x00', [@pad1, @ra={0x5, 0x2, 0x38}, @enc_lim={0x4, 0x1, 0x24}, @enc_lim={0x4, 0x1, 0xc}, @generic={0x80, 0xd0, "6dafe98fe394ac97f1c0c92ba155d62cf7e56d3737a690ab80d6b326d41f0a4529e5dc1906adce5bbc0b9a5ee77d9862e476e4611b135395c89227d03306b239bf6880c60164703497bceeeaf544d235dc34dd4b8d0f316dc979e9d1ddc4432af51ca166b04dde0a40af67586e6e8e6d62356d7489e4bbdea706bb30d99fb9e0aa3f09db5aafb073fd1d00d68c1392b44c9a18b9ad7d1bfb03aba1090cb78f436ff5d14ebe3fddbc6eb8c1c7df269133f9d81189a708e793729a41264625e139bca13cf1ec86cbfbfb83dd583abf6731"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}], 0x270}}], 0x3, 0x24008040) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x41, 0x0, 0xfffffffffffffe54) socket$nl_generic(0x10, 0x3, 0x10) 9.257756494s ago: executing program 0 (id=3028): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 8.973724356s ago: executing program 0 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x894) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000039cab1348bde905ea243c22bcab03100020000000300000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073110a00000000008510000002000000850000000000000095000850000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x21, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) poll(&(0x7f0000000040)=[{r0, 0x5005}, {r1, 0x180}, {r1, 0x404}, {0xffffffffffffffff, 0x2002}, {r0, 0x4080}], 0x5, 0x2) 8.858001752s ago: executing program 0 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e7", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="2000000000186303002000840000000800000000000000000000000000ffffac1414bb"], 0x20, 0x4855}, 0x24000052) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x2) (async) connect$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) getpid() r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r9, 0x500, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008001) (async) r10 = socket(0x23, 0x3, 0x3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) setsockopt$MRT_DEL_MFC(r10, 0x0, 0xcd, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010102, 0x0, "9c0e1a453787a1061d0456abba217e5fcb12bd2589518ac1b4f7721192ae4b0a", 0x9, 0x0, 0x8001, 0x5095}, 0x3c) (async) shutdown(r10, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000104000002000000000000000000", @ANYRES32=r7, @ANYBLOB="43c000f1e4ffffff07000a00", @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2.750188277s ago: executing program 4 (id=3087): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x4000800) syz_emit_ethernet(0x206, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @broadcast, @void, {@ipv4={0x800, @gre={{0xc, 0x4, 0x0, 0xc, 0x1f8, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x44, 0xe, "46ce2444c2a926872b7970ae"}, @generic={0x82, 0xc, "c490d7f5bd5d076ef3a8"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4c, 0x2, [], "8f4926372f4c5cf5c58f93297e26b4c67fba6563bd503f2390b5fb7146516b8614e1ee5aab51419c078adc35e896cc5b895c1fafe8910604fe7c985056181a2bb6cd0de1fbe9b67c88ded51c"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xef7, 0x5], "44df956c470e9d8511f57846b03096664aec57bc821fdad9ae522799be2d9ad75fca5b04fca2a7f78d589d80a877144e94eaf86883a5e7a2c96ffc84ce5a2785b10f8eadd5a90f6b4ecba8085b9f1945997f86d4e12df36a3e8bf1a61fd20c3fccb64da2192c104f62e0d5"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x7, 0x72a, 0x1], "5ee67dfc994814b66c009dea392eaade25ce7dda796a151d338a8cbbc5787f0c95e77409ef51c1845241ccc4db675f7b0ebd98d796a4b49b8ac2967d828ea9ea28c12f6a53a4721ebcb495c22ee9a4ad9b154f491e8d0d1bab8188b99885be5c4bfa376422e1403c0a36fcd95e9d6370f9594651bda4d4c37a965ee7efe1bf880e"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xd0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x2, 0x2, 0x1, 0x1, 0x4, 0x10}, 0x2, {0x7, 0x4, 0x3, 0x1e, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "444a22990017329089774c89d7e1dd72a563dfd7db18607dbfd89a1374c7c40c63efb3ea5b24223684bfd166be5fc11e244ac5cbca40bc77734ded51065f1101798d"}}}}}}, &(0x7f0000000540)={0x1, 0x1, [0x218, 0xcc1, 0x3c3, 0xf5e]}) 2.624487563s ago: executing program 4 (id=3088): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$FIONCLEX(r0, 0x5450) (async) ioctl$FIONCLEX(r0, 0x5450) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r1}, 0x8) 2.594784027s ago: executing program 2 (id=3089): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 2.375119383s ago: executing program 4 (id=3090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 2.374567019s ago: executing program 2 (id=3091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff1000"/20, @ANYRES32=0x0, @ANYBLOB="00000000885203004c0012800b000100697036746e6c00003c00028014000300fc01000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000bb0800080008000000"], 0x6c}}, 0x4000080) 2.29268796s ago: executing program 4 (id=3092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001980)={{r0, &(0x7f00000000c0)='mirred\x00', 0x40040, &(0x7f00000001c0)={@align=0x1000, {0x7ff, 0x6e28, 0x4, 0xffffffffffffffff}}, 0x1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xcb8}, {[0x10000, 0xffff0000, 0x7, 0x3]}, 0x5, 0x1000, &(0x7f0000000980)=""/4096}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@getqdisc={0x28, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0xffea, 0x5}, {0xfff3, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2c048885) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000940)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x5, r11, 0x1, 0x85, 0x6, @broadcast}, 0x14) 2.191193598s ago: executing program 2 (id=3093): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000200001"], 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800000226bd7000fcdbdf251c10200700810000000800001400120057758500"/48], 0x30}, 0x1, 0x0, 0x0, 0x60000004}, 0x2004010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff06fd"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008881}, 0x20000050) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.989465785s ago: executing program 3 (id=3095): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0xf0, @none, "86b640cc29a72c89dc515b49dae9733e", "6907cac658586ca8a1ceddc71181cd6a"}}}, 0x2b) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x10, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x7fffffff}]}, @lsrr={0x83, 0x17, 0x5b, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}}}, 0x0) 1.978480455s ago: executing program 2 (id=3096): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x347, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0x0, [{}, {@dev={0xac, 0x14, 0x14, 0x23}}, {@dev, 0x9}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x15c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8013}, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) (async) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x347, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0x0, [{}, {@dev={0xac, 0x14, 0x14, 0x23}}, {@dev, 0x9}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x15c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8013}, 0x1000) (async) 1.591254508s ago: executing program 2 (id=3098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x2, 0x5, 0xf55}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8930, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x30, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x8, 0xf}, {0xffe5, 0xd}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402148006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00c8030000000008000400", @ANYRES32=r5, @ANYBLOB="0600150003000000100016"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r9, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000a14200828bd7000fddbdf250800150001000000080003090000000000000000030000000800030002000000080001000200000008000100000000000800030002000000080015000000000008000100000000000800010002000000d127ce907336a1302dc9d7ca3b811868eabf688f4f37deb8859516c642ae1606d0fbd1aa2d6cccd66b268bec1121c5ea08e37b3f0f6cd85e8bf69c310c7cfc4817652bc04dbf671eb7"], 0x60}, 0x1, 0x0, 0x0, 0x20048091}, 0x4000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r11, 0x88, 0x67, &(0x7f00000000c0)=r12, 0x4) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1=0xe000004f}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x4044840) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x40) r13 = socket(0x400000000010, 0x3, 0x0) getpeername$netrom(r13, &(0x7f0000000280)={{}, [@default, @netrom, @bcast, @rose, @remote, @null, @remote, @null]}, &(0x7f00000003c0)=0x48) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x0, 0xb, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4004002) 1.590776086s ago: executing program 3 (id=3099): r0 = socket(0x15, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) 1.476068857s ago: executing program 3 (id=3101): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "0c029d9a32426fae0f3ed75e15c168f9d20b54bc3788416745fa1bd74f2c7f12c8c318b261369d5e93d44db80ff5d7a440e0e29bdd79ec720b8f4a714c194bda237534057b53d42f12b1e1652f5c6fc2f3e6b4c45c227ec5817a93601590b2015e566e9543dfd0240167e75ddc666807434e15141c633b86b32e122e041f4f9cfc9534b523cc36c965b5c51e12c021d07a3fd19e84897a132ea0c8b8e45495c5815a1fd3914b8072fca1782fe48bdeb0654154a3d7706836a79965a9a40688f0ee105f0e52be8a02322e3e017e6a06ec0fabb51fd2c4d0ace8061cef929a3bdb09d2edabf42a4c726a2a4bbf3945fde351dda943f33702c2272c05e29caed9b8"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00018010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000000800034000001002"], 0x6c}}, 0x0) 1.338852292s ago: executing program 1 (id=3102): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000002000006000000000000009500000000000000"], 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.2070294s ago: executing program 4 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'netpci0\x00', {}, 0xa}) 1.131799208s ago: executing program 3 (id=3104): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @rose, @netrom, @null, @remote, @bcast, @null, @netrom]}, &(0x7f00000001c0)=0x48, 0x80000) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000200)) 974.078222ms ago: executing program 4 (id=3105): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x4123, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x7, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r6, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff"], 0x3c}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x401c5820, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) bind$nfc_llcp(r1, &(0x7f00000004c0)={0x27, r10, 0x0, 0x1, 0x5, 0xfc, "df0b0b9490267457d02fb222393c6c43f7fd8fd24fbcefcdb47033affad121ab5144c8ba7a9f691c3bf9798b3059348009f6d4e16c4ef251fadf6526a72006", 0x32}, 0x60) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 919.552117ms ago: executing program 1 (id=3106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r2, 0x917, 0x70bd2b, 0x200, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b, 0x0, 0x40000}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32], 0x38}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 815.766152ms ago: executing program 1 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a91010000060a0b0400000000000000000200000064010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6070000004e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af555f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f52766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000000900010073797a30000000000900020073797a32"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 687.927124ms ago: executing program 1 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061107e000000000006000000000000009500000000002000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r2 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601030000000000000000000000000c00078008000640000007ff050005000a000000050001001b00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, 0x0) bind$bt_hci(r4, &(0x7f0000000040), 0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x200448c0}, 0x80) connect$pptp(r3, &(0x7f0000000440)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x4, @any, 0xf575, 0x1}, 0xe) 514.83693ms ago: executing program 1 (id=3109): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) socket$netlink(0x10, 0x3, 0x4) 470.899318ms ago: executing program 1 (id=3110): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800c300741300000800c4001a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 321.823294ms ago: executing program 3 (id=3111): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 151.477791ms ago: executing program 3 (id=3112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) 0s ago: executing program 2 (id=3113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r3) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01052cbd7000fedbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040000000000000000020000002400048020000180070001006374000014000280080004400000000008000240000000120900f6ff73797a30000000000900010073797a3000000000140000001100010000000000000000000000000ac365b6d407280be0d82cfffda6d40fcd00e85b87091565782d196eddf607a78fe60e47be87d5b6793a4b5b6f6237840ad11588d247ffa1128fb01c618c62f96110c021"], 0x78}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x58, &(0x7f0000000540)={&(0x7f0000000540)=ANY=[], 0x448}, 0x1, 0x0, 0x0, 0x20006841}, 0x20008085) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x2c}, 0x24008499) recvmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4110, 0x100e}], 0x1}, 0x0) (async) close(r9) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f00000003c0)=0x14) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r8, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ributes in process `syz.1.1153'. [ 188.645345][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 188.738935][T10121] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.768426][T10121] s5: renamed from vlan1 (while UP) [ 188.784947][T10126] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1155'. [ 188.994587][T10132] xt_TCPMSS: Only works on TCP SYN packets [ 189.197973][T10137] netlink: 'syz.3.1159': attribute type 21 has an invalid length. [ 189.323999][T10137] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 189.422753][T10137] bond2 (unregistering): Released all slaves [ 189.742227][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1162'. [ 189.908005][T10164] ip6t_REJECT: ECHOREPLY is not supported [ 189.993759][T10166] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 190.012308][T10166] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1164'. [ 190.076663][T10164] lo speed is unknown, defaulting to 1000 [ 190.192815][T10172] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1166'. [ 190.413389][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1168'. [ 190.629525][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 190.990313][T10214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.000636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.301539][T10223] syzkaller0: entered promiscuous mode [ 191.307171][T10223] syzkaller0: entered allmulticast mode [ 191.868544][T10240] syzkaller1: entered promiscuous mode [ 191.874229][T10240] syzkaller1: entered allmulticast mode [ 191.885199][T10164] wlan1 speed is unknown, defaulting to 1000 [ 192.140260][T10255] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 192.319937][T10255] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.341865][T10255] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 192.418023][T10258] macvlan2: entered promiscuous mode [ 192.423778][T10258] macvlan2: entered allmulticast mode [ 192.445287][T10258] bond0: entered promiscuous mode [ 192.472638][T10258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.571889][T10258] bond0: left promiscuous mode [ 192.661209][T10269] __nla_validate_parse: 3 callbacks suppressed [ 192.661231][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 192.683874][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 193.708025][T10299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.726462][T10299] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 193.745910][T10314] openvswitch: netlink: Message has 1 unknown bytes. [ 193.752995][T10314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.793452][T10299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.803255][T10299] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 193.827804][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 193.843583][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 193.857452][T10299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.870362][T10299] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 193.879108][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 193.917671][T10299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 193.945757][T10299] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 194.039379][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 194.071416][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 194.114285][T10326] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 194.145146][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 194.188348][T10329] netlink: 'syz.1.1203': attribute type 30 has an invalid length. [ 194.344712][T10329] bond0: option arp_missed_max: invalid value (0) [ 194.362595][T10329] bond0: option arp_missed_max: allowed values 1 - 255 [ 194.382122][T10329] bond0 (unregistering): Released all slaves [ 194.692007][ T24] wlan1 speed is unknown, defaulting to 1000 [ 194.716500][ T24] yz2: Port: 1 Link DOWN [ 194.825270][T10352] lo speed is unknown, defaulting to 1000 [ 194.961088][T10366] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 195.285325][T10384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.764186][T10405] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1221'. [ 195.826257][T10407] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1221'. [ 196.426153][T10438] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 196.967556][T10352] wlan1 speed is unknown, defaulting to 1000 [ 197.140442][T10470] netlink: 'syz.0.1237': attribute type 11 has an invalid length. [ 197.437934][T10478] netlink: 'syz.0.1238': attribute type 21 has an invalid length. [ 197.458548][T10478] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.479609][T10478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.487296][T10478] IPv6: NLM_F_CREATE should be set when creating new route [ 197.494610][T10478] IPv6: NLM_F_CREATE should be set when creating new route [ 197.807106][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031eaf000: rx timeout, send abort [ 197.816021][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031eaf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.063105][ T38] tipc: Subscription rejected, illegal request [ 198.317509][T10512] __nla_validate_parse: 7 callbacks suppressed [ 198.317529][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 198.351107][T10508] tipc: Enabled bearer , priority 0 [ 198.477012][T10508] syzkaller0: entered promiscuous mode [ 198.490432][T10508] syzkaller0: entered allmulticast mode [ 198.508094][ T38] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.528139][ T38] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.546967][ T38] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.606169][T10508] tipc: Resetting bearer [ 198.671477][ T38] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.729045][T10507] tipc: Resetting bearer [ 198.779138][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 198.821711][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 198.822014][T10507] tipc: Disabling bearer [ 198.838126][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1249'. [ 198.986062][T10539] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 199.165717][T10551] netlink: 'syz.1.1255': attribute type 83 has an invalid length. [ 199.177887][T10548] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 199.325659][T10568] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 199.334832][T10568] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1257'. [ 199.704660][T10589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.764107][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 199.790690][T10595] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1261'. [ 199.843783][T10582] netlink: 'syz.0.1261': attribute type 2 has an invalid length. [ 199.860209][T10595] netlink: Conntrack attr has 3 unknown bytes [ 199.872613][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 199.884834][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'. [ 199.952125][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 199.979994][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 200.066416][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 200.169163][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 200.265018][T10610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'. [ 200.331973][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 200.368522][T10612] IPv6: addrconf: prefix option has invalid lifetime [ 200.460416][T10592] netlink: 'syz.4.1264': attribute type 23 has an invalid length. [ 200.914052][T10641] syzkaller0: entered promiscuous mode [ 200.919633][T10641] syzkaller0: entered allmulticast mode [ 201.406835][T10673] bond2: (slave C): Releasing backup interface [ 201.418110][T10673] bond2: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 201.458898][T10673] bridge_slave_0: left allmulticast mode [ 201.470737][T10673] bridge_slave_0: left promiscuous mode [ 201.476652][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.519084][T10673] bridge_slave_1: left allmulticast mode [ 201.528452][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.587850][T10673] bond0: (slave bond_slave_0): Releasing backup interface [ 201.608442][T10691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1281'. [ 201.658315][T10673] bond0: (slave bond_slave_1): Releasing backup interface [ 201.816556][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 201.844929][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.853454][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.863760][T10673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.889953][T10681] team0: Mode changed to "random" [ 201.896835][T10708] syz.3.1281 uses old SIOCAX25GETINFO [ 201.936512][T10696] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 202.350828][T10731] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 202.555666][T10745] tipc: Enabled bearer , priority 0 [ 202.749735][T10743] tipc: Disabling bearer [ 203.254024][T10789] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.384869][T10793] __nla_validate_parse: 4 callbacks suppressed [ 203.384890][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1310'. [ 203.430121][T10795] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.752089][T10809] bond0: entered promiscuous mode [ 203.757604][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.847194][T10809] bond0: (slave bridge4): making interface the new active one [ 203.858346][T10809] bridge4: entered promiscuous mode [ 203.867950][T10809] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 203.921551][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 203.957975][T10811] "syz.1.1316" (10811) uses obsolete ecb(arc4) skcipher [ 203.972410][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 204.177683][T10834] syzkaller0: entered promiscuous mode [ 204.183584][T10834] syzkaller0: entered allmulticast mode [ 204.355921][T10845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.453583][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 204.747312][T10860] validate_nla: 6 callbacks suppressed [ 204.747332][T10860] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 204.768848][T10865] veth0_to_bridge: entered promiscuous mode [ 204.877855][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 204.956388][T10867] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 204.981537][T10864] veth0_to_bridge: left promiscuous mode [ 204.990075][T10874] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 204.998940][T10874] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 205.132005][T10882] netlink: 'syz.3.1339': attribute type 1 has an invalid length. [ 205.159890][T10882] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1339'. [ 205.243769][T10898] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.391806][T10905] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1344'. [ 205.652151][T10914] syzkaller0: entered promiscuous mode [ 205.658062][T10914] syzkaller0: entered allmulticast mode [ 205.708421][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 205.899165][T10924] syzkaller0: entered promiscuous mode [ 205.908171][T10924] syzkaller0: entered allmulticast mode [ 205.945405][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 206.037906][T10936] netlink: 'syz.2.1355': attribute type 2 has an invalid length. [ 206.047201][T10936] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 207.617776][T10967] ip6t_REJECT: ECHOREPLY is not supported [ 207.755673][T10973] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1365'. [ 207.800000][T10970] syzkaller0: entered promiscuous mode [ 207.805891][T10970] syzkaller0: entered allmulticast mode [ 207.905633][T10992] syz_tun: entered allmulticast mode [ 207.933427][T10990] syz_tun: left allmulticast mode [ 208.621013][T11031] __nla_validate_parse: 1 callbacks suppressed [ 208.621033][T11031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1375'. [ 209.092178][T11016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.565358][T11065] bond1: option min_links: invalid value (18446744073709551614) [ 210.579114][T11065] bond1: option min_links: allowed values 0 - 2147483647 [ 210.653642][T11065] bond1 (unregistering): Released all slaves [ 210.700742][T11085] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1391'. [ 210.715000][T11087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1390'. [ 210.766668][T11083] vlan2: entered allmulticast mode [ 210.780130][T11083] hsr0: entered allmulticast mode [ 210.789876][T11083] hsr_slave_0: entered allmulticast mode [ 210.822898][T11083] hsr_slave_1: entered allmulticast mode [ 210.829796][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 210.885617][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1394'. [ 211.033360][T11105] netlink: 'syz.2.1396': attribute type 58 has an invalid length. [ 211.061254][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1396'. [ 211.080469][T11107] netlink: 'syz.0.1397': attribute type 9 has an invalid length. [ 211.097117][T11093] syzkaller1: entered promiscuous mode [ 211.103867][T11093] syzkaller1: entered allmulticast mode [ 211.204742][T11115] syzkaller0: entered promiscuous mode [ 211.210722][T11115] syzkaller0: entered allmulticast mode [ 211.222155][T11115] tcf_pedit_act: 8 callbacks suppressed [ 211.222169][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.234966][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.241829][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.248622][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.255553][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.262433][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.269369][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.276261][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.283125][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.289956][T11115] tc action pedit offset must be on 32 bit boundaries [ 211.296849][T11115] 0: reclassify loop, rule prio 0, protocol 800 [ 211.300445][T11116] netlink: 'syz.2.1399': attribute type 9 has an invalid length. [ 211.387777][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 211.636659][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 211.733425][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 211.891680][T11137] xt_hashlimit: size too large, truncated to 1048576 [ 211.969922][T11139] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 212.023556][T11148] IPVS: Error connecting to the multicast addr [ 212.100111][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.161779][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 212.623680][T11180] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 212.636636][T11179] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.866877][T11193] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 212.881993][T11190] syzkaller0: entered promiscuous mode [ 212.887551][T11190] syzkaller0: entered allmulticast mode [ 213.218142][T11215] block nbd2: Unsupported socket: should be TCP or UNIX. [ 213.257062][T11219] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 213.268025][T11217] block nbd2: Unsupported socket: should be TCP or UNIX. [ 213.587722][T11243] pimreg: entered allmulticast mode [ 213.651404][T11248] __nla_validate_parse: 10 callbacks suppressed [ 213.651423][T11248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1441'. [ 213.843358][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1445'. [ 213.872437][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1445'. [ 213.947771][T11266] syzkaller0: entered promiscuous mode [ 213.967445][T11266] syzkaller0: entered allmulticast mode [ 214.198023][T11281] 8021q: VLANs not supported on ipvlan0 [ 214.464088][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1458'. [ 214.633849][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 214.705835][T11317] bond1: option xmit_hash_policy: invalid value (64) [ 214.716424][T11317] bond1 (unregistering): Released all slaves [ 215.009355][T11331] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1467'. [ 215.032981][T11331] syzkaller0: entered promiscuous mode [ 215.038577][T11331] syzkaller0: entered allmulticast mode [ 215.340031][T11344] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1471'. [ 215.955107][T11369] veth7: entered allmulticast mode [ 216.358671][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 216.395049][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 216.547460][T11400] netlink: 'syz.3.1491': attribute type 9 has an invalid length. [ 216.753881][T11411] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20004 [ 216.925381][T11416] gretap0: entered promiscuous mode [ 216.934804][T11421] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1495'. [ 216.947046][T11416] vlan1: entered promiscuous mode [ 217.074471][T11423] : renamed from team_slave_1 [ 217.219037][T11434] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 217.245537][T11434] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 217.343134][T11445] netlink: 'syz.4.1504': attribute type 2 has an invalid length. [ 217.429002][T11450] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 217.449499][T11450] team0: Device vxcan1 is of different type [ 218.988896][T11473] Cannot find map_set index 65533 as target [ 219.102239][T11476] __nla_validate_parse: 4 callbacks suppressed [ 219.102258][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1512'. [ 219.174591][T11483] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 219.190847][T11483] netlink: 'syz.4.1514': attribute type 3 has an invalid length. [ 219.220715][T11483] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1514'. [ 219.246244][T11483] syzkaller0: entered promiscuous mode [ 219.260700][T11483] syzkaller0: entered allmulticast mode [ 219.293887][T11485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1515'. [ 219.424614][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 219.434375][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 219.469492][T11496] gretap0: entered promiscuous mode [ 219.512719][T11496] gretap0: left promiscuous mode [ 219.556488][T11503] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 219.575751][T11504] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 219.838480][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'. [ 219.879482][T11519] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1522'. [ 220.024800][ T1031] syzkaller0: tun_net_xmit 76 [ 220.038567][ T1031] syzkaller0: tun_net_xmit 48 [ 220.055469][ T5959] syzkaller0: tun_net_xmit 76 [ 220.301127][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 220.310074][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 221.509495][T11529] syzkaller0: entered promiscuous mode [ 221.530322][T11529] syzkaller0: entered allmulticast mode [ 221.645202][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 221.874453][T11558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.104181][T11573] netlink: 'syz.4.1539': attribute type 33 has an invalid length. [ 222.120310][T11581] netlink: Conntrack attr has 4 unknown bytes [ 222.158050][T11573] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 222.169487][T11580] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 222.186076][T11573] bond6 (unregistering): Released all slaves [ 222.251807][T11568] lo speed is unknown, defaulting to 1000 [ 222.508327][T11596] sctp: [Deprecated]: syz.4.1545 (pid 11596) Use of int in max_burst socket option. [ 222.508327][T11596] Use struct sctp_assoc_value instead [ 223.474207][T11631] netlink: 'syz.3.1555': attribute type 11 has an invalid length. [ 223.491317][T11632] netlink: 'syz.3.1555': attribute type 11 has an invalid length. [ 223.661910][T11640] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 223.686126][T11640] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 223.699367][T11641] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 223.898167][T11568] wlan1 speed is unknown, defaulting to 1000 [ 225.105863][T11682] __nla_validate_parse: 7 callbacks suppressed [ 225.105885][T11682] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1569'. [ 225.126327][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 225.144452][T11686] syzkaller0: entered promiscuous mode [ 225.149985][T11686] syzkaller0: entered allmulticast mode [ 225.212015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.654068][T11641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.841395][T11698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1572'. [ 226.882855][T11701] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 228.181330][T11701] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 228.276314][T11718] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 228.313711][T11718] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 228.415402][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 228.443350][ T9] IPVS: starting estimator thread 0... [ 228.445931][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 228.541026][T11731] IPVS: using max 25 ests per chain, 60000 per kthread [ 228.562676][T11738] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1582'. [ 229.024614][T11761] netlink: 'syz.1.1589': attribute type 13 has an invalid length. [ 229.041877][T11761] veth0_macvtap: left promiscuous mode [ 229.049456][T11761] macvtap0: entered allmulticast mode [ 229.086313][T11761] macvtap0: refused to change device tx_queue_len [ 229.250405][T11772] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1593'. [ 229.439749][T11786] sock: sock_set_timeout: `syz.1.1596' (pid 11786) tries to set negative timeout [ 229.465987][T11787] sock: sock_set_timeout: `syz.1.1596' (pid 11787) tries to set negative timeout [ 229.590580][T11800] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 229.676514][T11800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.715253][T11807] pim6reg527: entered allmulticast mode [ 229.821859][T11816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.875041][T11818] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 229.945329][T11823] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 229.964346][T11823] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 230.225742][T11838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1612'. [ 230.237919][T11839] ipt_ECN: cannot use operation on non-tcp rule [ 230.256487][T11818] bond8: (slave gretap3): making interface the new active one [ 230.264968][T11818] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 230.280207][T11835] macvlan2: entered promiscuous mode [ 230.286792][T11835] macvlan2: entered allmulticast mode [ 230.293075][T11835] bond8: entered promiscuous mode [ 230.298260][T11835] gretap3: entered promiscuous mode [ 230.305056][T11835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.315727][T11835] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 230.327951][T11835] bond8: left promiscuous mode [ 230.346832][T11835] gretap3: left promiscuous mode [ 230.382057][T11838] tipc: New replicast peer: 255.255.255.255 [ 230.423135][T11838] tipc: Enabled bearer , priority 10 [ 230.453766][T11846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.727632][T11854] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 230.854631][T11854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.961651][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 230.972030][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 230.978443][T11862] bond6: (slave veth9): Enslaving as an active interface with a down link [ 230.981373][T11877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 231.026438][T11854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 231.042458][T11854] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 231.253990][T11884] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 231.306409][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.316621][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.363505][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.404505][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.422719][ T1031] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.444250][ T1031] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.483429][ T1031] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.492979][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.513770][ T1031] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.525466][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.546672][ T10] tipc: Node number set to 1033333636 [ 231.638257][T11899] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 231.832715][T11910] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.434332][T11947] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 232.493887][T11949] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 232.529964][T11952] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 233.018426][T11970] netlink: 'syz.3.1645': attribute type 142 has an invalid length. [ 233.178749][T11976] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 233.345275][T11991] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 233.363373][T11991] bond7 (unregistering): Released all slaves [ 233.576295][T12004] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 233.576477][T12003] syzkaller1: entered promiscuous mode [ 233.625013][T12003] syzkaller1: entered allmulticast mode [ 234.069397][T12016] syzkaller0: entered promiscuous mode [ 234.075640][T12016] syzkaller0: entered allmulticast mode [ 234.143617][T12018] netlink: 'syz.0.1661': attribute type 5 has an invalid length. [ 234.160282][T12018] netlink: 'syz.0.1661': attribute type 6 has an invalid length. [ 234.308607][T12026] vlan3: entered promiscuous mode [ 234.323661][T12026] gretap0: entered promiscuous mode [ 234.506855][T12035] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 234.792676][T12050] pimreg: left allmulticast mode [ 234.921967][T12052] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 235.049741][T12065] lo speed is unknown, defaulting to 1000 [ 235.075626][T12067] xt_hashlimit: size too large, truncated to 1048576 [ 235.167031][T12070] syzkaller0: entered promiscuous mode [ 235.176235][T12070] syzkaller0: entered allmulticast mode [ 235.315877][T12079] __nla_validate_parse: 22 callbacks suppressed [ 235.315901][T12079] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1678'. [ 235.343681][T12081] veth0_to_hsr: mtu less than device minimum [ 235.351307][T12074] can: request_module (can-proto-0) failed. [ 235.359022][T12081] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1680'. [ 235.669166][T12092] veth9: entered promiscuous mode [ 235.675955][T12092] veth9: entered allmulticast mode [ 235.682622][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 235.694287][T12094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1685'. [ 235.759106][T12094] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 235.769952][T12091] delete_channel: no stack [ 235.874643][T12097] tipc: Started in network mode [ 235.879880][T12097] tipc: Node identity a237506adf16, cluster identity 4711 [ 235.900925][T12097] tipc: Enabled bearer , priority 0 [ 235.909188][T12097] syzkaller0: entered promiscuous mode [ 235.922900][T12097] syzkaller0: entered allmulticast mode [ 236.031694][T12115] netlink: 'syz.2.1688': attribute type 142 has an invalid length. [ 236.055387][T12116] netlink: 512 bytes leftover after parsing attributes in process `syz.0.1692'. [ 236.089170][T12111] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1691'. [ 236.100065][T12111] netlink: Conntrack attr has 3 unknown bytes [ 236.119613][T12120] xt_TCPMSS: Only works on TCP SYN packets [ 236.178254][T12116] syzkaller0: entered promiscuous mode [ 236.190494][T12116] syzkaller0: entered allmulticast mode [ 236.230254][T12096] tipc: Resetting bearer [ 236.312010][T12096] tipc: Disabling bearer [ 236.362748][T12131] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 236.381498][T12134] netlink: 'syz.1.1697': attribute type 9 has an invalid length. [ 236.388986][T12127] netlink: 'syz.1.1697': attribute type 9 has an invalid length. [ 236.464919][T12137] netlink: 'syz.4.1700': attribute type 16 has an invalid length. [ 236.473777][T12137] netlink: 'syz.4.1700': attribute type 17 has an invalid length. [ 236.627062][T12137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.645258][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 236.661156][T12140] tipc: Invalid UDP bearer configuration [ 236.661280][T12140] tipc: Enabling of bearer rejected, failed to enable media [ 237.455840][T12196] tipc: Enabled bearer , priority 0 [ 237.479442][T12196] syzkaller0: entered promiscuous mode [ 237.496576][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 237.518867][T12196] syzkaller0: entered allmulticast mode [ 237.545950][T12202] chnl_net:caif_netlink_parms(): no params data found [ 237.608969][T12196] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1712'. [ 237.693784][T12196] tipc: Resetting bearer [ 237.753171][T12194] tipc: Resetting bearer [ 237.819809][T12222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1715'. [ 237.845323][T12194] tipc: Disabling bearer [ 238.248260][T12244] syzkaller0: entered promiscuous mode [ 238.261028][T12244] syzkaller0: entered allmulticast mode [ 238.389278][T12247] syzkaller0: entered promiscuous mode [ 238.412127][T12247] syzkaller0: entered allmulticast mode [ 240.421323][T12295] __nla_validate_parse: 2 callbacks suppressed [ 240.421339][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 240.437753][T12295] xt_l2tp: wrong L2TP version: 0 [ 240.602178][T12305] netlink: 'syz.1.1731': attribute type 2 has an invalid length. [ 240.626993][T12305] netlink: 'syz.1.1731': attribute type 2 has an invalid length. [ 240.627288][T12302] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.809354][T12319] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 240.817676][T12319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1734'. [ 241.099256][T12340] netlink: 'syz.3.1739': attribute type 4 has an invalid length. [ 241.393720][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1743'. [ 241.413476][T12358] netlink: 'syz.3.1743': attribute type 15 has an invalid length. [ 241.760294][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1748'. [ 241.773315][T12382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1748'. [ 241.889886][T12395] nbd: must specify at least one socket [ 241.901455][T12390] netlink: 'syz.2.1750': attribute type 10 has an invalid length. [ 242.141219][T12409] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 242.242338][T12409] bond7 (unregistering): Released all slaves [ 242.561419][T12432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1764'. [ 242.584326][T12432] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 242.651005][T12438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.658315][T12438] IPv6: NLM_F_CREATE should be set when creating new route [ 242.673164][T12438] lo: entered allmulticast mode [ 242.698236][T12438] tunl0: entered allmulticast mode [ 242.727480][T12438] gre0: entered allmulticast mode [ 242.786967][T12438] gretap0: entered allmulticast mode [ 242.981378][T12438] ip_vti0: entered allmulticast mode [ 243.011754][T12438] ip6_vti0: entered allmulticast mode [ 243.036377][T12438] sit0: entered allmulticast mode [ 243.076363][T12438] ip6tnl0: entered allmulticast mode [ 243.142320][T12438] ip6gre0: entered allmulticast mode [ 243.179800][T12438] syz_tun: entered allmulticast mode [ 243.207546][T12438] ip6gretap0: entered allmulticast mode [ 243.236169][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.244049][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.271363][T12438] bridge0: entered allmulticast mode [ 243.281751][T12438] vcan0: entered allmulticast mode [ 243.289068][T12438] team0: entered allmulticast mode [ 243.307669][T12438] team_slave_0: entered allmulticast mode [ 243.319832][T12438] team_slave_1: entered allmulticast mode [ 243.341420][T12438] dummy0: entered allmulticast mode [ 243.360819][T12438] nlmon0: entered allmulticast mode [ 243.386168][T12438] caif0: entered allmulticast mode [ 243.406384][T12438] batadv0: entered allmulticast mode [ 243.420758][T12438] vxcan0: entered allmulticast mode [ 243.441340][T12438] vxcan1: entered allmulticast mode [ 243.452498][T12438] veth0: entered allmulticast mode [ 243.478464][T12438] veth1: entered allmulticast mode [ 243.492897][T12438] wg0: entered allmulticast mode [ 243.522855][T12438] wg1: entered allmulticast mode [ 243.536758][T12438] wg2: entered allmulticast mode [ 243.556170][T12438] veth0_to_bridge: entered allmulticast mode [ 243.593141][T12438] veth1_to_bridge: entered allmulticast mode [ 243.622214][T12438] veth0_to_bond: entered allmulticast mode [ 243.632621][T12438] bond_slave_0: entered allmulticast mode [ 243.640221][T12438] veth1_to_bond: entered allmulticast mode [ 243.657188][T12438] bond_slave_1: entered allmulticast mode [ 243.663629][T12438] veth0_to_team: entered allmulticast mode [ 243.690002][T12438] veth1_to_team: entered allmulticast mode [ 243.777772][T12438] veth0_to_batadv: entered allmulticast mode [ 243.797911][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.807646][T12438] batadv_slave_0: entered allmulticast mode [ 243.823625][T12438] veth1_to_batadv: entered allmulticast mode [ 243.840488][T12438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.850762][T12438] batadv_slave_1: entered allmulticast mode [ 243.867575][T12438] xfrm0: entered allmulticast mode [ 243.875799][T12438] veth0_to_hsr: entered allmulticast mode [ 243.898129][T12438] hsr_slave_0: entered allmulticast mode [ 243.912518][T12438] veth1_to_hsr: entered allmulticast mode [ 243.928947][T12438] hsr_slave_1: entered allmulticast mode [ 243.940936][T12438] hsr0: entered allmulticast mode [ 243.956263][T12438] veth1_virt_wifi: entered allmulticast mode [ 244.007630][T12438] veth0_virt_wifi: entered allmulticast mode [ 244.032111][T12438] virt_wifi0: entered allmulticast mode [ 244.038152][T12438] veth1_vlan: entered allmulticast mode [ 244.051556][T12438] veth0_vlan: entered allmulticast mode [ 244.138988][T12438] vlan0: entered allmulticast mode [ 244.151107][T12438] vlan1: entered allmulticast mode [ 244.157766][T12438] macvlan0: left promiscuous mode [ 244.162978][T12438] macvlan0: entered allmulticast mode [ 244.178143][T12438] macvlan1: entered allmulticast mode [ 244.192350][T12438] ipvlan0: entered allmulticast mode [ 244.198051][T12438] ipvlan1: entered allmulticast mode [ 244.204000][T12438] veth1_macvtap: entered allmulticast mode [ 244.237520][T12438] macvtap0: entered allmulticast mode [ 244.261079][T12438] macsec0: entered allmulticast mode [ 244.274039][T12438] geneve0: entered allmulticast mode [ 244.303761][T12438] geneve1: entered allmulticast mode [ 244.331248][T12438] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 244.362598][T12438] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 244.382605][T12438] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 244.396393][T12438] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 244.411689][T12438] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 244.418650][T12438] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 244.430975][T12438] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 244.440023][T12438] ipip0: entered allmulticast mode [ 244.455621][T12438] syztnl0: entered allmulticast mode [ 244.463889][T12438] bridge1: entered allmulticast mode [ 244.473415][T12438] gre1: entered allmulticast mode [ 244.479126][T12438] bridge2: entered allmulticast mode [ 244.501800][T12438] : entered allmulticast mode [ 244.507013][T12438] sit1: entered allmulticast mode [ 244.549735][T12438] gretap1: entered allmulticast mode [ 244.562622][T12438] veth2: entered allmulticast mode [ 244.568021][T12438] veth3: left promiscuous mode [ 244.575420][T12438] veth3: entered allmulticast mode [ 244.581337][T12438] bond0: entered allmulticast mode [ 244.586865][T12438] ip6tnl1: entered allmulticast mode [ 244.597329][T12438] vxlan0: entered allmulticast mode [ 244.685903][T12438] veth4: entered allmulticast mode [ 244.697974][T12438] veth5: entered allmulticast mode [ 244.703917][T12438] gtp0: entered allmulticast mode [ 244.709436][T12438] bridge3: entered allmulticast mode [ 244.715856][T12438] mac80211_hwsim hwsim35 wlan2: entered allmulticast mode [ 244.723708][T12438] sit2: entered allmulticast mode [ 244.732015][T12438] veth6: entered allmulticast mode [ 244.737403][T12438] veth7: entered allmulticast mode [ 244.743119][T12438] bridge4: entered allmulticast mode [ 244.749651][T12438] bridge5: entered allmulticast mode [ 244.755773][T12438] veth8: entered allmulticast mode [ 244.762320][T12438] veth9: left promiscuous mode [ 244.771965][T12438] syzkaller0: entered allmulticast mode [ 244.777900][ T796] lo speed is unknown, defaulting to 1000 [ 244.784014][ T796] syz2: Port: 1 Link DOWN [ 244.817322][T12451] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 244.852915][T10029] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.888379][T10029] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.930980][T10029] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.939931][T10029] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.976554][ T796] lo speed is unknown, defaulting to 1000 [ 245.018070][T10029] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.051359][T10029] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.135666][T10029] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.159107][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1777'. [ 245.170947][T10029] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.620259][T12529] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1787'. [ 245.634922][T12530] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 245.978303][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 246.175621][T12513] lec:lec_atm_close: lec0: Shut down! [ 246.372796][T12568] sctp: [Deprecated]: syz.2.1795 (pid 12568) Use of int in max_burst socket option. [ 246.372796][T12568] Use struct sctp_assoc_value instead [ 246.519086][T12578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1797'. [ 246.575228][ T5959] IPVS: starting estimator thread 0... [ 246.673875][T12585] IPVS: using max 27 ests per chain, 64800 per kthread [ 246.748250][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 247.114996][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'. [ 247.170840][T12620] tipc: Enabled bearer , priority 0 [ 247.180235][T12620] syzkaller0: MTU too low for tipc bearer [ 247.188818][T12620] tipc: Disabling bearer [ 247.194029][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 247.239545][T12621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1809'. [ 247.265145][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 247.282877][T12628] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1812'. [ 247.320789][T12625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1812'. [ 247.454450][T12638] netlink: 'syz.0.1814': attribute type 33 has an invalid length. [ 247.549884][T12638] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 247.563049][T12638] bond1 (unregistering): Released all slaves [ 247.893461][T12465] lec:lec_start_xmit: lec0:No lecd attached [ 248.059171][T12675] syzkaller0: entered promiscuous mode [ 248.095121][T12675] syzkaller0: entered allmulticast mode [ 248.101311][T12676] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 248.237693][T12684] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 248.253659][T12684] netlink: 'syz.1.1826': attribute type 2 has an invalid length. [ 248.276094][T12684] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 248.311898][T12689] syzkaller0: entered promiscuous mode [ 248.317531][T12689] syzkaller0: entered allmulticast mode [ 248.326991][T12689] TC_ACT_REPEAT abuse ? [ 248.542858][T12702] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 248.776068][T12702] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 248.896715][T12721] openvswitch: netlink: EtherType 50a is less than min 600 [ 249.250011][T12738] netlink: 'syz.2.1839': attribute type 21 has an invalid length. [ 249.263869][T12738] netlink: 'syz.2.1839': attribute type 21 has an invalid length. [ 249.535053][T12772] netlink: 'syz.2.1847': attribute type 58 has an invalid length. [ 249.802652][T12794] openvswitch: netlink: Key type 184 is out of range max 32 [ 250.046606][T12801] netlink: 'syz.2.1856': attribute type 16 has an invalid length. [ 250.057897][T12798] bond3: option fail_over_mac: invalid value (16) [ 250.075428][T12798] bond3 (unregistering): Released all slaves [ 250.212898][T12801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.598784][T12827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.681511][T12827] siw: device registration error -23 [ 250.688240][T12838] vlan1: entered allmulticast mode [ 250.739293][T12838] bond3: entered allmulticast mode [ 250.765346][T12827] bond3: (slave geneve3): making interface the new active one [ 250.773409][T12827] geneve3: entered allmulticast mode [ 250.787440][T12827] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 250.892630][T12851] __nla_validate_parse: 23 callbacks suppressed [ 250.892653][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 251.019021][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 251.189937][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 251.386639][T12879] openvswitch: netlink: Message has 16 unknown bytes. [ 251.415870][T12875] validate_nla: 2 callbacks suppressed [ 251.415895][T12875] netlink: 'syz.3.1875': attribute type 2 has an invalid length. [ 251.480117][T12893] netlink: 'syz.2.1878': attribute type 3 has an invalid length. [ 251.492251][T12875] netlink: 'syz.3.1875': attribute type 11 has an invalid length. [ 251.500405][T12875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1875'. [ 251.769396][T12911] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 251.781154][T12910] bond4: (slave bond_slave_1): Device is not bonding slave [ 251.800689][T12910] bond4: option active_slave: invalid value (bond_slave_1) [ 251.838812][T12922] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 251.873974][T12910] bond4 (unregistering): Released all slaves [ 252.085650][T12926] bond0: (slave geneve2): making interface the new active one [ 252.096193][T12926] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 252.107244][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.117474][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.127340][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.139198][T12926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 252.152066][T12926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.165183][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 252.175815][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1884'. [ 252.379347][T12942] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 252.395868][T12942] netlink: 'syz.4.1891': attribute type 83 has an invalid length. [ 252.459796][T12945] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 252.543365][T12945] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.692926][T12956] ipvlan1: left allmulticast mode [ 252.805364][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 253.098302][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 253.239233][T12997] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1908'. [ 253.370562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 253.379160][ C0] lec:lec_tx_timeout: lec0 [ 253.384719][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 254.309699][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 254.723713][T13020] netlink: 'syz.0.1912': attribute type 3 has an invalid length. [ 254.880729][T13026] xt_hashlimit: size too large, truncated to 1048576 [ 254.921854][T13026] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 254.972602][T13037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.979938][T13037] IPv6: NLM_F_CREATE should be set when creating new route [ 254.987290][T13037] IPv6: NLM_F_CREATE should be set when creating new route [ 255.287162][T13059] netlink: 'syz.4.1922': attribute type 3 has an invalid length. [ 255.431434][T13064] 8021q: VLANs not supported on ip_vti0 [ 255.749275][T13081] bond7: entered promiscuous mode [ 255.773294][T13084] lo: entered promiscuous mode [ 255.781677][T13084] lo: left allmulticast mode [ 255.788787][T13084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.805937][T13088] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 255.977441][T13099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.331608][T13125] __nla_validate_parse: 4 callbacks suppressed [ 256.331630][T13125] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1942'. [ 256.381838][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1943'. [ 256.483195][T13129] syzkaller0: entered promiscuous mode [ 256.501222][T13129] syzkaller0: entered allmulticast mode [ 256.519250][T13129] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1939'. [ 256.550078][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 256.635194][T13140] validate_nla: 1 callbacks suppressed [ 256.635215][T13140] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 256.659193][T13138] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1946'. [ 256.786224][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1944'. [ 257.217745][T13174] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1956'. [ 257.271968][T13177] lo speed is unknown, defaulting to 1000 [ 257.300237][T13170] IPVS: sh: FWM 3 0x00000003 - no destination available [ 257.327409][T13181] syzkaller0: entered promiscuous mode [ 257.331307][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 257.348890][T13181] syzkaller0: entered allmulticast mode [ 257.401023][T13183] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 257.476221][T13183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.585607][T13188] bond6: (slave veth7): Enslaving as an active interface with a down link [ 257.631028][T13188] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1959'. [ 257.658677][T13183] bond6: (slave dummy0): making interface the new active one [ 257.668743][T13183] dummy0: entered promiscuous mode [ 257.681732][T13183] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 257.733106][T13191] bond4: entered promiscuous mode [ 257.738242][T13191] bond4: entered allmulticast mode [ 257.760649][T13191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.828295][T13188] bond6: (slave dummy0): Releasing active interface [ 257.837980][T13188] dummy0 (unregistering): left promiscuous mode [ 258.024269][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 258.062219][T13205] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1963'. [ 258.204882][T13216] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 258.275694][T13220] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 258.371361][T13226] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 258.659638][T13244] xt_TCPMSS: Only works on TCP SYN packets [ 258.725580][T13177] wlan1 speed is unknown, defaulting to 1000 [ 258.920214][T13255] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 258.927911][T13255] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.130630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 259.138753][ C0] lec:lec_tx_timeout: lec0 [ 259.150916][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.643424][T13283] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 259.700971][T13285] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 259.814672][T13290] netlink: 'syz.4.1988': attribute type 1 has an invalid length. [ 260.632395][T13339] netlink: 'syz.2.1995': attribute type 3 has an invalid length. [ 260.967407][T13361] netlink: 'syz.0.2001': attribute type 10 has an invalid length. [ 261.021997][T13361] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 261.074501][T13361] batman_adv: batadv0: Adding interface: netdevsim0 [ 261.099790][T13361] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.144055][T13361] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 261.351754][T13382] netlink: 'syz.0.2008': attribute type 7 has an invalid length. [ 261.384649][T13382] netlink: 'syz.0.2008': attribute type 2 has an invalid length. [ 261.397119][T13385] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.451937][T13382] macvtap2: entered promiscuous mode [ 261.457522][T13382] macvtap2: entered allmulticast mode [ 261.516563][T13382] macvtap3: entered promiscuous mode [ 261.530858][T13382] macvtap3: entered allmulticast mode [ 261.582565][T13392] __nla_validate_parse: 4 callbacks suppressed [ 261.582587][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2007'. [ 261.618626][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 261.777059][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 261.866258][T13413] bond5: option mode: invalid value (133) [ 261.875691][T13413] bond5 (unregistering): Released all slaves [ 262.079208][T13424] lo speed is unknown, defaulting to 1000 [ 262.372434][T13413] bond5: option mode: invalid value (133) [ 262.408165][T13413] bond5 (unregistering): Released all slaves [ 262.576081][T13413] bond5: option mode: invalid value (133) [ 262.614584][T13413] bond5 (unregistering): Released all slaves [ 262.802211][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 263.496439][T13490] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 263.569365][T13490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 263.648357][T13497] bond7: (slave gretap2): making interface the new active one [ 263.664962][T13499] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 263.687659][T13497] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 263.703712][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 263.728673][T13490] macvlan0: entered promiscuous mode [ 263.737514][T13490] macvlan0: entered allmulticast mode [ 263.745592][T13490] bond7: entered promiscuous mode [ 263.754108][T13490] gretap2: entered promiscuous mode [ 263.761907][T13490] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 263.780444][T13490] bond7: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 263.797496][T13490] bond7: left promiscuous mode [ 263.805520][T13490] gretap2: left promiscuous mode [ 263.831571][T13424] wlan1 speed is unknown, defaulting to 1000 [ 264.116750][T13518] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 264.160569][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 264.168706][ C0] lec:lec_tx_timeout: lec0 [ 264.173885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.574331][T13540] netlink: 'syz.0.2042': attribute type 29 has an invalid length. [ 264.654982][T13540] netlink: 'syz.0.2042': attribute type 32 has an invalid length. [ 264.695313][T13540] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2042'. [ 264.704807][T13538] netlink: 'syz.0.2042': attribute type 29 has an invalid length. [ 264.730464][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 264.742717][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 264.785110][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 265.101136][T13561] syzkaller0: entered promiscuous mode [ 265.107040][T13561] syzkaller0: entered allmulticast mode [ 265.525888][T13587] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 265.595763][T13589] mac80211_hwsim hwsim9 : renamed from wlan1 [ 265.796597][T13587] bond5: entered promiscuous mode [ 265.802706][T13587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.934351][T13593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.961440][T13593] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 265.971901][T13593] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 266.003010][T13593] bond5: (slave vcan1): making interface the new active one [ 266.010768][T13593] vcan1: entered promiscuous mode [ 266.018311][T13593] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 266.039913][T13602] netlink: 'syz.4.2055': attribute type 3 has an invalid length. [ 266.055716][T13602] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2055'. [ 266.722698][T13653] syzkaller0: entered promiscuous mode [ 266.751115][T13653] syzkaller0: entered allmulticast mode [ 266.924182][T13676] netlink: 'syz.2.2074': attribute type 3 has an invalid length. [ 267.001097][T13676] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 267.167953][T13686] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 267.196213][T13686] __nla_validate_parse: 1 callbacks suppressed [ 267.196231][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 267.449097][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 267.627618][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 267.680052][T13724] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 267.722693][T13724] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2083'. [ 267.963939][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 268.011380][T13751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2087'. [ 268.371760][T13770] netlink: 440 bytes leftover after parsing attributes in process `syz.2.2091'. [ 268.537937][T13778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.545278][T13778] IPv6: NLM_F_CREATE should be set when creating new route [ 269.141746][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2102'. [ 269.180629][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 269.188804][ C0] lec:lec_tx_timeout: lec0 [ 269.194381][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.741356][T13849] netlink: 'syz.4.2110': attribute type 58 has an invalid length. [ 269.749446][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2110'. [ 269.961420][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 270.041393][T13863] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 271.623440][T13872] netlink: 'syz.1.2115': attribute type 1 has an invalid length. [ 271.667360][T13863] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 272.069346][T13898] bridge0: left allmulticast mode [ 272.166612][T13908] batman_adv: batadv0: Adding interface: dummy0 [ 272.190728][T13908] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.284524][T13908] batman_adv: batadv0: Interface activated: dummy0 [ 272.330112][T13912] batadv0: mtu less than device minimum [ 272.371062][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.383426][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.395306][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.407151][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.419028][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.430928][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.442779][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.454718][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.466589][T13912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 272.643927][T13939] : renamed from bridge_slave_1 [ 272.795202][T13955] netlink: 'syz.0.2137': attribute type 12 has an invalid length. [ 272.821908][T13955] netlink: 'syz.0.2137': attribute type 29 has an invalid length. [ 272.836772][T13955] __nla_validate_parse: 3 callbacks suppressed [ 272.836792][T13955] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2137'. [ 272.889247][T13954] xt_l2tp: missing protocol rule (udp|l2tpip) [ 273.138130][T13970] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 273.507629][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 273.512083][T13978] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2142'. [ 273.531710][T13981] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2145'. [ 273.929612][T14004] bond1: (slave erspan0): Device is not bonding slave [ 273.957632][T14004] bond1: option active_slave: invalid value (erspan0) [ 273.965677][T14009] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2152'. [ 274.001352][T13996] x_tables: duplicate underflow at hook 2 [ 274.029886][T14004] bond1 (unregistering): Released all slaves [ 274.136819][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2154'. [ 274.179726][T14021] netlink: 308 bytes leftover after parsing attributes in process `syz.4.2154'. [ 274.200576][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 274.208647][ C0] lec:lec_tx_timeout: lec0 [ 274.214941][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.255457][T14021] syzkaller1: entered promiscuous mode [ 274.270994][T14021] syzkaller1: entered allmulticast mode [ 274.283107][T14026] netlink: 'syz.2.2156': attribute type 2 has an invalid length. [ 274.361035][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2157'. [ 274.397382][T14026] lo speed is unknown, defaulting to 1000 [ 275.007953][T14056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2163'. [ 275.157410][T14058] netlink: 'syz.1.2164': attribute type 17 has an invalid length. [ 275.174381][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 275.592429][T14084] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 275.746358][T14092] netlink: 'syz.1.2176': attribute type 19 has an invalid length. [ 275.805956][T10025] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 275.821326][T14092] netlink: 'syz.1.2176': attribute type 19 has an invalid length. [ 275.829335][T10025] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 275.839920][T10025] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 275.867086][T14097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.895765][T10025] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 275.922147][T14092] pim6reg1: entered promiscuous mode [ 275.927833][T14092] pim6reg1: entered allmulticast mode [ 276.362290][T14026] wlan1 speed is unknown, defaulting to 1000 [ 277.086298][T14171] bond12 (unregistering): Released all slaves [ 277.516840][T14195] netlink: 'syz.1.2203': attribute type 3 has an invalid length. [ 277.594996][T14199] x_tables: unsorted entry at hook 3 [ 277.913360][T14216] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 278.412565][T14246] bridge0: port 1(syz_tun) entered blocking state [ 278.419573][T14246] bridge0: port 1(syz_tun) entered disabled state [ 278.440825][T14246] syz_tun: entered allmulticast mode [ 278.452793][T14246] syz_tun: entered promiscuous mode [ 278.480587][T14246] __nla_validate_parse: 12 callbacks suppressed [ 278.480607][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 278.522038][T14246] IPVS: Unknown mcast interface: vcan0 [ 278.871721][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 279.035947][T14295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2226'. [ 279.162304][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 279.173510][T14306] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 279.182405][T14306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2228'. [ 279.230789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.239605][ C0] lec:lec_tx_timeout: lec0 [ 279.244926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.398876][T14316] net_ratelimit: 12 callbacks suppressed [ 279.398897][T14316] openvswitch: netlink: IPv6 tunnel dst address is zero [ 279.588320][T14322] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2232'. [ 279.620051][T14322] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2232'. [ 279.694064][T14330] tipc: Failed to remove unknown binding: 66,0,0/3002660456:1172189041/1172189043 [ 279.716522][T14330] tipc: Failed to remove unknown binding: 66,0,0/3002660456:1172189041/1172189042 [ 279.844131][T14340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2236'. [ 279.901523][T14339] netlink: 'syz.1.2236': attribute type 21 has an invalid length. [ 280.105911][T14356] xt_hashlimit: size too large, truncated to 1048576 [ 280.154322][T14358] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2245'. [ 280.325088][T14371] netlink: 'syz.1.2248': attribute type 39 has an invalid length. [ 280.490087][T14371] syz_tun (unregistering): left allmulticast mode [ 280.523476][T14371] syz_tun (unregistering): left promiscuous mode [ 280.550404][T14371] bridge0: port 1(syz_tun) entered disabled state [ 280.780415][T14390] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2252'. [ 281.252952][T14424] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 281.261613][T14424] batadv2: entered promiscuous mode [ 281.267040][T14424] batadv2: entered allmulticast mode [ 281.273932][T14424] team0: Port device batadv2 added [ 281.858086][T14467] veth1_macvtap: left promiscuous mode [ 281.866820][T14467] macsec0: entered promiscuous mode [ 281.873520][T14467] macsec0: entered allmulticast mode [ 281.900940][T14466] veth1_macvtap: entered promiscuous mode [ 281.906750][T14466] veth1_macvtap: entered allmulticast mode [ 281.961645][T14466] macsec0: left promiscuous mode [ 281.966850][T14466] macsec0: left allmulticast mode [ 281.979124][T14466] veth1_macvtap: left allmulticast mode [ 282.399714][T14503] netlink: 'syz.3.2282': attribute type 2 has an invalid length. [ 282.456796][T14498] can: request_module (can-proto-3) failed. [ 282.474281][T14502] can: request_module (can-proto-3) failed. [ 282.556451][T14514] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 282.659588][T14523] netlink: 'syz.4.2288': attribute type 12 has an invalid length. [ 282.775411][T14523] bond12: option primary_reselect: invalid value (255) [ 282.785233][T14523] bond12 (unregistering): Released all slaves [ 282.814521][T14525] tipc: Enabled bearer , priority 0 [ 282.822413][T14534] syzkaller0: entered promiscuous mode [ 282.828142][T14534] syzkaller0: entered allmulticast mode [ 282.899938][T14535] syzkaller0: entered promiscuous mode [ 282.906974][T14535] syzkaller0: entered allmulticast mode [ 282.914749][T14535] tipc: Resetting bearer [ 283.352559][ T38] tipc: Resetting bearer [ 283.434889][T14513] tipc: Resetting bearer [ 283.562168][T14576] __nla_validate_parse: 5 callbacks suppressed [ 283.562189][T14576] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2298'. [ 283.589522][T14576] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2298'. [ 283.802957][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'. [ 283.993483][T14601] netlink: 'syz.1.2301': attribute type 1 has an invalid length. [ 284.052629][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2301'. [ 284.260907][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.268988][ C0] lec:lec_tx_timeout: lec0 [ 284.274255][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.149224][T14513] tipc: Disabling bearer [ 285.159706][T14561] syzkaller0: entered promiscuous mode [ 285.165569][T14561] syzkaller0: entered allmulticast mode [ 285.197992][T12467] tipc: Node number set to 2099335274 [ 285.212819][T14601] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 285.315336][T14610] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 285.550114][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 285.568590][T14634] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 285.603979][T14638] netlink: 'syz.0.2308': attribute type 4 has an invalid length. [ 285.638297][T14638] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2308'. [ 285.653879][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 285.668931][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2313'. [ 285.701556][T14630] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 285.841315][T14653] IPVS: set_ctl: invalid protocol: 47 0.0.0.4:20000 [ 286.034198][T14664] netlink: 'syz.3.2321': attribute type 9 has an invalid length. [ 286.042476][T14664] netlink: 'syz.3.2321': attribute type 11 has an invalid length. [ 286.050416][T14664] netlink: 'syz.3.2321': attribute type 12 has an invalid length. [ 286.062747][T14664] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2321'. [ 286.072732][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 286.404998][T14689] netlink: 'syz.1.2326': attribute type 63 has an invalid length. [ 286.664151][ T12] tipc: Subscription rejected, illegal request [ 286.998416][T14733] netlink: 'syz.1.2341': attribute type 21 has an invalid length. [ 287.318285][T14754] netlink: 'syz.2.2348': attribute type 13 has an invalid length. [ 287.348739][T14760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.542397][T14760] bond1 (unregistering): Released all slaves [ 287.869906][T14795] syzkaller1: entered promiscuous mode [ 287.898320][T14795] syzkaller1: entered allmulticast mode [ 288.112705][T14812] gretap0: entered promiscuous mode [ 288.142897][T14812] vlan3: entered promiscuous mode [ 288.225280][T14817] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 288.569519][T14851] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20000 [ 288.656108][T14852] ip6tnl0: Caught tx_queue_len zero misconfig [ 288.924767][T14866] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 289.032555][T14872] vlan3: entered promiscuous mode [ 289.037771][T14872] geneve1: entered promiscuous mode [ 289.044013][T14872] vlan3: entered allmulticast mode [ 289.119687][T14870] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.2368:14870 [ 289.264153][T14876] TC_ACT_REPEAT abuse ? [ 289.280598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.288842][ C0] lec:lec_tx_timeout: lec0 [ 289.294152][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.442493][T14906] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 290.494280][T14910] __nla_validate_parse: 12 callbacks suppressed [ 290.494296][T14910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2385'. [ 290.536001][T14908] lo speed is unknown, defaulting to 1000 [ 290.565226][T14906] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.796442][T14924] ip_vti0: entered promiscuous mode [ 290.808927][T14924] ip_vti0: entered allmulticast mode [ 290.965362][T14939] syz2: rxe_newlink: already configured on lo [ 291.318669][T14964] netlink: 'syz.1.2399': attribute type 11 has an invalid length. [ 291.405841][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 291.472236][T14967] lo speed is unknown, defaulting to 1000 [ 291.474601][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'. [ 291.506218][T14973] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2401'. [ 291.706506][T14984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2405'. [ 291.793173][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 291.905725][T14990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2407'. [ 291.982240][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2407'. [ 292.164254][T14997] tipc: Enabling of bearer rejected, failed to enable media [ 292.241951][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2412'. [ 292.663635][T15020] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2416'. [ 292.707459][T15020] netlink: 'syz.4.2416': attribute type 11 has an invalid length. [ 292.737918][T14967] wlan1 speed is unknown, defaulting to 1000 [ 293.158656][T15036] pim6reg: entered allmulticast mode [ 293.164732][T15039] pim6reg: left allmulticast mode [ 293.925663][T15071] netlink: 'syz.3.2427': attribute type 1 has an invalid length. [ 294.300682][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.308821][ C0] lec:lec_tx_timeout: lec0 [ 294.314253][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.325268][T15088] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 294.481638][T15094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.530314][T15094] netlink: 'syz.3.2436': attribute type 3 has an invalid length. [ 294.623354][T15099] syzkaller0: entered promiscuous mode [ 294.629018][T15099] syzkaller0: entered allmulticast mode [ 294.729923][T15109] netlink: 'syz.3.2440': attribute type 2 has an invalid length. [ 294.759659][T15109] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 296.365046][T15122] __nla_validate_parse: 6 callbacks suppressed [ 296.365072][T15122] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2441'. [ 296.630107][T15146] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2447'. [ 296.660629][T15146] netlink: 'syz.0.2447': attribute type 9 has an invalid length. [ 296.852824][T15164] netlink: 'syz.0.2453': attribute type 3 has an invalid length. [ 296.964205][T15171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2455'. [ 297.407915][T15204] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2460'. [ 297.575517][T15207] netlink: 'syz.2.2464': attribute type 5 has an invalid length. [ 297.946814][T15206] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 297.997646][T15206] bond10 (unregistering): Released all slaves [ 298.276473][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 298.331676][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'. [ 298.451792][T15245] syzkaller0: entered promiscuous mode [ 298.471555][T15245] syzkaller0: entered allmulticast mode [ 298.502031][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'. [ 298.528435][T15245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2474'. [ 298.617523][T15255] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2476'. [ 298.651056][T15260] netlink: 'syz.0.2477': attribute type 39 has an invalid length. [ 298.660767][T15259] netlink: 'syz.0.2477': attribute type 39 has an invalid length. [ 298.673530][T15245] gretap4: entered promiscuous mode [ 298.679004][T15245] gretap4: entered allmulticast mode [ 298.768164][T15252] lo speed is unknown, defaulting to 1000 [ 298.957455][T15272] sit0: entered promiscuous mode [ 298.978029][T15272] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 298.996397][T15272] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2479'. [ 299.577311][T15298] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 300.090596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 300.098731][ C0] lec:lec_tx_timeout: lec0 [ 300.104446][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 300.393937][T15326] syzkaller0: entered promiscuous mode [ 300.399529][T15326] syzkaller0: entered allmulticast mode [ 300.496756][T15252] wlan1 speed is unknown, defaulting to 1000 [ 300.862022][T15351] syzkaller0: entered promiscuous mode [ 300.905374][T15351] syzkaller0: entered allmulticast mode [ 301.164192][T15366] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 301.218675][T15366] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 301.277419][T15374] tipc: Started in network mode [ 301.291461][T15374] tipc: Node identity ac14140f, cluster identity 4711 [ 301.298611][T15374] tipc: New replicast peer: 255.255.255.255 [ 301.306206][T15374] tipc: Enabled bearer , priority 10 [ 301.379673][T15374] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 301.389255][T15374] team0: Device macvlan2 is already an upper device of the team interface [ 301.810296][T15398] __nla_validate_parse: 11 callbacks suppressed [ 301.810319][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 302.049254][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 302.074443][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 302.142860][T15411] netlink: 'syz.1.2516': attribute type 83 has an invalid length. [ 302.162458][T15411] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2516'. [ 302.192549][T15413] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 302.211014][T15413] veth0_vlan: left promiscuous mode [ 302.217459][T15413] veth0_vlan: entered promiscuous mode [ 302.226308][T15413] team0: Device veth0_vlan failed to register rx_handler [ 302.369468][T15420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2519'. [ 302.423297][ T5959] tipc: Node number set to 2886997007 [ 302.578356][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 302.588417][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2524'. [ 302.600575][T15439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2524'. [ 302.617416][T15439] erspan0: entered promiscuous mode [ 302.625013][T15439] gretap0: entered promiscuous mode [ 302.895480][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 302.905589][T15458] netlink: 'syz.4.2528': attribute type 1 has an invalid length. [ 302.942608][T15458] netlink: 'syz.4.2528': attribute type 2 has an invalid length. [ 302.968280][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'. [ 303.053202][T15461] 8021q: VLANs not supported on wlan0 [ 303.080263][T15467] 8021q: VLANs not supported on wlan0 [ 303.401844][T15477] netlink: 'syz.2.2534': attribute type 10 has an invalid length. [ 303.482649][T15477] batman_adv: batadv0: Adding interface: netdevsim0 [ 303.489320][T15477] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.570564][T15477] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 303.739207][T15495] 0: renamed from hsr_slave_1 (while UP) [ 303.755918][T15495] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 304.032294][T15512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.052039][T15512] tipc: Enabling of bearer rejected, already enabled [ 304.469329][T15546] siw: device registration error -23 [ 304.536174][T15548] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 304.550116][T15548] bond6 (unregistering): Released all slaves [ 304.707537][T15564] syzkaller0: entered promiscuous mode [ 304.713659][T15564] syzkaller0: entered allmulticast mode [ 305.131138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 305.139251][ C0] lec:lec_tx_timeout: lec0 [ 305.144433][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 305.237786][T15592] tipc: Invalid UDP bearer configuration [ 305.237841][T15592] tipc: Enabling of bearer rejected, failed to enable media [ 305.323304][T15594] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 305.679996][T15618] syzkaller0: entered promiscuous mode [ 305.694056][T15618] syzkaller0: entered allmulticast mode [ 306.031601][T15648] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 306.537149][T15671] x_tables: duplicate underflow at hook 1 [ 306.859130][T15690] xt_l2tp: invalid flags combination: 0 [ 307.209481][T15703] bond10: Removing last ns target with arp_interval on [ 308.466035][T15771] netlink: 'syz.2.2620': attribute type 11 has an invalid length. [ 308.474172][T15771] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 308.493150][T15771] __nla_validate_parse: 24 callbacks suppressed [ 308.493168][T15771] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2620'. [ 308.687781][T15782] RDS: rds_bind could not find a transport for ::ffff:172.20.20.66, load rds_tcp or rds_rdma? [ 308.699984][T15782] bridge_slave_1: mtu less than device minimum [ 308.771567][T15785] x_tables: duplicate underflow at hook 3 [ 309.116299][T15803] netlink: 'syz.2.2627': attribute type 7 has an invalid length. [ 309.204652][T15807] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2629'. [ 309.228803][T15809] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2630'. [ 309.348994][T15811] bond2: option fail_over_mac: invalid value (16) [ 309.361838][T15811] bond2 (unregistering): Released all slaves [ 309.386135][T15814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2632'. [ 309.707968][T15827] netlink: 'syz.3.2638': attribute type 1 has an invalid length. [ 309.782256][T15827] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 309.794257][T15827] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 309.994165][T15842] netlink: 'syz.0.2640': attribute type 4 has an invalid length. [ 310.004422][T15842] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2640'. [ 310.093906][T15844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2642'. [ 310.104840][T15844] netlink: 'syz.3.2642': attribute type 5 has an invalid length. [ 310.150528][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.158643][ C0] lec:lec_tx_timeout: lec0 [ 310.163489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.243655][T15853] netlink: 'syz.4.2645': attribute type 58 has an invalid length. [ 310.251749][T15853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2645'. [ 310.285948][T15855] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 310.918831][T15902] netlink: 'syz.3.2659': attribute type 4 has an invalid length. [ 311.055192][T15906] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2661'. [ 311.089733][T15906] vlan3: entered allmulticast mode [ 311.105273][T15906] erspan0: entered allmulticast mode [ 311.239925][T15914] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 311.305943][T15917] netlink: 'syz.3.2665': attribute type 6 has an invalid length. [ 311.332859][T15917] syzkaller0: entered promiscuous mode [ 311.338595][T15917] syzkaller0: entered allmulticast mode [ 311.435439][T15917] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2665'. [ 311.719483][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'. [ 312.392836][T15975] sctp: [Deprecated]: syz.1.2680 (pid 15975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 312.392836][T15975] Use struct sctp_sack_info instead [ 313.174499][T16011] netlink: 'syz.0.2690': attribute type 32 has an invalid length. [ 313.511600][T16033] atomic_op ffff888079f0a998 conn xmit_atomic 0000000000000000 [ 313.564363][T16039] __nla_validate_parse: 5 callbacks suppressed [ 313.564385][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2698'. [ 313.603018][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 313.660919][T16042] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 313.692299][T16042] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2698'. [ 313.849745][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 313.902521][T16053] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 313.927242][T16053] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 313.948603][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 314.116445][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2704'. [ 314.161810][T16067] netlink: 'syz.0.2705': attribute type 10 has an invalid length. [ 314.183661][T16067] : left allmulticast mode [ 314.188252][T16067] : left promiscuous mode [ 314.242068][T16067] bridge0: port 2(0) entered disabled state [ 314.264663][T16071] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2705'. [ 314.298848][T16077] xt_l2tp: invalid flags combination: 0 [ 314.816879][T16100] lo: Caught tx_queue_len zero misconfig [ 315.170667][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.178781][ C0] lec:lec_tx_timeout: lec0 [ 315.183647][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.144217][T16067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.513801][T16127] bond7: entered promiscuous mode [ 317.519268][T16127] bond7: entered allmulticast mode [ 317.525494][T16127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.632281][T16137] openvswitch: netlink: IPv4 tun info is not correct [ 317.640112][T16132] can: request_module (can-proto-0) failed. [ 317.801116][T16148] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.2726'. [ 318.177869][T16175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.196901][T16176] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 318.244342][T16176] netlink: 'syz.2.2734': attribute type 7 has an invalid length. [ 318.259229][T16182] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 318.276995][T16176] netlink: 'syz.2.2734': attribute type 8 has an invalid length. [ 318.311055][T16176] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2734'. [ 318.336654][T16187] rdma_op ffff88803249a1f0 conn xmit_rdma 0000000000000000 [ 318.354452][T16176] NCSI netlink: No device for ifindex 65584 [ 318.456591][T16190] bond8: Removing last ns target with arp_interval on [ 318.470869][T16195] virt_wifi0: entered promiscuous mode [ 318.557903][T16200] bond9: Removing last ns target with arp_interval on [ 318.581749][T16202] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2738'. [ 318.754297][T16218] xt_hashlimit: invalid rate [ 319.171651][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 319.213210][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 319.620422][T16261] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 319.804561][T16272] netlink: 'syz.4.2755': attribute type 1 has an invalid length. [ 319.834211][T16272] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2755'. [ 319.984549][T16279] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 320.190662][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 320.198745][ C0] lec:lec_tx_timeout: lec0 [ 320.204343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 320.377960][T16298] syzkaller1: entered promiscuous mode [ 320.402000][T16298] syzkaller1: entered allmulticast mode [ 320.665760][T16270] bond1: entered promiscuous mode [ 320.673395][T16270] bond1: entered allmulticast mode [ 320.731212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.740290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.783672][T16270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.869443][T16318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.902868][T16318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.381412][T16346] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2768'. [ 321.412662][T16346] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 321.473486][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 321.762531][T16368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2773'. [ 321.898237][T16377] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2776'. [ 321.909606][T16377] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.052661][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'. [ 322.066849][T16363] syzkaller0: entered promiscuous mode [ 322.115376][T16388] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 322.125919][T16363] syzkaller0: entered allmulticast mode [ 322.133520][T16386] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 322.147120][T16386] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 322.162877][T16386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2776'. [ 322.222017][T16313] udevd[16313]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 322.269289][T16162] udevd[16162]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.749020][T16388] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 323.749497][T16378] veth0_to_bond: left allmulticast mode [ 323.918691][T16412] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2783'. [ 324.085055][T16422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2785'. [ 324.191519][T16429] netlink: 'syz.0.2788': attribute type 39 has an invalid length. [ 324.222579][T16428] netlink: 'syz.0.2788': attribute type 39 has an invalid length. [ 324.313898][T16432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.604665][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 324.734672][T16468] netlink: 'syz.2.2797': attribute type 7 has an invalid length. [ 324.777578][T16468] netlink: 'syz.2.2797': attribute type 7 has an invalid length. [ 324.794908][T16475] netlink: 'syz.1.2796': attribute type 30 has an invalid length. [ 324.820884][T16468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2797'. [ 324.830007][T16468] tipc: Invalid UDP bearer configuration [ 324.830060][T16468] tipc: Enabling of bearer rejected, failed to enable media [ 324.852234][T16476] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2798'. [ 324.951441][T16475] bond10: option arp_missed_max: invalid value (0) [ 324.987830][T16475] bond10: option arp_missed_max: allowed values 1 - 255 [ 325.046547][T16475] bond10 (unregistering): Released all slaves [ 325.211107][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 325.219253][ C0] lec:lec_tx_timeout: lec0 [ 325.224706][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 325.497800][T16510] netlink: 'syz.3.2804': attribute type 51 has an invalid length. [ 325.556169][T16517] openvswitch: netlink: IPv4 tun info is not correct [ 325.792581][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 325.818361][T16526] netlink: 'syz.1.2807': attribute type 4 has an invalid length. [ 325.843763][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 325.915403][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2809'. [ 325.963418][T16536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2810'. [ 325.975593][T16536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2810'. [ 326.125275][T16541] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 326.177742][T16542] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 326.197431][T16540] IPVS: set_ctl: invalid protocol: 189 172.20.20.187:20004 [ 326.318505][T16550] xt_TCPMSS: Only works on TCP SYN packets [ 326.644309][T16567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.725778][T16578] IPv6: sit1: Disabled Multicast RS [ 326.884633][T16585] netlink: 'syz.1.2822': attribute type 11 has an invalid length. [ 327.105667][T16598] syzkaller0: entered promiscuous mode [ 327.111526][T16598] syzkaller0: entered allmulticast mode [ 327.397580][T16607] sctp: [Deprecated]: syz.0.2833 (pid 16607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.397580][T16607] Use struct sctp_sack_info instead [ 327.722126][T16643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.825288][T16647] netlink: 'syz.3.2845': attribute type 2 has an invalid length. [ 328.100011][T16672] xt_hashlimit: size too large, truncated to 1048576 [ 328.170741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.179309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.479692][T16693] netlink: 'syz.1.2858': attribute type 29 has an invalid length. [ 328.488745][T16692] netlink: 'syz.1.2858': attribute type 29 has an invalid length. [ 329.110808][ T36] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 329.469612][T16706] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 329.613165][T16717] bond2 (unregistering): Released all slaves [ 329.833787][T16731] veth0: entered promiscuous mode [ 329.868088][T16731] __nla_validate_parse: 18 callbacks suppressed [ 329.868109][T16731] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2868'. [ 329.894974][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 329.932966][T16731] bond10 (unregistering): Released all slaves [ 330.006650][T16727] veth0: left promiscuous mode [ 330.149153][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 330.192450][T16749] syzkaller0: entered promiscuous mode [ 330.197995][T16749] syzkaller0: entered allmulticast mode [ 330.211480][T16752] xt_l2tp: missing protocol rule (udp|l2tpip) [ 330.233936][T16756] "syz.3.2870" (16756) uses obsolete ecb(arc4) skcipher [ 330.241397][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 330.241481][ C0] lec:lec_tx_timeout: lec0 [ 330.254187][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.324852][T16756] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 330.343321][T16756] bond10 (unregistering): Released all slaves [ 330.539488][T16768] openvswitch: netlink: Key type 518 is out of range max 32 [ 330.748288][T16777] geneve3: entered promiscuous mode [ 330.799240][T16782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2880'. [ 330.952279][T16791] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2883'. [ 331.416269][T16819] validate_nla: 1 callbacks suppressed [ 331.416290][T16819] netlink: 'syz.4.2889': attribute type 39 has an invalid length. [ 331.540461][T16817] netlink: 'syz.2.2890': attribute type 12 has an invalid length. [ 331.763768][T16817] bond11: option primary_reselect: invalid value (255) [ 331.773563][T16817] bond11 (unregistering): Released all slaves [ 331.809428][T16838] ipt_REJECT: TCP_RESET invalid for non-tcp [ 331.851142][T16834] bridge6: entered promiscuous mode [ 331.856425][T16834] bridge6: entered allmulticast mode [ 331.903461][T16834] team0: Port device bridge6 added [ 331.934537][T16841] bridge0: port 2(team0) entered blocking state [ 331.948229][T16841] bridge0: port 2(team0) entered disabled state [ 331.984351][T16841] team0: entered promiscuous mode [ 331.990839][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 332.014004][T16841] team_slave_0: entered promiscuous mode [ 332.020199][T16841] team_slave_1: entered promiscuous mode [ 332.119772][T16847] macvlan3: entered promiscuous mode [ 332.125598][T16847] macvlan3: entered allmulticast mode [ 332.132425][T16847] bond11: (slave macvlan3): Opening slave failed [ 332.399664][T16869] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2905'. [ 332.670831][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.679765][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.688346][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.696449][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.706797][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.830224][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.848088][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.856561][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.872793][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.880557][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.349202][T16890] netlink: 'syz.4.2908': attribute type 1 has an invalid length. [ 333.497570][T16890] 8021q: adding VLAN 0 to HW filter on device bond12 [ 333.584785][T16890] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2908'. [ 333.618812][T16913] bond12: (slave veth13): Enslaving as an active interface with a down link [ 333.628510][T16918] batman_adv: batadv0: Interface deactivated: dummy0 [ 333.645294][T16918] batman_adv: batadv0: Removing interface: dummy0 [ 333.663905][T16918] bond12: (slave dummy0): making interface the new active one [ 333.674971][T16918] dummy0: entered promiscuous mode [ 333.680737][T16918] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 333.738495][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.751237][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.771123][T16881] lo speed is unknown, defaulting to 1000 [ 333.785903][T16890] bond12: (slave dummy0): Releasing active interface [ 333.792849][T16890] dummy0 (unregistering): left promiscuous mode [ 333.908535][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.930736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.939235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.947917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.964551][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.049394][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 334.125780][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.144199][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.176164][T16936] Bluetooth: MGMT ver 1.23 [ 334.208163][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'. [ 334.230786][T16939] netlink: 'syz.2.2918': attribute type 6 has an invalid length. [ 334.271888][T16939] netlink: 'syz.2.2918': attribute type 6 has an invalid length. [ 334.330072][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.354141][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.605638][T16958] batadv_slave_1: entered promiscuous mode [ 334.748867][T16950] batadv_slave_1: left promiscuous mode [ 334.906177][T16971] __nla_validate_parse: 4 callbacks suppressed [ 334.906199][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'. [ 334.971321][ T5143] Bluetooth: hci5: command tx timeout [ 335.254116][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'. [ 335.260957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.271228][ C0] lec:lec_tx_timeout: lec0 [ 335.276153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.309250][ T12] bond3 (unregistering): (slave geneve3): Releasing active interface [ 335.330617][ T12] geneve3 (unregistering): left allmulticast mode [ 335.602243][T16983] openvswitch: netlink: Flow key attr not present in new flow. [ 335.907342][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 335.917434][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 335.930464][ T12] bond0 (unregistering): Released all slaves [ 335.943589][ T12] bond1 (unregistering): Released all slaves [ 335.958991][ T12] bond2 (unregistering): Released all slaves [ 335.983901][ T12] bond3 (unregistering): Released all slaves [ 335.999569][ T12] bond4 (unregistering): Released all slaves [ 336.019784][ T12] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 336.036455][ T12] vcan1: left promiscuous mode [ 336.043321][ T12] bond5 (unregistering): Released all slaves [ 336.058347][ T12] bond6 (unregistering): Released all slaves [ 336.076057][ T12] bond7 (unregistering): Released all slaves [ 336.091800][ T12] bond8 (unregistering): Released all slaves [ 336.108475][ T12] bond9 (unregistering): Released all slaves [ 336.147770][T16971] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 336.178595][T16987] bridge0: entered promiscuous mode [ 336.204992][T16987] macsec1: entered promiscuous mode [ 336.234259][T16987] macsec1: entered allmulticast mode [ 336.239620][T16987] bridge0: entered allmulticast mode [ 336.259849][T16987] bridge0: port 1(macsec1) entered blocking state [ 336.300709][T16987] bridge0: port 1(macsec1) entered disabled state [ 336.390801][T16987] bridge0: left allmulticast mode [ 336.396128][T16987] bridge0: left promiscuous mode [ 336.498695][ T12] tipc: Disabling bearer [ 336.511242][ T12] tipc: Left network mode [ 336.559642][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 336.607967][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 336.636204][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 336.721515][T17014] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 336.747630][T17014] netlink: 'syz.1.2935': attribute type 3 has an invalid length. [ 336.766326][T17014] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2935'. [ 336.942712][T16881] wlan1 speed is unknown, defaulting to 1000 [ 336.963437][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 337.028468][T17030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2940'. [ 337.050700][ T5143] Bluetooth: hci5: command tx timeout [ 337.067485][T17019] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 337.445383][T17019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2937'. [ 337.691086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.092097][T16881] chnl_net:caif_netlink_parms(): no params data found [ 338.214428][T17074] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 338.534557][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 338.549729][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.557463][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.567896][T16881] bridge_slave_0: entered allmulticast mode [ 338.576716][T16881] bridge_slave_0: entered promiscuous mode [ 338.631954][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.639179][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.647519][T16881] bridge_slave_1: entered allmulticast mode [ 338.658640][T16881] bridge_slave_1: entered promiscuous mode [ 338.808412][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.855932][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.931844][T17119] netlink: 'syz.0.2958': attribute type 1 has an invalid length. [ 339.131763][ T5143] Bluetooth: hci5: command tx timeout [ 339.147010][T16881] team0: Port device team_slave_0 added [ 339.205084][T16881] team0: Port device team_slave_1 added [ 339.497003][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.518398][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.601886][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.678150][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.725268][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.785967][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.230661][T17176] netlink: 'syz.0.2968': attribute type 20 has an invalid length. [ 340.247750][T17176] __nla_validate_parse: 8 callbacks suppressed [ 340.247769][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 340.269733][T16881] hsr_slave_0: entered promiscuous mode [ 340.290621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.298847][ C0] lec:lec_tx_timeout: lec0 [ 340.304313][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.315948][T16881] hsr_slave_1: entered promiscuous mode [ 340.323698][T16881] debugfs: 'hsr0' already exists in 'hsr' [ 340.336628][T16881] Cannot create hsr debugfs directory [ 340.355551][T17175] netlink: 'syz.0.2968': attribute type 20 has an invalid length. [ 340.371897][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 340.582028][ T12] hsr_slave_0: left promiscuous mode [ 340.590198][ T12] hsr_slave_1: left promiscuous mode [ 340.638022][ T12] veth1_macvtap: left promiscuous mode [ 340.661264][ T12] veth0_macvtap: left promiscuous mode [ 340.671645][ T12] veth1_vlan: left promiscuous mode [ 340.683387][T17197] openvswitch: netlink: Message has 183 unknown bytes. [ 340.684523][ T12] veth0_vlan: left promiscuous mode [ 340.888676][ T12] pim6reg527 (unregistering): left allmulticast mode [ 340.970753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.051469][ T261] smc: removing ib device syz0 [ 341.210910][ T5143] Bluetooth: hci5: command tx timeout [ 341.287049][T17176] netlink: 'syz.0.2968': attribute type 20 has an invalid length. [ 341.303048][T17175] netlink: 'syz.0.2968': attribute type 20 has an invalid length. [ 341.325410][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 341.325712][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 341.349152][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 341.361125][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.370813][ T9] syz0: Port: 1 Link DOWN [ 341.390764][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 341.477260][ T1031] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.490804][ T1031] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.576089][ T1031] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.778312][T17228] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 342.026809][T17237] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 342.116571][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'. [ 342.305999][T17242] bond13: Invalid ad_actor_system MAC address. [ 342.355049][T17242] bond13: option ad_actor_system: invalid value (1) [ 342.395597][T17242] bond13 (unregistering): Released all slaves [ 343.097650][T17279] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2991'. [ 343.124236][T17279] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 343.218377][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 343.239230][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2994'. [ 343.753321][T17302] netlink: 'syz.4.2996': attribute type 29 has an invalid length. [ 343.774846][T17295] netlink: 'syz.4.2996': attribute type 29 has an invalid length. [ 344.128239][ T12] IPVS: stop unused estimator thread 0... [ 344.257688][T17308] pim6reg1: entered promiscuous mode [ 344.264714][T17308] pim6reg1: entered allmulticast mode [ 344.568181][T16881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.618991][T16881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.679350][T16881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.718566][T16881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.759169][T17326] netlink: 'syz.1.3000': attribute type 22 has an invalid length. [ 344.767762][T17326] netlink: 'syz.1.3000': attribute type 22 has an invalid length. [ 344.811425][T17331] tipc: Enabled bearer , priority 0 [ 344.843585][T17327] tipc: Disabling bearer [ 344.862617][T17343] netlink: 'syz.0.3004': attribute type 1 has an invalid length. [ 344.919212][T17343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.969922][T17346] bond3: (slave veth13): Enslaving as an active interface with a down link [ 345.210373][T16881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.272767][T17367] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 345.299921][T16881] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.317664][T17367] IPVS: set_ctl: invalid protocol: 130 100.1.1.2:20002 [ 345.359033][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.366277][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.404681][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.412066][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.530166][T17380] __nla_validate_parse: 5 callbacks suppressed [ 345.530189][T17380] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3011'. [ 345.595889][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3012'. [ 345.842166][T17394] syzkaller0: entered promiscuous mode [ 345.847732][T17394] syzkaller0: entered allmulticast mode [ 345.865267][T17398] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 345.896733][T17394] tcf_pedit_act: 7 callbacks suppressed [ 345.896753][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.909661][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.916620][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.923567][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.930367][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.937324][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.944176][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.951033][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.957845][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.964709][T17394] tc action pedit offset must be on 32 bit boundaries [ 345.971582][T17394] 0: reclassify loop, rule prio 0, protocol 800 [ 346.030296][T17401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3013'. [ 346.090589][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 346.098722][ C0] lec:lec_tx_timeout: lec0 [ 346.103941][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.305114][T16881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.474854][T16881] veth0_vlan: entered promiscuous mode [ 346.526072][T16881] veth1_vlan: entered promiscuous mode [ 346.693627][T16881] veth0_macvtap: entered promiscuous mode [ 346.730770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.847507][T16881] veth1_macvtap: entered promiscuous mode [ 346.939481][T16881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.973746][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'. [ 346.995135][T16881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.072908][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.148744][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.189097][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.248311][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.323783][T17468] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3028'. [ 347.350732][T17470] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3028'. [ 347.482229][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.490589][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.628272][ T261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.644199][ T261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.982963][T17502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'. [ 348.117533][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3041'. [ 348.327665][T17518] syzkaller0: entered promiscuous mode [ 348.335881][T17518] syzkaller0: entered allmulticast mode [ 348.414541][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.438137][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.448319][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.470985][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.479322][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.223094][T17557] tipc: New replicast peer: 255.255.255.255 [ 349.247019][T17557] tipc: Enabled bearer , priority 10 [ 349.396091][T17525] lo speed is unknown, defaulting to 1000 [ 349.593523][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'. [ 349.620739][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'. [ 349.877256][T17584] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 349.941573][ T261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.174601][ T261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.229915][T17609] netlink: 'syz.4.3066': attribute type 7 has an invalid length. [ 350.338802][T17609] netlink: 'syz.4.3066': attribute type 8 has an invalid length. [ 350.402212][ T261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.570674][ T5844] Bluetooth: hci4: command tx timeout [ 350.602631][ T261] batman_adv: batadv0: Removing interface: netdevsim0 [ 350.732148][ T261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.890231][T17620] syzkaller0: entered promiscuous mode [ 350.901004][T17620] syzkaller0: entered allmulticast mode [ 350.985658][T17620] syzkaller0: left allmulticast mode [ 351.016367][T17525] wlan1 speed is unknown, defaulting to 1000 [ 351.131268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 351.139439][ C0] lec:lec_tx_timeout: lec0 [ 351.146141][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.476693][T17666] __nla_validate_parse: 4 callbacks suppressed [ 351.476713][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 351.521732][T17666] netdevsim0: entered promiscuous mode [ 351.527496][T17666] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3075'. [ 351.736461][ T261] team0: left promiscuous mode [ 351.751869][ T261] team_slave_0: left promiscuous mode [ 351.757489][ T261] team_slave_1: left promiscuous mode [ 351.764717][T17675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3077'. [ 351.802609][ T261] bridge0: port 2(team0) entered disabled state [ 351.823963][ T261] bridge_slave_0: left promiscuous mode [ 351.831927][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 351.846434][ T261] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.856532][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 352.490729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.650645][ T5844] Bluetooth: hci4: command tx timeout [ 352.906247][T17687] nft_compat: unsupported protocol 0 [ 352.973022][T17689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3081'. [ 353.187471][ T261] team0: Port device bridge6 removed [ 353.226154][ T261] bond0 (unregistering): Released all slaves [ 353.241601][ T261] bond1 (unregistering): Released all slaves [ 353.256390][ T261] bond2 (unregistering): Released all slaves [ 353.278767][ T261] bond3 (unregistering): (slave veth13): Releasing active interface [ 353.289586][ T261] bond3 (unregistering): Released all slaves [ 353.335151][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 353.505436][ T261] tipc: Disabling bearer [ 353.514349][ T261] tipc: Left network mode [ 353.555036][T17703] bond0: Caught tx_queue_len zero misconfig [ 353.718712][T17525] chnl_net:caif_netlink_parms(): no params data found [ 354.097959][T17525] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.119329][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.131522][T17525] bridge_slave_0: entered allmulticast mode [ 354.139906][T17525] bridge_slave_0: entered promiscuous mode [ 354.162077][T17525] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.181210][T17525] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.188577][T17525] bridge_slave_1: entered allmulticast mode [ 354.198558][T17525] bridge_slave_1: entered promiscuous mode [ 354.286431][T17525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.307001][T17525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.335570][T17739] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3093'. [ 354.463645][T17736] netlink: 'syz.4.3092': attribute type 4 has an invalid length. [ 354.486649][T17525] team0: Port device team_slave_0 added [ 354.552239][T17735] netlink: 'syz.4.3092': attribute type 4 has an invalid length. [ 354.608590][T17747] netlink: 'syz.3.3095': attribute type 21 has an invalid length. [ 354.618651][T17525] team0: Port device team_slave_1 added [ 354.629642][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 354.645835][T17746] veth0: Caught tx_queue_len zero misconfig [ 354.652600][T17746] netlink: 'syz.2.3096': attribute type 3 has an invalid length. [ 354.660544][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3092'. [ 354.731123][ T5844] Bluetooth: hci4: command tx timeout [ 354.999934][T17762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.040119][T17762] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.052069][T17525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.059083][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.136256][T17525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.391088][T17525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.398172][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.424988][T17525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.466123][ T261] hsr_slave_0: left promiscuous mode [ 355.473904][ T261] hsr_slave_1: left promiscuous mode [ 355.492258][ T261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.505515][ T261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.707934][T10025] smc: removing ib device syz1 [ 355.814819][ T30] audit: type=1107 audit(1775468884.200:2): pid=17798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u-bb/SK)9ŧ݃鄠 v.Cqeb}MMx@a%¿'T^ [ 355.814819][ T30] K$^2 UMmxf.|`' [ 355.911898][ T261] team0 (unregistering): Port device team_slave_1 removed [ 355.929841][ T261] team0 (unregistering): Port device team_slave_0 removed [ 356.067530][ T12] smc: removing ib device syz2 [ 356.160570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 356.168680][ C0] lec:lec_tx_timeout: lec0 [ 356.174396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.453481][ T9] ================================================================== [ 356.461630][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 356.470496][ T9] Read of size 8 at addr ffff88802fa0e2f0 by task kworker/0:0/9 [ 356.478165][ T9] [ 356.480537][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 356.480564][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.480577][ T9] Workqueue: events smc_ib_port_event_work [ 356.480609][ T9] Call Trace: [ 356.480618][ T9] [ 356.480626][ T9] dump_stack_lvl+0xe8/0x150 [ 356.480657][ T9] print_report+0xba/0x230 [ 356.480689][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 356.480714][ T9] kasan_report+0x117/0x150 [ 356.480741][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 356.480770][ T9] __ethtool_get_link_ksettings+0x5e/0x170 [ 356.480797][ T9] ib_get_eth_speed+0x180/0x7f0 [ 356.480828][ T9] ? rxe_query_port+0x7e/0x3d0 [ 356.480857][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 356.480892][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 356.480919][ T9] rxe_query_port+0x93/0x3d0 [ 356.480954][ T9] ib_query_port+0x170/0x830 [ 356.480979][ T9] smc_ib_port_event_work+0x15a/0x940 [ 356.481006][ T9] ? process_scheduled_works+0xa8d/0x18c0 [ 356.481032][ T9] ? process_scheduled_works+0xa8d/0x18c0 [ 356.481059][ T9] process_scheduled_works+0xb6e/0x18c0 [ 356.481101][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.481131][ T9] ? assign_work+0x3d5/0x5e0 [ 356.481158][ T9] worker_thread+0xa53/0xfc0 [ 356.481200][ T9] kthread+0x388/0x470 [ 356.481220][ T9] ? __pfx_worker_thread+0x10/0x10 [ 356.481245][ T9] ? __pfx_kthread+0x10/0x10 [ 356.481265][ T9] ret_from_fork+0x51e/0xb90 [ 356.481293][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 356.481318][ T9] ? __switch_to+0xc7d/0x1450 [ 356.481343][ T9] ? __pfx_kthread+0x10/0x10 [ 356.481362][ T9] ret_from_fork_asm+0x1a/0x30 [ 356.481401][ T9] [ 356.481409][ T9] [ 356.654245][ T9] Allocated by task 5824: [ 356.658592][ T9] kasan_save_track+0x3e/0x80 [ 356.663295][ T9] __kasan_kmalloc+0x93/0xb0 [ 356.667915][ T9] __kvmalloc_node_noprof+0x528/0x8a0 [ 356.673308][ T9] alloc_netdev_mqs+0xa6/0x11b0 [ 356.678181][ T9] rtnl_create_link+0x31f/0xd70 [ 356.683061][ T9] rtnl_newlink_create+0x277/0xb70 [ 356.688194][ T9] rtnl_newlink+0x166a/0x1bb0 [ 356.692887][ T9] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 356.697869][ T9] netlink_rcv_skb+0x232/0x4b0 [ 356.702657][ T9] netlink_unicast+0x80f/0x9b0 [ 356.707444][ T9] netlink_sendmsg+0x813/0xb40 [ 356.712222][ T9] __sys_sendto+0x672/0x710 [ 356.716749][ T9] __x64_sys_sendto+0xde/0x100 [ 356.721530][ T9] do_syscall_64+0x14d/0xf80 [ 356.726140][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.732053][ T9] [ 356.734397][ T9] Freed by task 261: [ 356.738340][ T9] kasan_save_track+0x3e/0x80 [ 356.743047][ T9] kasan_save_free_info+0x46/0x50 [ 356.748102][ T9] __kasan_slab_free+0x5c/0x80 [ 356.752886][ T9] kfree+0x1c1/0x630 [ 356.756809][ T9] device_release+0xc4/0x1f0 [ 356.761419][ T9] kobject_put+0x228/0x560 [ 356.765967][ T9] netdev_run_todo+0xc75/0xde0 [ 356.770754][ T9] default_device_exit_batch+0x986/0xa00 [ 356.776403][ T9] ops_undo_list+0x52b/0x940 [ 356.781023][ T9] cleanup_net+0x56b/0x800 [ 356.785453][ T9] process_scheduled_works+0xb6e/0x18c0 [ 356.791019][ T9] worker_thread+0xa53/0xfc0 [ 356.795677][ T9] kthread+0x388/0x470 [ 356.799866][ T9] ret_from_fork+0x51e/0xb90 [ 356.804506][ T9] ret_from_fork_asm+0x1a/0x30 [ 356.809297][ T9] [ 356.811641][ T9] The buggy address belongs to the object at ffff88802fa0e000 [ 356.811641][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 356.825972][ T9] The buggy address is located 752 bytes inside of [ 356.825972][ T9] freed 4096-byte region [ffff88802fa0e000, ffff88802fa0f000) [ 356.839958][ T9] [ 356.842304][ T9] The buggy address belongs to the physical page: [ 356.848747][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fa0c000 pfn:0x2fa08 [ 356.858833][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 356.867372][ T9] memcg:ffff8880778b2cc1 [ 356.871632][ T9] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 356.880167][ T9] page_type: f5(slab) [ 356.884186][ T9] raw: 00fff00000000240 ffff88813fe02500 ffffea000152f210 ffffea00015e1c10 [ 356.892792][ T9] raw: ffff88802fa0c000 0000000800040001 00000000f5000000 ffff8880778b2cc1 [ 356.901399][ T9] head: 00fff00000000240 ffff88813fe02500 ffffea000152f210 ffffea00015e1c10 [ 356.910090][ T9] head: ffff88802fa0c000 0000000800040001 00000000f5000000 ffff8880778b2cc1 [ 356.918834][ T9] head: 00fff00000000003 ffffea0000be8201 00000000ffffffff 00000000ffffffff [ 356.927614][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 356.936314][ T9] page dumped because: kasan: bad access detected [ 356.942751][ T9] page_owner tracks the page as allocated [ 356.948564][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 91177160156, free_ts 56544449357 [ 356.970027][ T9] post_alloc_hook+0x231/0x280 [ 356.974819][ T9] get_page_from_freelist+0x24dc/0x2580 [ 356.980397][ T9] __alloc_frozen_pages_noprof+0x18d/0x380 [ 356.986234][ T9] allocate_slab+0x77/0x660 [ 356.990792][ T9] refill_objects+0x331/0x3c0 [ 356.995500][ T9] __pcs_replace_empty_main+0x2e6/0x730 [ 357.001080][ T9] __kmalloc_cache_noprof+0x392/0x660 [ 357.006472][ T9] ipv6_add_dev+0x6aa/0x13a0 [ 357.011170][ T9] addrconf_notify+0x771/0x1050 [ 357.016040][ T9] notifier_call_chain+0x1be/0x400 [ 357.021184][ T9] register_netdevice+0x173a/0x1cf0 [ 357.026494][ T9] veth_newlink+0x67b/0xb70 [ 357.031027][ T9] rtnl_newlink_create+0x329/0xb70 [ 357.036165][ T9] rtnl_newlink+0x166a/0x1bb0 [ 357.040869][ T9] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 357.045855][ T9] netlink_rcv_skb+0x232/0x4b0 [ 357.050646][ T9] page last free pid 5581 tgid 5581 stack trace: [ 357.056993][ T9] __free_frozen_pages+0xc2b/0xdb0 [ 357.062133][ T9] __slab_free+0x263/0x2b0 [ 357.066598][ T9] qlist_free_all+0x97/0x100 [ 357.071228][ T9] kasan_quarantine_reduce+0x148/0x160 [ 357.076707][ T9] __kasan_slab_alloc+0x22/0x80 [ 357.081582][ T9] __kmalloc_cache_noprof+0x2ba/0x660 [ 357.086971][ T9] tomoyo_init_log+0x195/0x1fb0 [ 357.092026][ T9] tomoyo_supervisor+0x353/0x1570 [ 357.097112][ T9] tomoyo_path_permission+0x25a/0x380 [ 357.102514][ T9] tomoyo_check_open_permission+0x2b2/0x470 [ 357.108548][ T9] security_file_open+0xa9/0x240 [ 357.113517][ T9] do_dentry_open+0x384/0x14e0 [ 357.118315][ T9] vfs_open+0x3b/0x340 [ 357.122407][ T9] path_openat+0x2e08/0x3860 [ 357.127030][ T9] do_file_open+0x23e/0x4a0 [ 357.131554][ T9] do_sys_openat2+0x113/0x200 [ 357.136260][ T9] [ 357.138595][ T9] Memory state around the buggy address: [ 357.144241][ T9] ffff88802fa0e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.152319][ T9] ffff88802fa0e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.160402][ T9] >ffff88802fa0e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.168636][ T9] ^ [ 357.176379][ T9] ffff88802fa0e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.184470][ T9] ffff88802fa0e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.192554][ T9] ================================================================== [ 357.236374][ T5844] Bluetooth: hci4: command tx timeout [ 357.564334][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.571622][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 357.580779][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.590972][ T9] Workqueue: events smc_ib_port_event_work [ 357.596842][ T9] Call Trace: [ 357.600166][ T9] [ 357.603130][ T9] vpanic+0x56c/0xa60 [ 357.607253][ T9] ? __pfx_vpanic+0x10/0x10 [ 357.611805][ T9] ? __pfx___schedule+0x10/0x10 [ 357.616770][ T9] panic+0xc5/0xd0 [ 357.620540][ T9] ? __pfx_panic+0x10/0x10 [ 357.625197][ T9] ? preempt_schedule_common+0x82/0xd0 [ 357.630717][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.636798][ T9] check_panic_on_warn+0x89/0xb0 [ 357.641783][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.647821][ T9] end_report+0x73/0x180 [ 357.652105][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.658217][ T9] kasan_report+0x128/0x150 [ 357.662771][ T9] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 357.668810][ T9] __ethtool_get_link_ksettings+0x5e/0x170 [ 357.674698][ T9] ib_get_eth_speed+0x180/0x7f0 [ 357.679693][ T9] ? rxe_query_port+0x7e/0x3d0 [ 357.684580][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 357.689991][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 357.695131][ T9] rxe_query_port+0x93/0x3d0 [ 357.699755][ T9] ib_query_port+0x170/0x830 [ 357.704367][ T9] smc_ib_port_event_work+0x15a/0x940 [ 357.709787][ T9] ? process_scheduled_works+0xa8d/0x18c0 [ 357.715531][ T9] ? process_scheduled_works+0xa8d/0x18c0 [ 357.721281][ T9] process_scheduled_works+0xb6e/0x18c0 [ 357.726920][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.732939][ T9] ? assign_work+0x3d5/0x5e0 [ 357.737561][ T9] worker_thread+0xa53/0xfc0 [ 357.742208][ T9] kthread+0x388/0x470 [ 357.746322][ T9] ? __pfx_worker_thread+0x10/0x10 [ 357.751464][ T9] ? __pfx_kthread+0x10/0x10 [ 357.756090][ T9] ret_from_fork+0x51e/0xb90 [ 357.760729][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 357.765951][ T9] ? __switch_to+0xc7d/0x1450 [ 357.770654][ T9] ? __pfx_kthread+0x10/0x10 [ 357.775270][ T9] ret_from_fork_asm+0x1a/0x30 [ 357.780071][ T9] [ 357.783713][ T9] Kernel Offset: disabled [ 357.788049][ T9] Rebooting in 86400 seconds..