last executing test programs: 5.609221163s ago: executing program 0 (id=13713): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x4, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0x8000, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "5159a052b858b44285cd4f6caf6f4cabc5cef405eea8d7b0bd021caca36ea04341d6e0ec75600e09008523a79a557516227266e0d6b8deda83b0ec486900ca0fbce826d401817b466c9e5cc3d66db72bf3fbfe88d6d1296d1abc2f2a8fcef84714154d90fe6ed0a335ee14217a209d6804c778829abb5684c90bf72b5be760a01a96f25251cfd3518798fc5625728d556e2f2492bce9fc8674f3adb76e56e8b70a334f08e95b392e4f44b06b5b37f7a254cb6c1926a48410c2af2dbe7bca4a4e2196e5a11def5fdd5aa2f20e53333b7a30631b4206977e3ee13fcfb848ab4e22ad8973cdb8fff6259cdef6f10dbc116b343dfc3045b246bffb72dfdde15b559954a6090998c97936ae9c99fb4ddb750eb3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0x34, 0x0, &(0x7f00000008c0)="0000000000000010cf7b24ff8906ac446f053e1047e7fb1a42bbb12621532b18c17e9ec2b2a1b6bd5aac3a54b0f8f39a200eef0a", 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async) accept4(r1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x4, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0x8000, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0x34, 0x0, &(0x7f00000008c0)="0000000000000010cf7b24ff8906ac446f053e1047e7fb1a42bbb12621532b18c17e9ec2b2a1b6bd5aac3a54b0f8f39a200eef0a", 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) (async) 5.451075878s ago: executing program 0 (id=13717): socket(0x27, 0x1, 0xffff8001) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r0, &(0x7f0000000080)=""/38, 0x26) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x1, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "0008e100908f61646700006f00fec0ffff00000000000000ff0bc049000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x19, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.89735199s ago: executing program 0 (id=13722): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r6, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r6, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000200)="e097566f5bec64466cf092578add53", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x6, @mcast2, 0xfffffff8}], 0x68) sendto(r1, &(0x7f0000000440)="2966ba9a77aa9901729eb1d5a5c82040d1bdd0879cec97125dfe90b12d08e6fefd18cfc936f7b6292743802ffbf07c2489b9efbd9f4f1fbcd041260f72155bea228da7b52d8ea4bffe5b1ef5b6d4688d083baff709cfdef1976f0123129171a9beea4bb8620990f740b9018ce06ed749c38597688c9a2088308769f6f669d2741991c2818dc1ea714cf2f244b53922959cc8f5161b3030ec135af0308786fb2f8c6a3893cbcb82ec", 0xa8, 0x20000010, &(0x7f0000000580)=@rc={0x1f, @none, 0x7f}, 0x80) (async) sendto(r1, &(0x7f0000000440)="2966ba9a77aa9901729eb1d5a5c82040d1bdd0879cec97125dfe90b12d08e6fefd18cfc936f7b6292743802ffbf07c2489b9efbd9f4f1fbcd041260f72155bea228da7b52d8ea4bffe5b1ef5b6d4688d083baff709cfdef1976f0123129171a9beea4bb8620990f740b9018ce06ed749c38597688c9a2088308769f6f669d2741991c2818dc1ea714cf2f244b53922959cc8f5161b3030ec135af0308786fb2f8c6a3893cbcb82ec", 0xa8, 0x20000010, &(0x7f0000000580)=@rc={0x1f, @none, 0x7f}, 0x80) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmmsg(r1, &(0x7f000000ba40)=[{{&(0x7f0000000040)=@in={0x2, 0xfff5, @loopback}, 0x80, 0x0}}], 0x1, 0x20000000) 3.90567186s ago: executing program 0 (id=13736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x22d85ba84ed1ceab, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x4) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xac, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:default_context_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x8051) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r7, 0x29, 0x33, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x8085}, 0x2080) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a98ad3ef", @ANYRES16=r10, @ANYBLOB="030726bd7000000000001f000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250500000014000200ff010000000000000000000000000001140006006272696467655f736c6176655f31000014000300fc0200000000000000000000000000010500010001000072696467655f736c6176655f300000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40c1) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000800000008500000007000000bf09000000000000550901000000000095000000000000000709000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@delchain={0x2c, 0x5f, 0xf31, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xc, 0x2}, {0x0, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) 3.776376368s ago: executing program 2 (id=13738): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xcff5, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 3.490729339s ago: executing program 4 (id=13740): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @null, 0x1000, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @null, 0x1000, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000040) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000040) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x40000) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x10001, 0x1, 0x2, 0xe, 0x180, 0x4}, 0x20) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/19, 0x13}, 0x9}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.353401613s ago: executing program 2 (id=13741): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x22, 0x1, 0x5}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg(r6, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="89560a28203a88f265a7d058bd084b10ba4d7442455a0a26ad377b8e4ea42dfafffa6e812f89e76a9b29e6d1a99dca8c83cfe8ea5dda72d2eddc1f8c2e822951b1b2a47b3e947953cc81b70cf090f10457fb06e0f76e5f95406a4abaa17ee2ce2463d0b34b3568e5", 0x68}, {&(0x7f00000000c0)="1d330d34074ff229520dfed7f5669327d00791bb30a695d3cdc61e", 0x1b}, {&(0x7f0000000400)="19aa375a", 0x4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="eea76e5fd39ca2f8df722f233e2027479105bd1ef9b7f56efa234e17488b866a20878e2b137995529c5689c4de413fee17ec46fbffe87cdc821a86c805f62597fdd19afc9f2fa2db834d02e2cf543e62c2901dd389c88ca9fc3c91bb322fdb27ec87296b950501eb92d7fe8a44b900bb10db22231b", 0x75}, {&(0x7f0000000700)="3eff2c2af56c14ad40a2084eae1e46c0e5c48d", 0x13}, {&(0x7f0000000740)="78721d22fc7a771d0894d82e13179e8b34e56673a55625ea780189ea241060232bfdfa4474b46d5df859e6e3f91c05d6ed516a92634470635103c7bc55368d5bbc33ba49b11e62bac807124710f50d107cfec099bb9c0065bb9402b74bd9f170f77d06ce7e2d5dee2c0cbce21e44a41fb31e8875cc797682599ce2544c7acac641e5b38220c12b5554aee96f64347b3927083eff64535e6401af1079051c3bab5c3ab656ef73616495b386a98b9114d06b91fb15c33b62920f", 0xb9}, {&(0x7f0000000800)="d5b66f9ac9f35d1c476301b9d9da36e58714e442", 0x14}, {&(0x7f0000000840)="49a768bfdee35c5af089ef6d99fc88f12043e980c323ba04093fe7b8cafb1e1e657321070861b12a8c6a300d0f1156a5b2f2bb4bf813246ea252f89556b472f9292ab942e146c4490cb87969104526639d54411e86f1bfdd071b75fc", 0x5c}], 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="4800000000000000273d921d01000000881b95743b098df66b2b54a3021a07a9746b0f30c036aeb2f490befa25624107dd4bb232000000000000000000000000000000000000000010000000000000000e01000008000000"], 0x58}}, {{0x0, 0x0, &(0x7f0000000940)}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000e80)="d28b755afccbbfe62e6ac81947c0549e8b90106eb64ae9ad96d8f855f84f591cf99b90d7035dc3f2ea7f4ab4eeff65e9140e774cdc11d0234726493773432ee362d85365a0f03d2863ecdd858dbeadb342a455ec9e249826fcae053d26686b17c914b5d5ff83ad9f10de192ff4ba01111209b5e13792770c24f63f287ef7e3", 0x7f}, {&(0x7f0000000f40)="587a6177a487b8d9ca97b9ff181a2515236085b741bb2540f07afed077aa5d77e0f336f9f95a80138e54ddc4d2365a188681dd439a7032a036e06dca05c41baee60b324cdbd73fcb4f803390ec2db3e2d0017f696ac5d242ac", 0x59}, {&(0x7f0000002240)="2937b436807e9727dd92e64e1c5e4d9105fcbb914b889f1e36d5f9655ce86477682affe23f434c9605a9e1c4429cac71bc7125fb52301848e5a94621190b252251736be54f75e399d0faaf066f5f405cc4ed5dc265bec1241d9293688ca48d5aeaa0e9a8d73334d8f4813ccefc54450d2c7b297b2ab0242d7adcaba6ad65a2a8fd8f", 0x82}], 0x3}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000055c0)="06380009000000ff3cd831e454c34744db9b6803d73a3f3f9e2d8bc7a24f00000000000000ffaab3c89ed97b2ed45bea0b54a7429d94777dad6e13a89175fbfa3061", 0x42}, {&(0x7f0000002840)="9e17743fb903b7eccbfd03ffa422813b324b6df571c240cab6700d7a73451426565c0ec7f68ad4060a61fd6b2876c6698b4e73e75d991f22dd1fae7ed83b4e3217be4b32890252b223ed23d1d33c3f946f400b1b492afd301b3ff24c160ecb3a99059843030606e80b820470", 0x6c}, {&(0x7f00000028c0)="5e5f79e72274fdfdeb6e6263a86d822876cce3fab9b3854ddf28b1b9db17a28a085369292874fcefe3aabd0d83cd5e310b3eb65a2dd8b1850754db9ffce340656342b034e7067ab097878757f26632c39518f2582e82fc6e99329d10be7c5e3e40a3b078b5c1234c7e78b5fea344aac1fb4d115c1756fb10dda6d20b50b17bee7c0ce64e86ba5d0ce11e3b67a279dbbb714527978995201e57cbffe3b4ac9e0538bb1c685111bde397b9700420d57033fde3e4ffd873031ed38b3b5893f51f640f9d0ef7bd05d759d23f2b96e630947eeb41a8385b54e9d396e086bd12f6376b44b078d152110a7c8331849f8dbee1a903a8261cffa03a81b588e338baf67863dfcff7d4e2f1b09590f80acc5e387817a61d7da23b570c7d5a0f0dc889c426dae1469eb32568ebb43ad79f101c729d93ee609a06446fa60ddf1c0293a95c225a095f33a1cf25ddf4731f34463a5e657f19984d2730a76a24e76c2574ce98890183e7904a0c90339f26b6083fa15ec2acec3eb744c765ab1c98f9167d191723227e33adf09a7b7aa4022d10d1a1e5e80faad291c2ec25f23675b54fcd23f3e1af78730e95dbe9044f15ba419032907e53eb50e07d27bfa54ede5ec4b88b310cbbacc3b56c6a088c926ea6c3fc0f3e7ce35ca348e98464996ab9b584adb6a314f855bfa5729573dda3d46a4887ed12c0a30a5c25b78a55c9f74780358343b0401cdc4e151c8dc1e0043726955dab000a9fb93cddbfca6dc6b7a0f2f675f4d5fee1a2f59164ffd4772e5b79be8ba1c51359f1a092d03c28bb9ed727fa70e359b232032f6bb64f6e6dd6281e0e4fa9b8285cf40ef876a4d52bc500f524a45daaadc3df9380709b2da455934ad0cde251c1ffce66e24afe91de13c8d870e45744e8cb005668dfb9c4558ec65607994b77482f61358ddac94c0081f9decc0cb5e14b4b515b0679c966d689befc0c413355b777c86acb3c17d8589d82b3cbff0c90cebff79bc9963e4a0c23c6945d67fc35f20809be20ccc36618693841b213ad8b2df8ef42f2cfa3e2707a89f41c2626915e853e7d572e07b692346fd34dfd348b17f85f26c477c8483860b0b7845558b4e33d00c14eed9090e0b390737f2952cb65193dc7339ac4a2c799f7cb88dda68854e9224b2decb9e8a70d0ee137d182d83058096a71e4e247a43ed05bc7882fc503b5da2a4b6b568af0235f0b57c945221b082cece2db68556bbcbe0ac183dcd5c154e15c35bbc7a7aafe65a0125a92092ca2466c1908b2ea4519ea67e88d56f5d8d62b9b5cad4f5fd234abc9e9b0f56dd2518f94d65cffa74073a02d25076a1a6165e49f823620338bbef6e371dadabc573a5f58b5d7cc4b787e548af26c5dcf3dbbfeaedf90fbe966a41ddc12767f2058713bb6afba483d0a1b97481253f9969ad8ca8104def49519e530d8c1401a0841d6f84c1233170c05a7efb063808db3de02493fa3ec366d9617bf756f108665709000b52db9f51c234f5a536f8f68ceaec1bc85b1b8fe5e0d804e7b783e80bb81aaa9c7bdc25f968b7b77576824e3427c3ab42f21fc3aab3eecbe05de0b386fe2e004ef46d92d378f284af46902ca4fc1d44409abad482f0c0baeb580b658dbb6644972c135903ed60577232bb31fa5621d43d83d56316e881c40e5d8cbe70827dc069751ac1bbd36fa53ba1892681ecac760870b7b322b6d4169c4d282b118dd41f9640f1e63c4891e08c7b1532c9bbb26a042a2b369aa5e4156c46e49b0469a3d12668e995551782dfa24755deec850baa6c990780748be04f96355c83544e1ec33d1face45cb1ed7e23c1af495d1800941c4882a0b70a9875abbb070115c72d59e12d6e13742905dac1cdd6c46796d794f2182f11f0e865c900c671d1a95c79d03ae55549b6fd996756aa29fd0df40c02700f6c578f2cbfa4fc5549cb0fa3bdb6179a6ea44720cefa3435a37bf1cade2a253ddd66a0eeb1f9bc91ebbce2f68fe9c78a46f5010c804d63792273fadc5d9af765e7a1d384ce5e6aff5ae8c4ffd6c87b4bd1f9ed6ac5878086d0891eabe01065202a7360ce09506aa835db58426f6b3426374d19de72b4b2a48af58736cbe9d2e20d7c60ec3efbf1b21445d583d0293ba4a559daec348a83e51c53e891dc5d86e13ddf8278523f7e4d56bcbc01adf4f7d25902047bc5f311f6bc0e297a9c68cb6071a02d18914bb5417f4b0ed0ce062f69c557584eefe124d270e3f4e1770847ea3d2cb9ee7ae39be925c8d9feaa82ffedcca2e2a2a1da4a36060b3b46d921f088d49e9b455096e36aabca811b5390c3a330ed17e99bbabb345e2508ffd851b0465dc58db8acb651354e19c2facad98cf0cd2f28e5d45720a58868a7cf025844d31a3ce5d90167f4f7613e2c1576ea16d39be11a9b4c43c4fd3d8f0088ab19ba9b1f7caddc26b5d5713a57773cbc3f04c2b30dfc5342a8a6fad4ead77586a005ef0aba3dea896e1cbe0a08a0fd7b5315f64b1169c143a13ebcf40eabf7681dad0117bc326cb042e810a38ce6665235d2a1b2f9a2e22d9dd0f773e8a96877a675bf957bc8d89252404a21dd8c0d8a22b9cd56bdf8bf092dc6da8448f6c14ad2205aa0500d4c545c28197d854da8c2ad71217f92343cce2d2af1b8025dd599071c077e313ec2e2481fa6b96a495a1a16319d6d314088c3746882b408e291af7fe95653f7e7b06f4765b23563ec2659b98f1e69d1fe93836e842809a5a09a9fcce1ac02be179eaee52d928721c521af4d4d9a1cc12a7f3068121ee46f223817f6f9833b2b0dca3038a91ec84d32ce4eb2a4294f56ad7cd66aeb88fd2c224556d16ce23963ecae4cff4a82b7b7d1675f5e3a4ce40bb6ce27fcd74f31f4d4fe8862c8fd981e96281fbea08995b90e72bfe3597efb051707f430d9b899c238d676b7660d2513c7bc42884616d2cc2b08c3bbdcacfcaf5a3b9d44f6cb3fa90457e75d14b739b79a27aafadfdb1059ccd6ea7676c5a47b4c41c6e841447d661719f6598ebef0f21a867c3c6a71be7413fbca80d9751972bcf4c6043edba4d2d4e5b2d586b34d8a49e1d488c5e7cdc2e9a097ded9aebdbc36d7a18429d6963a55633e9193cc3b13c069772f57b9f0d3945b2d9faaae5ef560b968e91b339db278ae439fd61238b8167b1613c2cdd9757a85d8ebaa3a605304a984eb7cf733c13d0b100f0901fecd0f4a3327902992b026ed2ed3d22a016249b1057da4d2fb5f86e3bfa4314489d9d4c8261ce4487d5e0a5be89f4664eeb2a9e27be4abde18a641b99c7a7e68eba8d14dbdd9b2041010fef5058b7a290b11770a64f9831af1aa31b1b8d99ad7673a99d3a9aa0300d3d0968fab0d535fd8a378edd8e9a7d3e9bc4124e497778e81e6e7fc94bef8f4c153cc695fc8fb41b8a3e438245d33de6a57dc9b9240407ef0d25b4f57064e50a930d05f086c92dd613649430f9b534a20b4842472b8297a0ebaf89b33c9ad976be3d31800bfb3035e6f508e86a2111fbc4ea93d52399728ef9dc842f1889fc49de71c92b4753d43538930d9ff8ea686d6cc0729f5b231fe22580373e0eaada26b1ff786c49f1d72e3ed5092b8b74fa9df435ab6ba108fe4e828f0e89633102c04b0713630fd4e5e05a4491520483bd8a7af862242d212718fec7cea1b14f3741b4b64906c40a3cdcf8925b7a8a962af30325645c6626da38ce7bfc3f9af7c3ad2d301910fe3268ed32e08b1d080e93505b8df1ef2740aeb7e6edb989c79633d9cf83f01084e167283a8eedc3d6e6782b70a2a3310c5c61065705036c06a64069a8560a0477eed4d1e4b1de8845dd18df9bd88c7bc2d23dc850b6df43def667393fd8b7e9af98dddf54afccf73750e1afd730dd9719f6eb40568f5cccae113df83d04a73be3bbeb0ab9c928e57305444a772ccdf783b388add9d6b0552b5666449b07c9ef8df60efaa693fa4f80ac133ecc0833618585b5896a456d7b21061407d639e785664cededa48d259d1b166bdee8d5ec4c6071f77061c2f6f38f306155e22356f0ded0c82c49495f1d5881c37455856749f7552928aded358df48c3056f572f8519a89c7f15d6a8c541ae82779a69c6c1353127a068b7f63edec4c966831004b7be38d8e9ae2851478d48577bd3eea1db7b86b6f21b64e6acb5ff628793a5ff3fce9aeed121dc8ac520438565a0dc371979e2464477a82eb782975ea55e803", 0xb9d}], 0x3}}], 0x5, 0x48004) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x10) 3.241719365s ago: executing program 0 (id=13743): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000600)={0x90, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x0, 0x85, 0x0, 0x1, [@typed={0x0, 0x14, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x0, 0x129, 0x0, 0x0, @pid=r2}, @generic="fb4caaf99fcf9f87e7c05bb2484b23fd338f90717ac23ab48f1dbb9e046eea395ee1c6eadacf49c52da9819aa9f30ccaed279f3ea2f8b71b16e956ba74cbbfaaf67d8fbab0c00d8d95aada5b8630debf14861edb1af01750a518558d8c640640b194bb9560183118df4ba42593f8310962697bc4b855505e0249e607402de41b3531b42a0cdba6e57d637c403571b2043efe99cb231d660909b3c3e0a95618c6adbbd493a2c02c8458d6e5dcd9ddbfc174cc409c7f6d13a1a0cc8e4e27f3600de98da24b6e5ed93093fd12d3ed00160479bad6b756e41500b4c3ab9a6c958e7f8514394599be41", @typed={0x0, 0x123, 0x0, 0x0, @uid=r3}, @nested={0x0, 0x1, 0x0, 0x1, [@generic="cd1644c23189bf4b7eccecf5607d53b6ed0a68dd7375ade68acaf83dc60aee0b0d721a27ffceb3a51ba360321c7bfbb3d834c50bf9f07d10534494f9c37b01a4f907de26573d23a3c1864d249333ee380fd2fa4c6f37753c598c926a4afd9f018815ebe35485d5128486458a01415e7f3e2ffd099f873814441df38e6f037bf10620978c7e1c34e1b68ad4de63f7d02ed82ebe527fa26278e6676be9553d4dd2d05f82097373191b2ef6030d90ee9e1e69fd4b149622be9623f3c0a10f8e8a89d5820396d71a7af8f1c7322d739ba204a5cac2a3689b3159b9", @generic="05dff5577d5d50f2c43e581f56604f020a3acebf5d4b5321c7c0433debb1e5e87292227cb58cc97fe3d551ad8b326dc137c3d2db0e334d20185f764e1a42b41025a74f9b90eccba273b7a60463ac9f5300517946868ccb3578e8803831ffb8c50bc44f213be4ae15ce95de9ce64dd4eca5a6c5fb5fe1032ad151dcf342486d0e80457b3a5c0c058adce1b237760d1caf26e8020decc274cda93f60a45b4ab4ee0b9cea518b081c24a9dd2931cc6034dde42a7747b0b017141c39cdf5ee431f7eb8be7e000d984344715abd528f360d833fe2c9b1d8101016c509d3314c47d54fb1b682964f7260", @typed={0x0, 0x25, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x0, 0x14f, 0x0, 0x0, @u64=0x7}, @nested={0x0, 0x125}, @generic="0cc657e0184bdab926e8e6", @nested={0x0, 0x11a}, @nested={0x0, 0x44}, @nested={0x0, 0x2f}, @nested={0x0, 0x107}]}, @typed={0x0, 0x109, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x0, 0x13b, 0x0, 0x1, [@nested={0x0, 0x13e}, @typed={0x0, 0xba, 0x0, 0x0, @fd=r0}, @generic="79ff8ac73c026e4be2ba14f30f7f06e9749c5de47b48bb7cd06a064fc3855114151527ee7d756159f759e6ce714f8fd76e5140dd8e7b3b68b2b1a7f78ed307e4b37ce79716df21a15781dee452c6c4f4649c9a1b58b892d1d7900f35c0c64c7cff3dc96f1e30da10660e0208d5d8047e37517fe3dde072b4a78d7ae2a84175fd88629faca6b62aac5e51f8b859abf14d7f7fe0730f0e4ee8491586047daacb33564120fa63a4112d6140014b9099e0594d719c273577b9ea3906760f569cb3b615a428296f5bc602fc57b11790437a01351e33d8a7c594af6d7ad379f4e419aaa24dde3c7aec38f83882"]}]}, @nested={0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000040) ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x0) 3.085445079s ago: executing program 2 (id=13744): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001200)={0x18, r3, 0x401, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00005a8}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="0f024a3bb690944e3de505d3fced17aab3fc6219c223664b375536c43567b24217e7515b6bcc37c8ebc93e44706d388af11f89fff5df3f3c79372812dc95f7b1ca96c12eed232568f7f9b84cdbd6ababb6ca215ace17674ec1a8a30fc08a9a897aea8220c07207c0e46eaa8c6bdd844de199c51e5083a17f977bed486827cba2971472aa5a2ccac93df1be76a576f791f9778e8342e35eea79baa2da394b8f0ae40682d3742748724a2d0d37a2c0b553f44ba8f211424765f8fc7ed0f78991b14b279f736883abe88d1ea836732a28bea1b3f719361b672e68a1839eedc67915707fcede", 0xe4}, {&(0x7f0000000a00)="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", 0x4c5}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x66, 0x3, 0x9, [{@local, 0x1}, {@multicast2, 0xdcd}, {@local, 0x57}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x50}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005040)=ANY=[@ANYBLOB="240000001a00010026bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 3.037000582s ago: executing program 0 (id=13746): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0x5828}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069b0fcff000000009500000000000000269b06c71d1dbec07727c9cf773e9e8f4208410a563b32e40b2a025099d72515c9b90844d48a83a5f056e23cb787022e3d0aa434034f8960b18c594580832d27d7f1b8ca4cc3ff3c92c8c415de1f4414931b2825f4ead707410ec01445f7a4dc5aa0ab3aed7e1a1873bf7adb4bbab1a2254616b933496fcecd67586dfa3ff0eceaad2ceb56f7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb}, 0x94) 2.997210236s ago: executing program 2 (id=13747): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e3341858500000073000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x4e23, @loopback}, 'lo\x00'}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r3 = socket(0x200000000000011, 0x2, 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x124}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @dev}}) syz_emit_ethernet(0xd4, &(0x7f00000002c0)=ANY=[], 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000880)='scalable', 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="b8d3d8e48974aae56e0000000000000061b9459b09100dbf05177b248aa5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6a5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d98005275e00eaeb3b0900000010f2e2ce0e8f10ac", 0xa2}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="04001000653e850b00fffffff759fc8c39bff589675c780cc2b33bc8126df7ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=@deltaction={0x214, 0x31, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9000}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x911}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x62a}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x2c000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10, r8}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r11, @ANYBLOB="000000000000c1e7010b56d2673d14ba1a868e0000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.445552021s ago: executing program 4 (id=13748): unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) 2.366841556s ago: executing program 4 (id=13749): bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="410328bd7004fddbdf250700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) writev(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)="a6254ea90735f6c7c8c2f07ba13ebcbbb80e1f4bd28bee5e4244df30aeea616d9c2afc5a6a425f76507b84a11aef62479a27ef75b113f456487b2d48e5c9916ae1f74b", 0x43}, {0x0}, {&(0x7f0000000400)="328ff8a4db5cb3761f64c4c3d0db3ad1dac8156f871624f13ebe9258440d4f4e1e541a8a19d6090e9711b6810beaddbb7828e2fa4567d6f50c7d5687871729e033", 0x41}, {&(0x7f0000000900)="4bdbd6bc624bbbcd23048018c137d146217d35cf7b07435bb0982adc847a79c94f5ed2b6c5bc69c88ab5e5a7b80535fe7ad2a88af5655890cc7f0c554c9c1a791b7d71fdda370f55fc15c59538ff7141436bea9298049fc7326f58db2707bb8dc3fc52959dadc9473df5b24529bc06b4beb8a85dab7296faaf239a62208ce0d506c0fb91c6aef2073afcc59613d67b143b06bbfd57c409a76711195957c9dd24cc409206e1cc06aca76331563923c4367344c5b7ce795841c176dd40f72e809b8b6239d979a909feaa310e4396f0c60155cb747c9eb84a000760bd7eca38d5ee9aa7ca650deaf5b0bf6acb40471cab", 0xef}, {&(0x7f0000000180)="4c39612509ecc0536d31db8df24efcce2103a5a0899eaee7f7a6af9409b8f9c16f83f88c03fe9ad7a9393c", 0x2b}, {&(0x7f0000000840)="651b7a9e89453ff42a0c1271537959519f83e20e591c86622d1d60246ee633d5e3248f8431b66da1afe1f1e1e82a9e934169335ac86e02ebfecdd3793f9307465e2f2b82542e27cda3252809d84171988b4a2e546e0930e8c8c0f64f878a88b5fa6e72ad895af235589e5dcecdcb1a8962dab7e93a412d5eb199db38ca0f54ad66e22b09a75ef9ff6f30d309d4f90799e0854eb152b357f40aeaa71087e70e25a30f6ec21139bbb8b811f261e1121d", 0xaf}, {&(0x7f0000000740)="cc8a0db85d1b9d8401795b31c66e037227a9917a20109d914d0bd9d94d51e0783db91a9c01873df4b9d9c1256cab1ae96f172595a6833b26f07ee595b111d929c493", 0x42}], 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xd}, {0xfff2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x890}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @multicast2}}, [0x9, 0x8000000000000000, 0x1fd, 0x9, 0x476, 0x8001, 0x200000007, 0x9, 0x81, 0x1, 0x7, 0x5, 0x7, 0xce9, 0x9]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r10, 0x1000, 0x0, 0x7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0x22, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3e, &(0x7f0000000980)=[{&(0x7f0000000380)="2e00000011000000000e00270010000000025980000012", 0x2e}], 0x1}, 0x0) 2.149981863s ago: executing program 4 (id=13750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9fa04ac500025552d86563ddcdd6badb59ed6764bd47d78da8c3f1ccca31bd0c5d54d4153342ca4ca904016f37ce171dfac7417797ef41d08763bede6c90e1", &(0x7f0000000680)="ae4e95ee3e6eb1afac73c6cc4797698d0a5d092bf654d031", 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000340)={{r0, &(0x7f0000000040)='syz1\x00', 0x412400, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x81]}, {0x7f, 0xfffa, 0x8, 0x1}}, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0xfffffff1}, 0x2, &(0x7f0000000300)=[{0x3, 0x7, &(0x7f0000000200)='syz1\x00', &(0x7f0000000fc0)="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", 0x1000, 0x18}, {0x2, 0x9, &(0x7f0000000240)='\x00', &(0x7f0000000280)="c053ee93bfdea857fc4e9b79a0374753e3871f7b21ffcc2ea24ad75bafd46329fc1a52ede79efc819062a23e3847a226a461c98a21f9812bdae9b24aef3f0d61c42f9a41fe8f0eaf1beec05fc0873fa3a0d45446b2889ff0861510b5c3d9f88f89bd32c36be057d519ee56fa1573a284372a8dc21f8fb820a8dac4a37f", 0x7d, 0x28}]}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x44, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) 2.093875473s ago: executing program 1 (id=13751): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x3c}, @in=@loopback, {0x401, 0xfffffffffffffffe, 0x5, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000003}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24048871}, 0x40080) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYRES64=r0, @ANYBLOB="a48a938b1a8d5ccc341acb914f7eab7515eef4d946a22efa9ecde05785cb11562d8884a00b872f56728bcf7157c04bf444e738950685597649ac5c4e80a338d8c3bd3f5212f8502c5d364bc20e0a2701027f57588d20bd695a38694c1c0d582fa2541a3f9df7dc53bf82c7003fba140504ea6b674de21559d27eff71d1a7796ac07e7d79f2f24efa98ae17d914bc8092399c43592552"], 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$unix(r3, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x7, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044050}, 0x4814) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8811, r5, 0xbb5b6000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x240c0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x130, 0x98, 0x1c8, 0x1c8, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x12, 0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) recvmsg(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f00000002c0)=""/92, 0x5c}, {&(0x7f0000000880)=""/154, 0x9a}], 0x3, &(0x7f0000000980)=""/4096, 0x1000}, 0x10002) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) 1.978260296s ago: executing program 2 (id=13752): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611073000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x2) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x39, 0x7ff, 0xf83, 0x3}, 0x1c) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003904000000ffffffec0000000000", @ANYRES32=r10, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r1, &(0x7f0000000040)="0700532f14995bf89a0e62a02f92b8", 0xf, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x4, 0x6, @local}, 0x14) 1.77433898s ago: executing program 1 (id=13753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000240)) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) 1.669410174s ago: executing program 2 (id=13754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900000000000c000100000100000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) socket$packet(0x11, 0x3, 0x300) unshare(0x64000600) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x16, @local, 0xffffffff}, 0x1c) 1.668972428s ago: executing program 1 (id=13755): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'erspan0\x00', 0x0}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x24, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r0, 0x10, 0x7e, 0x6}, [@NDA_MASTER={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) 1.629952675s ago: executing program 4 (id=13756): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8800) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80000) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080), 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4000}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x315e5514}}]}}}]}, 0x58}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c7", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.321826268s ago: executing program 1 (id=13757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x81, 0x3, 0x2a, @private1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x10, 0x20, 0xd6f, 0x9}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-5lx \x00'}, 0x20) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25DELUID(r9, 0x891c, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000740)={r0, &(0x7f0000000640)='&\x00', 0x200000, &(0x7f0000000680)={@align=0x7fffffff, {0x851, 0xffff, 0x2, 0x2e41}}, 0x3, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x6288c0, &(0x7f00000007c0)={@align=0xed0d, {0x3, 0x7, 0x3, 0x4}}, 0x26, &(0x7f0000000800), &(0x7f0000000840)=0x4}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r12, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x100, 0xae, &(0x7f0000000200)=""/174, 0x40f00, 0x4, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r4, r5, r7, r0, r8, r10, r11, r13], &(0x7f0000000900)=[{0x4, 0x2, 0x4, 0x8}, {0x1, 0x4, 0x8, 0xa}, {0x0, 0x2, 0x0, 0x2}, {0x4, 0x5, 0xa, 0x2}, {0x5, 0x2, 0x2}], 0x10, 0x10000}, 0x94) 1.241439154s ago: executing program 3 (id=13758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000040000000000000000000009500000000000000d6dab616cb2eb845979a54ce2b82b9fc6f5b7bccb5a923c93933eb38412058ddd93e4b6613bfa288d06373ebf5e8952af3801bf5746a00dc8835a745b5f1319885ca56578c09147e813d86818c8e8a53d2d112ce65616de95b22c277e4fac2e5229b5a1bcead680000000000"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x3, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x7, &(0x7f00000001c0)=0x3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[], 0x7c}}, 0x811) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a34000000030a010800000000000000000200000a0c00024000000000000000010900010073797a300000000008000540ffffffff1400000011f89b0000000000000000000000000a"], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r5, 0x8937, &(0x7f0000000900)={'wlan1\x00', @ifru_mtu=0x7}) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2d5f"], 0xe0}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 1.163168576s ago: executing program 1 (id=13759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004000) r2 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18f10e90dc34aa73d5220000000000000095000000000000000800000000000000cedb3d62d2554a614867ca526410627069dd7a839b58477ec41702f8eacafacf65ab7434248ff63f266c184abe186b545fd0daaeb6d4f138ecd8394172b127072dc5c1abccdf1cf3489eda1d959bfe229aaeb7a24531b453f8cf509eec110bcbc233e0cc57dad01ac34d958e74cdb656fa1ebdcd9f2b74aee5d4e45b7e1e1fbc615949f01f47a36a8d5eaa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000780)=0x2, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB], 0xfd6c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 958.682014ms ago: executing program 3 (id=13760): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}}, [0x10000, 0xffffffffffffff00, 0x0, 0x1, 0xef, 0x5, 0x50, 0xffffffffe1ad3b5a, 0xfffffffffffffff7, 0x9, 0x2, 0x1, 0x3, 0x3700000000000000, 0x9]}, &(0x7f00000002c0)=0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000240000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4988a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f6324bb7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3789b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a0500200f314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263e44f59fae487c62c98a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387f74d1ffbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae01bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f009f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449ac59110500a09b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc030000009443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477effff26af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8e45c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a36d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5f0436ead88d7acf0166dbd9f30a9b259c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c0057addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cfe9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d11c9b4be91c60932bae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd58023fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b152a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952bd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e222dbd9a323a889f295e5d3bae64fc48ba123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49798ce2fc6f639735e0222cd08075418239042bfe47c363973d3245ce507e838dfd90ae442a96fa1343029be56de31c2eff226c05f0ae3dbe2281e7bc02db39342d5b54ad3616733a5aa7753613423a0c4d2844a6e08fa5b76e18f7e24e967f6f83c546718d0f20959376427cdd449a4be3d75fd3e51e1b7f8690855af8eddbd3fd556b4460d0091e3623933f1a11db14aea54af6c49725bfa51fed222dc379995f48b1aab94441767c8bccbfd966d814715203bd8f549cd57d6a87295bf16aa25fb4e7fcaa8cec5e5c03b0095861bf2fed70ffb46bbb78ba90ca272ead9b3d2959fd9dba"], 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet6(r3, &(0x7f0000000080), 0x0, 0x4) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, &(0x7f00000008c0)) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c80)) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000cc0)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x100, 0xb3d, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000d40)={@dev, @loopback}, &(0x7f0000000d80)=0xc) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 609.184333ms ago: executing program 3 (id=13761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x1, 0x70bda2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x923, 0x7e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0198ba1cc938db3603d4bcdacb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2d6f2e830218cd0601b7fc8704"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "bc"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "7f663122d8ac593107e48edd7a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x403}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000) 474.130888ms ago: executing program 3 (id=13762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="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", 0x1000, 0x20000000, &(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x3, @mcast1, 0x8, 0x4}, 0x80) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000010c0)=""/121, 0x79}, {&(0x7f0000001140)=""/27, 0x1b}, {&(0x7f0000001180)=""/180, 0xb4}, {&(0x7f0000001240)=""/85, 0x55}, {&(0x7f00000012c0)=""/251, 0xfb}], 0x5, &(0x7f0000001440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x7) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000014c0)) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x40840) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000001600), 0x4) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r9 = getuid() sendmsg$nl_xfrm(r8, &(0x7f0000001a80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001680)=@report={0x38c, 0x20, 0x1, 0x70bd27, 0x25dfdbfc, {0xff, {@in=@dev={0xac, 0x14, 0x14, 0x30}, @in=@multicast1, 0x4e22, 0x0, 0x4e24, 0xa, 0x2, 0x20, 0x0, 0x73, 0x0, r9}}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd26, 0x27ed}}, @migrate={0x1cc, 0x11, [{@in=@rand_addr=0x64010100, @in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x2b, 0x2, 0x0, 0x3501, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@multicast2, @in=@multicast1, @in=@empty, 0x2b, 0x1, 0x0, 0x3500, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@loopback, @in=@remote, @in=@loopback, 0xd4, 0x3, 0x0, 0x3500, 0xf4b2225131d251d4, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x32, 0x0, 0x0, 0x3503, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x6c, 0x3, 0x0, 0x3500, 0xa, 0x2}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x100}, @mark={0xc, 0x15, {0x35075a, 0x101}}, @algo_auth={0x66, 0x1, {{'wp256-generic\x00'}, 0xf0, "e88aca4d5902b4e9a01bc1bd82e5c06376b338728a7ac6deb6a7fadb99f3"}}, @migrate={0xe8, 0x11, [{@in=@multicast1, @in6=@remote, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x2, 0x0, 0x3505, 0x2, 0xa}, {@in=@remote, @in=@empty, @in6=@remote, @in6=@mcast1, 0x33, 0x0, 0x0, 0x0, 0xf72f97bfe856fa33, 0xa}, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x1, 0x0, 0x3504, 0x2, 0x2}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$kcm(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001ac0)="684dc1f1fa1e7f06920e9f19a5767caa9f6d621fa5df58ebdce3101c221d491bea08ba54d1ef944b40ac35508a91f946a666cbbdd5c2078daad15e88b3142410f71b2b910f911b3ce3edde6dcd70a1f1d7bb1a33ab46500296ee3e5deb9e9421318745e48601ca177387dc8c3d19a4aa5b70aaccce5551a6ad385038d5a1068eaf4a8d6a34fd27fae135d51ea8e29bc99cefdc1bfbdfc9bebafa9a16bf05c126f59e85b4be6063babd4ed73bbaca92e380ec4fa8c5a7d6175bba2cd8659dc50c0a5327d1987518ea5af2fe8ee8236c6f5920a50f42d3e1248d7f7e78df8dd13311c0b1", 0xe3}, {&(0x7f0000001bc0)="db543616e040923115cf4a7ac7089f04db84f4705fa21750ea921d45d6b75194b6663e8b5122f19794f643ae7b7b05ba618808930a13b30b6adb6ff0d7252960fcf13295d5534790da0b573759229a92ed9b97b30de59379e6cf5ef6505929d47450e3f96a6f88977254a1857dbb", 0x6e}, {&(0x7f0000001c40)="b4d6e7dd42be1eade46852a35069dd508f2766a097bf501b6a9a81ea60614f1e0dcc35485c3e0cf554f81c11035932e238b3b025cde7a40a7939826815c81c4ca372632cda", 0x45}, {&(0x7f0000001cc0)="6516f6f291049bfb8b7b3cdf5b7935b8fa997f184c9375075e955642bb29ed35c43fcc6d0bba625877aefe3a92c83279dfeb1c934fb744f07d6a0f9561b5339155d034a423ddc5715bffb1a8858a24491ea62ea645c0c65abf64ca1ec900529cb722b019903c50b2d300990f", 0x6c}, {&(0x7f0000001d40)="ba2984c7c21e5e7a9fcae054b61b922b736989de11c286c41f8e", 0x1a}, {&(0x7f0000001d80)="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", 0xfc}], 0x6, &(0x7f0000001f00)=[{0xc0, 0x29, 0xff3, "0ef503dc67300b3c30abc5c8a159cd657a3839bfd223cf0fb4c92fa51b75421f3bcf17d33e4b8b56b7da34e57018675117286a25461c1fbd881edd7b323bf0646ccd89b48e2316373d29f09ba92cb3fbc2488bca529014c43dcc76704e3c923112c6e8194cd507b2920b1d03bb3ab1a4867482c170556055871220fdccec992f176e928f18f8c3ec96c481927b27e4c5f81a51591b1479f26b6c3ec5ed6b6a59b02ece218dca228fac47edf16e"}], 0xc0}, 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x2, 0x4}}, 0x2e) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000002040)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000002080)={0x0, 0x3, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002480)={r11, 0x2, 0x5a90}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002880)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x6}}, 0x79, 0x64}, &(0x7f0000002940)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000002980)={0x3, 0x205, 0x1, 0x4, r12}, 0x10) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r13, 0x80047213, &(0x7f00000029c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000002bc0)={'sit0\x00', &(0x7f0000002a40)={'sit0\x00', 0x0, 0x758, 0x8, 0x9, 0x5, {{0x4c, 0x4, 0x0, 0x8, 0x130, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_prespec={0x44, 0x44, 0x8f, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x4f5}, {@empty, 0xd95}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010101, 0x7fff}, {@local, 0x3}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x100}]}, @cipso={0x86, 0x15, 0xfffffffffffffffd, [{0x0, 0xf, "6496c3292d490362cbee1710dc"}]}, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x7, 0x8, "a7c03f647609"}, {0x0, 0x4, "d051"}, {0x6, 0x8, "552e4381fe95"}, {0x0, 0x2}, {0x2, 0xd, "118e9fd08ca1a0ed344d98"}, {0x1, 0x7, "e25a1fd7de"}, {0x1, 0x4, "3b1c"}, {0x6, 0x11, "2ced6de923de1c671ef580f1f3c6e3"}, {0x1, 0x8, "c92daa51971b"}, {0x5, 0x12, "a4e630c9e6472d4b4982203ea9ae7ae0"}]}, @timestamp_prespec={0x44, 0x34, 0x49, 0x3, 0xb, [{@local, 0xedb}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ssrr={0x89, 0xf, 0xed, [@empty, @multicast1, @private=0xa010102]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x2, 0xb, "f3d0f80819e06b6419"}, {0x0, 0x3, 'd'}, {0x6, 0xa, "bbfd2151ba5c0a40"}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000002c00)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000002d00)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000004100)={&(0x7f0000002a00), 0xc, &(0x7f00000040c0)={&(0x7f0000002d40)=@getsa={0x1348, 0x12, 0x300, 0x70bd2b, 0x25dfdbfd, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x0, 0xff}, [@srcaddr={0x14, 0xd, @in6=@loopback}, @tmpl={0x184, 0x5, [{{@in6=@local, 0x4d5, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3506, 0x0, 0x1, 0x3, 0x6, 0x6, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3505, 0x1, 0x1, 0x4e, 0xfffffffb, 0x7, 0x7fff}, {{@in6=@remote, 0x4d3, 0x33}, 0xa, @in6=@mcast2, 0x3501, 0x1, 0x3, 0x96, 0x9, 0x1000}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in6=@remote, 0x0, 0xd, 0x2, 0x49, 0x7fffffff, 0x5, 0x240000}, {{@in=@empty, 0x4d3, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x2, 0x1, 0x6, 0x101, 0x9, 0x4}, {{@in=@empty, 0x4d6}, 0xa, @in=@private=0xa010100, 0x3506, 0x0, 0x0, 0x2, 0x0, 0x400, 0x8000}]}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x7, 0x1000, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@loopback, 0x0, 0xa}}, @algo_comp={0x69, 0x3, {{'deflate\x00'}, 0x108, "60b67bf8b42c6dfb7e9dbbc1bd374b0c48692a46a9fa1ca6cae9ebeecfe1b335cb"}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in=@multicast2, 0x4e23, 0x0, 0x4e24, 0xf5c, 0x2, 0x0, 0x100, 0x32, r14, r15}, {@in6=@mcast1, 0x4d6, 0x399dff67cae0445f}, @in=@multicast1, {0x6, 0xbc23, 0x100000001, 0x1, 0x8, 0x6, 0xcc37, 0x4}, {0xffff, 0xe536, 0x7, 0x3}, {0x9, 0x4, 0x8}, 0x70bd2c, 0x3505, 0xa, 0x7, 0x40, 0x10}}]}, 0x1348}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x20000000) r16 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000004400)=0x0) r18 = getgid() sendmmsg$unix(r6, &(0x7f0000004580)=[{{&(0x7f0000004140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f00000041c0)="e2e33caa96f6b64e8b595867d77186ee6396478d150c30e293d76bd9968fa21c6530cfc604e630db89e0cde53cd124390c137fd54963f782a54ab6887d12f714155fd05040825a060bc846cf76eb9efee209aee8d2fc33e943ec6d0c5c09f7b030ff9a73df4e68c8ff35ee1a6983653069cb81739f71ab634fb01f002e680ecab243ebb9302b5b8c57d15d3f2b00765e37c0b1f94cff6ac5ba2e541fa94746fb3ed551e68a805933a1593d00f173f162b13f186093efbb034ad2e5c5e1dcfb3174bae025988744e483f00063ba6809d3124cbe497e6edb89087350db9fa18f6cda81738defcc0a384e5eee6ce47a4c9e35d7c106fd", 0xf5}, {&(0x7f00000042c0)="43601117649c433a8c4d47b0e4f0015804170d50854c17b31fcdc4f189289750cfeca2bdff3d91ea9f59295abee907e307065b3ab32b7a938cbef142a908942b230a00d4ff0984762cdd0b87ee2ace5c9ceb3282c5c71f8179c57e32719350d6c208e9988ad3f5def1155a8d0ce70251de4231180ff3bdefff0bf09aac87670e48ba4110273e2ce2ec14e79b67bf4b0603c75121ec7c8910f6197cace0e463492b6607e467209a1dfddd31dddbab5ef6b93f4a64c12b34c5981c152dae1541", 0xbf}, {&(0x7f0000004380)="95abf69c11e5d2963fb97e559e7eeefd6888f9bf7887aeea08b1624d016503376e37769764adf5023a", 0x29}], 0x3, &(0x7f0000004480)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [r16, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r17, r15, r18}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, r5, r8, r7, r8, r5]}}, @rights={{0x28, 0x1, 0x1, [r6, r13, 0xffffffffffffffff, 0xffffffffffffffff, r1, r5]}}], 0xd0, 0x9000}}], 0x1, 0x0) 315.880783ms ago: executing program 3 (id=13763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c61", @ANYRES16], 0x54}}, 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001580), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) ioctl$FIOCLEX(r0, 0x5451) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001800)=""/44, 0x2c}, {&(0x7f00000001c0)=""/168, 0xa8}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000001380)=""/207, 0xcf}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/165, 0xa5}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/91, 0x5b}], 0xa, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'ip6_vti0\x00', 0x1}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000280), 0xfffffffffffffedf) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) write$cgroup_devices(r5, &(0x7f0000001840)=ANY=[@ANYBLOB="00000000d97bdbfc82a021cd03d5472c395fec276690678fd08e98d300691cdbddb52f4858801ee78e0c8afa43cb0ad9abc8fbc9b0514afbd3c3e54139b2"], 0x8) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d001800fe7f00000005000500", 0x29}], 0x1) shutdown(r3, 0x0) 161.407484ms ago: executing program 4 (id=13764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r4) (async) socket$isdn(0x22, 0x3, 0x21) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x9, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x4, 0x0, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) r10 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r11}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 129.016195ms ago: executing program 3 (id=13765): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e9"], 0xb8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) close(r8) 0s ago: executing program 1 (id=13766): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x8da1fba3402c53ae, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): . [ 1598.094756][T29814] lo speed is unknown, defaulting to 1000 [ 1598.214388][T29876] sctp: [Deprecated]: syz.0.11004 (pid 29876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1598.214388][T29876] Use struct sctp_sack_info instead [ 1598.440975][T29887] netlink: zone id is out of range [ 1598.446136][T29887] netlink: zone id is out of range [ 1598.481396][T29887] netlink: zone id is out of range [ 1598.499945][T29887] netlink: zone id is out of range [ 1598.505154][T29887] netlink: zone id is out of range [ 1598.527934][T29887] netlink: zone id is out of range [ 1598.533184][T29887] netlink: zone id is out of range [ 1598.586690][T29887] netlink: zone id is out of range [ 1598.592005][T29887] netlink: zone id is out of range [ 1598.675123][T29901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11011'. [ 1598.702062][T29814] wlan1 speed is unknown, defaulting to 1000 [ 1598.733027][T29814] lo speed is unknown, defaulting to 1000 [ 1599.214343][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11016'. [ 1599.390990][T29936] netlink: 'syz.0.11018': attribute type 12 has an invalid length. [ 1599.409894][T29936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11018'. [ 1599.550909][T29938] lo speed is unknown, defaulting to 1000 [ 1599.704778][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11020'. [ 1600.010588][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11022'. [ 1600.061445][T29977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11022'. [ 1600.364330][T29938] lo speed is unknown, defaulting to 1000 [ 1600.957257][T29938] wlan1 speed is unknown, defaulting to 1000 [ 1600.978832][T29938] lo speed is unknown, defaulting to 1000 [ 1601.149877][T30031] team0: Caught tx_queue_len zero misconfig [ 1601.726913][T30057] netlink: 'syz.2.11039': attribute type 1 has an invalid length. [ 1601.839845][T30064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1601.847620][T30064] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.854874][T30064] IPv6: NLM_F_CREATE should be set when creating new route [ 1601.880773][T30064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1601.968134][T30057] bond6: entered promiscuous mode [ 1601.985957][T30057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1602.103891][T30061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1602.114525][T30061] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1602.139253][T30061] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1602.177673][T30061] bond6: (slave wireguard0): making interface the new active one [ 1602.203473][T30061] wireguard0: entered promiscuous mode [ 1602.239596][T30061] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 1602.263021][T30064] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1602.287472][T30064] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 1602.341953][T30073] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1602.388002][T30073] tipc: Cannot configure node identity twice [ 1602.437013][T30073] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1602.469850][T30073] bridge4: entered allmulticast mode [ 1602.592496][T30083] netlink: 'syz.2.11043': attribute type 4 has an invalid length. [ 1602.659067][T30092] netlink: 'syz.1.11045': attribute type 1 has an invalid length. [ 1602.695337][T30086] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1602.724265][T30086] bond7 (unregistering): Released all slaves [ 1602.790407][T30100] net_ratelimit: 50 callbacks suppressed [ 1602.790419][T30100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.805722][T30100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.818301][T30100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.833693][T30101] __nla_validate_parse: 3 callbacks suppressed [ 1602.833711][T30101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11046'. [ 1602.863107][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.908565][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.926665][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.947507][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.955831][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.968506][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.977315][T30092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.123695][T30112] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1603.173081][T30101] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1603.254896][T30104] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1603.469600][T30137] netlink: 'syz.4.11055': attribute type 142 has an invalid length. [ 1603.729933][T30158] netlink: 'syz.0.11056': attribute type 2 has an invalid length. [ 1603.782205][T30163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11060'. [ 1604.367800][T30197] lo speed is unknown, defaulting to 1000 [ 1604.505366][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.540707][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.577540][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.656826][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.678206][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.715380][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.724988][T30197] lo speed is unknown, defaulting to 1000 [ 1604.740006][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1604.784533][T30208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11070'. [ 1605.039596][T30241] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1605.287296][T30260] SET target dimension over the limit! [ 1605.373199][T30197] wlan1 speed is unknown, defaulting to 1000 [ 1605.398529][T30197] lo speed is unknown, defaulting to 1000 [ 1606.874129][T30301] bond5 (unregistering): Released all slaves [ 1607.356204][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1607.787659][T30380] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1607.834275][T30380] bond7 (unregistering): Released all slaves [ 1607.851257][T30393] __nla_validate_parse: 64 callbacks suppressed [ 1607.851275][T30393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11111'. [ 1607.933951][T30394] team_slave_1: Caught tx_queue_len zero misconfig [ 1607.944097][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11110'. [ 1608.044358][T30394] tipc: Resetting bearer [ 1608.062172][T30380] IPVS: length: 140 != 8 [ 1608.101590][T30394] syzkaller0: left promiscuous mode [ 1608.113146][T30394] syzkaller0: left allmulticast mode [ 1608.142538][T30394] vlan2: left promiscuous mode [ 1608.157380][T30394] geneve1: left promiscuous mode [ 1608.166575][T30394] vlan2: left allmulticast mode [ 1608.178001][T30394] geneve1: left allmulticast mode [ 1608.194662][T30394] bridge3: left promiscuous mode [ 1608.206681][T30394] bridge3: left allmulticast mode [ 1608.218149][T30394] bond3: left promiscuous mode [ 1608.222944][T30394] bridge5: left promiscuous mode [ 1608.232712][T30394] geneve2: left promiscuous mode [ 1608.240004][T30394] xfrm1: left allmulticast mode [ 1608.257169][T30410] gre1: entered allmulticast mode [ 1608.272068][T10603] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.291727][T10603] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.393558][T10603] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.426968][T10603] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.456688][T30428] netlink: 'syz.1.11118': attribute type 13 has an invalid length. [ 1608.528862][T30428] netlink: 'syz.1.11118': attribute type 4 has an invalid length. [ 1608.556982][T30428] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11118'. [ 1608.559766][T30436] netlink: 356 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1608.582518][T30428] .`: renamed from bond0 [ 1608.589695][T30407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1608.932549][T30447] lo speed is unknown, defaulting to 1000 [ 1608.938666][T30465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11125'. [ 1608.976745][T30464] netlink: 'syz.2.11127': attribute type 10 has an invalid length. [ 1609.225645][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11129'. [ 1609.266119][T30475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11129'. [ 1609.278475][T30447] lo speed is unknown, defaulting to 1000 [ 1609.328391][T30475] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1609.337519][T30480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11128'. [ 1609.392738][T30482] team_slave_0: Caught tx_queue_len zero misconfig [ 1609.589910][T30491] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11132'. [ 1609.643244][T30447] wlan1 speed is unknown, defaulting to 1000 [ 1609.678424][T30447] lo speed is unknown, defaulting to 1000 [ 1609.702824][T30496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11135'. [ 1609.957936][T30493] bond4: option ad_select: invalid value (34) [ 1610.005639][T30493] bond4 (unregistering): Released all slaves [ 1610.352702][T30522] bond3: option ad_actor_sys_prio: invalid value (0) [ 1610.383850][T30522] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1610.417260][T30522] bond3 (unregistering): Released all slaves [ 1610.718272][T30523] bond3: option ad_actor_sys_prio: invalid value (0) [ 1610.725099][T30523] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1610.753473][T30523] bond3 (unregistering): Released all slaves [ 1610.870889][T30545] lo speed is unknown, defaulting to 1000 [ 1611.445972][T30569] dvmrp0: entered allmulticast mode [ 1611.565463][T30545] lo speed is unknown, defaulting to 1000 [ 1612.247439][T30545] wlan1 speed is unknown, defaulting to 1000 [ 1612.255072][T30545] lo speed is unknown, defaulting to 1000 [ 1612.866418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 1612.874579][ C0] lec:lec_tx_timeout: lec0 [ 1612.919799][T30634] lo speed is unknown, defaulting to 1000 [ 1613.264881][T30634] lo speed is unknown, defaulting to 1000 [ 1613.312830][T30673] netlink: 'syz.4.11159': attribute type 13 has an invalid length. [ 1613.323488][T30674] netlink: 'syz.4.11159': attribute type 13 has an invalid length. [ 1613.353262][T30673] mac80211_hwsim hwsim115 syzkaller0: Caught tx_queue_len zero misconfig [ 1613.363873][T30668] __nla_validate_parse: 7 callbacks suppressed [ 1613.363890][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11158'. [ 1613.738957][T30634] wlan1 speed is unknown, defaulting to 1000 [ 1613.749478][T30634] lo speed is unknown, defaulting to 1000 [ 1614.053978][T30638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1614.971192][T30732] net_ratelimit: 20 callbacks suppressed [ 1614.971214][T30732] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1614.997150][T30733] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11169'. [ 1615.870079][T30774] syzkaller0: entered promiscuous mode [ 1615.880914][T30774] syzkaller0: entered allmulticast mode [ 1618.502856][T30823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1618.635670][T30833] pim6reg: entered allmulticast mode [ 1618.666401][T30833] pim6reg: left allmulticast mode [ 1619.111727][T30859] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1619.390036][T30881] syzkaller0: entered promiscuous mode [ 1619.395662][T30881] syzkaller0: entered allmulticast mode [ 1619.402693][T30881] tipc: Resetting bearer [ 1619.905948][T30877] syzkaller1: entered promiscuous mode [ 1619.912723][T30877] syzkaller1: entered allmulticast mode [ 1620.386947][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11208'. [ 1620.489035][T30929] team0: entered promiscuous mode [ 1620.504074][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11208'. [ 1620.504666][T30929] team0: entered allmulticast mode [ 1620.566962][T30929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.577086][T30943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11213'. [ 1620.693577][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11216'. [ 1620.720249][T30918] team2: entered promiscuous mode [ 1620.725325][T30918] team2: entered allmulticast mode [ 1620.770701][T30918] 8021q: adding VLAN 0 to HW filter on device team2 [ 1620.797474][T30950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11215'. [ 1620.849545][T30950] netlink: 'syz.4.11215': attribute type 21 has an invalid length. [ 1620.871902][T30955] bond4: option broadcast_neighbor: invalid value (30) [ 1620.900670][T30967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11215'. [ 1620.914558][T30955] bond4 (unregistering): Released all slaves [ 1621.013553][T30974] lo: Caught tx_queue_len zero misconfig [ 1621.492799][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11223'. [ 1621.575609][T31013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11224'. [ 1621.617918][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11224'. [ 1621.955541][T31022] batman_adv: batadv0: Adding interface: macsec1 [ 1621.975851][T31022] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1622.048516][T31022] batman_adv: batadv0: Interface activated: macsec1 [ 1622.232252][T31040] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1622.300045][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11231'. [ 1622.359376][T31047] Cannot find add_set index 2 as target [ 1622.365332][T31050] Cannot find add_set index 2 as target [ 1622.539079][T31055] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1622.580337][T31059] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1622.679164][T31067] siw: device registration error -23 [ 1623.225138][T31115] sctp: [Deprecated]: syz.2.11247 (pid 31115) Use of int in max_burst socket option deprecated. [ 1623.225138][T31115] Use struct sctp_assoc_value instead [ 1623.334784][T31120] ip6tnl0: Caught tx_queue_len zero misconfig [ 1623.387351][T31132] netlink: 'syz.1.11248': attribute type 2 has an invalid length. [ 1623.441775][T31132] l24): entered promiscuous mode [ 1623.828460][T31156] bond7 (unregistering): Released all slaves [ 1623.879780][T31157] lo: entered allmulticast mode [ 1623.890680][T31157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1623.950772][T31161] tipc: Resetting bearer [ 1624.075892][T31161] tipc: Resetting bearer [ 1624.094797][T31161] tipc: Resetting bearer [ 1624.222231][T31170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1624.259854][T31172] bond7 (unregistering): Released all slaves [ 1625.054562][T31221] lo speed is unknown, defaulting to 1000 [ 1625.411528][T31250] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1625.715857][T31261] syzkaller0: entered promiscuous mode [ 1625.721725][T31261] syzkaller0: entered allmulticast mode [ 1625.730391][T31223] lo speed is unknown, defaulting to 1000 [ 1625.730482][T31221] lo speed is unknown, defaulting to 1000 [ 1625.743345][T31264] tipc: Enabling of bearer rejected, already enabled [ 1625.764231][T31266] __nla_validate_parse: 8 callbacks suppressed [ 1625.764250][T31266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11280'. [ 1625.812494][T31266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11280'. [ 1625.847078][T31266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11280'. [ 1625.935120][T31273] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1627.921004][T31221] wlan1 speed is unknown, defaulting to 1000 [ 1627.930713][T31223] lo speed is unknown, defaulting to 1000 [ 1627.938249][T31269] lo speed is unknown, defaulting to 1000 [ 1628.022646][T31221] lo speed is unknown, defaulting to 1000 [ 1628.456924][T31300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11286'. [ 1628.504470][T31303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11287'. [ 1628.553747][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11286'. [ 1628.617958][T31304] lo speed is unknown, defaulting to 1000 [ 1628.653317][T31309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11286'. [ 1628.689660][T31308] netlink: 'syz.2.11285': attribute type 10 has an invalid length. [ 1628.722260][T31308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11285'. [ 1629.132539][T31308] dummy0: entered promiscuous mode [ 1629.139877][T31308] bridge0: port 4(dummy0) entered blocking state [ 1629.157063][T31308] bridge0: port 4(dummy0) entered disabled state [ 1629.163667][T31308] dummy0: entered allmulticast mode [ 1629.205819][T31269] lo speed is unknown, defaulting to 1000 [ 1629.214348][T31223] wlan1 speed is unknown, defaulting to 1000 [ 1629.254674][T31322] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1629.263133][T31322] pim6reg0: persist disabled [ 1629.272146][T31223] lo speed is unknown, defaulting to 1000 [ 1629.734863][T31304] lo speed is unknown, defaulting to 1000 [ 1629.739959][T31332] tipc: Enabling of bearer rejected, already enabled [ 1629.753639][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1629.776738][T31269] wlan1 speed is unknown, defaulting to 1000 [ 1629.814541][T31269] lo speed is unknown, defaulting to 1000 [ 1630.061307][T31339] netlink: 'syz.4.11292': attribute type 10 has an invalid length. [ 1630.076730][T31339] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11292'. [ 1630.449900][T31350] xt_hashlimit: size too large, truncated to 1048576 [ 1630.494716][T31304] wlan1 speed is unknown, defaulting to 1000 [ 1630.535818][T31304] lo speed is unknown, defaulting to 1000 [ 1631.674695][T31394] vlan0: entered promiscuous mode [ 1632.019364][T31411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1632.071128][T31404] lo: Caught tx_queue_len zero misconfig [ 1632.387916][T31426] netlink: 'syz.4.11306': attribute type 21 has an invalid length. [ 1632.434987][T31426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11306'. [ 1632.455334][T31426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11306'. [ 1632.541647][T31420] lo speed is unknown, defaulting to 1000 [ 1633.099498][T31443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11309'. [ 1633.532228][T31420] lo speed is unknown, defaulting to 1000 [ 1633.752858][ T5833] block nbd12: Receive control failed (result -32) [ 1634.259678][T31471] netlink: 'syz.3.11313': attribute type 1 has an invalid length. [ 1634.268330][T31468] netlink: 'syz.3.11313': attribute type 1 has an invalid length. [ 1634.332604][T31468] bond3: entered promiscuous mode [ 1634.339043][T31468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1634.441474][T31468] bond3: (slave bridge5): making interface the new active one [ 1634.474574][T31468] bridge5: entered promiscuous mode [ 1634.497651][T31468] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1634.514625][T31464] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11312'. [ 1634.534837][T31420] wlan1 speed is unknown, defaulting to 1000 [ 1634.563260][T31420] lo speed is unknown, defaulting to 1000 [ 1634.712160][T31488] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1634.762719][T31488] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1634.866731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1634.874788][ C0] lec:lec_tx_timeout: lec0 [ 1635.167264][T31519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11319'. [ 1635.176598][T31519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11319'. [ 1635.196609][T31520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1635.242182][T31520] ip6gre3: entered promiscuous mode [ 1635.260023][T31520] ip6gre3: entered allmulticast mode [ 1635.294322][T31520] netlink: 'syz.3.11322': attribute type 6 has an invalid length. [ 1635.326254][T31520] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11322'. [ 1635.350316][T31515] lo speed is unknown, defaulting to 1000 [ 1635.927592][T31515] lo speed is unknown, defaulting to 1000 [ 1636.248899][T31552] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1636.273843][T31552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.393188][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11330'. [ 1636.426791][T31557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11330'. [ 1636.569570][T31515] wlan1 speed is unknown, defaulting to 1000 [ 1636.588400][T31515] lo speed is unknown, defaulting to 1000 [ 1637.072627][T31444] udevd[31444]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1637.123753][T31565] siw: device registration error -23 [ 1637.607441][ T29] audit: type=1800 audit(1771467989.474:103): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11341" name=CB dev="tmpfs" ino=1977 res=0 errno=0 [ 1637.804554][T31627] netlink: 'syz.2.11344': attribute type 1 has an invalid length. [ 1638.391042][T31657] netlink: 'syz.0.11347': attribute type 11 has an invalid length. [ 1638.984631][T31678] __nla_validate_parse: 9 callbacks suppressed [ 1638.984650][T31678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1639.048079][T31682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11350'. [ 1639.084888][T31683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1639.116293][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11352'. [ 1639.180324][T31682] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1639.232095][T31688] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1639.452093][T31698] tipc: Enabling of bearer rejected, failed to enable media [ 1639.496757][T31698] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1639.738959][T31715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.747922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.972605][ T29] audit: type=1804 audit(1771467991.834:104): pid=31725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11359" name="/newroot/389/memory.events" dev="tmpfs" ino=2004 res=1 errno=0 [ 1640.002484][T31728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11360'. [ 1640.036324][ T29] audit: type=1800 audit(1771467991.834:105): pid=31725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11359" name="memory.events" dev="tmpfs" ino=2004 res=0 errno=0 [ 1640.061446][T31728] netlink: 296 bytes leftover after parsing attributes in process `syz.4.11360'. [ 1640.504248][T31756] xt_hashlimit: max too large, truncated to 1048576 [ 1640.543179][T31756] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1640.638344][T31756] netlink: 'syz.4.11366': attribute type 4 has an invalid length. [ 1640.694328][T31761] netlink: 'syz.4.11366': attribute type 4 has an invalid length. [ 1640.844586][T31778] lo speed is unknown, defaulting to 1000 [ 1640.871535][T31781] sch_tbf: burst 240 is lower than device lo mtu (65499) ! [ 1641.088361][T31794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11375'. [ 1641.189627][T31796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11376'. [ 1641.223584][T31801] xt_hashlimit: size too large, truncated to 1048576 [ 1641.240907][T31801] xt_hashlimit: max too large, truncated to 1048576 [ 1641.258826][T31801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11377'. [ 1641.323512][T31796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1641.337420][T31804] bond4: option miimon: invalid value (18446744071562067968) [ 1641.345250][T31804] bond4: option miimon: allowed values 0 - 2147483647 [ 1641.387196][T31796] netlink: 'syz.0.11376': attribute type 1 has an invalid length. [ 1641.405719][T31801] ip6gretap2: entered promiscuous mode [ 1641.418439][T31801] ip6gretap2: entered allmulticast mode [ 1641.473304][T31778] lo speed is unknown, defaulting to 1000 [ 1641.494924][T31804] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1641.561000][T31796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.885540][T31778] wlan1 speed is unknown, defaulting to 1000 [ 1641.893897][T31778] lo speed is unknown, defaulting to 1000 [ 1642.332939][T31841] tipc: Enabled bearer , priority 6 [ 1642.446174][T31843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11385'. [ 1642.477116][T31845] sctp: [Deprecated]: syz.0.11384 (pid 31845) Use of int in maxseg socket option. [ 1642.477116][T31845] Use struct sctp_assoc_value instead [ 1642.572947][T31845] bridge7: entered promiscuous mode [ 1642.579529][T31845] bridge7: entered allmulticast mode [ 1642.898832][T31865] netlink: 'syz.2.11389': attribute type 1 has an invalid length. [ 1643.303095][T31877] lo speed is unknown, defaulting to 1000 [ 1643.446646][ T2077] tipc: Node number set to 1916070035 [ 1643.656704][T31877] lo speed is unknown, defaulting to 1000 [ 1643.985967][T31877] wlan1 speed is unknown, defaulting to 1000 [ 1643.993904][T31913] __nla_validate_parse: 4 callbacks suppressed [ 1643.993922][T31913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11400'. [ 1644.011377][T31877] lo speed is unknown, defaulting to 1000 [ 1644.321202][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11404'. [ 1644.401259][T31922] lo speed is unknown, defaulting to 1000 [ 1644.745332][T31922] lo speed is unknown, defaulting to 1000 [ 1644.818421][T31950] netlink: 'syz.2.11408': attribute type 142 has an invalid length. [ 1645.258025][T31986] netlink: 'syz.3.11414': attribute type 12 has an invalid length. [ 1645.282720][T31922] wlan1 speed is unknown, defaulting to 1000 [ 1645.304363][T31986] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.11414'. [ 1645.315232][T31922] lo speed is unknown, defaulting to 1000 [ 1645.518427][T31997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11416'. [ 1645.534846][T31997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1645.685243][T32005] netlink: 'syz.3.11417': attribute type 1 has an invalid length. [ 1645.970319][T31999] bond4: (slave ip6erspan0): making interface the new active one [ 1646.010841][T31999] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1646.248447][T32036] Can't find ip_set type hash:net@port [ 1646.496511][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11425'. [ 1646.563989][T32055] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1646.837132][T32069] netlink: 'syz.3.11428': attribute type 10 has an invalid length. [ 1646.890230][T32069] team0: Device ipvlan1 failed to register rx_handler [ 1647.361229][T32100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1647.364764][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11433'. [ 1647.396772][T32105] tipc: Enabling of bearer rejected, already enabled [ 1647.419981][T32105] tipc: Resetting bearer [ 1647.786366][T32102] lo speed is unknown, defaulting to 1000 [ 1647.791079][T32124] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.11438'. [ 1648.075938][T32136] syzkaller0: entered promiscuous mode [ 1648.085299][T32136] syzkaller0: entered allmulticast mode [ 1648.219579][T32146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11441'. [ 1648.259663][T32146] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11441'. [ 1648.565920][T32102] lo speed is unknown, defaulting to 1000 [ 1648.617200][T32168] bridge_slave_1: left allmulticast mode [ 1648.632316][T32168] bridge_slave_1: left promiscuous mode [ 1648.648790][T32168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.715055][T32168] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 1648.735884][T32165] tipc: Enabled bearer , priority 0 [ 1648.929284][T32178] syzkaller0: entered promiscuous mode [ 1648.937119][T32178] syzkaller0: entered allmulticast mode [ 1648.943365][T32178] tipc: Resetting bearer [ 1648.966953][T32187] netlink: 'syz.2.11449': attribute type 3 has an invalid length. [ 1649.045503][T32102] wlan1 speed is unknown, defaulting to 1000 [ 1649.062536][T32102] lo speed is unknown, defaulting to 1000 [ 1649.180960][T32198] __nla_validate_parse: 2 callbacks suppressed [ 1649.180979][T32198] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11452'. [ 1649.361603][T30949] tipc: Resetting bearer [ 1649.375480][T32158] tipc: Resetting bearer [ 1649.868358][ T29] audit: type=1800 audit(1771468001.734:106): pid=32214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11456" name="memory.events" dev="tmpfs" ino=2602 res=0 errno=0 [ 1650.323281][T32226] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1650.340348][T32226] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1651.441919][T32158] tipc: Disabling bearer [ 1651.483316][T32222] tipc: Resetting bearer [ 1651.727632][T32244] RDS: rds_bind could not find a transport for 0:1000:0:0:1400::, load rds_tcp or rds_rdma? [ 1652.208767][T32242] syzkaller0: entered promiscuous mode [ 1652.225765][T32242] syzkaller0: entered allmulticast mode [ 1654.450367][T32286] lo speed is unknown, defaulting to 1000 [ 1654.596119][T32296] netlink: 'syz.3.11471': attribute type 2 has an invalid length. [ 1654.616435][T32296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11471'. [ 1654.994472][T32320] mac80211_hwsim hwsim115 syzkaller0: left promiscuous mode [ 1655.037976][T32320] mac80211_hwsim hwsim115 syzkaller0: left allmulticast mode [ 1655.062878][T32320] tipc: Resetting bearer [ 1655.322108][T32332] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11480'. [ 1655.399312][T32333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11479'. [ 1655.473200][T30949] tipc: Resetting bearer [ 1655.483285][T32286] lo speed is unknown, defaulting to 1000 [ 1655.633349][T32347] netlink: 'syz.2.11483': attribute type 1 has an invalid length. [ 1655.660209][T32347] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.11483'. [ 1655.680045][T32347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11483'. [ 1655.714403][T32347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11483'. [ 1655.762477][T32353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11484'. [ 1655.891173][T32360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11487'. [ 1656.063711][T32286] wlan1 speed is unknown, defaulting to 1000 [ 1656.072965][T32368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11489'. [ 1656.095809][T32286] lo speed is unknown, defaulting to 1000 [ 1656.357272][T32388] openvswitch: netlink: Flow key attr not present in new flow. [ 1656.589167][T32400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1656.596449][T32400] IPv6: NLM_F_CREATE should be set when creating new route [ 1656.778912][T32408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11496'. [ 1656.879889][T32411] ip6tnl0: Caught tx_queue_len zero misconfig [ 1657.039007][T32419] bond5 (unregistering): Released all slaves [ 1657.121607][T32426] batadv_slave_0: entered promiscuous mode [ 1657.174247][T32425] batadv_slave_0: left promiscuous mode [ 1658.141164][T32473] syzkaller0: entered promiscuous mode [ 1658.154910][T32473] syzkaller0: entered allmulticast mode [ 1658.170966][T32485] netlink: 'syz.2.11515': attribute type 7 has an invalid length. [ 1658.201018][T32477] lo speed is unknown, defaulting to 1000 [ 1658.316825][ T2074] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 120 sec [ 1660.330669][T32492] __nla_validate_parse: 6 callbacks suppressed [ 1660.330686][T32492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11517'. [ 1660.350165][T32477] lo speed is unknown, defaulting to 1000 [ 1660.378460][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11517'. [ 1660.758976][T32522] netlink: 207288 bytes leftover after parsing attributes in process `syz.0.11523'. [ 1660.771707][T32521] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1660.873154][T32477] wlan1 speed is unknown, defaulting to 1000 [ 1660.888300][T32477] lo speed is unknown, defaulting to 1000 [ 1661.038261][T32540] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11526'. [ 1661.758861][T32572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11535'. [ 1661.769441][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11535'. [ 1661.861256][T32566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11532'. [ 1661.882876][T32579] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11537'. [ 1662.120120][T32591] netlink: 'syz.0.11540': attribute type 6 has an invalid length. [ 1662.152034][T32591] netlink: 'syz.0.11540': attribute type 6 has an invalid length. [ 1662.370727][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.410343][T32605] veth0_macvtap: left promiscuous mode [ 1662.426616][T32606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11542'. [ 1662.474829][T32613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11543'. [ 1662.494893][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.554426][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.613998][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.638963][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.650606][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.666924][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.695810][T32606] netlink: 'syz.4.11542': attribute type 1 has an invalid length. [ 1662.996038][T32633] tipc: Enabling of bearer rejected, already enabled [ 1663.022977][T32633] mac80211_hwsim hwsim115 syzkaller0: entered promiscuous mode [ 1663.052473][T32633] mac80211_hwsim hwsim115 syzkaller0: entered allmulticast mode [ 1663.114035][T32633] tipc: Resetting bearer [ 1663.296532][T32651] bond0: entered allmulticast mode [ 1663.321344][T32651] bridge6: entered promiscuous mode [ 1663.327875][T32651] bridge6: entered allmulticast mode [ 1663.347458][T32651] bond0: (slave bridge6): making interface the new active one [ 1663.374911][T32651] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 1663.668096][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.694475][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.717614][T32690] bond5: entered promiscuous mode [ 1663.723153][T32690] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1663.725377][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.800287][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.810464][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.820748][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.831906][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.844156][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.856791][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.866044][T32687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1664.225522][T32729] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1664.272991][T32722] bond9: (slave geneve4): making interface the new active one [ 1664.290458][T32722] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 1664.299829][T30959] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1664.336825][T30959] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1664.385892][T30959] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1664.405480][T32740] »»»»»»: renamed from vlan1 [ 1664.422502][T30959] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1664.442505][T32736] tipc: Enabling of bearer rejected, already enabled [ 1664.708976][T32731] batman_adv: batadv0: Interface deactivated: dummy0 [ 1664.904928][T30948] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.915472][T30948] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 50722 - 0 [ 1664.925817][T30948] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.947935][T30948] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 50722 - 0 [ 1664.967742][T30948] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.987954][T30948] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 50722 - 0 [ 1665.025157][T30948] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.035975][T30948] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 50722 - 0 [ 1665.518885][ T334] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1665.596856][ T337] geneve6: entered promiscuous mode [ 1665.617785][ T337] geneve6: entered allmulticast mode [ 1665.623210][ T340] __nla_validate_parse: 65 callbacks suppressed [ 1665.623225][ T340] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11589'. [ 1665.655484][T30948] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1665.687951][T30948] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1665.776720][T30948] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1665.819191][T30948] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1665.918868][ T358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11594'. [ 1665.993475][ T367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11597'. [ 1666.501345][ T404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11606'. [ 1666.819102][ T428] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11611'. [ 1667.147740][ T438] validate_nla: 31 callbacks suppressed [ 1667.147757][ T438] netlink: 'syz.2.11614': attribute type 2 has an invalid length. [ 1667.311634][ T448] syzkaller0: entered promiscuous mode [ 1667.334380][ T448] syzkaller0: entered allmulticast mode [ 1667.469199][ T469] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11621'. [ 1667.497793][ T469] netlink: 'syz.1.11621': attribute type 3 has an invalid length. [ 1668.804294][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1669.407302][ T475] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1669.443311][ T475] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1669.457397][ T475] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1669.558778][ T496] netlink: 'syz.2.11629': attribute type 1 has an invalid length. [ 1669.632709][ T496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11629'. [ 1669.879762][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11633'. [ 1670.035568][ T525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11634'. [ 1670.198285][ T538] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11638'. [ 1670.339473][ T537] bond5: option xmit_hash_policy: invalid value (10) [ 1670.364092][ T549] netlink: 'syz.1.11637': attribute type 1 has an invalid length. [ 1670.399801][ T537] bond5 (unregistering): Released all slaves [ 1670.630465][ T566] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1670.701060][ T575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1670.794013][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1670.804247][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1671.825869][ T636] lo speed is unknown, defaulting to 1000 [ 1672.003139][ T652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11666'. [ 1672.215552][ T636] lo speed is unknown, defaulting to 1000 [ 1672.215555][ T644] lo speed is unknown, defaulting to 1000 [ 1672.659708][ T678] Cannot find add_set index 2 as target [ 1672.745440][ T644] lo speed is unknown, defaulting to 1000 [ 1672.752369][ T636] wlan1 speed is unknown, defaulting to 1000 [ 1672.774412][ T636] lo speed is unknown, defaulting to 1000 [ 1673.038166][ T691] netlink: 'syz.2.11673': attribute type 62 has an invalid length. [ 1673.315779][ T706] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.11676'. [ 1673.523950][ T644] wlan1 speed is unknown, defaulting to 1000 [ 1673.548847][ T644] lo speed is unknown, defaulting to 1000 [ 1673.624005][ T720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11679'. [ 1673.671361][ T721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11679'. [ 1673.828149][ T731] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11680'. [ 1673.836497][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1673.845341][ C0] lec:lec_tx_timeout: lec0 [ 1674.756804][ T761] net_ratelimit: 25 callbacks suppressed [ 1674.756821][ T761] openvswitch: netlink: IP tunnel dst address not specified [ 1675.484859][ T796] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11690'. [ 1675.494547][ T796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11690'. [ 1675.645553][ T798] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1675.711414][ T803] netlink: 'syz.2.11691': attribute type 31 has an invalid length. [ 1675.728302][ T803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11691'. [ 1676.470718][ T823] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.11695'. [ 1676.599892][ T828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11696'. [ 1676.630212][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11696'. [ 1676.745113][ T829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11697'. [ 1676.904871][ T828] bond5 (unregistering): Released all slaves [ 1676.992851][ T830] bond5 (unregistering): Released all slaves [ 1677.319938][ T862] syzkaller1: entered promiscuous mode [ 1677.344335][ T862] syzkaller1: entered allmulticast mode [ 1677.613722][ T878] openvswitch: netlink: Missing valid actions attribute. [ 1677.621743][ T878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1677.666943][ T888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1677.694063][ T888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.705702][ T888] hsr0: entered promiscuous mode [ 1677.711533][ T888] hsr0: entered allmulticast mode [ 1677.717141][ T888] hsr_slave_0: entered allmulticast mode [ 1677.722922][ T888] hsr_slave_1: entered allmulticast mode [ 1677.764112][ T895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11711'. [ 1678.010528][ T912] netlink: 'syz.3.11714': attribute type 15 has an invalid length. [ 1678.035387][ T912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11714'. [ 1678.329479][ T957] netlink: 744 bytes leftover after parsing attributes in process `syz.1.11721'. [ 1678.630866][ T975] netlink: 'syz.1.11724': attribute type 4 has an invalid length. [ 1678.664830][ T975] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11724'. [ 1678.948184][ T999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11732'. [ 1678.984220][ T984] syzkaller1: entered promiscuous mode [ 1678.989965][ T984] syzkaller1: entered allmulticast mode [ 1679.001002][ T999] openvswitch: netlink: Flow actions attr not present in new flow. [ 1679.431812][ T1026] netlink: 'syz.4.11739': attribute type 29 has an invalid length. [ 1679.492360][ T1026] netlink: 'syz.4.11739': attribute type 29 has an invalid length. [ 1679.638695][ T1026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.676030][ T1026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1679.700321][ T1026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1679.834866][ T1043] vlan2: entered allmulticast mode [ 1679.841277][ T1043] erspan0: entered allmulticast mode [ 1679.892949][ T1035] : renamed from veth0_to_bond [ 1679.975752][ T1026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.016272][ T1026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1680.049602][ T1026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1680.303232][ T1026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.349607][ T1026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1680.381824][ T1026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1680.488666][ T1026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.531267][ T1026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1680.547785][ T1085] nbd3: detected capacity change from 0 to 63 [ 1680.555699][ T1088] netlink: 'syz.2.11750': attribute type 1 has an invalid length. [ 1680.572872][ T947] block nbd3: Dead connection, failed to find a fallback [ 1680.586299][ T1026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1680.701773][ T1083] bond9: (slave ip6erspan1): making interface the new active one [ 1680.711574][ T1083] bond9: (slave ip6erspan1): Enslaving as an active interface with an up link [ 1680.819290][T28074] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.836374][T28074] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1680.882859][T28074] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1680.939906][T28074] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.960847][T28074] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1680.970612][T28074] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1681.000600][T28074] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.011385][T28074] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1681.020947][T28074] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1681.044235][T28074] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1681.053266][T28074] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1681.066854][T28074] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1681.291821][ T1111] netlink: 'syz.1.11753': attribute type 1 has an invalid length. [ 1681.326643][ T1111] __nla_validate_parse: 3 callbacks suppressed [ 1681.326660][ T1111] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11753'. [ 1681.391262][ T1128] mac80211_hwsim hwsim115 ªªªªª;: renamed from wlan0 [ 1681.723730][ T5821] IPVS: starting estimator thread 0... [ 1681.826966][ T1152] IPVS: using max 33 ests per chain, 79200 per kthread [ 1681.939113][ T1156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11763'. [ 1681.967101][ T1156] netlink: 'syz.2.11763': attribute type 5 has an invalid length. [ 1681.991199][ T1156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11763'. [ 1682.020693][ T1156] geneve7: entered promiscuous mode [ 1682.026072][ T1156] geneve7: entered allmulticast mode [ 1682.034293][T28074] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 256 - 0 [ 1682.044876][T28074] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 256 - 0 [ 1682.058634][T28074] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 256 - 0 [ 1682.070578][T28074] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 256 - 0 [ 1682.184875][ T1177] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1682.379403][ T1184] xt_hashlimit: max too large, truncated to 1048576 [ 1682.397454][ T1181] x_tables: duplicate underflow at hook 2 [ 1682.875117][ T1214] vlan4: entered promiscuous mode [ 1682.914285][ T1214] ip6gretap0: entered promiscuous mode [ 1683.401295][ T1237] netlink: 292 bytes leftover after parsing attributes in process `syz.1.11782'. [ 1683.669944][ T1248] netlink: 'syz.1.11785': attribute type 5 has an invalid length. [ 1683.690905][ T1248] vxcan5: entered promiscuous mode [ 1684.486770][ T1288] syzkaller1: entered promiscuous mode [ 1684.492286][ T1288] syzkaller1: entered allmulticast mode [ 1684.829902][ T1311] netlink: 'syz.0.11798': attribute type 11 has an invalid length. [ 1685.003579][ T1321] netlink: 'syz.0.11800': attribute type 2 has an invalid length. [ 1685.003831][ T1291] netlink: 'syz.3.11795': attribute type 12 has an invalid length. [ 1685.031211][ T1319] xt_hashlimit: overflow, try lower: 64/16140901064495857664 [ 1685.140637][ T1329] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.11801'. [ 1685.158298][ T1329] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1685.359251][ T1337] pim6reg1: entered promiscuous mode [ 1685.364601][ T1337] pim6reg1: entered allmulticast mode [ 1686.321382][ T1391] tipc: Enabling of bearer rejected, media not registered [ 1686.466551][ T1404] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1686.475447][ T1405] netlink: 'syz.4.11815': attribute type 11 has an invalid length. [ 1686.505608][ T1404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11816'. [ 1686.537591][ T1404] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1686.558034][ T1411] netlink: 296 bytes leftover after parsing attributes in process `syz.2.11817'. [ 1686.784982][ T1419] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20003 [ 1687.144436][ T1437] netlink: 'syz.1.11818': attribute type 2 has an invalid length. [ 1687.372306][ T1447] syzkaller1: entered promiscuous mode [ 1687.382489][ T1447] syzkaller1: entered allmulticast mode [ 1687.604841][ T1464] openvswitch: netlink: Message has 2 unknown bytes. [ 1687.619044][ T1464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1687.843101][ T1487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11834'. [ 1687.915059][ T1489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11835'. [ 1687.932500][ T1489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11835'. [ 1689.906786][ T947] block nbd3: shutting down sockets [ 1689.913053][ T947] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1689.924520][ T947] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1689.934459][ T947] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1689.944413][ T947] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1689.952861][ T947] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1689.963107][ T947] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1689.971081][ T947] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1689.980741][ T947] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1689.990717][ T947] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.000483][ T947] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1690.008532][ T947] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.018454][ T947] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1690.027000][ T947] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.036944][ T947] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1690.044716][ T947] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.054788][ T947] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1690.063001][ T947] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.076345][ T947] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1690.084296][ T947] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1690.094132][ T947] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1690.102852][ T947] ldm_validate_partition_table(): Disk read failed. [ 1690.110413][ T947] Dev nbd3: unable to read RDB block 0 [ 1690.116513][ T947] nbd3: unable to read partition table [ 1690.128726][ T947] ldm_validate_partition_table(): Disk read failed. [ 1690.135584][ T947] Dev nbd3: unable to read RDB block 0 [ 1690.142020][ T947] nbd3: unable to read partition table [ 1690.472516][ T1458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1690.483515][ T1469] netlink: 'syz.0.11829': attribute type 1 has an invalid length. [ 1690.507402][ T1469] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.11829'. [ 1690.703786][ T1514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11840'. [ 1690.812233][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11843'. [ 1690.822155][ T1527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11843'. [ 1690.977918][ T29] audit: type=1800 audit(1771468042.844:107): pid=1535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11844" name="memory.events" dev="tmpfs" ino=2811 res=0 errno=0 [ 1691.548711][ T1575] FAULT_INJECTION: forcing a failure. [ 1691.548711][ T1575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1691.594004][ T1555] batman_adv: batadv0: Interface deactivated: macsec1 [ 1691.612962][ T1575] CPU: 0 UID: 0 PID: 1575 Comm: syz.3.11853 Not tainted syzkaller #0 PREEMPT(full) [ 1691.612987][ T1575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1691.613006][ T1575] Call Trace: [ 1691.613013][ T1575] [ 1691.613022][ T1575] dump_stack_lvl+0xe8/0x150 [ 1691.613050][ T1575] should_fail_ex+0x412/0x560 [ 1691.613076][ T1575] _copy_from_user+0x2d/0xb0 [ 1691.613094][ T1575] kstrtouint_from_user+0xd6/0x180 [ 1691.613117][ T1575] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1691.613151][ T1575] proc_fail_nth_write+0x8e/0x210 [ 1691.613172][ T1575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1691.613209][ T1575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1691.613229][ T1575] vfs_write+0x29a/0xb90 [ 1691.613257][ T1575] ? __pfx_vfs_write+0x10/0x10 [ 1691.613276][ T1575] ? __fget_files+0x2a/0x420 [ 1691.613296][ T1575] ? __fget_files+0x3a0/0x420 [ 1691.613312][ T1575] ? __fget_files+0x2a/0x420 [ 1691.613337][ T1575] ksys_write+0x150/0x270 [ 1691.613359][ T1575] ? __pfx_ksys_write+0x10/0x10 [ 1691.613391][ T1575] do_syscall_64+0x14d/0xf80 [ 1691.613411][ T1575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.613427][ T1575] ? trace_irq_disable+0x37/0x100 [ 1691.613444][ T1575] ? clear_bhb_loop+0x40/0x90 [ 1691.613463][ T1575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1691.613480][ T1575] RIP: 0033:0x7f822935cece [ 1691.613496][ T1575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1691.613510][ T1575] RSP: 002b:00007f822a226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1691.613528][ T1575] RAX: ffffffffffffffda RBX: 00007f822a2276c0 RCX: 00007f822935cece [ 1691.613541][ T1575] RDX: 0000000000000001 RSI: 00007f822a2270a0 RDI: 0000000000000004 [ 1691.613551][ T1575] RBP: 00007f822a227090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.613562][ T1575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1691.613572][ T1575] R13: 00007f8229616038 R14: 00007f8229615fa0 R15: 00007ffc16039bf8 [ 1691.613603][ T1575] [ 1691.884699][ T1574] bond8 (unregistering): Released all slaves [ 1691.934593][T30951] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.950196][T30951] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.985341][ T1585] netlink: 'syz.4.11856': attribute type 1 has an invalid length. [ 1692.009676][T30951] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.080403][ T1585] bond10: entered promiscuous mode [ 1692.081535][ T1595] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20004 [ 1692.107221][ T1585] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1692.126314][ T1595] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11857'. [ 1692.156132][T30951] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.191639][ T1595] netlink: 'syz.0.11857': attribute type 1 has an invalid length. [ 1692.210147][ T1595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11857'. [ 1692.255352][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11860'. [ 1692.281803][T28074] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.312797][ T1610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11861'. [ 1692.323932][ T1610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11861'. [ 1692.328574][T28074] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.575936][T28074] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.594754][T28074] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.628190][ T1614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11861'. [ 1692.743176][ T1627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11866'. [ 1692.744184][ T1624] rdma_op ffff8880765cd1f0 conn xmit_rdma 0000000000000000 [ 1693.132688][ T1652] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11870'. [ 1693.179204][ T1655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11871'. [ 1693.381426][ T1662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1693.556820][ T1662] syz_tun: entered allmulticast mode [ 1693.586661][ T1662] macsec0: left allmulticast mode [ 1693.591830][ T1662] dvmrp6: left allmulticast mode [ 1693.657588][ T1679] netlink: 'syz.0.11875': attribute type 12 has an invalid length. [ 1693.680639][ T1679] netlink: 'syz.0.11875': attribute type 12 has an invalid length. [ 1693.689065][ T1681] nftables ruleset with unbound set [ 1693.722859][ T1660] syz_tun: left allmulticast mode [ 1693.788332][ T1693] netem: incorrect gi model size [ 1693.797457][ T1693] netem: change failed [ 1694.095812][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1694.254043][ T1727] dummy0: entered promiscuous mode [ 1694.281376][ T1727] Bluetooth: MGMT ver 1.23 [ 1694.308061][ T1726] dummy0: left promiscuous mode [ 1694.421833][ T29] audit: type=1800 audit(1771468046.284:108): pid=1720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11887" name="cgroup.controllers" dev="tmpfs" ino=2867 res=0 errno=0 [ 1694.498116][ T1739] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1694.519631][ T1737] gretap2: entered promiscuous mode [ 1695.165112][ T1786] ip6_vti0: Caught tx_queue_len zero misconfig [ 1695.217203][ T1780] ip6_vti0: Caught tx_queue_len zero misconfig [ 1696.136926][ T1850] netlink: 'syz.0.11914': attribute type 21 has an invalid length. [ 1696.156854][ T1850] netlink: 'syz.0.11914': attribute type 1 has an invalid length. [ 1696.673720][ T1874] syzkaller0: entered promiscuous mode [ 1696.713408][ T1874] syzkaller0: entered allmulticast mode [ 1696.766579][ T1889] tipc: Enabling of bearer rejected, already enabled [ 1697.301683][ T1921] netlink: 'syz.4.11932': attribute type 322 has an invalid length. [ 1697.492118][ T1933] lo speed is unknown, defaulting to 1000 [ 1697.578943][ T1937] __nla_validate_parse: 12 callbacks suppressed [ 1697.578959][ T1937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11934'. [ 1697.618395][ T1937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11934'. [ 1697.675962][ T1945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11937'. [ 1697.741752][ T1945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11937'. [ 1697.984733][ T1960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11936'. [ 1698.058509][ T1960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11936'. [ 1698.117277][ T1942] lo speed is unknown, defaulting to 1000 [ 1698.123146][ T1933] lo speed is unknown, defaulting to 1000 [ 1698.482009][ T1978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11943'. [ 1698.577948][ T1978] bond8: option updelay: invalid value (18446744072924056005) [ 1698.585653][ T1978] bond8: option updelay: allowed values 0 - 2147483647 [ 1698.604110][ T1978] bond8 (unregistering): Released all slaves [ 1698.707306][ T1933] wlan1 speed is unknown, defaulting to 1000 [ 1698.735192][ T1933] lo speed is unknown, defaulting to 1000 [ 1698.815904][ T1992] netlink: 452 bytes leftover after parsing attributes in process `syz.0.11945'. [ 1698.823515][ T1942] lo speed is unknown, defaulting to 1000 [ 1698.826067][ T1950] lo speed is unknown, defaulting to 1000 [ 1698.963217][ T1995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11946'. [ 1699.009008][ T1999] netlink: get zone limit has 4 unknown bytes [ 1699.125307][ T1995] syzkaller1: entered promiscuous mode [ 1699.136347][ T1995] syzkaller1: entered allmulticast mode [ 1699.281228][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11948'. [ 1699.533212][ T1942] wlan1 speed is unknown, defaulting to 1000 [ 1699.550875][ T1950] lo speed is unknown, defaulting to 1000 [ 1699.560725][ T2013] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1699.573111][ T1942] lo speed is unknown, defaulting to 1000 [ 1699.659160][ T2013] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1699.826251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1699.834320][ C0] lec:lec_tx_timeout: lec0 [ 1699.980429][ T2030] netlink: 'syz.0.11953': attribute type 6 has an invalid length. [ 1700.426916][ T1950] wlan1 speed is unknown, defaulting to 1000 [ 1700.509938][ T2061] "syz.2.11959" (2061) uses obsolete ecb(arc4) skcipher [ 1700.522131][ T1950] lo speed is unknown, defaulting to 1000 [ 1700.881295][ T2065] lo speed is unknown, defaulting to 1000 [ 1701.762193][ T2065] lo speed is unknown, defaulting to 1000 [ 1701.870646][ T2121] tipc: Resetting bearer [ 1701.969832][ T2123] mac80211_hwsim hwsim115 syzkaller0: left promiscuous mode [ 1701.987227][ T2123] mac80211_hwsim hwsim115 syzkaller0: left allmulticast mode [ 1702.005109][ T2123] tipc: Resetting bearer [ 1702.164083][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1702.175536][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1702.185492][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1702.197722][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1702.205435][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1702.414318][ T2125] lo speed is unknown, defaulting to 1000 [ 1702.421838][ T2065] wlan1 speed is unknown, defaulting to 1000 [ 1702.468118][ T2065] lo speed is unknown, defaulting to 1000 [ 1703.193326][ T2145] __nla_validate_parse: 9 callbacks suppressed [ 1703.193345][ T2145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11972'. [ 1703.327229][ T2147] netlink: 'syz.4.11973': attribute type 1 has an invalid length. [ 1703.341680][ T2147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11973'. [ 1703.358885][ T2147] netlink: 'syz.4.11973': attribute type 1 has an invalid length. [ 1703.562138][ T2125] lo speed is unknown, defaulting to 1000 [ 1703.805731][ T2160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1703.870610][ T2163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1703.888517][ T2163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1703.958364][ T2166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1703.965661][ T2166] IPv6: NLM_F_CREATE should be set when creating new route [ 1703.972950][ T2166] IPv6: NLM_F_CREATE should be set when creating new route [ 1704.009619][ T2166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1704.120289][ T2160] bond11: entered promiscuous mode [ 1704.157182][ T2160] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1704.306744][ T5833] Bluetooth: hci2: command tx timeout [ 1704.378244][ T2175] netlink: 'syz.4.11976': attribute type 1 has an invalid length. [ 1704.386098][ T2175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11976'. [ 1704.408334][ T2125] wlan1 speed is unknown, defaulting to 1000 [ 1704.415912][ T2125] lo speed is unknown, defaulting to 1000 [ 1704.609990][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11978'. [ 1704.738477][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11978'. [ 1704.817630][ T2180] vlan3: entered promiscuous mode [ 1705.251342][ T2213] tipc: Resetting bearer [ 1705.312188][ T2217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11982'. [ 1705.488474][ T2205] lo speed is unknown, defaulting to 1000 [ 1705.513996][T30959] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.525638][T30959] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1705.534773][T30959] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1705.590008][T30959] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.608735][T30959] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1705.618190][T30959] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1705.626970][T30959] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.635321][T30959] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1705.644221][T30959] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1705.693717][T30959] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1705.702664][T30959] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1705.712295][T30959] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1705.810124][ T2205] lo speed is unknown, defaulting to 1000 [ 1706.397037][ T5833] Bluetooth: hci2: command tx timeout [ 1706.495586][ T2232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.524005][ T2232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.757216][ T2232] team1: left promiscuous mode [ 1706.762042][ T2232] team1: left allmulticast mode [ 1706.774197][ T2232] geneve3: left promiscuous mode [ 1706.785743][ T2232] ip6gretap1: left promiscuous mode [ 1706.794883][ T2232] ip6gretap1: left allmulticast mode [ 1706.810214][ T2232] ip6erspan0: left allmulticast mode [ 1706.825606][ T2232] veth1: left promiscuous mode [ 1706.834605][ T2232] bond4: left promiscuous mode [ 1706.843973][ T2232] bond5: left promiscuous mode [ 1706.857606][ T2232] geneve4: left promiscuous mode [ 1706.872360][ T2232] hsr0: left allmulticast mode [ 1706.880563][ T2232] hsr_slave_0: left allmulticast mode [ 1706.885966][ T2232] hsr_slave_1: left allmulticast mode [ 1706.891987][ T2232] macvlan2: left allmulticast mode [ 1706.905558][ T2232] vxcan1: left allmulticast mode [ 1706.942516][ T2232] bond6: left promiscuous mode [ 1706.966713][ T2232] wireguard0: left promiscuous mode [ 1707.049019][ T2232] team0: left promiscuous mode [ 1707.054230][ T2232] team0: left allmulticast mode [ 1707.067233][ T2232] team2: left promiscuous mode [ 1707.072043][ T2232] team2: left allmulticast mode [ 1707.120128][ T2232] ip6gretap2: left promiscuous mode [ 1707.125345][ T2232] ip6gretap2: left allmulticast mode [ 1707.157186][ T2232] geneve6: left promiscuous mode [ 1707.162158][ T2232] geneve6: left allmulticast mode [ 1707.197342][ T2232] geneve7: left promiscuous mode [ 1707.202302][ T2232] geneve7: left allmulticast mode [ 1707.228754][ T2125] chnl_net:caif_netlink_parms(): no params data found [ 1707.242304][ T2237] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11986'. [ 1707.252258][ T2237] tipc: Enabling of bearer rejected, media not registered [ 1707.262398][ T2205] wlan1 speed is unknown, defaulting to 1000 [ 1707.277102][T28074] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.296791][T28074] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.305553][T28074] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 58988 - 0 [ 1707.315024][T28074] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1707.325983][T28074] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 256 - 0 [ 1707.351571][ T2205] lo speed is unknown, defaulting to 1000 [ 1707.357969][T28074] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.368775][T28074] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.386239][T28074] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 58988 - 0 [ 1707.401128][T28074] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1707.416921][T28074] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 256 - 0 [ 1707.438678][ T2249] pim6reg: entered allmulticast mode [ 1707.472719][ T2258] netlink: 'syz.2.11987': attribute type 58 has an invalid length. [ 1707.483112][ T2248] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.527225][ T2248] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.568487][ T2248] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 58988 - 0 [ 1707.597169][ T2248] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1707.626636][ T2248] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 1707.663491][T28074] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.691818][T28074] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.717729][T28074] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 58988 - 0 [ 1707.736933][T28074] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 1707.752587][ T2264] netlink: 'syz.1.11991': attribute type 1 has an invalid length. [ 1707.755924][T28074] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 256 - 0 [ 1707.854399][ T2264] bond5: entered promiscuous mode [ 1707.862901][ T2264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1707.908277][ T2270] bond5: (slave veth5): making interface the new active one [ 1707.916907][ T2270] veth5: entered promiscuous mode [ 1707.923124][ T2270] bond5: (slave veth5): Enslaving as an active interface with an up link [ 1708.035708][ T2262] lo speed is unknown, defaulting to 1000 [ 1708.176133][ T2125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.196699][ T2125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.204078][ T2125] bridge_slave_0: entered allmulticast mode [ 1708.217913][ T2125] bridge_slave_0: entered promiscuous mode [ 1708.238187][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.245328][ T2125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.267040][ T2125] bridge_slave_1: entered allmulticast mode [ 1708.274135][ T2125] bridge_slave_1: entered promiscuous mode [ 1708.304189][ T2262] lo speed is unknown, defaulting to 1000 [ 1708.344486][ T2125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.359379][ T2125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.402037][ T2125] team0: Port device team_slave_0 added [ 1708.412160][ T2125] team0: Port device team_slave_1 added [ 1708.456998][ T2125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.464131][ T2125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.492082][ T2125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.499117][ T5833] Bluetooth: hci2: command tx timeout [ 1708.514070][ T2125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.528125][ T2125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.555496][ T2125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.571912][ T2262] wlan1 speed is unknown, defaulting to 1000 [ 1708.673133][ T2262] lo speed is unknown, defaulting to 1000 [ 1708.725362][ T2125] hsr_slave_0: entered promiscuous mode [ 1708.743059][ T2125] hsr_slave_1: entered promiscuous mode [ 1708.750056][ T2125] debugfs: 'hsr0' already exists in 'hsr' [ 1708.755877][ T2125] Cannot create hsr debugfs directory [ 1709.000992][ T2125] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.100099][ T2125] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.215673][ T2125] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.353214][ T2125] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1709.793376][ T2294] bridge7: entered allmulticast mode [ 1709.871529][ T2296] netlink: 'syz.3.11996': attribute type 2 has an invalid length. [ 1709.972950][ T2305] netlink: 'syz.3.11999': attribute type 7 has an invalid length. [ 1709.984204][ T2305] netlink: 'syz.3.11999': attribute type 7 has an invalid length. [ 1710.152480][ T2315] syzkaller0: entered promiscuous mode [ 1710.158300][ T2315] syzkaller0: entered allmulticast mode [ 1710.556794][ T5833] Bluetooth: hci2: command tx timeout [ 1710.979300][ T2281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1710.992531][ T2125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1711.097890][ T2125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1711.122327][ T2320] rdma_rxe: rxe_newlink: failed to add lo [ 1711.141280][ T2125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1711.167737][ T2125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1711.305829][ T2342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1711.425610][ T2350] __nla_validate_parse: 1 callbacks suppressed [ 1711.425629][ T2350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12009'. [ 1711.463030][ T2350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12009'. [ 1711.503094][ T2125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.586846][ T2125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1711.613038][T28074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.620282][T28074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1711.683063][T20894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.690321][T20894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.772295][ T2125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1711.793089][ T2125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1712.154712][ T2125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.232653][ T2125] veth0_vlan: entered promiscuous mode [ 1712.270287][ T2125] veth1_vlan: entered promiscuous mode [ 1712.285065][ T2389] macsec0: entered promiscuous mode [ 1712.305601][ T2389] macsec0: left promiscuous mode [ 1712.418171][ T2125] veth0_macvtap: entered promiscuous mode [ 1712.464018][ T2125] veth1_macvtap: entered promiscuous mode [ 1712.618646][ T2125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.639588][ T2125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.655995][T28074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.668606][T28074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.683323][ T2425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12022'. [ 1712.728781][T28074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.739000][T28074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.750292][ T2426] mac80211_hwsim hwsim115 syzkaller0: entered promiscuous mode [ 1712.765841][ T2426] mac80211_hwsim hwsim115 syzkaller0: entered allmulticast mode [ 1712.774733][ T2426] tipc: Resetting bearer [ 1713.047385][ T2435] IPv6: sit4: Disabled Multicast RS [ 1713.087133][T20894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.117471][T20894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.182164][T28074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.200647][T28074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.414388][ T2458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12025'. [ 1713.454438][ T2462] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.11970'. [ 1713.569038][ T2466] bond1: option arp_interval: invalid value (18446744073709551615) [ 1713.587869][ T2466] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1713.655716][ T2466] bond1 (unregistering): Released all slaves [ 1713.913887][ T2487] netlink: 'syz.1.12031': attribute type 12 has an invalid length. [ 1713.957600][ T2487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12031'. [ 1714.061273][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1714.080115][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1714.094331][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1714.108561][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1714.126869][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1714.241738][ T2502] lo speed is unknown, defaulting to 1000 [ 1714.627284][ T2502] lo speed is unknown, defaulting to 1000 [ 1714.875019][ T2502] wlan1 speed is unknown, defaulting to 1000 [ 1714.887056][ T2502] lo speed is unknown, defaulting to 1000 [ 1715.113069][ T2502] chnl_net:caif_netlink_parms(): no params data found [ 1715.183494][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.190969][ T2502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.198433][ T2502] bridge_slave_0: entered allmulticast mode [ 1715.205620][ T2502] bridge_slave_0: entered promiscuous mode [ 1715.214137][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.221418][ T2502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.229179][ T2502] bridge_slave_1: entered allmulticast mode [ 1715.237364][ T2502] bridge_slave_1: entered promiscuous mode [ 1715.267674][ T2502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.279603][ T2502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.308488][ T2502] team0: Port device team_slave_0 added [ 1715.316114][ T2502] team0: Port device team_slave_1 added [ 1715.340284][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.347917][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.374435][ T2502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.387278][ T2502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.394227][ T2502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.420743][ T2502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.462508][ T2502] hsr_slave_0: entered promiscuous mode [ 1715.468883][ T2502] hsr_slave_1: entered promiscuous mode [ 1715.475032][ T2502] debugfs: 'hsr0' already exists in 'hsr' [ 1715.481522][ T2502] Cannot create hsr debugfs directory [ 1716.236760][ T5833] Bluetooth: hci4: command tx timeout [ 1717.225660][ T2517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1717.244741][ T2530] tipc: Enabling of bearer rejected, failed to enable media [ 1717.299889][ T2502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1717.388193][ T2502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1717.448520][ T2502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1717.450031][ T2599] sctp: [Deprecated]: syz.2.12048 (pid 2599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1717.450031][ T2599] Use struct sctp_sack_info instead [ 1717.484785][ T2602] netlink: 'syz.1.12051': attribute type 1 has an invalid length. [ 1717.501180][ T2502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1717.570019][ T2607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1717.625477][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12052'. [ 1717.796001][ T2627] lo speed is unknown, defaulting to 1000 [ 1717.870788][ T2502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1718.045953][ T2502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.073914][T30959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.081138][T30959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.156764][T30948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.163960][T30948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.307536][ T5833] Bluetooth: hci4: command tx timeout [ 1718.355810][ T2502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1718.661874][ T2633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1718.718739][ T2074] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 181 sec [ 1718.743792][ T2502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.910111][ T2627] lo speed is unknown, defaulting to 1000 [ 1718.916646][ T2648] lo speed is unknown, defaulting to 1000 [ 1719.318210][ T2502] veth0_vlan: entered promiscuous mode [ 1719.371267][ T2502] veth1_vlan: entered promiscuous mode [ 1719.463598][ T2502] veth0_macvtap: entered promiscuous mode [ 1719.499436][ T2502] veth1_macvtap: entered promiscuous mode [ 1719.531971][ T2627] wlan1 speed is unknown, defaulting to 1000 [ 1719.540425][ T2648] lo speed is unknown, defaulting to 1000 [ 1719.563529][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.603757][ T2502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.624497][ T2627] lo speed is unknown, defaulting to 1000 [ 1719.634585][T30959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.650156][T30959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.682459][T30959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.813503][ T2735] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 1719.851888][ T2735] bond5 (unregistering): Released all slaves [ 1719.901456][T30959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.180527][T30959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.197526][T30959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.295304][ T2648] wlan1 speed is unknown, defaulting to 1000 [ 1720.325373][ T2648] lo speed is unknown, defaulting to 1000 [ 1720.346058][ T2762] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 1720.355589][T30959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.382264][T30959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.390884][ T5833] Bluetooth: hci4: command tx timeout [ 1721.166768][ T2799] netlink: 'syz.4.12075': attribute type 32 has an invalid length. [ 1721.174715][ T2799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12075'. [ 1721.621543][ T2799] bond1: option coupled_control: invalid value (84) [ 1721.648471][ T2799] bond1 (unregistering): Released all slaves [ 1721.894905][ T2819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12078'. [ 1721.943313][ T2819] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12078'. [ 1722.469674][ T5833] Bluetooth: hci4: command tx timeout [ 1722.606102][ T2842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12081'. [ 1722.616779][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12081'. [ 1722.842474][ T2860] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1722.865695][ T2860] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1722.884375][ T2860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12082'. [ 1722.929817][ T2860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12082'. [ 1723.760676][ T2900] gretap2: entered allmulticast mode [ 1724.268029][ T2949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12101'. [ 1724.410564][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1724.450627][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1724.481463][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1724.547277][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1725.086938][ T2992] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1725.113222][ T2986] netlink: 'syz.0.12110': attribute type 4 has an invalid length. [ 1725.136947][ T2986] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12110'. [ 1725.303781][ T3008] lo speed is unknown, defaulting to 1000 [ 1725.792089][ T3008] lo speed is unknown, defaulting to 1000 [ 1725.825410][ T3032] netlink: 'syz.0.12122': attribute type 39 has an invalid length. [ 1726.321861][ T3058] tipc: Started in network mode [ 1726.346684][ T3058] tipc: Node identity b68b27386869, cluster identity 4711 [ 1726.353990][ T3058] tipc: Enabled bearer , priority 0 [ 1726.378409][ T3073] syzkaller0: entered promiscuous mode [ 1726.383998][ T3073] syzkaller0: entered allmulticast mode [ 1726.459817][ T3008] wlan1 speed is unknown, defaulting to 1000 [ 1726.481095][ T3008] lo speed is unknown, defaulting to 1000 [ 1726.490632][ T3058] tipc: Resetting bearer [ 1726.545198][ T3056] tipc: Resetting bearer [ 1726.621403][ T3056] tipc: Disabling bearer [ 1726.676969][ T3061] lo speed is unknown, defaulting to 1000 [ 1727.170359][ T3105] syzkaller0: entered promiscuous mode [ 1727.175872][ T3105] syzkaller0: entered allmulticast mode [ 1727.186151][ T3110] batadv_slave_0: entered promiscuous mode [ 1729.276894][ T3109] batadv_slave_0: left promiscuous mode [ 1729.285451][ T3061] lo speed is unknown, defaulting to 1000 [ 1729.884672][ T3159] netlink: 'syz.1.12142': attribute type 2 has an invalid length. [ 1730.033984][ T3061] wlan1 speed is unknown, defaulting to 1000 [ 1730.051283][ T3061] lo speed is unknown, defaulting to 1000 [ 1730.162885][ T3169] netlink: 'syz.0.12144': attribute type 1 has an invalid length. [ 1730.234030][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1730.256372][ T3171] __nla_validate_parse: 1 callbacks suppressed [ 1730.256389][ T3171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12144'. [ 1730.366863][ T3151] siw: device registration error -23 [ 1730.691514][ T3194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12147'. [ 1730.797187][ T3197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12148'. [ 1731.097787][ T3211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12151'. [ 1731.383382][ T3222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.475556][ T3222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12154'. [ 1732.027939][ T3249] netlink: 'syz.4.12160': attribute type 1 has an invalid length. [ 1732.049943][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12160'. [ 1732.390437][ T3273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12166'. [ 1732.411679][ T3273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12166'. [ 1732.444226][ T3273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12166'. [ 1732.479802][ T3273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12166'. [ 1732.741325][ T3306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1733.323153][ T3340] lo speed is unknown, defaulting to 1000 [ 1733.324475][ T3342] netlink: 'syz.3.12181': attribute type 1 has an invalid length. [ 1733.377500][ T3342] bond5: entered promiscuous mode [ 1733.383109][ T3342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1733.540907][ T3348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1733.618178][ T3348] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1733.676602][ T3348] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1733.807513][ T3348] bond5: (slave wireguard0): making interface the new active one [ 1733.836796][ T3348] wireguard0: entered promiscuous mode [ 1733.848960][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1733.857050][ T3348] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 1733.885977][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1733.895886][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1733.905423][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1733.915024][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1733.928180][ T3340] lo speed is unknown, defaulting to 1000 [ 1734.036572][ T3355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1734.302828][ T3352] lo speed is unknown, defaulting to 1000 [ 1734.451184][ T3371] tipc: Enabled bearer , priority 0 [ 1734.469301][ T3371] syzkaller0: entered promiscuous mode [ 1734.474808][ T3371] syzkaller0: entered allmulticast mode [ 1734.499870][ T3371] tipc: Resetting bearer [ 1734.511549][ T3370] tipc: Resetting bearer [ 1734.556037][ T3370] tipc: Disabling bearer [ 1734.621847][ T3340] wlan1 speed is unknown, defaulting to 1000 [ 1734.638187][ T3340] lo speed is unknown, defaulting to 1000 [ 1734.757834][ T3384] syzkaller0: entered promiscuous mode [ 1734.773854][ T3384] syzkaller0: entered allmulticast mode [ 1734.918145][ T3352] lo speed is unknown, defaulting to 1000 [ 1734.924968][ T3359] lo speed is unknown, defaulting to 1000 [ 1735.618860][ T3352] wlan1 speed is unknown, defaulting to 1000 [ 1735.625416][ T3359] lo speed is unknown, defaulting to 1000 [ 1735.649141][ T3352] lo speed is unknown, defaulting to 1000 [ 1735.715481][ T3427] syzkaller0: entered promiscuous mode [ 1735.722223][ T3427] syzkaller0: entered allmulticast mode [ 1735.733658][ T3427] 0: reclassify loop, rule prio 0, protocol 800 [ 1735.826332][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1735.834431][ C0] lec:lec_tx_timeout: lec0 [ 1735.991770][ T5833] Bluetooth: hci0: command tx timeout [ 1736.391059][ T3450] __nla_validate_parse: 3 callbacks suppressed [ 1736.391079][ T3450] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12200'. [ 1736.676462][ T3359] wlan1 speed is unknown, defaulting to 1000 [ 1736.792763][ T3359] lo speed is unknown, defaulting to 1000 [ 1736.885882][ T3469] netlink: 'syz.0.12203': attribute type 178 has an invalid length. [ 1737.788775][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12211'. [ 1737.998600][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12214'. [ 1738.047963][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12213'. [ 1738.048991][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12213'. [ 1738.081685][ T5820] Bluetooth: hci0: command tx timeout [ 1738.228996][ T3539] netlink: 'syz.3.12215': attribute type 21 has an invalid length. [ 1738.331686][ T3523] lo speed is unknown, defaulting to 1000 [ 1738.331781][ T3539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12215'. [ 1738.809099][ T3359] chnl_net:caif_netlink_parms(): no params data found [ 1739.001215][ T3558] lo speed is unknown, defaulting to 1000 [ 1739.036499][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.043756][ T3359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.056535][ T3359] bridge_slave_0: entered allmulticast mode [ 1739.063660][ T3359] bridge_slave_0: entered promiscuous mode [ 1739.088950][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.096096][ T3359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.116779][ T3359] bridge_slave_1: entered allmulticast mode [ 1739.128757][ T3359] bridge_slave_1: entered promiscuous mode [ 1739.203712][ T3359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.252037][ T3359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.351666][ T3359] team0: Port device team_slave_0 added [ 1739.371329][ T3359] team0: Port device team_slave_1 added [ 1739.443835][ T3562] lo speed is unknown, defaulting to 1000 [ 1739.451451][ T3359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.466520][ T3359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.520449][ T3359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.550219][ T3359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.566677][ T3359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.599347][ T3359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.674004][ T3359] hsr_slave_0: entered promiscuous mode [ 1739.687992][ T3359] hsr_slave_1: entered promiscuous mode [ 1739.694765][ T3359] debugfs: 'hsr0' already exists in 'hsr' [ 1739.701337][ T3359] Cannot create hsr debugfs directory [ 1739.835584][ T3562] lo speed is unknown, defaulting to 1000 [ 1740.021726][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12225'. [ 1740.148384][ T5820] Bluetooth: hci0: command tx timeout [ 1740.262456][ T3562] wlan1 speed is unknown, defaulting to 1000 [ 1740.274060][ T3523] lo speed is unknown, defaulting to 1000 [ 1740.368534][ T3562] lo speed is unknown, defaulting to 1000 [ 1740.678977][ T3359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1740.710350][ T3359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1740.741149][ T3359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1740.810898][ T3359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1740.971739][ T3628] tipc: Enabled bearer , priority 0 [ 1741.024858][ T3628] syzkaller0: entered promiscuous mode [ 1741.046729][ T3628] syzkaller0: entered allmulticast mode [ 1741.211473][ T3628] tipc: Resetting bearer [ 1741.239389][ T3627] tipc: Resetting bearer [ 1741.270830][ T3627] tipc: Disabling bearer [ 1741.294511][ T3558] lo speed is unknown, defaulting to 1000 [ 1741.301256][ T3523] wlan1 speed is unknown, defaulting to 1000 [ 1741.410837][ T3523] lo speed is unknown, defaulting to 1000 [ 1741.462471][ T3359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.511492][ T3359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.550169][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.557374][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.587761][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.594921][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.672543][ T3359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1741.982911][ T3558] wlan1 speed is unknown, defaulting to 1000 [ 1742.045983][ T3558] lo speed is unknown, defaulting to 1000 [ 1742.124302][ T3359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.226673][ T5820] Bluetooth: hci0: command tx timeout [ 1742.288457][ T3359] veth0_vlan: entered promiscuous mode [ 1742.329777][ T3359] veth1_vlan: entered promiscuous mode [ 1742.399117][ T3359] veth0_macvtap: entered promiscuous mode [ 1742.431761][ T3359] veth1_macvtap: entered promiscuous mode [ 1742.453354][ T3650] siw: device registration error -23 [ 1742.665714][ T3359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.981659][ T3359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1743.140675][ T3678] lo speed is unknown, defaulting to 1000 [ 1743.399304][T30949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.447530][T30949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.457698][T30949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.551080][T30949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.785514][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.794290][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1743.851839][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.878681][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.087447][ T3678] lo speed is unknown, defaulting to 1000 [ 1744.260329][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1744.598131][ T3714] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1744.629982][ T3712] lo speed is unknown, defaulting to 1000 [ 1744.702964][ T3723] netlink: zone id is out of range [ 1744.709694][ T3723] netlink: zone id is out of range [ 1744.715028][ T3723] netlink: zone id is out of range [ 1744.723513][ T3723] netlink: zone id is out of range [ 1744.731553][ T3723] netlink: zone id is out of range [ 1744.738735][ T3723] netlink: zone id is out of range [ 1744.743974][ T3723] netlink: zone id is out of range [ 1744.760282][ T3723] netlink: zone id is out of range [ 1744.770937][ T3723] netlink: zone id is out of range [ 1744.817575][ T3725] ÿ: renamed from bond_slave_0 (while UP) [ 1745.083422][ T3712] lo speed is unknown, defaulting to 1000 [ 1745.147030][ T3678] wlan1 speed is unknown, defaulting to 1000 [ 1745.175543][ T3678] lo speed is unknown, defaulting to 1000 [ 1745.446671][ T3750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.864335][ T3712] wlan1 speed is unknown, defaulting to 1000 [ 1745.920904][ T3712] lo speed is unknown, defaulting to 1000 [ 1746.741017][ T3784] wg1: entered promiscuous mode [ 1746.749141][ T3784] wg1: entered allmulticast mode [ 1746.770663][ T3791] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1747.069301][ T3799] syzkaller0: entered promiscuous mode [ 1747.074814][ T3799] syzkaller0: entered allmulticast mode [ 1747.610097][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12262'. [ 1748.214594][ T3845] dvmrp2: entered allmulticast mode [ 1748.275668][ T3848] veth1: left promiscuous mode [ 1748.280660][ T3848] veth1: left allmulticast mode [ 1748.289139][ T3848] veth1_vlan: left allmulticast mode [ 1748.318257][ T3848] batadv1: left promiscuous mode [ 1748.327786][ T3848] batadv1: left allmulticast mode [ 1748.336885][ T3848] macsec1: left promiscuous mode [ 1748.358630][ T3848] macsec1: left allmulticast mode [ 1748.381577][ T3848] geneve2: left promiscuous mode [ 1748.389965][ T3848] geneve2: left allmulticast mode [ 1748.401076][ T3848] sit1: left promiscuous mode [ 1748.407037][ T3848] team1: left promiscuous mode [ 1748.443552][ T3848] team1: left allmulticast mode [ 1748.480767][ T3848] team2: left promiscuous mode [ 1748.485590][ T3848] team2: left allmulticast mode [ 1748.526818][ T3848] bond2: left promiscuous mode [ 1748.531635][ T3848] veth9: left promiscuous mode [ 1748.563735][ T3848] geneve3: left promiscuous mode [ 1748.576351][ T3848] geneve3: left allmulticast mode [ 1748.589571][ T3848] bond3: left promiscuous mode [ 1748.599948][ T3848] bridge5: left promiscuous mode [ 1748.624985][ T3848] ip6gre3: left promiscuous mode [ 1748.651636][ T3848] ip6gre3: left allmulticast mode [ 1748.823609][ T3848] bridge7: left allmulticast mode [ 1748.855978][ T3848] bond5: left promiscuous mode [ 1748.871014][ T3848] wireguard0: left promiscuous mode [ 1748.975579][ T3883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12274'. [ 1748.993804][ T3886] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12273'. [ 1749.060427][ T3886] caif0: entered promiscuous mode [ 1749.328532][ T3906] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12276'. [ 1749.348417][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12277'. [ 1749.455141][ T3919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12278'. [ 1749.455163][ T3918] netlink: 'syz.3.12279': attribute type 2 has an invalid length. [ 1749.484956][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12279'. [ 1749.684421][ T3906] syzkaller0: entered promiscuous mode [ 1749.701286][ T3906] syzkaller0: entered allmulticast mode [ 1749.761106][ T3932] netlink: 'syz.1.12281': attribute type 1 has an invalid length. [ 1749.833172][ T3935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12281'. [ 1750.096576][ T3952] netlink: 'syz.3.12284': attribute type 21 has an invalid length. [ 1750.136736][ T3952] IPv6: NLM_F_CREATE should be specified when creating new route [ 1750.144577][ T3952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.151864][ T3952] IPv6: NLM_F_CREATE should be set when creating new route [ 1750.159138][ T3952] IPv6: NLM_F_CREATE should be set when creating new route [ 1750.166403][ T3952] IPv6: NLM_F_CREATE should be set when creating new route [ 1752.269611][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12286'. [ 1752.279180][ T3967] batadv_slave_1: entered promiscuous mode [ 1752.285124][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12286'. [ 1752.303855][ T3969] batadv_slave_0: entered promiscuous mode [ 1752.320112][ T3969] batman_adv: batadv0: Adding interface: macsec1 [ 1752.328320][ T3969] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.379929][ T3969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.393703][ T3969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.407099][ T3969] batman_adv: batadv0: Interface activated: macsec1 [ 1752.516034][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12290'. [ 1752.558460][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12289'. [ 1752.802350][ T3987] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12291'. [ 1752.874707][ T3987] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1752.887815][ T3987] 0ªî{X¹¦: entered allmulticast mode [ 1752.893986][ T3987] net_ratelimit: 392 callbacks suppressed [ 1752.894005][ T3987] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1753.000282][ T4010] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 1753.012663][ T4012] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 1753.144549][ T4017] Cannot find add_set index 0 as target [ 1753.301273][ T4007] lo speed is unknown, defaulting to 1000 [ 1753.350770][ T4018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1753.763166][ T4047] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 1753.987803][ T4007] lo speed is unknown, defaulting to 1000 [ 1754.254176][ T4076] ..0ªî{X¹¦: renamed from gretap0 [ 1754.256699][ T4078] netlink: 'syz.2.12311': attribute type 1 has an invalid length. [ 1754.298558][ T4076] ..0ªî{X¹¦: entered allmulticast mode [ 1754.305927][ T4076] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1754.474548][ T4007] wlan1 speed is unknown, defaulting to 1000 [ 1754.477154][ T4087] nbd2: detected capacity change from 0 to 63 [ 1754.489406][ T4028] block nbd2: Dead connection, failed to find a fallback [ 1754.509775][ T4007] lo speed is unknown, defaulting to 1000 [ 1755.367011][ T4145] __nla_validate_parse: 6 callbacks suppressed [ 1755.367028][ T4145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1755.392138][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12326'. [ 1755.452235][ T4145] batadv2: entered promiscuous mode [ 1755.465789][ T4145] batadv2: entered allmulticast mode [ 1755.475680][ T4145] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1755.748855][ T4161] xt_connbytes: Forcing CT accounting to be enabled [ 1756.192854][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1756.204553][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1756.215537][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1756.237877][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1756.247920][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1756.432192][ T4183] lo speed is unknown, defaulting to 1000 [ 1756.449391][ T4192] openvswitch: netlink: IP tunnel dst address not specified [ 1756.851161][ T4205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.049744][ T4183] lo speed is unknown, defaulting to 1000 [ 1757.135816][ T4205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.306141][ T4205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.326730][ T4221] sctp: [Deprecated]: syz.4.12344 (pid 4221) Use of int in max_burst socket option deprecated. [ 1757.326730][ T4221] Use struct sctp_assoc_value instead [ 1757.502563][ T4231] netlink: 'syz.4.12347': attribute type 1 has an invalid length. [ 1757.514103][ T4205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.516784][ T4231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12347'. [ 1757.550291][ T4183] wlan1 speed is unknown, defaulting to 1000 [ 1757.560478][ T4183] lo speed is unknown, defaulting to 1000 [ 1757.561550][ T4231] netlink: 'syz.4.12347': attribute type 1 has an invalid length. [ 1757.574645][ T4228] tipc: Started in network mode [ 1757.606742][ T4228] tipc: Node identity b63e882a48e2, cluster identity 4711 [ 1757.614067][ T4228] tipc: Enabled bearer , priority 0 [ 1757.653511][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12348'. [ 1757.660748][ T4231] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1757.667233][ T4235] syzkaller0: entered promiscuous mode [ 1757.717219][ T4235] syzkaller0: entered allmulticast mode [ 1757.821304][ T4228] tipc: Resetting bearer [ 1757.858418][ T4224] tipc: Resetting bearer [ 1757.886023][ T4256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12350'. [ 1757.965730][ T4224] tipc: Disabling bearer [ 1758.101674][ T3059] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.133433][ T3059] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.187270][ T4266] bridge0: entered promiscuous mode [ 1758.198924][ T4266] macsec1: entered promiscuous mode [ 1758.230583][ T3054] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.283004][ T3054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.331779][ T4276] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1758.373021][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1758.400577][ T4276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1758.410498][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1758.423107][ T4276] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1758.447097][ T4285] netlink: 'syz.0.12356': attribute type 1 has an invalid length. [ 1758.464127][ T4277] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1758.467089][ T5833] Bluetooth: hci1: command tx timeout [ 1758.481477][ T4277] bond1 (unregistering): Released all slaves [ 1758.515849][ T4288] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1758.913207][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 1758.924095][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1759.203108][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.212825][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.220360][ T4183] bridge_slave_0: entered allmulticast mode [ 1759.229868][ T4183] bridge_slave_0: entered promiscuous mode [ 1759.236620][ T4334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.249170][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.256558][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.264449][ T4183] bridge_slave_1: entered allmulticast mode [ 1759.272397][ T4183] bridge_slave_1: entered promiscuous mode [ 1759.317233][ T4338] netlink: 'syz.3.12364': attribute type 1 has an invalid length. [ 1759.357444][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.419019][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.554799][ T4183] team0: Port device team_slave_0 added [ 1759.589988][ T4183] team0: Port device team_slave_1 added [ 1759.731008][ T4360] vcan0: tx address claim with dlc 0 [ 1759.770432][ T4357] bond1: Unable to set up delay as MII monitoring is disabled [ 1759.799589][ T4357] bond1 (unregistering): Released all slaves [ 1759.840251][ T4366] Bluetooth: MGMT ver 1.23 [ 1759.857374][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.864684][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.892630][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.907991][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.915216][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.942381][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.052511][ T4371] netlink: 'syz.3.12369': attribute type 9 has an invalid length. [ 1760.065582][ T4367] lo speed is unknown, defaulting to 1000 [ 1760.074443][ T4377] netlink: 'syz.0.12371': attribute type 1 has an invalid length. [ 1760.141908][ T4377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1760.157866][ T4183] hsr_slave_0: entered promiscuous mode [ 1760.167561][ T4183] hsr_slave_1: entered promiscuous mode [ 1760.186586][ T4183] debugfs: 'hsr0' already exists in 'hsr' [ 1760.195330][ T4183] Cannot create hsr debugfs directory [ 1760.267687][ T4375] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1760.547416][ T5833] Bluetooth: hci1: command tx timeout [ 1760.559908][ T4396] netlink: 'syz.2.12377': attribute type 1 has an invalid length. [ 1760.624955][ T4367] lo speed is unknown, defaulting to 1000 [ 1760.777160][ T4396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1760.840090][ T4401] bond1: (slave geneve2): making interface the new active one [ 1760.849810][ T4401] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1761.051431][ T4412] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1761.059394][ T24] IPVS: starting estimator thread 0... [ 1761.146795][ T4425] IPVS: using max 32 ests per chain, 76800 per kthread [ 1761.215730][ T4416] lo speed is unknown, defaulting to 1000 [ 1761.251473][ T4367] wlan1 speed is unknown, defaulting to 1000 [ 1761.279878][ T4367] lo speed is unknown, defaulting to 1000 [ 1761.814267][ T4416] lo speed is unknown, defaulting to 1000 [ 1761.997003][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1762.068001][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1762.101876][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1762.108176][ T4459] Unsupported ieee802154 address type: 0 [ 1762.157941][ T4462] netlink: 'syz.4.12389': attribute type 58 has an invalid length. [ 1762.166618][ T4462] __nla_validate_parse: 6 callbacks suppressed [ 1762.166633][ T4462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12389'. [ 1762.225820][ T4468] netlink: 'syz.4.12389': attribute type 58 has an invalid length. [ 1762.250518][ T4468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12389'. [ 1762.278424][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1762.472136][ T4416] wlan1 speed is unknown, defaulting to 1000 [ 1762.535560][ T4416] lo speed is unknown, defaulting to 1000 [ 1762.631918][ T5833] Bluetooth: hci1: command tx timeout [ 1762.679785][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.775230][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.817314][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.824511][T10617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.850846][T28072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.858050][T28072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.912492][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12394'. [ 1763.251921][ T4506] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12395'. [ 1763.385370][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.439114][ T4513] lo: entered allmulticast mode [ 1763.450378][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12396'. [ 1763.500467][ T4513] nbd: must specify a device to reconfigure [ 1763.701140][ T4183] veth0_vlan: entered promiscuous mode [ 1763.836778][ T4525] x_tables: duplicate underflow at hook 2 [ 1763.863188][ T4183] veth1_vlan: entered promiscuous mode [ 1763.946317][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1763.954357][ C0] lec:lec_tx_timeout: lec0 [ 1764.029426][ T4183] veth0_macvtap: entered promiscuous mode [ 1764.075752][ T4183] veth1_macvtap: entered promiscuous mode [ 1764.147108][ T4028] block nbd2: shutting down sockets [ 1764.152542][ T4028] blk_print_req_error: 138 callbacks suppressed [ 1764.152565][ T4028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.174570][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.208021][ T4028] buffer_io_error: 138 callbacks suppressed [ 1764.208039][ T4028] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1764.246037][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.257369][ T4028] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.288768][ T4028] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1764.326726][ T4028] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.364620][ T4028] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1764.379861][ T3062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.415483][ T4028] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.427030][ T3062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.450486][ T4028] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1764.452194][ T4549] netlink: 165 bytes leftover after parsing attributes in process `syz.4.12404'. [ 1764.477915][ T3062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.487809][ T4028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.503194][ T3062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.521178][ T4028] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1764.530294][ T4028] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.540694][ T4028] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1764.557243][ T4547] batman_adv: batadv0: Adding interface: geneve2 [ 1764.567156][ T4028] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.586217][ T4028] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1764.586659][ T4547] batman_adv: batadv0: Interface activated: geneve2 [ 1764.595410][ T4028] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.629382][ T4557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12405'. [ 1764.651435][ T4028] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1764.674071][ T4028] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.690777][ T4559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12406'. [ 1764.706814][ T5833] Bluetooth: hci1: command tx timeout [ 1764.725615][ T4028] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1764.762546][ T4562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12406'. [ 1764.836358][ T4028] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1764.845876][ T4028] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1764.885782][ T4028] ldm_validate_partition_table(): Disk read failed. [ 1764.947352][ T4028] Dev nbd2: unable to read RDB block 0 [ 1764.953745][ T4028] nbd2: unable to read partition table [ 1764.968222][ T4028] ldm_validate_partition_table(): Disk read failed. [ 1764.975431][ T4028] Dev nbd2: unable to read RDB block 0 [ 1764.982181][ T4028] nbd2: unable to read partition table [ 1765.061253][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12410'. [ 1765.124177][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.169188][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.329858][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.361700][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.468925][ T4583] lo speed is unknown, defaulting to 1000 [ 1765.644238][ T4589] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1765.762978][ T4595] nbd: must specify at least one socket [ 1765.769336][ T4595] block nbd0: reconnected socket [ 1765.774289][ T4595] nbd: socks must be embedded in a SOCK_ITEM attr [ 1765.913387][T30949] veth3: left allmulticast mode [ 1765.950942][T30949] veth3: left promiscuous mode [ 1765.977253][T30949] bridge1: port 1(veth3) entered disabled state [ 1766.191359][T12833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1766.227268][T12833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1766.242966][T12833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1766.255871][T12833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1766.265289][T12833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1766.454708][ T5833] block nbd0: Receive control failed (result -32) [ 1766.742226][T30949] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 1766.899903][T30949] bond6 (unregistering): (slave bridge3): Releasing active interface [ 1766.940749][T30949] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 1767.120401][T30949] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.130403][T30949] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.139985][T30949] .` (unregistering): Released all slaves [ 1767.151264][T30949] bond1 (unregistering): Released all slaves [ 1767.168368][T30949] bond2 (unregistering): Released all slaves [ 1767.181624][T30949] bond3 (unregistering): Released all slaves [ 1767.195846][T30949] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1767.213297][T30949] bond4 (unregistering): Released all slaves [ 1767.226092][T30949] bond5 (unregistering): Released all slaves [ 1767.239673][T30949] bond6 (unregistering): Released all slaves [ 1767.252327][T30949] bond0 (unregistering): Released all slaves [ 1767.273858][T30949] bond7 (unregistering): Released all slaves [ 1767.293171][T30949] bond8 (unregistering): Released all slaves [ 1767.306886][T30949] bond9 (unregistering): (slave veth15): Releasing active interface [ 1767.314900][T30949] batadv2: entered promiscuous mode [ 1767.326108][T30949] bond9 (unregistering): (slave batadv2): Releasing active interface [ 1767.335632][T30949] bond9 (unregistering): Released all slaves [ 1767.349949][T30949] bond10 (unregistering): Released all slaves [ 1767.362904][T30949] bond11 (unregistering): Released all slaves [ 1767.376849][T30949] bond12 (unregistering): Released all slaves [ 1767.391302][T30949] bond13 (unregistering): Released all slaves [ 1767.417441][ T4607] netlink: 'syz.0.12416': attribute type 15 has an invalid length. [ 1767.425596][ T4583] lo speed is unknown, defaulting to 1000 [ 1767.431928][ T4595] lo speed is unknown, defaulting to 1000 [ 1767.678586][T30949] : left promiscuous mode [ 1767.778305][ T4630] __nla_validate_parse: 4 callbacks suppressed [ 1767.778322][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12422'. [ 1767.808804][T30949] tipc: Disabling bearer [ 1767.850574][T30949] tipc: Left network mode [ 1768.150888][ T4647] tipc: Enabled bearer , priority 0 [ 1768.188607][ T4647] syzkaller0: entered promiscuous mode [ 1768.194117][ T4647] syzkaller0: entered allmulticast mode [ 1768.212014][ T4602] lo speed is unknown, defaulting to 1000 [ 1768.212604][ T4583] wlan1 speed is unknown, defaulting to 1000 [ 1768.229699][ T4595] lo speed is unknown, defaulting to 1000 [ 1768.237891][ T4583] lo speed is unknown, defaulting to 1000 [ 1768.257213][ T4647] tipc: Resetting bearer [ 1768.272992][ T4651] x_tables: duplicate underflow at hook 1 [ 1768.281794][ T4645] tipc: Resetting bearer [ 1768.314837][ T5833] Bluetooth: hci3: command tx timeout [ 1768.448398][ T4645] tipc: Disabling bearer [ 1768.560037][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1768.975713][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12430'. [ 1769.136808][ T4602] lo speed is unknown, defaulting to 1000 [ 1769.140091][ T4595] wlan1 speed is unknown, defaulting to 1000 [ 1769.200268][ T4595] lo speed is unknown, defaulting to 1000 [ 1770.093501][ T4696] bond4 (unregistering): Released all slaves [ 1770.333398][ T4602] wlan1 speed is unknown, defaulting to 1000 [ 1770.371150][ T4602] lo speed is unknown, defaulting to 1000 [ 1770.387188][ T5833] Bluetooth: hci3: command tx timeout [ 1770.630256][ T4726] netlink: 516 bytes leftover after parsing attributes in process `syz.0.12437'. [ 1771.439578][T30949] batman_adv: batadv0: Removing interface: ipvlan0 [ 1771.602492][T30949] pim6reg (unregistering): left allmulticast mode [ 1771.793753][ T4749] netlink: 516 bytes leftover after parsing attributes in process `syz.0.12441'. [ 1772.441862][T30949] team0 (unregistering): Port device team_slave_1 removed [ 1772.464222][T30949] team0 (unregistering): Port device team_slave_0 removed [ 1772.467811][ T5833] Bluetooth: hci3: command tx timeout [ 1772.578607][ T4764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1772.609965][ T3059] smc: removing ib device sqz0 [ 1772.723079][ T4756] syzkaller0: entered promiscuous mode [ 1772.729936][ T4756] syzkaller0: entered allmulticast mode [ 1774.546762][ T5833] Bluetooth: hci3: command tx timeout [ 1775.834388][ T4602] chnl_net:caif_netlink_parms(): no params data found [ 1776.028727][ T4789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12445'. [ 1776.060904][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12445'. [ 1776.232470][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.240378][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.248872][ T4602] bridge_slave_0: entered allmulticast mode [ 1776.257834][ T4602] bridge_slave_0: entered promiscuous mode [ 1776.288718][ T4805] vlan2: entered promiscuous mode [ 1776.304272][ T4805] bridge0: entered promiscuous mode [ 1776.334648][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.353062][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.366580][ T4602] bridge_slave_1: entered allmulticast mode [ 1776.384722][ T4602] bridge_slave_1: entered promiscuous mode [ 1776.415700][T30949] IPVS: stop unused estimator thread 0... [ 1776.498837][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12453'. [ 1776.673950][ T4815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.751395][ T4602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.781265][ T4602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.872095][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12458'. [ 1776.902860][ T4838] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.12457'. [ 1776.903107][ T4815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.969220][ T4602] team0: Port device team_slave_0 added [ 1777.001740][ T4602] team0: Port device team_slave_1 added [ 1777.159190][ T4815] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1777.182180][ T4815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.233341][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.261282][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.306363][ T4602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.452350][ T4815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.480746][ T4602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.497153][ T4602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1777.532444][ T4602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1777.569950][ T4856] pim6reg: entered allmulticast mode [ 1777.623498][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.630967][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.704358][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.719714][ T4868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.804247][ T4868] batman_adv: batadv0: Interface deactivated: macsec1 [ 1777.847300][ T4861] bridge0: entered allmulticast mode [ 1777.857592][ T4873] pim6reg: left allmulticast mode [ 1777.862757][ T4873] bridge0: left allmulticast mode [ 1777.932015][ T3062] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.941570][ T3062] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.959305][ T4874] lo speed is unknown, defaulting to 1000 [ 1778.033469][ T3062] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.043119][ T3062] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.104977][ T4602] hsr_slave_0: entered promiscuous mode [ 1778.125735][ T4602] hsr_slave_1: entered promiscuous mode [ 1778.133753][ T4602] debugfs: 'hsr0' already exists in 'hsr' [ 1778.162810][ T4602] Cannot create hsr debugfs directory [ 1778.282134][ T4874] wlan1 speed is unknown, defaulting to 1000 [ 1778.505175][ T3062] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.590144][ T3062] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.661857][ T3062] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.677953][ T3062] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.688718][ T4894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12469'. [ 1778.937821][ T4904] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12471'. [ 1778.946307][ T4907] netlink: 'syz.1.12472': attribute type 1 has an invalid length. [ 1778.976295][ T4907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12472'. [ 1779.095331][ T4914] netlink: 'syz.1.12473': attribute type 1 has an invalid length. [ 1779.109927][T17325] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 241 sec [ 1779.125727][ T4914] netlink: 6 bytes leftover after parsing attributes in process `syz.1.12473'. [ 1779.230486][T30949] bridge_slave_1: left allmulticast mode [ 1779.253565][T30949] bridge_slave_1: left promiscuous mode [ 1779.269417][T30949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.291811][T30949] bridge_slave_0: left allmulticast mode [ 1779.297011][ T4923] FAULT_INJECTION: forcing a failure. [ 1779.297011][ T4923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.299620][T30949] bridge_slave_0: left promiscuous mode [ 1779.320815][T30949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.330309][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: syz.0.12477 Not tainted syzkaller #0 PREEMPT(full) [ 1779.330333][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.330344][ T4923] Call Trace: [ 1779.330351][ T4923] [ 1779.330359][ T4923] dump_stack_lvl+0xe8/0x150 [ 1779.330384][ T4923] should_fail_ex+0x412/0x560 [ 1779.330410][ T4923] _copy_from_iter+0x1d3/0x1670 [ 1779.330439][ T4923] ? rcu_is_watching+0x15/0xb0 [ 1779.330458][ T4923] ? __pfx__copy_from_iter+0x10/0x10 [ 1779.330480][ T4923] ? netlink_sendmsg+0x650/0xb40 [ 1779.330493][ T4923] ? skb_put+0x11b/0x210 [ 1779.330511][ T4923] netlink_sendmsg+0x6c0/0xb40 [ 1779.330534][ T4923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.330554][ T4923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1779.330576][ T4923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1779.330596][ T4923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.330605][ T4923] ____sys_sendmsg+0xa68/0xad0 [ 1779.330618][ T4923] ? __might_fault+0xaf/0x130 [ 1779.330633][ T4923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1779.330649][ T4923] ? import_iovec+0x73/0xa0 [ 1779.330666][ T4923] ___sys_sendmsg+0x2a5/0x360 [ 1779.330678][ T4923] ? __lock_acquire+0x6b5/0x2cf0 [ 1779.330690][ T4923] ? __pfx____sys_sendmsg+0x10/0x10 [ 1779.330718][ T4923] ? __fget_files+0x2a/0x420 [ 1779.330727][ T4923] ? __fget_files+0x3a0/0x420 [ 1779.330741][ T4923] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1779.330755][ T4923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1779.330771][ T4923] ? rcu_is_watching+0x15/0xb0 [ 1779.330788][ T4923] do_syscall_64+0x14d/0xf80 [ 1779.330801][ T4923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.330810][ T4923] ? trace_irq_disable+0x37/0x100 [ 1779.330821][ T4923] ? clear_bhb_loop+0x40/0x90 [ 1779.330832][ T4923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.330841][ T4923] RIP: 0033:0x7f780dd9c629 [ 1779.330852][ T4923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.330860][ T4923] RSP: 002b:00007f780ecc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.330871][ T4923] RAX: ffffffffffffffda RBX: 00007f780e015fa0 RCX: 00007f780dd9c629 [ 1779.330878][ T4923] RDX: 0000000000004080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1779.330884][ T4923] RBP: 00007f780ecc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.330890][ T4923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.330896][ T4923] R13: 00007f780e016038 R14: 00007f780e015fa0 R15: 00007ffdcf18b328 [ 1779.330911][ T4923] [ 1779.699562][T30949] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 1779.855726][T30949] dvmrp0 (unregistering): left allmulticast mode [ 1780.100971][T30949] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 1780.260965][T30949] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1780.273012][T30949] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1780.282503][T30949] .` (unregistering): Released all slaves [ 1780.300347][T30949] bond0 (unregistering): Released all slaves [ 1780.317769][T30949] bond1 (unregistering): Released all slaves [ 1780.331471][T30949] bond2 (unregistering): (slave veth9): Releasing backup interface [ 1780.340551][T30949] bond2 (unregistering): Released all slaves [ 1780.357491][T30949] bond3 (unregistering): Released all slaves [ 1780.370691][T30949] bond4 (unregistering): Released all slaves [ 1780.385424][T30949] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 1780.404440][T30949] bond5 (unregistering): Released all slaves [ 1780.610716][T30949] hmac(sha224): left promiscuous mode [ 1780.730653][ T4944] netlink: 'syz.0.12482': attribute type 1 has an invalid length. [ 1780.784378][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12482'. [ 1780.977802][T30949] tipc: Disabling bearer [ 1780.992139][T30949] tipc: Left network mode [ 1781.202602][ T4964] netlink: 'syz.0.12484': attribute type 2 has an invalid length. [ 1781.223486][ T4964] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12484'. [ 1781.620664][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12488'. [ 1781.774969][ T4978] bridge3: port 1(ip6gretap1) entered blocking state [ 1781.787450][ T4978] bridge3: port 1(ip6gretap1) entered disabled state [ 1781.794653][ T4978] ip6gretap1: entered allmulticast mode [ 1781.803852][ T4978] ip6gretap1: entered promiscuous mode [ 1781.855874][ T4985] bridge3: port 2(veth7) entered blocking state [ 1781.865066][ T4985] bridge3: port 2(veth7) entered disabled state [ 1781.892920][ T4985] veth7: entered allmulticast mode [ 1781.909255][ T4985] veth7: entered promiscuous mode [ 1781.915441][ T4985] bridge3: port 2(veth7) entered blocking state [ 1781.921902][ T4985] bridge3: port 2(veth7) entered forwarding state [ 1782.064622][ T5006] SET target dimension over the limit! [ 1782.084148][ T4988] syzkaller0: entered promiscuous mode [ 1782.097905][ T4988] syzkaller0: entered allmulticast mode [ 1782.262478][ T5013] x_tables: duplicate underflow at hook 1 [ 1782.280116][ T5013] No such timeout policy "syz1" [ 1782.654849][ T5027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12496'. [ 1782.665037][ T5027] netlink: 'syz.2.12496': attribute type 1 has an invalid length. [ 1782.674017][ T5027] netlink: 'syz.2.12496': attribute type 2 has an invalid length. [ 1784.505073][T21998] bridge3: port 2(veth7) entered disabled state [ 1784.517574][ T4602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1784.572727][ T4602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1784.594498][ T4602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1784.687809][ T5037] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1784.704727][ T5037] bond5 (unregistering): Released all slaves [ 1784.778285][ T4602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1785.058404][ T5066] syzkaller0: entered promiscuous mode [ 1785.063922][ T5066] syzkaller0: entered allmulticast mode [ 1785.200335][ T5050] delete_channel: no stack [ 1785.220438][ T5079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12507'. [ 1785.474709][ T5084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12509'. [ 1785.493950][ T5084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12509'. [ 1785.674232][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12511'. [ 1785.888230][ T5114] netlink: 'syz.0.12516': attribute type 32 has an invalid length. [ 1785.916974][ T5115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12515'. [ 1786.011370][ T4602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.063251][ T5124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1786.101915][ T5121] geneve2: entered promiscuous mode [ 1786.114531][ T4602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.178434][T21998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.185590][T21998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.310448][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.317710][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.361857][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.384222][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.416728][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.425801][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.473881][ T5141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.499686][ T5141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12520'. [ 1786.697075][ T5172] ipvlan2: entered promiscuous mode [ 1786.703453][ T5172] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1786.737499][ T5172] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1787.143746][ T4602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.252488][ T5204] pim6reg: entered allmulticast mode [ 1787.455017][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.462713][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.641775][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.678550][ T5204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.895456][ T5195] pim6reg: left allmulticast mode [ 1787.919737][ T5226] syzkaller0: entered promiscuous mode [ 1787.925329][ T5226] syzkaller0: entered allmulticast mode [ 1788.003507][T30949] hsr_slave_0: left promiscuous mode [ 1788.018655][T30949] hsr_slave_1: left promiscuous mode [ 1788.037269][T30949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.077335][T30949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.086046][T30949] batman_adv: batadv0: Removing interface: ipvlan2 [ 1788.113624][T30949] batman_adv: batadv0: Removing interface: dummy0 [ 1788.432373][T30949] team0 (unregistering): Port device team_slave_1 removed [ 1788.474123][T30949] team0 (unregistering): Port device team_slave_0 removed [ 1788.628467][T30949] dummy0 (unregistering): left allmulticast mode [ 1788.644585][ T5222] tipc: Started in network mode [ 1788.650274][ T5222] tipc: Node identity dabc8934124f, cluster identity 4711 [ 1788.658198][ T5222] tipc: Enabled bearer , priority 0 [ 1788.664834][ T3055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.674178][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12536'. [ 1788.679243][ T3055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.698818][ T5219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12534'. [ 1788.715628][ T5221] syzkaller0: mtu less than device minimum [ 1788.729006][ T5214] tipc: Resetting bearer [ 1788.754597][ T5214] tipc: Disabling bearer [ 1788.765755][ T3055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.778705][ T3055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.991631][ T4602] veth0_vlan: entered promiscuous mode [ 1789.105818][ T4602] veth1_vlan: entered promiscuous mode [ 1789.214826][ T5281] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1789.255508][ T5281] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1789.282438][ T4602] veth0_macvtap: entered promiscuous mode [ 1789.336990][ T4602] veth1_macvtap: entered promiscuous mode [ 1789.380787][ T5287] netlink: 'syz.2.12545': attribute type 10 has an invalid length. [ 1789.405359][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.437351][ T5287] team0: Port device bond0 added [ 1789.525648][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1789.560863][T30949] IPVS: stop unused estimator thread 0... [ 1789.582398][ T4602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.630930][ T3054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.671563][ T3054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.689150][ T3054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.711228][ T3054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.931743][ T5311] lo speed is unknown, defaulting to 1000 [ 1789.947294][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.972578][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.038110][ T3055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.076926][ T3055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.444948][ T5311] wlan1 speed is unknown, defaulting to 1000 [ 1791.278921][ T5382] syzkaller1: entered promiscuous mode [ 1791.284421][ T5382] syzkaller1: entered allmulticast mode [ 1791.379485][ T5382] __nla_validate_parse: 1 callbacks suppressed [ 1791.379503][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12566'. [ 1791.419478][ T5396] netlink: 'syz.2.12569': attribute type 2 has an invalid length. [ 1791.480620][ T5399] netlink: 'syz.2.12569': attribute type 2 has an invalid length. [ 1791.534777][ T5396] : entered promiscuous mode [ 1791.566769][ T5399] : left promiscuous mode [ 1791.675713][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1792.084601][ T5430] netlink: 'syz.1.12574': attribute type 4 has an invalid length. [ 1792.204476][ T5432] ip6gretap1: entered promiscuous mode [ 1792.265224][ T5434] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12576'. [ 1792.500658][T17325] IPVS: starting estimator thread 0... [ 1792.597908][ T5456] IPVS: using max 42 ests per chain, 100800 per kthread [ 1792.712652][ T5449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.822918][ T5449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.930092][ T5449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.063178][ T5449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.085817][ T5481] tipc: Enabled bearer , priority 0 [ 1793.098091][ T5488] syzkaller0: entered promiscuous mode [ 1793.103738][ T5488] syzkaller0: entered allmulticast mode [ 1793.132340][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12587'. [ 1793.142938][ T5481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12587'. [ 1793.212866][ T5481] tipc: Resetting bearer [ 1793.238823][ T5480] tipc: Resetting bearer [ 1793.287665][ T5480] tipc: Disabling bearer [ 1793.428441][ T3055] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.491670][ T3055] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.573618][ T3055] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.623361][ T3054] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.962752][ T5526] lo speed is unknown, defaulting to 1000 [ 1794.004579][ T5544] dvmrp0: entered allmulticast mode [ 1794.108965][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12595'. [ 1794.447959][ T5561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12599'. [ 1794.822848][ T5559] lo speed is unknown, defaulting to 1000 [ 1794.823487][ T5526] wlan1 speed is unknown, defaulting to 1000 [ 1794.858137][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12604'. [ 1795.024983][ T5602] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1795.351571][ T5621] geneve2: entered promiscuous mode [ 1795.382994][T30949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.426892][T30949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.459142][T30949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.500317][T30949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.563711][ T5559] wlan1 speed is unknown, defaulting to 1000 [ 1796.215745][ T5655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1796.655832][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12618'. [ 1796.876532][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1796.884634][ C0] lec:lec_tx_timeout: lec0 [ 1796.964257][ T5676] bridge4: port 1(veth9) entered blocking state [ 1796.973556][ T5676] bridge4: port 1(veth9) entered disabled state [ 1796.990823][ T5676] veth9: entered allmulticast mode [ 1797.003760][ T5676] veth9: entered promiscuous mode [ 1797.030124][ T5678] bridge4: port 2(veth0_to_bond) entered blocking state [ 1797.040422][ T5678] bridge4: port 2(veth0_to_bond) entered disabled state [ 1797.053072][ T5678] veth0_to_bond: entered allmulticast mode [ 1797.071058][ T5678] veth0_to_bond: entered promiscuous mode [ 1797.590666][ T5713] netlink: 'syz.1.12628': attribute type 1 has an invalid length. [ 1797.614860][ T5713] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12628'. [ 1797.670392][ T5713] netlink: 658 bytes leftover after parsing attributes in process `syz.1.12628'. [ 1797.711009][ T5713] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12628'. [ 1797.810260][ T5729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1797.817584][ T5729] IPv6: NLM_F_CREATE should be set when creating new route [ 1797.850311][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12633'. [ 1797.898928][ T5732] bridge0: entered allmulticast mode [ 1797.959769][ T5732] ip6gretap1: entered promiscuous mode [ 1798.000807][ T5737] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1798.365204][ T5763] lo speed is unknown, defaulting to 1000 [ 1798.469425][ T5768] sit0: entered promiscuous mode [ 1798.494031][ T5768] netlink: 'syz.1.12645': attribute type 1 has an invalid length. [ 1798.507146][ T5768] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12645'. [ 1798.546962][ T5771] tipc: Started in network mode [ 1798.551929][ T5771] tipc: Node identity f2651b783812, cluster identity 4711 [ 1798.559432][ T5771] tipc: Enabled bearer , priority 0 [ 1798.578635][ T5771] syzkaller0: entered promiscuous mode [ 1798.584145][ T5771] syzkaller0: entered allmulticast mode [ 1798.685396][ T5771] tipc: Resetting bearer [ 1798.695218][ T5769] tipc: Resetting bearer [ 1798.741828][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12646'. [ 1798.756939][ T5769] tipc: Disabling bearer [ 1798.924629][ T5785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12647'. [ 1799.054287][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12650'. [ 1799.071865][ T5763] wlan1 speed is unknown, defaulting to 1000 [ 1799.171253][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12643'. [ 1799.803545][ T5839] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1800.105009][ T5851] netlink: 'syz.2.12658': attribute type 4 has an invalid length. [ 1800.776058][ T5893] netlink: 'syz.0.12661': attribute type 3 has an invalid length. [ 1801.365910][ T5872] lo speed is unknown, defaulting to 1000 [ 1801.483012][ T5892] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1801.529262][ T5892] bond1 (unregistering): Released all slaves [ 1801.637068][ T5888] bpq0: entered promiscuous mode [ 1801.642167][ T5888] bpq0: entered allmulticast mode [ 1801.820549][ T5905] SET target dimension over the limit! [ 1801.868272][ T5908] Cannot find del_set index 0 as target [ 1801.984401][ T5872] wlan1 speed is unknown, defaulting to 1000 [ 1802.021807][ T5912] xt_hashlimit: max too large, truncated to 1048576 [ 1802.037450][ T5912] __nla_validate_parse: 8 callbacks suppressed [ 1802.037465][ T5912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12670'. [ 1802.069954][ T5913] dummy0: entered promiscuous mode [ 1802.118821][ T5911] dummy0: left promiscuous mode [ 1802.321116][ T5926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12673'. [ 1802.526293][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12675'. [ 1802.686608][ T5936] syzkaller0: entered promiscuous mode [ 1802.694219][ T5936] syzkaller0: entered allmulticast mode [ 1803.270452][ T5959] lo speed is unknown, defaulting to 1000 [ 1803.278135][ T5967] delete_channel: no stack [ 1803.286589][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1803.326070][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1803.374405][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12681'. [ 1803.592106][ T5959] wlan1 speed is unknown, defaulting to 1000 [ 1803.766743][ T5985] geneve3: entered promiscuous mode [ 1803.771998][ T5985] geneve3: entered allmulticast mode [ 1803.809070][ T3057] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1803.828625][ T3057] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1803.847067][ T3057] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1803.855905][ T3057] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1803.897661][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12688'. [ 1803.922363][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12686'. [ 1804.245278][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12691'. [ 1804.684880][ T6031] tipc: Enabled bearer , priority 0 [ 1804.693846][ T6031] syzkaller0: entered promiscuous mode [ 1804.700451][ T6031] syzkaller0: entered allmulticast mode [ 1804.784127][ T6031] tipc: Resetting bearer [ 1804.922904][ T6030] tipc: Resetting bearer [ 1804.929683][ T6043] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12698'. [ 1805.081335][ T6030] tipc: Disabling bearer [ 1805.224376][ T6054] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20001 [ 1805.380231][ T6054] lo speed is unknown, defaulting to 1000 [ 1805.699736][ T6068] macsec2: entered promiscuous mode [ 1805.705000][ T6068] macsec2: entered allmulticast mode [ 1806.063266][ T6090] syzkaller1: entered promiscuous mode [ 1806.095512][ T6090] syzkaller1: entered allmulticast mode [ 1806.156897][ T6089] lo speed is unknown, defaulting to 1000 [ 1806.163775][ T6054] wlan1 speed is unknown, defaulting to 1000 [ 1806.467795][ T6089] wlan1 speed is unknown, defaulting to 1000 [ 1807.366052][ T6132] __nla_validate_parse: 3 callbacks suppressed [ 1807.366070][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1807.446553][T17325] IPVS: starting estimator thread 0... [ 1807.515007][ T6143] netlink: 'syz.3.12718': attribute type 1 has an invalid length. [ 1807.525213][ T6143] netlink: 'syz.3.12718': attribute type 2 has an invalid length. [ 1807.548509][ T6138] IPVS: using max 32 ests per chain, 76800 per kthread [ 1808.035084][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12722'. [ 1808.325510][ T6174] netlink: 'syz.2.12723': attribute type 83 has an invalid length. [ 1808.919472][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.927073][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.135090][ T6202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1809.290377][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1809.311370][ T6213] netlink: 'syz.2.12733': attribute type 1 has an invalid length. [ 1809.322794][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1809.332870][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1809.424512][ T6217] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1809.463194][ T6217] bond5 (unregistering): Released all slaves [ 1809.683527][ T6231] lo speed is unknown, defaulting to 1000 [ 1810.185989][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12744'. [ 1810.264868][ T6231] wlan1 speed is unknown, defaulting to 1000 [ 1810.464802][ T6275] team0: Port device syz_tun added [ 1810.531533][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12748'. [ 1810.541480][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12747'. [ 1810.553765][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12748'. [ 1810.615300][ T6282] team0: Device gtp0 is of different type [ 1810.699621][ T6286] syzkaller0: entered promiscuous mode [ 1810.723316][ T6286] syzkaller0: entered allmulticast mode [ 1810.776481][ T6280] tipc: Enabled bearer , priority 0 [ 1810.788595][ T6280] tipc: Resetting bearer [ 1810.807234][ T6290] dummy0: mtu less than device minimum [ 1810.823147][ T6279] tipc: Resetting bearer [ 1810.864211][ T6295] netlink: 'syz.3.12751': attribute type 7 has an invalid length. [ 1810.873717][ T6295] netlink: 'syz.3.12751': attribute type 5 has an invalid length. [ 1810.883567][ T6279] tipc: Disabling bearer [ 1810.892649][ T6295] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12751'. [ 1810.912738][ T6244] lo speed is unknown, defaulting to 1000 [ 1810.925968][ T29] audit: type=1107 audit(1771468162.784:109): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1810.938856][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.148594][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.156611][ T6302] netlink: 'syz.0.12752': attribute type 3 has an invalid length. [ 1811.185239][ T6244] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1811.244204][ T6304] syzkaller0: entered promiscuous mode [ 1811.260446][ T6304] syzkaller0: entered allmulticast mode [ 1811.311148][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.393111][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.442221][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.463877][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.485596][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.582375][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.621160][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.714591][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.749883][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.812350][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.895174][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.931917][ T6244] lo speed is unknown, defaulting to 1000 [ 1811.978806][ T6244] lo speed is unknown, defaulting to 1000 [ 1812.028071][ T6244] lo speed is unknown, defaulting to 1000 [ 1812.044617][ T6244] lo speed is unknown, defaulting to 1000 [ 1812.338221][ T6351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1812.376609][ T6352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1812.389040][ T6354] netlink: 'syz.0.12764': attribute type 1 has an invalid length. [ 1812.416578][ T6354] netlink: 'syz.0.12764': attribute type 7 has an invalid length. [ 1812.424958][ T6354] netlink: 'syz.0.12764': attribute type 8 has an invalid length. [ 1812.437414][ T6354] __nla_validate_parse: 5 callbacks suppressed [ 1812.437428][ T6354] netlink: 208 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1812.536574][ T6354] NCSI netlink: No device for ifindex 65584 [ 1812.543762][ T6352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1812.545342][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12765'. [ 1812.935375][ T6373] lo speed is unknown, defaulting to 1000 [ 1813.452933][ T6381] IPVS: length: 132 != 8 [ 1813.724011][ T6368] lo speed is unknown, defaulting to 1000 [ 1813.724863][ T6373] wlan1 speed is unknown, defaulting to 1000 [ 1814.078800][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12771'. [ 1814.152752][ T6404] netlink: 'syz.3.12771': attribute type 5 has an invalid length. [ 1814.169727][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12771'. [ 1814.282171][ T6374] lo speed is unknown, defaulting to 1000 [ 1814.300613][ T6368] wlan1 speed is unknown, defaulting to 1000 [ 1814.402959][ T6373] lo speed is unknown, defaulting to 1000 [ 1814.760677][ T6401] lo speed is unknown, defaulting to 1000 [ 1814.971234][ T6368] lo speed is unknown, defaulting to 1000 [ 1814.978529][ T6401] wlan1 speed is unknown, defaulting to 1000 [ 1815.114149][ T6374] wlan1 speed is unknown, defaulting to 1000 [ 1815.454375][ T6443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12775'. [ 1815.520714][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12775'. [ 1817.031333][ T6401] lo speed is unknown, defaulting to 1000 [ 1817.751905][ T6374] lo speed is unknown, defaulting to 1000 [ 1818.178378][ T6478] syz_tun: entered allmulticast mode [ 1818.194206][ T6478] syz_tun: left allmulticast mode [ 1818.540144][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12783'. [ 1818.843302][ T6493] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12783'. [ 1818.941673][ T6502] netlink: 'syz.0.12785': attribute type 1 has an invalid length. [ 1819.042163][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12786'. [ 1819.242504][ T6502] bond5: entered promiscuous mode [ 1819.257686][ T6502] bond5: entered allmulticast mode [ 1819.270511][ T6502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1819.349653][ T6504] erspan2: entered allmulticast mode [ 1819.392633][ T6504] bond5: (slave erspan2): making interface the new active one [ 1819.412078][ T6504] erspan2: entered promiscuous mode [ 1819.424290][ T6504] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 1819.653337][ T6522] netlink: 820 bytes leftover after parsing attributes in process `syz.3.12787'. [ 1819.664519][ T6522] netlink: 820 bytes leftover after parsing attributes in process `syz.3.12787'. [ 1819.711353][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12787'. [ 1819.939305][ T6537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12790'. [ 1819.993133][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12790'. [ 1820.144360][ T6545] lo speed is unknown, defaulting to 1000 [ 1820.457329][ T6561] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12794'. [ 1820.474123][ T6560] netlink: 'syz.4.12796': attribute type 3 has an invalid length. [ 1820.482236][ T6560] netlink: 'syz.4.12796': attribute type 1 has an invalid length. [ 1820.492232][ T6560] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12796'. [ 1820.563642][ T6545] wlan1 speed is unknown, defaulting to 1000 [ 1820.575692][ T6553] lo speed is unknown, defaulting to 1000 [ 1820.976385][ T6553] wlan1 speed is unknown, defaulting to 1000 [ 1821.038382][ T6577] netlink: 'syz.1.12798': attribute type 31 has an invalid length. [ 1821.345036][ T6545] lo speed is unknown, defaulting to 1000 [ 1821.637856][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.645517][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.937296][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1821.955142][ T6620] netlink: 'syz.0.12808': attribute type 13 has an invalid length. [ 1821.959006][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.054808][ T6590] batman_adv: batadv0: Interface deactivated: geneve2 [ 1822.088249][ T2243] lo speed is unknown, defaulting to 1000 [ 1822.096583][ T2243] syz2: Port: 1 Link DOWN [ 1822.109040][ T6553] lo speed is unknown, defaulting to 1000 [ 1822.133899][ T6598] syzkaller0: entered promiscuous mode [ 1822.139699][ T6598] syzkaller0: entered allmulticast mode [ 1822.154548][T30949] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.163875][T30949] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1824.315588][T30949] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.324656][T30949] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1824.334188][T30949] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.343620][T30949] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1824.370153][ T6632] netlink: 'syz.0.12812': attribute type 2 has an invalid length. [ 1824.385847][T30949] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.407603][T30949] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1824.467177][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 1824.597847][ T6644] __nla_validate_parse: 5 callbacks suppressed [ 1824.597864][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12815'. [ 1824.660596][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1824.811157][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1824.853958][ T6649] tipc: Started in network mode [ 1824.883321][ T6649] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1824.919701][ T6649] tipc: Enabling of bearer rejected, failed to enable media [ 1825.028544][ T6650] bridge2: entered promiscuous mode [ 1825.080089][ T6652] bridge3: entered promiscuous mode [ 1825.314738][ T6669] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12820'. [ 1825.438174][ T6677] syzkaller0: entered promiscuous mode [ 1825.452257][ T6677] syzkaller0: entered allmulticast mode [ 1825.661258][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1825.788273][ T6693] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1826.164810][ T6716] netlink: 'syz.1.12831': attribute type 29 has an invalid length. [ 1826.537810][ T6750] netlink: 'syz.3.12838': attribute type 1 has an invalid length. [ 1826.632459][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12841'. [ 1826.642109][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12841'. [ 1827.154565][ T6790] netlink: 'syz.2.12850': attribute type 3 has an invalid length. [ 1827.164379][ T6790] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12850'. [ 1827.197222][ T6790] netlink: 'syz.2.12850': attribute type 3 has an invalid length. [ 1827.207651][ T6796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12847'. [ 1827.217229][ T6790] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12850'. [ 1827.608932][ T6816] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 1827.639797][ T6823] netlink: 'syz.0.12856': attribute type 11 has an invalid length. [ 1827.655523][ T6823] netlink: 'syz.0.12856': attribute type 11 has an invalid length. [ 1827.675165][ T6823] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12856'. [ 1827.728231][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12853'. [ 1828.699496][ T6870] tipc: MTU too low for tipc bearer [ 1829.098411][ T6881] netlink: 'syz.3.12866': attribute type 21 has an invalid length. [ 1829.116696][ T6885] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001 [ 1829.128661][ T6881] netlink: 'syz.3.12866': attribute type 4 has an invalid length. [ 1829.208934][ T6881] netlink: 'syz.3.12866': attribute type 1 has an invalid length. [ 1829.361254][ T6892] vlan2: entered allmulticast mode [ 1829.414088][ T6897] bond1: option resend_igmp: invalid value (259) [ 1829.423344][ T6897] bond1: option resend_igmp: allowed values 0 - 255 [ 1829.461240][ T6897] bond1 (unregistering): Released all slaves [ 1829.532117][ T6908] lo speed is unknown, defaulting to 1000 [ 1829.596196][ T6915] netlink: 'syz.2.12874': attribute type 4 has an invalid length. [ 1829.715718][ T6918] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1829.788829][ T6908] wlan1 speed is unknown, defaulting to 1000 [ 1829.806966][ T6927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1829.836256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1829.844343][ C0] lec:lec_tx_timeout: lec0 [ 1830.201779][ T6951] netlink: 'syz.0.12882': attribute type 1 has an invalid length. [ 1830.219063][ T6908] lo speed is unknown, defaulting to 1000 [ 1830.226097][ T6951] netlink: 'syz.0.12882': attribute type 2 has an invalid length. [ 1830.309173][ T6952] bond1: entered allmulticast mode [ 1830.418211][ T6952] bridge1: entered promiscuous mode [ 1830.456790][ T6952] bridge1: entered allmulticast mode [ 1831.025442][ T6979] team0: Port device syz_tun added [ 1831.122540][ T6984] __nla_validate_parse: 5 callbacks suppressed [ 1831.122557][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12888'. [ 1831.325292][ T6995] netlink: 'syz.1.12892': attribute type 1 has an invalid length. [ 1831.471817][ T7003] xt_TCPMSS: Only works on TCP SYN packets [ 1831.495078][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1831.624349][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.655990][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.690264][ T7010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1831.711317][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12893'. [ 1831.724961][ T7003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1831.767063][ T2245] lo speed is unknown, defaulting to 1000 [ 1831.772863][ T2245] syz2: Port: 1 Link ACTIVE [ 1831.841558][ T6995] bond1: (slave geneve3): making interface the new active one [ 1831.878782][ T6995] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1832.170280][ T7027] syzkaller0: entered promiscuous mode [ 1832.175900][ T7027] syzkaller0: entered allmulticast mode [ 1832.213747][ T7046] bond0: entered promiscuous mode [ 1832.227893][ T7046] bond_slave_0: entered promiscuous mode [ 1832.255674][ T7046] bond_slave_1: entered promiscuous mode [ 1832.271229][ T7046] batadv0: entered promiscuous mode [ 1832.281891][ T7046] debugfs: 'hsr1' already exists in 'hsr' [ 1832.290429][ T7046] Cannot create hsr debugfs directory [ 1832.297076][ T7046] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1832.304962][ T7046] bond0: left promiscuous mode [ 1832.310835][ T7046] bond_slave_0: left promiscuous mode [ 1832.317297][ T7046] bond_slave_1: left promiscuous mode [ 1832.324653][ T7046] batadv0: left promiscuous mode [ 1832.657601][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12904'. [ 1835.560285][ T7065] wg1: left promiscuous mode [ 1835.564916][ T7065] wg1: left allmulticast mode [ 1835.574359][ T7065] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1835.716928][ T7095] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 1835.940747][ T7120] siw: device registration error -23 [ 1836.002503][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12915'. [ 1836.053345][ T7125] tipc: Enabled bearer , priority 0 [ 1836.157404][ T7125] syzkaller0: entered promiscuous mode [ 1836.162918][ T7125] syzkaller0: entered allmulticast mode [ 1836.208103][ T7139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1836.218919][ T7125] tipc: Resetting bearer [ 1836.229215][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1836.243918][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12921'. [ 1836.260198][ T7142] netlink: 666 bytes leftover after parsing attributes in process `syz.2.12919'. [ 1836.269984][ T7124] tipc: Resetting bearer [ 1836.277822][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12919'. [ 1836.322604][ T7124] tipc: Disabling bearer [ 1836.342158][ T7148] syzkaller0: entered promiscuous mode [ 1836.348551][ T7148] syzkaller0: entered allmulticast mode [ 1836.371775][ T7138] 0: reclassify loop, rule prio 0, protocol 800 [ 1836.424033][ T7138] netlink: 'syz.0.12921': attribute type 11 has an invalid length. [ 1836.774553][ T7163] tc_dump_action: action bad kind [ 1837.678366][ T7206] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1837.858096][ T7216] netlink: 'syz.1.12936': attribute type 1 has an invalid length. [ 1837.942560][ T7216] bond2: entered promiscuous mode [ 1837.969134][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1838.085264][ T7229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1838.131480][ T7229] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1838.158124][ T7229] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1838.192922][ T7229] bond2: (slave gre1): making interface the new active one [ 1838.216595][ T7229] gre1: entered promiscuous mode [ 1838.233759][ T7229] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1838.277571][ T7225] macsec1: entered promiscuous mode [ 1838.289388][ T7225] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1838.325944][ T7236] syzkaller1: entered promiscuous mode [ 1838.346577][ T7236] syzkaller1: entered allmulticast mode [ 1838.454904][ T7256] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.12941'. [ 1838.496538][ T7256] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.12941'. [ 1838.735253][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12946'. [ 1839.123802][ T7302] netlink: 'syz.0.12953': attribute type 11 has an invalid length. [ 1839.152241][ T7278] lo speed is unknown, defaulting to 1000 [ 1839.185046][ T7302] netlink: 'syz.0.12953': attribute type 4 has an invalid length. [ 1839.224359][ T7302] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.12953'. [ 1839.265749][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12952'. [ 1839.329762][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.425309][ T7312] bridge_slave_1 (unregistering): left allmulticast mode [ 1839.446265][ T7312] bridge_slave_1 (unregistering): left promiscuous mode [ 1839.485860][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.647503][ T7331] bond2: option miimon: invalid value (18446744073709551607) [ 1839.654924][ T7331] bond2: option miimon: allowed values 0 - 2147483647 [ 1839.721218][ T7331] bond2 (unregistering): Released all slaves [ 1839.758964][ T6454] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 302 sec [ 1839.833334][ T7278] wlan1 speed is unknown, defaulting to 1000 [ 1840.095191][ T7346] netlink: 'syz.0.12961': attribute type 2 has an invalid length. [ 1840.179627][ T7346] !: entered promiscuous mode [ 1840.317859][ T7278] lo speed is unknown, defaulting to 1000 [ 1840.467977][ T7368] netlink: 'syz.4.12969': attribute type 1 has an invalid length. [ 1840.506735][ T7368] netlink: 'syz.4.12969': attribute type 3 has an invalid length. [ 1841.131326][ T29] audit: type=1800 audit(1771468192.994:110): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12975" name="memory.events" dev="tmpfs" ino=640 res=0 errno=0 [ 1841.153291][ T7413] netlink: 'syz.0.12978': attribute type 15 has an invalid length. [ 1841.195150][ T7401] bond3: option lacp_rate: invalid value (192) [ 1841.225088][ T7401] bond3 (unregistering): Released all slaves [ 1841.654731][ T7425] netlink: 'syz.2.12980': attribute type 15 has an invalid length. [ 1842.085880][ T7448] lo speed is unknown, defaulting to 1000 [ 1842.131581][ T7453] openvswitch: netlink: Message has 4 unknown bytes. [ 1842.368362][ T7458] __nla_validate_parse: 6 callbacks suppressed [ 1842.368383][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12984'. [ 1842.422221][ T7448] wlan1 speed is unknown, defaulting to 1000 [ 1842.713641][ T7474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12991'. [ 1842.747102][ T7474] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12991'. [ 1842.763976][ T7474] netlink: 6 bytes leftover after parsing attributes in process `syz.4.12991'. [ 1842.850578][ T7480] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12993'. [ 1843.103956][ T7448] lo speed is unknown, defaulting to 1000 [ 1843.717442][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13005'. [ 1843.738939][ T7536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13006'. [ 1843.844940][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13006'. [ 1844.464380][ T7559] lo speed is unknown, defaulting to 1000 [ 1844.858638][ T7586] xt_socket: unknown flags 0xfc [ 1845.046914][ T7598] veth0_to_bond: mtu less than device minimum [ 1845.086545][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13023'. [ 1845.108757][ T7559] wlan1 speed is unknown, defaulting to 1000 [ 1845.171487][ T7600] lo speed is unknown, defaulting to 1000 [ 1845.230228][ T7602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 1845.696568][ T7600] wlan1 speed is unknown, defaulting to 1000 [ 1845.740298][ T7627] x_tables: duplicate entry at hook 1 [ 1845.754404][ T7627] openvswitch: netlink: Tunnel attr 10527 out of range max 16 [ 1845.780298][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13028'. [ 1845.810226][ T7559] lo speed is unknown, defaulting to 1000 [ 1846.484153][ T7646] pimreg: entered allmulticast mode [ 1846.524313][ T7647] lo: left allmulticast mode [ 1846.536624][ T7647] pimreg: left allmulticast mode [ 1846.541943][ T7647] dvmrp2: left allmulticast mode [ 1846.621086][ T7600] lo speed is unknown, defaulting to 1000 [ 1846.796544][ T7645] lo speed is unknown, defaulting to 1000 [ 1847.569630][ T7693] __nla_validate_parse: 2 callbacks suppressed [ 1847.569651][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13040'. [ 1847.809207][ T7645] wlan1 speed is unknown, defaulting to 1000 [ 1847.911604][ T7705] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13043'. [ 1847.932556][ T7705] netlink: 7056 bytes leftover after parsing attributes in process `syz.3.13043'. [ 1847.946705][ T7705] openvswitch: netlink: EtherType 0 is less than min 600 [ 1847.997141][ T7705] lo speed is unknown, defaulting to 1000 [ 1848.262799][ T7714] syzkaller0: entered promiscuous mode [ 1848.283015][ T7714] syzkaller0: entered allmulticast mode [ 1848.563257][ T7645] lo speed is unknown, defaulting to 1000 [ 1848.847344][ T7705] wlan1 speed is unknown, defaulting to 1000 [ 1849.037696][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13050'. [ 1849.351656][ T7753] xt_hashlimit: size too large, truncated to 1048576 [ 1849.622859][ T7705] lo speed is unknown, defaulting to 1000 [ 1849.968495][ T7769] tipc: Enabled bearer , priority 0 [ 1849.979282][ T7766] syzkaller0: entered promiscuous mode [ 1849.984785][ T7766] syzkaller0: entered allmulticast mode [ 1850.155938][ T7766] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1850.239714][ T7769] tipc: Resetting bearer [ 1850.253740][ T7765] tipc: Resetting bearer [ 1850.312047][ T7765] tipc: Disabling bearer [ 1850.605224][ T7767] netlink: 'syz.1.13054': attribute type 1 has an invalid length. [ 1850.646222][ T7767] netlink: 'syz.1.13054': attribute type 4 has an invalid length. [ 1850.682042][ T7767] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1850.721578][ T7790] netlink: 'syz.1.13054': attribute type 1 has an invalid length. [ 1850.776951][ T7790] netlink: 'syz.1.13054': attribute type 4 has an invalid length. [ 1850.823920][ T7790] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1850.897668][ T7807] syzkaller1: entered promiscuous mode [ 1850.908824][ T7814] netlink: 'syz.0.13061': attribute type 1 has an invalid length. [ 1850.936295][ T7807] syzkaller1: entered allmulticast mode [ 1851.122373][ T7814] pim6reg: entered allmulticast mode [ 1851.144602][ T7814] bridge0: entered allmulticast mode [ 1851.184819][ T7814] pim6reg: left allmulticast mode [ 1851.197485][ T7814] bridge0: left allmulticast mode [ 1851.254356][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13062'. [ 1851.505129][ T7833] bridge6: entered allmulticast mode [ 1851.519338][ T7838] bridge_slave_1: left allmulticast mode [ 1851.535142][ T7838] bridge_slave_1: left promiscuous mode [ 1851.554381][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.584853][ T7838] bridge_slave_0: left allmulticast mode [ 1851.623850][ T7838] bridge_slave_0: left promiscuous mode [ 1851.651264][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.901743][ T7871] netlink: 'syz.3.13072': attribute type 3 has an invalid length. [ 1851.905598][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1851.905598][ T7862] Use struct sctp_sack_info instead [ 1851.939165][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1851.939165][ T7862] Use struct sctp_sack_info instead [ 1851.967397][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1851.967397][ T7862] Use struct sctp_sack_info instead [ 1851.989450][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1851.989450][ T7862] Use struct sctp_sack_info instead [ 1852.008720][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.008720][ T7862] Use struct sctp_sack_info instead [ 1852.026723][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.026723][ T7862] Use struct sctp_sack_info instead [ 1852.084257][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.084257][ T7862] Use struct sctp_sack_info instead [ 1852.103310][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.103310][ T7862] Use struct sctp_sack_info instead [ 1852.135379][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13074'. [ 1852.153225][ T7886] openvswitch: netlink: Message has 2 unknown bytes. [ 1852.161504][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.161504][ T7862] Use struct sctp_sack_info instead [ 1852.161533][ T7886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1852.199594][ T7886] netlink: 'syz.1.13076': attribute type 1 has an invalid length. [ 1852.224876][ T7862] sctp: [Deprecated]: syz.2.13071 (pid 7862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.224876][ T7862] Use struct sctp_sack_info instead [ 1852.260225][ T7881] syzkaller0: entered promiscuous mode [ 1852.280295][ T7881] syzkaller0: entered allmulticast mode [ 1852.710948][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13084'. [ 1852.763282][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13084'. [ 1852.991655][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13087'. [ 1853.029266][ T7951] netlink: 'syz.1.13094': attribute type 89 has an invalid length. [ 1853.121205][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1853.261610][ T7967] team0 (unregistering): Port device team_slave_0 removed [ 1853.297761][ T7967] team0 (unregistering): Port device team_slave_1 removed [ 1853.335561][ T7967] team0 (unregistering): Port device syz_tun removed [ 1853.358873][T30949] batadv1: left allmulticast mode [ 1853.363922][T30949] batadv1: left promiscuous mode [ 1853.364115][T30949] bridge0: port 3(batadv1) entered disabled state [ 1853.403203][T30949] bridge_slave_0: left allmulticast mode [ 1853.409774][T30949] bridge_slave_0: left promiscuous mode [ 1853.415546][T30949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.563529][ T7989] netlink: 'syz.4.13100': attribute type 4 has an invalid length. [ 1853.573574][T30949] tipc: Disabling bearer [ 1853.601073][ T7989] netlink: 'syz.4.13100': attribute type 8 has an invalid length. [ 1853.636210][ T7989] netlink: 212 bytes leftover after parsing attributes in process `syz.4.13100'. [ 1853.919588][ T8008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13106'. [ 1853.929856][ T8008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13106'. [ 1853.939363][ T8008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13106'. [ 1853.994464][T30949] team0: Port device geneve0 removed [ 1854.068350][ T8011] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1854.077009][ T8011] openvswitch: netlink: Message has 16 unknown bytes. [ 1854.161183][T30949] team0: Port device bridge3 removed [ 1854.240103][T30949] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 1854.300356][T30949] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 1854.381222][T30949] bond0 (unregistering): (slave 30): Releasing backup interface [ 1854.391729][T30949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1854.402487][T30949] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1854.414232][T30949] bond0 (unregistering): Released all slaves [ 1854.425497][T30949] bond1 (unregistering): Released all slaves [ 1854.439831][T30949] bond2 (unregistering): Released all slaves [ 1854.453496][T30949] bond3 (unregistering): Released all slaves [ 1854.475943][T30949] bond4 (unregistering): Released all slaves [ 1854.489610][T30949] bond5 (unregistering): Released all slaves [ 1854.503017][T30949] bond6 (unregistering): Released all slaves [ 1854.521110][T30949] bond7 (unregistering): Released all slaves [ 1854.539072][ T7975] sch_fq: defrate 4294967293 ignored. [ 1854.563947][ T8002] batman_adv: batadv0: Adding interface: macsec2 [ 1854.588490][ T8002] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1854.588878][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1854.636468][ T8002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1854.656627][ T8002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.668035][ T8002] batman_adv: batadv0: Interface activated: macsec2 [ 1855.070292][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13116'. [ 1855.105861][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13116'. [ 1855.275024][ T8071] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1855.297176][ T8071] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1855.368327][ T8075] lo speed is unknown, defaulting to 1000 [ 1855.541369][ T8084] tipc: Enabled bearer , priority 0 [ 1855.557479][ T8090] Bluetooth: MGMT ver 1.23 [ 1855.595353][ T8085] syzkaller0: entered promiscuous mode [ 1855.646742][ T8085] syzkaller0: entered allmulticast mode [ 1855.725232][ T8097] netlink: 'syz.1.13121': attribute type 3 has an invalid length. [ 1855.738670][ T8084] tipc: Resetting bearer [ 1855.749846][ T8075] wlan1 speed is unknown, defaulting to 1000 [ 1855.785484][ T8083] tipc: Resetting bearer [ 1855.885682][ T8083] tipc: Disabling bearer [ 1855.920055][ T8110] rdma_op ffff88809f3a09f0 conn xmit_rdma 0000000000000000 [ 1856.395716][T30949] !: left promiscuous mode [ 1856.422798][ T8075] lo speed is unknown, defaulting to 1000 [ 1856.498371][ T8140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1856.549757][ T8140] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1856.605148][T30949] tipc: Disabling bearer [ 1856.653118][T30949] tipc: Left network mode [ 1856.772148][ T8157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1858.181151][ T8181] lo speed is unknown, defaulting to 1000 [ 1858.823989][ T8216] lo speed is unknown, defaulting to 1000 [ 1858.867218][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 1858.875304][ C0] lec:lec_tx_timeout: lec0 [ 1859.131759][ T8224] __nla_validate_parse: 15 callbacks suppressed [ 1859.131779][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13152'. [ 1859.149155][ T8226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13151'. [ 1859.214827][ T8181] wlan1 speed is unknown, defaulting to 1000 [ 1859.243149][ T8216] wlan1 speed is unknown, defaulting to 1000 [ 1859.714855][ T8181] lo speed is unknown, defaulting to 1000 [ 1860.095159][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13156'. [ 1860.166559][ T8255] bridge7: entered promiscuous mode [ 1860.233466][ T8255] team0: Port device bridge7 added [ 1860.264461][ T8265] 8021q: VLANs not supported on vcan0 [ 1860.280865][ T8216] lo speed is unknown, defaulting to 1000 [ 1860.283411][ T8255] bridge0: port 3(team0) entered blocking state [ 1860.314558][ T8255] bridge0: port 3(team0) entered disabled state [ 1860.325956][ T8255] team0: entered allmulticast mode [ 1860.331659][ T8255] team_slave_0: entered allmulticast mode [ 1860.342114][ T8255] team_slave_1: entered allmulticast mode [ 1860.349513][ T8255] syz_tun: entered allmulticast mode [ 1860.355096][ T8255] bridge7: entered allmulticast mode [ 1860.363543][ T8255] team0: entered promiscuous mode [ 1860.369262][ T8255] team_slave_0: entered promiscuous mode [ 1860.375169][ T8255] team_slave_1: entered promiscuous mode [ 1860.385512][ T8255] syz_tun: entered promiscuous mode [ 1860.595198][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13159'. [ 1860.915946][T30949] hsr_slave_0: left promiscuous mode [ 1860.943104][T30949] hsr_slave_1: left promiscuous mode [ 1860.992055][ T8290] Cannot find set identified by id 0 to match [ 1861.291935][T30949] team0 (unregistering): Port device team_slave_1 removed [ 1861.309529][T30949] team0 (unregistering): Port device team_slave_0 removed [ 1862.749357][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1862.797950][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1862.845806][ T3062] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.856863][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1862.877338][ T3062] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.885571][ T3062] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.894275][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13180'. [ 1862.921053][ T3062] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1863.228554][ T8390] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13188'. [ 1863.298059][ T8402] netlink: 'syz.0.13189': attribute type 21 has an invalid length. [ 1863.321406][ T8402] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13189'. [ 1863.403015][ T8412] netlink: 'syz.4.13194': attribute type 29 has an invalid length. [ 1863.412162][ T8412] netlink: 'syz.4.13194': attribute type 29 has an invalid length. [ 1863.687452][ T8429] netlink: 'syz.3.13198': attribute type 10 has an invalid length. [ 1863.709893][ T8429] netlink: 'syz.3.13198': attribute type 6 has an invalid length. [ 1863.719430][ T8429] netlink: 'syz.3.13198': attribute type 7 has an invalid length. [ 1863.729001][ T8429] netlink: 'syz.3.13198': attribute type 8 has an invalid length. [ 1863.749463][T30949] IPVS: stop unused estimator thread 0... [ 1863.884785][ T8439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1864.184166][ T8452] lo speed is unknown, defaulting to 1000 [ 1864.302019][ T8456] netlink: 'syz.2.13202': attribute type 10 has an invalid length. [ 1864.375013][ T8452] wlan1 speed is unknown, defaulting to 1000 [ 1864.487304][ T8452] lo speed is unknown, defaulting to 1000 [ 1864.583670][ T8460] netlink: 'syz.1.13203': attribute type 9 has an invalid length. [ 1864.592188][ T8460] netlink: 'syz.1.13203': attribute type 6 has an invalid length. [ 1864.603945][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13203'. [ 1864.613368][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13203'. [ 1865.064255][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13208'. [ 1865.426572][ T5820] Bluetooth: hci4: command 0x0406 tx timeout [ 1866.109398][ T8487] netlink: 7920 bytes leftover after parsing attributes in process `syz.1.13211'. [ 1866.464825][ T8415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1866.696092][ T8499] netlink: 312 bytes leftover after parsing attributes in process `syz.2.13215'. [ 1867.045148][ T8517] bond4: invalid ARP target 0.0.0.0 specified for addition [ 1867.057458][ T8517] bond4: option arp_ip_target: invalid value (0) [ 1867.068832][ T8517] bond4 (unregistering): Released all slaves [ 1867.488354][ T8544] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13224'. [ 1867.623266][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13219'. [ 1867.669320][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13219'. [ 1867.698004][ T8551] siw: device registration error -23 [ 1867.929774][ T8572] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1867.964098][ T8572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1868.275308][ T8584] bond2: entered allmulticast mode [ 1868.285195][ T8584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1868.329265][ T8587] validate_nla: 8 callbacks suppressed [ 1868.329285][ T8587] netlink: 'syz.4.13237': attribute type 13 has an invalid length. [ 1868.459328][ T8604] tipc: Enabled bearer , priority 0 [ 1868.468652][ T8604] syzkaller0: entered promiscuous mode [ 1868.474265][ T8604] syzkaller0: entered allmulticast mode [ 1868.519707][ T8608] netlink: 'syz.1.13242': attribute type 2 has an invalid length. [ 1868.536817][ T8604] tipc: Resetting bearer [ 1868.557238][ T8602] tipc: Resetting bearer [ 1868.589760][ T8602] tipc: Disabling bearer [ 1868.705863][ T8618] lo speed is unknown, defaulting to 1000 [ 1869.551820][ T8647] lo speed is unknown, defaulting to 1000 [ 1869.576325][ T8618] wlan1 speed is unknown, defaulting to 1000 [ 1869.804150][ T8647] wlan1 speed is unknown, defaulting to 1000 [ 1870.097715][ T8681] __nla_validate_parse: 1 callbacks suppressed [ 1870.097734][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13258'. [ 1870.118233][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13258'. [ 1870.163538][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13258'. [ 1870.170008][ T8686] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1870.185648][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13258'. [ 1870.215168][ T8618] lo speed is unknown, defaulting to 1000 [ 1870.231787][ T8681] geneve4: entered promiscuous mode [ 1870.243164][ T8681] geneve4: entered allmulticast mode [ 1870.413610][ T8699] netlink: 'syz.1.13261': attribute type 21 has an invalid length. [ 1870.438702][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13261'. [ 1870.561543][ T8699] netlink: 'syz.1.13261': attribute type 5 has an invalid length. [ 1870.574269][ T8699] netlink: 'syz.1.13261': attribute type 6 has an invalid length. [ 1870.594573][ T8699] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13261'. [ 1870.834575][ T8647] lo speed is unknown, defaulting to 1000 [ 1870.943592][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13264'. [ 1871.127978][ T8716] tipc: Enabled bearer , priority 0 [ 1871.136877][ T8724] syzkaller0: entered promiscuous mode [ 1871.142372][ T8724] syzkaller0: entered allmulticast mode [ 1871.245920][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1871.282182][ T8719] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1871.389616][ T8724] tipc: Resetting bearer [ 1871.432132][ T8715] tipc: Resetting bearer [ 1871.485076][ T8715] tipc: Disabling bearer [ 1871.782320][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13272'. [ 1871.885741][ T8756] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13271'. [ 1871.921379][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13271'. [ 1872.014625][ T8763] tc_dump_action: action bad kind [ 1872.036440][ T8765] tc_dump_action: action bad kind [ 1872.180137][ T8771] netlink: 'syz.0.13276': attribute type 1 has an invalid length. [ 1872.284697][ T8771] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1872.359650][ T8780] syzkaller0: entered promiscuous mode [ 1872.384298][ T8780] syzkaller0: entered allmulticast mode [ 1872.944844][ T8817] syzkaller0: entered promiscuous mode [ 1872.976849][ T8817] syzkaller0: entered allmulticast mode [ 1872.989798][ T8822] batadv_slave_1: entered promiscuous mode [ 1873.012256][ T8812] syzkaller0: entered promiscuous mode [ 1873.044187][ T8812] syzkaller0: entered allmulticast mode [ 1873.150142][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1873.205552][ T8829] batadv_slave_1 (unregistering): left promiscuous mode [ 1873.213970][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1873.373066][ T8834] lo speed is unknown, defaulting to 1000 [ 1873.495566][ T8861] nbd: couldn't find a device at index 65546 [ 1873.827872][ T3054] wlan1: Trigger new scan to find an IBSS to join [ 1873.883935][ T8877] ip6gretap1: left promiscuous mode [ 1876.726705][ T8834] wlan1 speed is unknown, defaulting to 1000 [ 1877.137610][ T8926] IPVS: Error connecting to the multicast addr [ 1877.319006][ T8834] lo speed is unknown, defaulting to 1000 [ 1877.394875][ T8927] tipc: Enabled bearer , priority 0 [ 1877.471459][ T8935] syzkaller0: entered promiscuous mode [ 1877.490867][ T8935] syzkaller0: entered allmulticast mode [ 1877.604864][ T8943] __nla_validate_parse: 11 callbacks suppressed [ 1877.604884][ T8943] netlink: 212312 bytes leftover after parsing attributes in process `syz.3.13313'. [ 1877.704101][ T8964] tipc: Resetting bearer [ 1877.758189][ T8924] tipc: Resetting bearer [ 1877.887807][ T8924] tipc: Disabling bearer [ 1878.154025][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13319'. [ 1878.410221][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13319'. [ 1878.411970][ T8982] gretap1: entered allmulticast mode [ 1878.492243][ T8986] ip_vti0: Master is either lo or non-ether device [ 1878.683518][ T8991] lo speed is unknown, defaulting to 1000 [ 1878.876839][T30949] wlan1: Trigger new scan to find an IBSS to join [ 1879.105753][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13322'. [ 1879.462377][ T8991] wlan1 speed is unknown, defaulting to 1000 [ 1879.675959][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13328'. [ 1879.748365][ T9036] bridge_slave_1: left allmulticast mode [ 1879.754052][ T9036] bridge_slave_1: left promiscuous mode [ 1879.774307][T30949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.780137][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.838369][ T9036] bridge_slave_0: left allmulticast mode [ 1879.845686][ T9036] bridge_slave_0: left promiscuous mode [ 1879.855338][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1880.015601][ T8991] lo speed is unknown, defaulting to 1000 [ 1880.284018][ T9060] can: request_module (can-proto-3) failed. [ 1880.338006][ T9060] can: request_module (can-proto-3) failed. [ 1880.399754][ T9060] can: request_module (can-proto-3) failed. [ 1880.538391][ T9060] can: request_module (can-proto-3) failed. [ 1880.673475][ T9060] can: request_module (can-proto-3) failed. [ 1880.775541][ T9060] can: request_module (can-proto-3) failed. [ 1880.786668][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 1880.922005][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13339'. [ 1880.936348][ T9090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1880.958485][ T9060] can: request_module (can-proto-3) failed. [ 1880.994356][ T9103] ip6gretap1: entered allmulticast mode [ 1881.161638][ T9112] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20002 [ 1881.182783][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13343'. [ 1881.192018][ T9117] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20002 [ 1881.423470][ T9107] hsr_slave_1 (unregistering): left promiscuous mode [ 1881.551325][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13351'. [ 1881.723584][ T9141] tipc: Enabled bearer , priority 0 [ 1881.733152][ T9141] tipc: Resetting bearer [ 1881.800282][ T9149] syzkaller0: entered promiscuous mode [ 1881.808607][ T9149] syzkaller0: entered allmulticast mode [ 1881.818385][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13352'. [ 1881.926812][ T9140] tipc: Resetting bearer [ 1881.997625][ T9140] tipc: Disabling bearer [ 1882.697352][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13358'. [ 1882.993715][ T9206] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13362'. [ 1883.272539][ T9225] lo speed is unknown, defaulting to 1000 [ 1883.340972][ T9228] syzkaller1: entered promiscuous mode [ 1883.359597][ T9228] syzkaller1: entered allmulticast mode [ 1883.516768][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13369'. [ 1883.711179][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13371'. [ 1883.799705][ T9250] netlink: 'syz.4.13371': attribute type 30 has an invalid length. [ 1884.076368][ T9259] netlink: 324 bytes leftover after parsing attributes in process `syz.3.13373'. [ 1884.169965][ T9226] netlink: 'syz.2.13367': attribute type 2 has an invalid length. [ 1884.459920][ T9249] geneve3: entered promiscuous mode [ 1884.483021][ T9225] wlan1 speed is unknown, defaulting to 1000 [ 1884.484638][ T3062] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1884.552999][ T3062] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1884.602276][ T3062] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1884.627945][ T9253] lo speed is unknown, defaulting to 1000 [ 1884.633623][ T3062] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1885.021572][ T9282] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1885.045764][ T9282] bond2 (unregistering): Released all slaves [ 1885.118704][ T9225] lo speed is unknown, defaulting to 1000 [ 1885.305872][ T9253] wlan1 speed is unknown, defaulting to 1000 [ 1885.512129][ T9297] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1885.786574][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13383'. [ 1885.858809][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13383'. [ 1885.900575][ T9326] sctp: [Deprecated]: syz.4.13385 (pid 9326) Use of int in max_burst socket option. [ 1885.900575][ T9326] Use struct sctp_assoc_value instead [ 1885.963470][ T9253] lo speed is unknown, defaulting to 1000 [ 1886.183148][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13387'. [ 1886.551056][ T9353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1887.652747][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13393'. [ 1887.703841][ T9367] netlink: 'syz.1.13393': attribute type 10 has an invalid length. [ 1887.734687][ T9367] syz_tun: entered promiscuous mode [ 1887.751617][ T9367] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1887.791099][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13393'. [ 1887.887971][ T9385] netlink: 'syz.2.13395': attribute type 1 has an invalid length. [ 1887.936192][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13395'. [ 1888.189817][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13403'. [ 1888.201232][ T9404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13403'. [ 1888.337329][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13407'. [ 1888.370420][ T9419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13407'. [ 1888.647717][ T9444] netlink: 'syz.4.13410': attribute type 10 has an invalid length. [ 1888.736037][ T9431] lo speed is unknown, defaulting to 1000 [ 1888.748925][ T9444] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1888.766575][ T9444] team0: Failed to send options change via netlink (err -105) [ 1888.774244][ T9444] team0: Port device netdevsim0 added [ 1888.780824][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13414'. [ 1888.814889][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1888.835151][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13414'. [ 1889.080958][ T9435] team0: Failed to send options change via netlink (err -105) [ 1889.097046][ T9435] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1889.137070][ T9435] team0: Port device netdevsim0 removed [ 1889.201023][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13416'. [ 1889.570126][ T9431] wlan1 speed is unknown, defaulting to 1000 [ 1889.575585][ T9474] pimreg: entered allmulticast mode [ 1889.602298][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13418'. [ 1889.835353][ T9485] bond3: Invalid ad_actor_system MAC address. [ 1889.870858][ T9485] bond3: option ad_actor_system: invalid value (7) [ 1889.905638][ T9485] bond3 (unregistering): Released all slaves [ 1890.183584][ T9431] lo speed is unknown, defaulting to 1000 [ 1890.399428][ T9516] netlink: 'syz.1.13427': attribute type 1 has an invalid length. [ 1890.460562][ T9508] vlan3: entered promiscuous mode [ 1890.465692][ T9508] bond0: entered promiscuous mode [ 1890.481909][ T9508] bond_slave_0: entered promiscuous mode [ 1890.488339][ T9508] bond_slave_1: entered promiscuous mode [ 1890.557969][ T9516] gtp2: entered promiscuous mode [ 1890.563081][ T9516] gtp2: entered allmulticast mode [ 1890.757126][ T9531] syzkaller0: entered promiscuous mode [ 1890.766252][ T9531] syzkaller0: entered allmulticast mode [ 1890.797345][ T9524] block nbd13: server does not support multiple connections per device. [ 1890.822549][ T9524] block nbd13: shutting down sockets [ 1890.990979][ T9537] xt_cgroup: invalid path, errno=-2 [ 1891.023051][ T9537] IPv6: Can't replace route, no match found [ 1891.067325][ T6463] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1891.526422][ T2243] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1891.723719][ T9572] bond0: entered promiscuous mode [ 1891.739214][ T9572] bond_slave_0: entered promiscuous mode [ 1891.758052][ T9572] bond_slave_1: entered promiscuous mode [ 1891.787040][ T9572] bond0: left promiscuous mode [ 1891.791861][ T9572] bond_slave_0: left promiscuous mode [ 1891.825692][ T9572] bond_slave_1: left promiscuous mode [ 1892.439730][ T9631] lo speed is unknown, defaulting to 1000 [ 1892.649879][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.666376][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.707023][ T9652] netlink: 'syz.1.13456': attribute type 15 has an invalid length. [ 1892.789867][ T9652] bond0: (slave syz_tun): Releasing backup interface [ 1892.809418][ T9652] syz_tun: left promiscuous mode [ 1892.819449][ T9652] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 1892.858186][ T9652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1892.990528][ T9671] __nla_validate_parse: 12 callbacks suppressed [ 1892.990547][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13461'. [ 1893.125657][ T9631] wlan1 speed is unknown, defaulting to 1000 [ 1893.125670][ T9634] lo speed is unknown, defaulting to 1000 [ 1893.470547][ T9689] netlink: 11 bytes leftover after parsing attributes in process `syz.4.13463'. [ 1893.688648][ T2243] IPVS: starting estimator thread 0... [ 1893.690042][ T9695] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13465'. [ 1893.725797][ T9677] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 1893.739133][ T9695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1893.742489][ T9674] lo speed is unknown, defaulting to 1000 [ 1893.777727][ T9634] wlan1 speed is unknown, defaulting to 1000 [ 1893.796634][ T9696] IPVS: using max 32 ests per chain, 76800 per kthread [ 1893.826322][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1893.834383][ C0] lec:lec_tx_timeout: lec0 [ 1893.943580][ T9631] lo speed is unknown, defaulting to 1000 [ 1894.320726][ T9711] bond2: invalid ARP target 0.0.0.0 specified for addition [ 1894.340844][ T9711] bond2: option arp_ip_target: invalid value (0) [ 1894.379004][ T9711] bond2 (unregistering): Released all slaves [ 1894.581471][ T9674] wlan1 speed is unknown, defaulting to 1000 [ 1894.610426][ T9634] lo speed is unknown, defaulting to 1000 [ 1894.977039][ T9674] lo speed is unknown, defaulting to 1000 [ 1895.707737][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13473'. [ 1895.898355][ T9756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1895.916641][ T9761] bond2: option miimon: invalid value (18446744071562067968) [ 1895.924081][ T9761] bond2: option miimon: allowed values 0 - 2147483647 [ 1895.924772][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13473'. [ 1896.449656][ T9784] geneve1: entered promiscuous mode [ 1896.729250][ T9804] netlink: 'syz.3.13483': attribute type 3 has an invalid length. [ 1896.737426][ T9804] netlink: 'syz.3.13483': attribute type 3 has an invalid length. [ 1896.811638][ T9811] Bluetooth: MGMT ver 1.23 [ 1896.993142][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13487'. [ 1897.016242][ T9821] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1897.057862][ T9827] tap0: tun_chr_ioctl cmd 2148553947 [ 1897.064730][ T9828] x_tables: duplicate underflow at hook 2 [ 1897.097236][ T9817] veth0: entered promiscuous mode [ 1897.212448][ T9831] veth4: entered allmulticast mode [ 1897.235232][ T9815] veth0: left promiscuous mode [ 1897.254460][ T9835] netlink: 332 bytes leftover after parsing attributes in process `syz.2.13490'. [ 1897.264384][ T9835] netlink: 'syz.2.13490': attribute type 9 has an invalid length. [ 1897.273406][ T9835] netlink: 'syz.2.13490': attribute type 10 has an invalid length. [ 1897.298668][ T9839] Bluetooth: MGMT ver 1.23 [ 1897.313026][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13487'. [ 1897.340359][ T9831] veth4: entered allmulticast mode [ 1897.458068][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13492'. [ 1897.508691][ T9843] tipc: Enabling of bearer rejected, failed to enable media [ 1897.559134][ T9835] netlink: 'syz.2.13490': attribute type 1 has an invalid length. [ 1897.708626][ T9835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1897.956922][ T9868] netlink: 'syz.1.13496': attribute type 1 has an invalid length. [ 1897.996495][ T9868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13496'. [ 1898.009936][ T9878] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13499'. [ 1898.058246][ T9878] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13499'. [ 1898.241411][ T9895] netlink: 8936 bytes leftover after parsing attributes in process `syz.3.13502'. [ 1898.296442][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13502'. [ 1898.529629][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13505'. [ 1898.688372][ T29] audit: type=1107 audit(1771468250.544:111): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1898.710676][ T9932] tipc: Enabling of bearer rejected, failed to enable media [ 1898.724313][ T9930] tipc: Enabling of bearer rejected, failed to enable media [ 1898.759774][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1898.779170][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1898.817846][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13510'. [ 1898.861157][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13511'. [ 1900.014227][T10019] syzkaller0: entered promiscuous mode [ 1900.020147][T10019] syzkaller0: entered allmulticast mode [ 1900.078454][ T6454] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 362 sec [ 1900.124578][T10022] tipc: Enabling of bearer rejected, failed to enable media [ 1900.191531][T10027] syzkaller0: entered promiscuous mode [ 1900.197713][T10027] syzkaller0: entered allmulticast mode [ 1900.225612][T10022] syzkaller0: entered promiscuous mode [ 1900.247546][T10022] syzkaller0: entered allmulticast mode [ 1900.805888][T10050] lo speed is unknown, defaulting to 1000 [ 1900.823476][T10055] x_tables: duplicate underflow at hook 2 [ 1901.214089][T10050] wlan1 speed is unknown, defaulting to 1000 [ 1901.465155][T10083] vlan2: entered allmulticast mode [ 1901.483153][T10083] bond0: entered allmulticast mode [ 1901.491945][T10083] bond_slave_0: entered allmulticast mode [ 1901.504281][T10083] bond_slave_1: entered allmulticast mode [ 1901.555743][T10083] team0: Port device bond0 removed [ 1901.640981][T10083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1901.669652][T10083] bond_slave_0: left allmulticast mode [ 1901.694112][T10083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1901.735685][T10083] bond_slave_1: left allmulticast mode [ 1901.758025][T10083] bond0 (unregistering): Released all slaves [ 1901.797995][T10050] lo speed is unknown, defaulting to 1000 [ 1901.978377][T10109] syzkaller0: entered promiscuous mode [ 1901.983890][T10109] syzkaller0: entered allmulticast mode [ 1902.288482][T10125] gretap0: entered promiscuous mode [ 1902.293827][T10125] vlan2: entered promiscuous mode [ 1902.612139][T10156] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1902.777290][T10156] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1903.008536][T10177] __nla_validate_parse: 10 callbacks suppressed [ 1903.008558][T10177] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.13565'. [ 1903.152349][T10184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13568'. [ 1903.397536][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13571'. [ 1903.523358][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13573'. [ 1903.938552][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13578'. [ 1904.036611][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13578'. [ 1904.050423][T10242] lo speed is unknown, defaulting to 1000 [ 1904.465672][T10242] wlan1 speed is unknown, defaulting to 1000 [ 1904.920098][T10265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13583'. [ 1904.958190][T10272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13585'. [ 1905.023003][T10242] lo speed is unknown, defaulting to 1000 [ 1905.091457][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13583'. [ 1905.270292][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13587'. [ 1906.262604][T10338] pim6reg: entered allmulticast mode [ 1906.281543][T10349] pim6reg: left allmulticast mode [ 1906.822200][T10379] lo speed is unknown, defaulting to 1000 [ 1906.893018][T10388] x_tables: duplicate underflow at hook 4 [ 1906.924039][T10389] dummy0: entered promiscuous mode [ 1906.950564][T10389] macsec1: entered promiscuous mode [ 1906.960580][T10389] macsec1: entered allmulticast mode [ 1906.965915][T10389] dummy0: entered allmulticast mode [ 1907.019780][T10389] dummy0: left allmulticast mode [ 1907.025051][T10389] dummy0: left promiscuous mode [ 1907.068746][T10388] 8021q: VLANs not supported on gre0 [ 1907.209059][T10403] syzkaller0: entered promiscuous mode [ 1907.214570][T10403] syzkaller0: entered allmulticast mode [ 1907.329027][T10380] lo speed is unknown, defaulting to 1000 [ 1907.332538][T10379] wlan1 speed is unknown, defaulting to 1000 [ 1907.876267][T10380] wlan1 speed is unknown, defaulting to 1000 [ 1908.001028][T10441] caif0: left promiscuous mode [ 1908.012937][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1908.040475][T10379] lo speed is unknown, defaulting to 1000 [ 1908.322577][T10458] __nla_validate_parse: 8 callbacks suppressed [ 1908.322597][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13623'. [ 1908.857836][T10473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1909.012822][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13626'. [ 1911.107196][T10380] lo speed is unknown, defaulting to 1000 [ 1911.317199][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13629'. [ 1911.347601][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13629'. [ 1911.357122][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13629'. [ 1911.494448][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13630'. [ 1911.753411][T10531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13631'. [ 1911.764188][T10531] openvswitch: netlink: Flow key attr not present in new flow. [ 1911.790514][T10519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1911.863499][T10515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1911.913855][T10515] bond5: (slave bond0): Enslaving as an active interface with an up link [ 1911.986964][T30949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1912.610378][T10564] bond0: option downdelay: invalid value (18446744073709551607) [ 1912.631390][T10564] bond0: option downdelay: allowed values 0 - 2147483647 [ 1912.943060][T10588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13639'. [ 1913.106556][T10597] team0 (unregistering): Port device team_slave_0 removed [ 1913.123411][T10600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1913.129280][T10597] team0 (unregistering): Port device team_slave_1 removed [ 1913.179011][T10609] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13642'. [ 1913.192631][T10611] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.13641'. [ 1913.200507][T10610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1913.209643][T10611] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1913.235785][T10610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.258954][T10611] tipc: Enabled bearer , priority 0 [ 1913.309554][T10597] syzkaller0: entered promiscuous mode [ 1913.315093][T10597] syzkaller0: entered allmulticast mode [ 1913.381918][T10596] tipc: Resetting bearer [ 1913.408396][T10618] netlink: 'syz.2.13646': attribute type 1 has an invalid length. [ 1913.452203][T10596] tipc: Disabling bearer [ 1913.507655][T10630] __nla_validate_parse: 1 callbacks suppressed [ 1913.507672][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13649'. [ 1913.529866][T10618] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1913.681504][T10640] syzkaller0: entered promiscuous mode [ 1913.697914][T10640] syzkaller0: entered allmulticast mode [ 1913.725658][T10636] lo speed is unknown, defaulting to 1000 [ 1914.569194][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1916.280337][T10636] wlan1 speed is unknown, defaulting to 1000 [ 1916.373655][T10631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1916.602002][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13661'. [ 1916.658847][T10697] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13660'. [ 1916.789012][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13665'. [ 1916.971671][ T3054] bond0 (unregistering): (slave bridge6): Releasing active interface [ 1917.140128][ T3054] .` (unregistering): Released all slaves [ 1917.150475][ T3054] bond1 (unregistering): Released all slaves [ 1917.163903][ T3054] bond2 (unregistering): Released all slaves [ 1917.177158][ T3054] bond3 (unregistering): Released all slaves [ 1917.190951][ T3054] bond4 (unregistering): Released all slaves [ 1917.223624][ T3054] bond0 (unregistering): Released all slaves [ 1917.244667][ T3054] bond5 (unregistering): (slave veth5): Releasing backup interface [ 1917.253101][ T3054] veth5: left promiscuous mode [ 1917.260131][ T3054] bond5 (unregistering): Released all slaves [ 1917.435356][T10715] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1917.481565][ T3054] m1Ie5nè‹Ò: left promiscuous mode [ 1917.628169][ T3054] m1Ie5èÿá: left promiscuous mode [ 1917.641733][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13669'. [ 1917.818484][ T3054] l24): left promiscuous mode [ 1917.872000][T10636] lo speed is unknown, defaulting to 1000 [ 1917.960421][ T3054] tipc: Disabling bearer [ 1917.984618][ T3054] tipc: Left network mode [ 1918.052475][ T29] audit: type=1800 audit(1771468269.914:112): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13672" name=303030303030303030303030303030303030303030303441BF0359DEDEB1C9A2AF5381A5E01B0749A78B97F0047D6F64B166F1C4BDD43A558CA6CE35D71616429DDC0DE0190EC6FA84FFFE5AFF637D197BFBC63394A4DC076CB4B826235B5953A530060EFD532BD1F87FDE32BD3078666666666666666666666666666666663078303030303030303030303030303030343030303030303030303030303030303030303030303034 dev="tmpfs" ino=1441 res=0 errno=0 [ 1918.484832][T10780] netlink: 'syz.4.13679': attribute type 30 has an invalid length. [ 1918.557650][T10783] netlink: 'syz.4.13679': attribute type 30 has an invalid length. [ 1918.600720][T10781] lo speed is unknown, defaulting to 1000 [ 1918.607025][T10776] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1919.278595][T10801] syzkaller0: entered promiscuous mode [ 1919.284324][T10801] syzkaller0: entered allmulticast mode [ 1919.345886][T10781] wlan1 speed is unknown, defaulting to 1000 [ 1919.836137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1919.844190][ C0] lec:lec_tx_timeout: lec0 [ 1922.118197][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13683'. [ 1922.177953][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13684'. [ 1922.367879][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1922.438800][T10781] lo speed is unknown, defaulting to 1000 [ 1922.866444][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1925.886707][ T3054] hsr_slave_0: left promiscuous mode [ 1925.892579][ T3054] batman_adv: batadv0: Removing interface: ipvlan2 [ 1925.900402][ T3054] batman_adv: batadv0: Removing interface: macsec1 [ 1925.921278][ T3054] pim6reg (unregistering): left allmulticast mode [ 1926.175485][T10830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.189702][T10830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1926.389546][T10830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.426503][T10830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1926.512982][T10878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1926.567432][T10879] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13696'. [ 1926.683876][T10830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.725463][T10830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1926.904333][T10830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.923337][T10830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1927.168678][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13701'. [ 1927.215929][ T3054] IPVS: stop unused estimator thread 0... [ 1927.276875][T21998] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1927.299190][T21998] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1927.365931][T21998] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1927.395683][T21998] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1927.460874][ T3054] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1927.482922][ T3054] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1927.574320][T21998] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1927.589273][T21998] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1927.721613][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13706'. [ 1927.799618][T10930] bond3: entered promiscuous mode [ 1927.805429][T10930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1927.849396][T10930] siw: device registration error -23 [ 1928.190324][T10959] netlink: 'syz.4.13715': attribute type 1 has an invalid length. [ 1928.283209][T10972] nbd: nbd2 already in use [ 1928.304277][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13715'. [ 1928.341932][T10965] vlan2: entered promiscuous mode [ 1928.351696][T10965] geneve1: entered promiscuous mode [ 1928.357428][T10965] vlan2: entered allmulticast mode [ 1928.362761][T10965] geneve1: entered allmulticast mode [ 1928.391543][T10959] bond5: (slave geneve4): making interface the new active one [ 1928.405170][T10959] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1928.480628][T10975] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1928.492361][T10617] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1928.503928][T10617] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1928.558530][T10617] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1928.655215][T10617] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1928.987296][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13724'. [ 1929.012758][T11017] netlink: 176 bytes leftover after parsing attributes in process `syz.3.13723'. [ 1929.052249][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13724'. [ 1929.243511][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13723'. [ 1929.551950][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13728'. [ 1929.651536][T11072] netlink: 'syz.3.13731': attribute type 3 has an invalid length. [ 1929.917212][T11083] sctp: [Deprecated]: syz.1.13734 (pid 11083) Use of int in maxseg socket option. [ 1929.917212][T11083] Use struct sctp_assoc_value instead [ 1930.203895][T11106] netlink: 'syz.0.13736': attribute type 2 has an invalid length. [ 1930.367430][T11119] syzkaller0: entered promiscuous mode [ 1930.407011][T11119] syzkaller0: entered allmulticast mode [ 1930.479519][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13741'. [ 1930.554067][T11128] netlink: 120 bytes leftover after parsing attributes in process `syz.0.13743'. [ 1930.604509][T11128] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1931.295676][T11163] tipc: Enabling of bearer rejected, failed to enable media [ 1931.627371][T11175] netlink: 'syz.1.13751': attribute type 10 has an invalid length. [ 1931.656670][T11175] netlink: 'syz.1.13751': attribute type 10 has an invalid length. [ 1931.678251][T11175] dummy0: entered promiscuous mode [ 1931.685166][T11175] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1932.131431][T11195] lo speed is unknown, defaulting to 1000 [ 1932.317972][T11200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1932.348456][T11195] wlan1 speed is unknown, defaulting to 1000 [ 1932.371747][T11206] __nla_validate_parse: 3 callbacks suppressed [ 1932.371763][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13756'. [ 1932.395434][T11206] netlink: 'syz.4.13756': attribute type 39 has an invalid length. [ 1932.829090][T11195] lo speed is unknown, defaulting to 1000 [ 1933.097753][T11233] netlink: 'syz.3.13761': attribute type 1 has an invalid length. [ 1933.105785][T11233] netlink: 'syz.3.13761': attribute type 2 has an invalid length. [ 1933.684205][T11243] tipc: Enabled bearer , priority 0 [ 1933.717065][T11246] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13765'. [ 1933.800995][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13767'. [ 1933.886564][T11251] openvswitch: netlink: Unknown nsh attribute 0 [ 1934.003727][T11262] netlink: 'syz.2.13769': attribute type 6 has an invalid length. [ 1934.022969][T11247] tipc: Disabling bearer [ 1934.091718][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13772'. [ 1934.174680][T11271] bpq0: left promiscuous mode [ 1934.188673][T11279] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.13774'. [ 1934.189987][T11271] bpq0: left allmulticast mode [ 1934.203950][T11270] netlink: 'syz.3.13772': attribute type 6 has an invalid length. [ 1934.262098][T11270] netlink: 'syz.3.13772': attribute type 5 has an invalid length. [ 1934.425246][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13775'. [ 1934.444795][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13773'. [ 1943.348317][ T3055] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1952.120336][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 1957.826497][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 1957.834519][ C0] lec:lec_tx_timeout: lec0 [ 1960.396430][T29729] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 422 sec [ 1975.346724][T21998] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.993381][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1981.006434][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1981.014475][ C0] lec:lec_tx_timeout: lec0 [ 1991.346979][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2007.347233][ T3054] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2013.912971][T12833] Bluetooth: hci3: command 0x0406 tx timeout [ 2015.873362][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 2020.710003][T29729] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 483 sec [ 2020.886405][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2020.894455][ C0] lec:lec_tx_timeout: lec0 [ 2037.440330][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2039.346708][T28072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2042.876176][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 2042.884201][ C0] lec:lec_tx_timeout: lec0 [ 2071.347948][ T3062] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2079.188391][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 2081.027011][T29729] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 543 sec [ 2084.876233][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 2084.884405][ C0] lec:lec_tx_timeout: lec0 [ 2098.872184][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2103.349965][ T3055] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2103.886495][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 2103.894620][ C0] lec:lec_tx_timeout: lec0 [ 2103.986626][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2124.466710][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2135.347019][T28072] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2141.351243][ T6454] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 603 sec [ 2143.221802][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 2148.876336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 2148.884364][ C0] lec:lec_tx_timeout: lec0 [ 2160.321268][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2165.836070][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 2165.844101][ C0] lec:lec_tx_timeout: lec0 [ 2167.346963][T10617] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2199.350730][T30949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2201.672212][ T6454] page_pool_release_retry() stalled pool shutdown: id 414, 1 inflight 664 sec [ 2206.734971][ T6520] lec:lec_start_xmit: lec0:No lecd attached [ 2211.836022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 2211.844097][ C0] lec:lec_tx_timeout: lec0 [ 2221.763256][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 2226.877232][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 2226.885268][ C0] lec:lec_tx_timeout: lec0 [ 2231.347234][T10617] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)