last executing test programs: 3.757322832s ago: executing program 4 (id=8502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x28000051}, 0x44000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f0000000000)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71368a993a5cc7d951c3f249", 0x96) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x28000051}, 0x44000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f0000000000)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71368a993a5cc7d951c3f249", 0x96) (async) 3.656024463s ago: executing program 2 (id=8503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_netdev_private(r4, 0x8947, &(0x7f0000000180)="83c8cfef3a") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r5, r3, 0x0, 0xbdc4) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'net'}, {0x13, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'freezer'}, {0x2d, 'hugetlb'}, {0x2d, 'devices'}]}, 0x2f) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010003b1500000000fc37845a052548000000000000000059", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028005001600020000000500170000000000080018000000000004001200"], 0x50}}, 0x0) 3.622181494s ago: executing program 4 (id=8505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a70000000060a010400000000000000000265b8810a000480400001800e000100627974656f726465720000002c000280080003400000000008000140000800000800022000000000080004400000000008000540000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a62ee7004091a61468c5ede68b11a462a601f9cde01accb42bc5531b46a2466366ca53e2ae73ad3d28ac4"], 0x98}}, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ec0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4060}, 0x20008800) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0x100, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0xc, r13}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x6, r14, 0x8}, 0x10) 3.443541734s ago: executing program 4 (id=8509): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62000000) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r6) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r10, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915", 0xaf}], 0x1}}], 0x1, 0x2090) socket$kcm(0x2d, 0x2, 0x0) accept$inet(r10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff06fd"}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), 0x0) close(0x3) 3.147809134s ago: executing program 2 (id=8514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000080)=0x8e, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x1, @rand_addr=0x64010100}}, 0x1e) 3.046603577s ago: executing program 2 (id=8517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000001"], 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="03000004c600d8460090b4407306c607bea20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.801271265s ago: executing program 2 (id=8520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) close(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) (async) 2.381820196s ago: executing program 4 (id=8525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0xc, 0x0, 0xaf}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40400}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x808) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x63}]}, 0x2c}}, 0x0) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe, 0x401, 0xdc, 0x200, 0x8, 0x400, 0x2897af25, 0x6, 0xffff, 0x1, 0x3, 0x10000, 0x3, 0x9, 0xfff, 0x4, 0x7, 0x5, 0x8, 0xfffffff9, 0xffffffff, 0x1, 0x30e}}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1.821835602s ago: executing program 0 (id=8531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.742914943s ago: executing program 4 (id=8532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xcf}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.662426416s ago: executing program 4 (id=8534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='hsr0\x00') setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) close(0x3) 1.533331782s ago: executing program 0 (id=8536): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x87, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000}, {0xa, 0x4e23, 0x5, @mcast1, 0xf32b}, 0x1, {[0x6, 0xe, 0x3, 0x3, 0x8, 0x3, 0xe, 0x1]}}, 0x5c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'ip_vti0\x00', {0x1}, 0x800}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x7) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x604c}, 0x4) sendmsg$sock(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="de05f2dadc5df1503c3b8ca187688a20bbc467a31121a7eb323d57b3a117a3053a987b105f9885c1e38791a4d4d4949f599a42e69a0e14fa34e75c46eacb207480863fb193f54256d20d9875787aab00a63d857551ee22b78642fd340b0230492a040ca52b1f1df212a1285f79c7cc49197a2ed6de8da95a6b7a5393484e76ff2377c48c871c7ef9de2aa8c8031a106bd4217ab42b66264d6504244f77d0e4824e937e010bdc2f0139fcc162f3b6826873a2dfc6233b818a2aae83478f99a82f39dd697ae88e02d7b3adc72a5b24dd5d7fcd23334deb81d7ed0db784ce9008f9040faf2d0734ff96f455ed0ffe6db3253dfe", 0xf2}, {&(0x7f0000000240)="050846ddf778104b35f567f42db2f5bafbd0baf5cbf9e3d56ac431d072287099722eec69d74291b05355d6cb3470927c18122bd99570663e45733e386285815ec5bdd121d9fa6da6764a9e042b6935a630879b25f3c0e8979b8d783c5927136cca50dfc599adc7a690f7ead17cb342cf8b6469cab1292b7f206c97272189c314d474e058c3501896a8f0f135c5061dd5777449045f03924f71d325b952604de343190f135f9ec8f6ef8f00d8a9e4e6518d9ed7f8513319601267389cb78a58637ff0597937898e560874a4dd8a662a655afb9a1a0672992910551fcddf5075a40b12f83cc4cb777e5ece", 0xea}, {&(0x7f0000000340)="864e6afae4f6938fe550a393c025d8b394a228b3a6e40e5ab6591e5ac96cd3cba6b1fdb12b18573ea1f17fb9786bb7959a8165dd6b4e1d46e2525ff79e62a96eec66551d254faf0ddfb43adb31c3b3d9a33a", 0x52}, {&(0x7f00000003c0)="91198291fb9ee78f73c7d3d9f682b32ec0804992f6fa08c3fc12fc17a1a350781b083dcabdd01f8e6c7d2e3303705d1b8c1b523b342f31b1b2ae3820c563767796a72264ca422326a72fa332e85b9a965768e96825ec2a48498b77aba02be971a93061a5ee5e6fe654abf904f442269aeb1dac", 0x73}, {&(0x7f0000000440)="a1f0353e5d1e35d473442519f5853e1c905b923da85cb577807202fba197025622528e1f0b6044b70fb467156e9abae8a0107897926bd7922204f023e48cce918fca", 0x42}, {&(0x7f00000004c0)="06b2b491474afab7de5d2087150fb856b4a07e58b4dfe1d0bdaa0fa1c23d0fb392c9ed7f", 0x24}, {&(0x7f0000000500)="da86308b27e9b249200f830f67b51ffbe4703d763c541e30cda13951d7f5125d6792ae4442d436d26207ab6f6ad168e606929069510ccd7170e4c4fc8bf90cb8f959de2cf06fb829c5f2d29c740a6de702219f2895515edea69ecd769e4984645de3ec8884077ce71ecb9ddd75a2512c1888a20fb6615e0ab52491ae196bb73063570f9b36c94c75f5ac51d0b285969cf04a3d8aebe823add30c70bf93066085cb737ba7398bc2b2f1a0eec139dd0fd64220045e892783b4c66c718aeb61cbc64bba2dab4614", 0xc6}, {&(0x7f0000000600)="2836bb2c58b9c61900e92cbcc5cacbf8df4f1bac32184fc1ac82be218fa24c3e0a583f5369", 0x25}, {&(0x7f0000000640)="d13f7088c0b1c743ae17206eb22d176a5e14b28346a0c776ddf723e91a575b3874b041e047b7919996b48f2160", 0x2d}, {&(0x7f0000000680)="5bee9c4575fe70b61c0c3336cd88a142b736410568ade96604305e154fe0c29d5fb1ea33bee0981821e27627a3514a59ead998a55c274dc44658b008c228b3c9558096c7f7facccb0cf4ea9beef99243111ec7b947ba568a5936d85107bbd3be14268a9f292931e4aca745dcdaec00c35a52175f33dc498d9650a249ce8ed467ae1a5d18576551e1d67cceda2021b3c0ffa3ad59ec3afbd3b7036538d084313b0d632884305726e6afc70b2043cab52e71a658f3909ffffec6541f2dd5891b6c075f58131070", 0xc6}], 0xa, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}, 0x4000) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000008c0)=@fragment={0xbe, 0x0, 0x5, 0x1, 0x0, 0x11, 0x66}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x104, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffe15e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r4, 0x600, 0x70bd26, 0xe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x113}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x622}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3c6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x8000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000cc0), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x67}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xffff, 0x6, 0xc]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'veth1_virt_wifi\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0xfffffffc, 0x8, r6, 0x7, '\x00', r7, r8, 0x4, 0x1, 0x4, 0x1}, 0x50) r9 = socket$inet6(0xa, 0x1, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000f40)={0x0, 0x3, 0x8, 0x1, 0x7fffffff, 0x8}, &(0x7f0000000f80)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001000)={r10, 0x2c, &(0x7f0000000fc0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x8e00}]}, &(0x7f0000001040)=0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'ip6_vti0\x00', r7, 0x4, 0x4, 0x9, 0x9, 0x40, @private0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x700, 0x20, 0x319c, 0x5}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x12c, 0x0, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x12c}}, 0x8000) listen(r9, 0x7) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x5}, {0xc, 0x8}, {0x8, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040014}, 0x4010) socketpair(0x1, 0x2, 0x660d, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r14, 0x28, 0x0, &(0x7f0000001480)=0x5, 0x8) 1.359739203s ago: executing program 2 (id=8539): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a45d7d6bad7f10bc7f2618636c23d3b48dfd8cdbfa167b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.358535124s ago: executing program 1 (id=8540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000400000000005f004186eaf7a6147231292d8ae05aafa7f8e91c467c40a92030ff0aa0a655744b4ce748bfa7806fdaef0f34996bbe93599f12d56d79622f4002aa48b3012b0815e6404193a9de8256a77af89a14336dbfcda0e9e4ccf0829b23e7c4d3ea22ff5eeacbd463adc973a935e7b48cedd06e93e04c977ee6bf2c2d66bdf6"], 0x0, 0x1c}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000280)={0x8000, 0x9, 0x1, 0x4, 0x0, [0x93a, 0x1, 0x5, 0x8000]}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a0500000000000000003b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r14, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r14, 0x84, 0x24, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) 1.281099148s ago: executing program 0 (id=8541): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26}, 0x20) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x2c, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004010) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0xfffffffffffffffe}, {}, {}, 0x70bd2c, 0x0, 0x2, 0x3}, [@algo_comp={0x94, 0x3, {{'deflate\x00'}, 0x260, "e62acfa11186d764b4251fc354fdf81f36447c9f07a9e2409dc4d2bcf9ebe80ca9a399c3c11173eff694349ab3a68d1c06ea122ff2c2890a5cc4c8cffc559c8234ee017736e64a99d8d9e2ae"}}]}, 0x184}}, 0x0) 1.216092086s ago: executing program 2 (id=8542): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1dc, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "2339ecb8b851246f35aa69f5a82955aeb61be05712d4c02fa97db6907fc7688f9761"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "118699dd116a40be01af5257a110399b45888eba52e1dab2501063"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ebc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x926}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x61}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0x0, 0x8001}}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_getvlan={0x20, 0x72, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000803) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newspdinfo={0x14, 0x24, 0x300, 0x70bd2b, 0x25dfdbff, 0x7ffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.215733875s ago: executing program 3 (id=8543): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getuid() sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)={0x27c, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x26a, 0xf2, 0x0, 0x1, [@nested={0x17c, 0x12f, 0x0, 0x1, [@nested={0x94, 0x26, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @fd=r0}, @generic="9c03d5438a13d302569ee8c3b204257300c65438575e30538c86c10a61e229f6929c37e5d50611588fa2de8dc6435d9d3a9071f2ba53aab00efc76ab974bc75907d19878108a83fd4a3408b9967482b36cf012c6b066283a85ec3ac769b67815e3e0f664e89b98cbf0b8eb59f8b63d59ba4b0b3367051b0d", @nested={0x4, 0x74}, @generic="34880f50aa62d9a68f510cc7"]}, @typed={0x25, 0xdc, 0x0, 0x0, @binary="5836e67a5c96c1ff98ea5db8ed13d722e659088f0fff6f7d5f9293645c35259b1e"}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r1}, @generic="1fadfbb6790454ecc650781b99f3246850b0cc5cf72fa97a07f14ee4fedeca3ee570286b7e5997b58015772b0cce72e455188b653c9d5d15f8728f725346469a24a0864ef8cc3f1128964ab746a018f59f152e939c8f7cb797d95e606c331c0b5c1c39d7f42344521c48a08b2544ba7f4deb1a218d1acb240df355779711b1934fb759b5c27665929f322ca6c1d80b7e8f0cede2c62786a9814a4650a079499ceb8e60b29395eb95b1404b22a1c2630542ba9a8f"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0xe9, 0x0, 0x0, @uid=r1}]}]}, 0x27c}], 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.140223871s ago: executing program 1 (id=8544): r0 = socket$inet(0x2, 0x3, 0x8d) socket$kcm(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100f1e}, 0x1c) 1.139579377s ago: executing program 0 (id=8545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001840)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000001540)={0x9, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4060085}, 0x4800) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @private}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000013000000fc0100080000000000000000ea2fa43c000000100000000005000500000000000a00000000000000000000000000000000000000000000000000000001000000080012000200020000000002000000001000330402"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="25f593e8d559947a9e46c1bb6966b1e31f009c25e66b5b37f771e261866b3fdbbb27cc4fa86304a12833fad306fd95903308df6e6d4336", 0x37}], 0x1, &(0x7f0000000140)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x8000}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="0769c329042573c9fb72be0335eb27bac22f8f8d94e2cfa1c4b1757987efe83c1bb66ab53aaef9d1e6975d2dcec5da860801dfa7c6648ba1b38a6054323a56ff2c83940787238d52efa3318c055d5c86436285a86fd4b983012db1328a8779d2f3688fee4275e07cfb1f23233b4d5aab14bfb189cb1701358c6150918c2671118bbda5b6919ced9d3e0bf7a9aaa107758a1902e529dcf3cc7f4c60cbc64d49fad82c2a7421ea2b11c74a37343fe74eb957134ae851bc2f459acea91d32e1122d758508c728fe70bb", 0xc8}, {&(0x7f0000000380)="0c8a1d577b98defa9daee3c5f2661569ffb135bf44a0fbc223815922782520ce5b86c0cfbb8f6c2ff1b174b4feb6986775538d5e0d5afab964815823b18849d06233f750b306e29270a70c26285d47d5d7275a5bc01f3e787ae3b1dec5c4c80a29c4adf2751a4bfd232cd6b83c4588bcd991865a01b8de764c328026c579c3a8cd13c8d0cdf53653653d253892637d2999f6b5412a95cd3bc9e1e4132988b6c58ced0133f60c8c9d4d0ca4c67d800dc4134dd3ef6829c6bd3cc77a4f82fb8e54fc95427642025d971573e6fec21e55fe9d8a2eb7fc394281bf", 0xd9}, {&(0x7f0000001300)="1889ceb029af19e25e7cae7936731b9178768147a3f66e515612c228cfd42862e05d7b4143921981b4bdf5bbc3c4eba0a4abdbb3ff91fecb288de38fa9aacb5d1233c6460bbfd7bde44a9d007966e48977963665a789b73db3d56ebd1bca0364310e40cbe480c52a8f0e79983e6a3b7c6bb425ddec6d132b488f16da7e42d91d0839c52a", 0x84}, {&(0x7f0000000480)="f6bcc5fbda81a5e09f3d23b2a8af6d31427e547fd09e9ca9e45a006f8222e29a5e61c3357b1fe9a620c7f7310674a74355b0c17316813807b145d241607d16d8bfc01c9818a2bbcbe6a5a0e6b2ee49846c94f510c77cfeb53df0c94f18f618ac7983f1f530544ddf209ee46cf1b0814653f7edd8ed4deea79e7e0989e4b214b2e381270fc8a17d1b0be5d898cbc6a0b9f8b6d2e4878e338a2aeb2cc531e700cc809a3cd8ccd120c43729515938a54c917791d836b960588bb1ef33", 0xbb}, {&(0x7f0000000540)="5e841e6f035a255bd0abb086d7dbfd304c7cd53e4fac7742d8fb0576ac14de3a93d82859f769096e84a0521c030d5be38637ec41a2c696641e390039ed6650e203fae6b4fb5fbeeaf194121605453b01bb4735c8b02d8bc9c41ac11c7843d6cbeaba8ced931330596ab3aa19e762c014af090b70ec81db31b08693bd050328af1f", 0x81}], 0x5, &(0x7f0000000c40)=[@assoc={0x18}, @iv={0x98, 0x117, 0x2, 0x7d, "c51ea12c436322ba9948c28cc4a6f7f76cea1de72e31d326ec085bafcebbe4838b97f93629fabfa6f877fef77d4b50dc577b46fd3a9f9ecf90cbd38afcd16d91e41ef2e3644a71272223d2ec23d63e840af867264d6188b4453e147940a83f28a2c42ca63a8e2b8ef53691305378e7e8b19a2a9bd844e22b97bac92908"}, @iv={0xf0, 0x117, 0x2, 0xd9, "4c7adaf9a8b8dfde8f42d39f3e8189764aa0e527f4fa6e4b589aaa9a6eafb441bb34d1b7cb19322a12d5e056a104c71795c6b528f64e07b937d919fca24371939d6b8fe9d8b93b104ac89b88ccd6a73c9ebb0bc7eebd7b2bd53ccbd8d569e13e9c4608e918beaaf41759d16c21e5022d1575b6bcaaf17f4d724918f0a5978456dc5b02c5394e0047047c5d35553d191306934f60e83920e8b674c9686d63e31aaa14998a1970b027a5bca7f759b215e4f30ebadcd0885b83dc7396e89e9d13480d5df0ed41904f5f42a74d0b92ad173fd2449c09bc230a8ebf"}, @iv={0xa8, 0x117, 0x2, 0x8e, "b7097bde6abde7b1abbaf67ec50dbb122e7e980878babb4553b3121d84258bdf107316cc54a34aabe12c3ccf048508b8d1a7e3ba62312defac8c3a07ee58e450bb4967620f166786e0edb0412fe029de25989ae006ed1bd2844cb46e02dea7011bd82d1871cd6b02b96ee0e0f0f13972875332a499bfecee6ef7293f6b6f246b337d5c7f179ceb5843c4fbcad84c"}, @op={0x18, 0x117, 0x3, 0x1}], 0x260, 0x8000}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="f39633221309ae3629a6d072bd2c3e06bf2003fba7c3664ec968541e5941940ba81d02d016413d8e832e7f1c5e80df8445a55e433bd51612ab03ccfd", 0x3c}, {&(0x7f0000000740)="69e6dcf84704b7a5476e325b184b360d0f358c5b893bb8a3f7218d2add5e7371e06d", 0x22}, {&(0x7f0000000780)="d682c88a34ae01e8c888a415e27fe0e28721bd89cd1201249f72f1e540135a0a94831d082a604f6e479aa1854a7ffbcd9bd70f04893f38c7d9551491391eb35c2ac0440727f9cd715a773db4e769a2f67f44596a8664c13ca533945661afdbaaa5940ffa7902c0deb39b6844479c99789aba1b41d7382c7f1f73b995a64ed5b9813e0f62edbdf3a71ffdc3e053b20f546483e7ed53881c9bc225324cb5f46b2a773e7769", 0xa4}, {&(0x7f0000000980)="96ccf0984f8bfa506bfb2d05507a9b3a6ddd4d1617bffb314dc4424b332571a4f3d9640983c82349d80de11a13f7646d1c62666af842ef99759c0c4237f7ae31e172fd6fcd5a662a6a911ca84adef38937744efc475e36d4600598eef8353aa03171add459198dc69318a0eb35ee18c9abfc6213bd8692a6859e2f19163ce3f7f532594ec26d9b96367e", 0x8a}], 0x4, &(0x7f00000008c0)=[@op={0x18}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000a40)="e8e3a2b2a17f0a0c755ed0b444ac7397f04efc11a3d7382e4228e86edde867043b5687e81f6d39f76178e70a73cc60cf30731f6e90cf1581fe464971836c9dfda372ede8baf38fb04c636521e156c311658fcaac541f03bd8783a4cd03f33f348e610d86ee692388def7b69869636e081e3f9241", 0x74}, {&(0x7f0000000f80)="6338f352bd6bda405c35a08ca4ad40d32dca3b840ee93a9cbde8ae7fb081f0bc90c5bd4d47c4ed21248c86efeed6f2c098e3022c395a91f896656150aaf8b46c51cb3a63638e883e733f52d2f1ae654664b254bc6761317b236ce7b7608a58fa7205b87c761c5edcd5552f6f646e34272cdbe75963e4d6e25bb541c41a09e03ea855c2359e65e39bed2472daee0156f494da47bd6f70221af617e0052fdc7edd7d7d56cbaf92e883f65f7b83aa128ba0c1d3570b674fbf7089c1c4249aea440cace846b8fb228391c96c5007750da8fc2c2082cce4c5dd9c84d53d8083556db6c379c67a7afa3b6b0d70fa73838ef800"/251, 0xfb}, {&(0x7f0000001100)="2b0f561c355866741408021819b9950265a096cc7d3aee56e375fb787677c5d02c5f47e65fe2d3e3a2bbdbcc4b9b3ca42810ba54a51000561852a40c79d9780b72b5e5ca2fb720", 0x47}, {&(0x7f0000000900)="360ecfbb24358f805d", 0x9}, {&(0x7f0000001180)="5eb3f9836c7990cc6d2b1c43937ac914b798aef6be6f9f0c29057d325f7c8881a0bff46cbeef6826d4d18b978e96d32949fd5973ef9eec39724ceb533b18221d9bc8d074b7956f50cd7739ca429021a5f443d028b2e410153fd00def8a52d7705976260124e295699b73bd8703d490de9e0ed55e9fa2d8010791df7666faaab354929afc8c4fa9dfdb281bcc4e3805982ba8aac5f058af5a9dab2a8f42439692e13048d571d2517e599bb2f4bca2e3aa48f6d7feafda16e008de812270cf043fcb32d4e339", 0xc5}, {&(0x7f0000000180)="447116d7ac20fd5194b50fad2ac1794230d469887e173f68384e88f9cf223a6692582e9e4cc5a9", 0x27}], 0x6, &(0x7f0000001d80)=[@iv={0xc8, 0x117, 0x2, 0xb1, "e79edd16ee26372fb06176fd136aa5295bf4e1197e655f31b980ddacaa4b81c329d841541d27e1175a52cebdf5150f3914e59de76f8f1095ee602b940ecbcbd31be4c56891f54b547c702a2b921fa36030a0ca1a2e108ec22f2622daf545c228962cb6bdd2b328ec8fc7ba020abb3399eb240168776af05b0681952397ea6ed7c8c82d3ac1c3403edcba0ec8eecef2c203ed57a908054955b43c936e8cf150534a7528a71760afd6188bf2fe3d29108d71"}, @iv={0x38, 0x117, 0x2, 0x21, "6a96f7f05ba7e6973df87314f4964de00619ffc8e12efa93dd81c82184148d2876"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf4, "56b90c063479adfe490dcefed8fdf1346bde6cee4f8e19c20ef71cc9cf458de119f844df57fdc692237b90c20d84daf5f0d851ee973126b83c1f757b86ab240743b40a6860ff33bd9d7d964c880626bff4949a9c71a098cb80f543cf4d8cb852fb575351f9d7d09be963ea2df3c274f13113e167f30ae8cf88cc29304918382d8820ff2a97e1321cafa696f574094ec3a0ddd15ddf371b88a80c980f4525cab43f35ec56fc90e53c73c714ae4bf9086660c073feb0cb4ceb2d0bb688ffa34994b7d17313b745497cc70a226edf5a0e6369eec1699180b38645a38947cf5601aa2a098e215a70b6d522e0d3a906e30e671adcd9ee"}, @iv={0x20, 0x117, 0x2, 0x6, "d2273be5e14a"}], 0x258, 0x20000000}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000ec0)="3612a7b2c7bf368b2c2e14aeefce3083cb05a60d45306db0d1bba0ad0f3729072bf3b72a7c629d2cc9265edf862572", 0x2f}, {&(0x7f00000014c0)="6f7b77edab47e3b309e32cfea70c13ccc0a71627393bda39a5a873bc44d6d58b1c76501747ab0420b51c7d6433a6c5771ecb2afc7ec46f0d802411ebc07925cb62682980361377f01ce7e0cf001ad93ff53c0aa1ef46cb12e8ade51e8f50f80e1afd", 0x62}], 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x2e0, 0x4}, {0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=[@iv={0xe8, 0x117, 0x2, 0xcf, "7b0244cb752c1bd57fc124106bc1a4e4f6702a1f4e1d5b51859edf3b9e5ec1299e0cbc2d982ed94f346a003a8dbe8dffd75d44c8eccd71decb98bf6a4762681f6500fae43006a81fd781b9adea91cfd0648c8d7370d9e3f0a92dae3d852c3e4e81a6cd03bcacd33360605f4ce44cc08ab96b171eb459ee834213555db05c3ccc7b54723582f18b6b9ee08d71c2b7bb691a164c72f586276a48bc3d1863778a79ff21b913e47b4ac012e043e33d9c73e02746ea051289cb6fe971b44d32159d03fe005c5a0b50772ae2036b8dbe3941"}], 0xe8, 0x40004}], 0x6, 0x40004) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 952.461458ms ago: executing program 3 (id=8546): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 947.107062ms ago: executing program 0 (id=8547): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$tun(r5, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "42778569ee7ac246c18ba44917e8c94daaac1927983807efd339e5da070c4ce9", "679d165ec13567e8e3a7118dab629644", {"01197cd2fb78f4e0fd39cfecd9700cfe", "65809814935f08703e677d8e3026bd8e"}}}}}}}}}, 0x9e) 695.659503ms ago: executing program 1 (id=8548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="61153000000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf590000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab69a000248e167253472dc89a57c10bb08395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb845129361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cbe8d23810052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b0679544"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 694.721368ms ago: executing program 3 (id=8549): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 64) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000025c0), r10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002640)={0x28, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 470.773639ms ago: executing program 1 (id=8551): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 422.261791ms ago: executing program 3 (id=8552): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0xff02) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 261.447467ms ago: executing program 1 (id=8553): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_newroute={0x24, 0x18, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x10, 0x0, 0x6f, 0xfd, 0x4, 0x0, 0x3, 0xe00}, [@RTA_DST={0x8, 0x1, {0x5, 0x0, 0x1}}]}, 0x24}}, 0x0) 239.382503ms ago: executing program 0 (id=8554): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @local}}, 0xe238, 0x75, 0x4, 0x6, 0x10000}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x4}, 0x8) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000040000000000000e0300000000000000000000000000000d04000000000000000000000500000000000000000000040903000000000000006100de8bee22088c1742bab2a8cf4dab89f27d3b6d30b3ae2472d1f25b7f00db09aa88ca905bbb9daec0c12685fcb1b1f3200e7b37c6eb04b2e8c6aad9d54f33c7b6dc968bd8e3a6f42a833abe7447c5619982bb25801ca6b61505af590aa844b02c6a63ff7635d841312ca5e54379a3813d4f54753d8edbdbf77f0b50224ce3b50b156327ca701d114a6331a118fe2722a9497a7b92cf188dee2dcec7be97c7b9e0e700"/241], 0x0, 0x52}, 0x20) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x401, 0xe, 0x6, 0xc1cb, 0x0, 0xf}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 140.868492ms ago: executing program 3 (id=8555): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)=r1) 217.917µs ago: executing program 1 (id=8556): r0 = socket$kcm(0x11, 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x1349cdec, 0x80000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 0s ago: executing program 3 (id=8557): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.1.6123'. [ 664.221057][T28422] net_ratelimit: 48 callbacks suppressed [ 664.221076][T28422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 664.255882][T28440] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6125'. [ 664.400488][T28446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6129'. [ 664.480955][T28453] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 664.492497][T28453] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 664.530960][T28457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6132'. [ 664.540991][T28457] block nbd4: Unsupported socket: should be TCP or UNIX. [ 664.899964][T28480] syzkaller0: entered promiscuous mode [ 664.909377][T28480] syzkaller0: entered allmulticast mode [ 665.127503][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6145'. [ 665.137890][T28497] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6145'. [ 665.147697][T28493] netlink: 'syz.0.6143': attribute type 1 has an invalid length. [ 665.157322][T28497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6145'. [ 665.197637][T28487] bond2: (slave gretap2): making interface the new active one [ 665.206812][T28487] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 665.605009][T28533] netlink: 'syz.0.6157': attribute type 2 has an invalid length. [ 665.613121][T28533] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6157'. [ 665.689693][T28534] netlink: 'syz.0.6157': attribute type 2 has an invalid length. [ 665.706908][T28534] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6157'. [ 665.774004][T28542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 665.790385][T28542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.814866][T28542] bond3: (slave bond0): making interface the new active one [ 665.824768][T28542] bond3: (slave bond0): Enslaving as an active interface with an up link [ 665.883370][T28542] netlink: 'syz.4.6159': attribute type 4 has an invalid length. [ 665.921015][T28542] .`: renamed from bond0 (while UP) [ 665.939401][T28558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.966965][T28560] tipc: Enabled bearer , priority 0 [ 666.014934][T28557] syzkaller0: entered promiscuous mode [ 666.040630][T28557] syzkaller0: entered allmulticast mode [ 666.057607][ T9214] bond3: (slave .`): link status definitely down, disabling slave [ 666.075699][ T9214] bond3: now running without any active interface! [ 666.126946][T28565] syzkaller0: entered promiscuous mode [ 666.132491][T28565] syzkaller0: entered allmulticast mode [ 666.147724][T28557] tipc: Resetting bearer [ 666.227768][T28557] tipc: Disabling bearer [ 666.306481][T28581] tipc: Started in network mode [ 666.316679][T28585] netlink: 'syz.1.6171': attribute type 1 has an invalid length. [ 666.324582][T28581] tipc: Node identity 72ea13a19dec, cluster identity 4711 [ 666.331886][T28581] tipc: Enabled bearer , priority 0 [ 666.372593][T28585] bond12: entered promiscuous mode [ 666.379338][T28585] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.577671][T28598] bond12: (slave bridge6): making interface the new active one [ 666.608918][T28598] bridge6: entered promiscuous mode [ 666.619177][T28598] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 666.771753][T28608] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 666.956750][T28568] tipc: Disabling bearer [ 668.066323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 668.074406][ C1] lec:lec_tx_timeout: lec0 [ 668.146262][T28700] netlink: 'syz.3.6200': attribute type 29 has an invalid length. [ 668.201001][T28701] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 668.639524][T28735] macvlan0: entered promiscuous mode [ 668.853097][T28750] wg1 speed is unknown, defaulting to 1000 [ 668.967240][T28771] netlink: 'syz.4.6220': attribute type 1 has an invalid length. [ 668.978566][T28767] x_tables: duplicate underflow at hook 2 [ 668.984884][T28768] x_tables: duplicate underflow at hook 2 [ 669.111697][T28776] netlink: ct family unspecified [ 669.308321][T28787] __nla_validate_parse: 24 callbacks suppressed [ 669.308341][T28787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6228'. [ 669.408076][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'. [ 669.696849][T28785] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6225'. [ 669.707623][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6227'. [ 669.728936][T28816] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6231'. [ 669.877583][T28820] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6232'. [ 669.917377][T28824] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 670.172242][T28847] sit0: entered promiscuous mode [ 670.174194][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.182064][T28847] netlink: 'syz.0.6241': attribute type 1 has an invalid length. [ 670.195323][T28847] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6241'. [ 670.248897][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.269026][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.278896][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.288029][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.297013][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.307064][T28840] netlink: 'syz.4.6240': attribute type 11 has an invalid length. [ 670.378145][T28858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.619412][T28884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 670.638400][T28884] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 670.675273][T28884] 8021q: adding VLAN 0 to HW filter on device bond5 [ 670.690566][T28884] bond4: (slave bond5): Enslaving as an active interface with a down link [ 670.972538][T28906] tipc: Enabling of bearer rejected, failed to enable media [ 671.003778][T28906] IPv6: sit1: Disabled Multicast RS [ 671.041376][T28909] xt_hashlimit: size too large, truncated to 1048576 [ 671.468355][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6265'. [ 671.478596][T28939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6265'. [ 671.783325][T28957] ip6gre2: entered promiscuous mode [ 671.867761][T28964] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6274'. [ 672.274558][T28992] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 672.391758][T29002] pim6reg: entered allmulticast mode [ 672.426306][T29002] pim6reg: left allmulticast mode [ 673.180806][T29054] validate_nla: 43 callbacks suppressed [ 673.180829][T29054] netlink: 'syz.1.6295': attribute type 83 has an invalid length. [ 673.287155][T29062] sctp: [Deprecated]: syz.3.6301 (pid 29062) Use of int in maxseg socket option. [ 673.287155][T29062] Use struct sctp_assoc_value instead [ 674.003295][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.021829][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.033104][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.046299][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.055154][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.128261][T29109] wg1 speed is unknown, defaulting to 1000 [ 674.154674][T29105] bond6: entered promiscuous mode [ 674.160116][T29105] bond6: entered allmulticast mode [ 674.183138][T29105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 674.412928][ T9235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.439364][ T9235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 674.450938][ T9235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.565242][ T9235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.595047][ T9235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 674.621498][ T9235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.652069][T29126] netlink: 'syz.3.6314': attribute type 1 has an invalid length. [ 674.741911][T29126] bond2: entered promiscuous mode [ 674.747963][T29126] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.750569][T29131] __nla_validate_parse: 15 callbacks suppressed [ 674.750597][T29131] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6315'. [ 674.818612][ T9235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.831557][ T9235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 674.843204][ T9235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.857704][T29109] chnl_net:caif_netlink_parms(): no params data found [ 674.869704][T29131] 8021q: VLANs not supported on ip_vti0 [ 674.890504][T29126] bond2: (slave bridge1): making interface the new active one [ 674.898466][T29126] bridge1: entered promiscuous mode [ 674.906569][T29126] bridge1: left promiscuous mode [ 674.964801][ T9235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.976269][ T9235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 674.992856][ T9235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.095337][T29109] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.102894][T29109] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.110914][T29109] bridge_slave_0: entered allmulticast mode [ 675.122228][T29109] bridge_slave_0: entered promiscuous mode [ 675.168831][T29109] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.177194][T29109] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.185814][T29109] bridge_slave_1: entered allmulticast mode [ 675.194852][T29109] bridge_slave_1: entered promiscuous mode [ 675.290149][T29109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.303394][T29109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.531633][ T9235] bond4 (unregistering): (slave gretap1): Releasing active interface [ 675.567948][ T9235] bond9 (unregistering): (slave geneve3): Releasing active interface [ 675.588254][ T9235] bond3 (unregistering): (slave geneve2): Releasing active interface [ 675.633237][ T9235] bond4 (unregistering): (slave bridge2): Releasing active interface [ 675.867581][ T9235] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 675.876070][ T9235] bridge6 (unregistering): left promiscuous mode [ 675.909121][ T9235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.919446][ T9235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.929483][ T9235] bond0 (unregistering): Released all slaves [ 675.939828][ T9235] bond1 (unregistering): Released all slaves [ 675.955176][ T9235] bond2 (unregistering): Released all slaves [ 675.968058][ T9235] bond3 (unregistering): Released all slaves [ 675.980693][ T9235] bond4 (unregistering): Released all slaves [ 676.001528][ T9235] bond5 (unregistering): Released all slaves [ 676.015570][ T9235] bond6 (unregistering): Released all slaves [ 676.028678][ T9235] bond7 (unregistering): Released all slaves [ 676.047882][ T9235] bond8 (unregistering): Released all slaves [ 676.060901][ T9235] bond9 (unregistering): Released all slaves [ 676.076960][ T9235] bond10 (unregistering): Released all slaves [ 676.096441][ T9235] bond11 (unregistering): Released all slaves [ 676.109517][ T9235] bond12 (unregistering): Released all slaves [ 676.131292][T29109] team0: Port device team_slave_0 added [ 676.140768][T29109] team0: Port device team_slave_1 added [ 676.154465][ T5829] Bluetooth: hci3: command tx timeout [ 676.202124][T29109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.213294][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.244911][T29109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.257210][ T9235] : left promiscuous mode [ 676.278417][T29109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.285933][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.315013][T29109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.372408][ T9235] tipc: Left network mode [ 676.384432][T29109] hsr_slave_0: entered promiscuous mode [ 676.391645][T29109] hsr_slave_1: entered promiscuous mode [ 676.400363][T29109] debugfs: 'hsr0' already exists in 'hsr' [ 676.407362][T29109] Cannot create hsr debugfs directory [ 676.779962][ T9235] hsr_slave_0: left promiscuous mode [ 676.789372][ T9235] hsr_slave_1: left promiscuous mode [ 676.796229][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.804454][ T9235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.811929][T29097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.822173][ T9235] veth1_vlan: left allmulticast mode [ 677.065711][T29165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.073727][T29165] IPv6: NLM_F_CREATE should be set when creating new route [ 677.101818][T29165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.319893][ T9235] team0 (unregistering): Port device team_slave_1 removed [ 677.349157][ T9235] team0 (unregistering): Port device team_slave_0 removed [ 677.488987][T29169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6325'. [ 677.504605][T29169] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6325'. [ 677.514567][T29169] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6325'. [ 677.553009][T29193] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 677.571619][T29168] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 677.603396][T29169] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 677.645175][T29169] netlink: 'syz.3.6325': attribute type 29 has an invalid length. [ 677.948646][T29109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.958896][T29214] Cannot find set identified by id 0 to match [ 677.988524][T29214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6335'. [ 677.999774][T29215] tipc: Started in network mode [ 678.005406][T29215] tipc: Node identity e0000001, cluster identity 4711 [ 678.013141][T29215] tipc: Enabling of bearer rejected, failed to enable media [ 678.027286][T29109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 678.051591][T29220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6335'. [ 678.064507][T29109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 678.080157][T29109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 678.107759][T29216] tipc: Started in network mode [ 678.113411][T29216] tipc: Node identity 1ac70ba5e42e, cluster identity 4711 [ 678.124122][T29216] tipc: Enabled bearer , priority 0 [ 678.132342][T29221] syzkaller0: MTU too low for tipc bearer [ 678.156288][T29221] tipc: Disabling bearer [ 678.225068][ T5829] Bluetooth: hci3: command tx timeout [ 678.339497][ T9235] IPVS: stop unused estimator thread 0... [ 678.493197][ T29] audit: type=1107 audit(1773169236.613:5): pid=29243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1xl2bØ}ð@ýw;{‚ÑîãЙ©…‡ß+{MÏÊ ÃoÉQ²B(ù{Í=ÝŒ\bÜÐàZU:­ª¬]ñKB)£®Û¯' [ 678.604922][T29109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.635085][T29254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6341'. [ 678.672390][T29109] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.741345][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.748922][ T9233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.758492][T29261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6342'. [ 678.785761][T29258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6342'. [ 678.871040][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.878527][ T9233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.910244][T29261] bridge0: entered promiscuous mode [ 678.916917][T29261] macsec1: entered promiscuous mode [ 678.923115][T29261] macsec1: entered allmulticast mode [ 678.929535][T29261] bridge0: entered allmulticast mode [ 678.936148][T29261] bridge0: port 1(macsec1) entered blocking state [ 678.942911][T29261] bridge0: port 1(macsec1) entered disabled state [ 678.947063][T29274] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6348'. [ 678.962056][T29261] bridge0: left allmulticast mode [ 678.967658][T29261] bridge0: left promiscuous mode [ 678.987392][T29258] bridge0: entered promiscuous mode [ 678.993434][T29258] macsec1: entered promiscuous mode [ 679.000076][T29258] macsec1: entered allmulticast mode [ 679.006935][T29258] bridge0: entered allmulticast mode [ 679.013063][T29258] bridge0: port 1(macsec1) entered blocking state [ 679.021536][T29258] bridge0: port 1(macsec1) entered disabled state [ 679.032617][T29258] bridge0: left allmulticast mode [ 679.039306][T29258] bridge0: left promiscuous mode [ 679.427049][T29298] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 679.540474][T29109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.648604][T29109] veth0_vlan: entered promiscuous mode [ 679.676054][T29109] veth1_vlan: entered promiscuous mode [ 679.797216][T29109] veth0_macvtap: entered promiscuous mode [ 679.821686][T29323] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6361'. [ 679.836614][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6360'. [ 679.851154][T29324] netlink: 'syz.0.6360': attribute type 30 has an invalid length. [ 679.856118][T29109] veth1_macvtap: entered promiscuous mode [ 679.890161][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6360'. [ 679.922534][T29327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6359'. [ 679.932953][T29329] netlink: 'syz.0.6360': attribute type 30 has an invalid length. [ 679.941403][ T9234] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.977588][ T9234] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.995566][ T9234] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.013942][ T9234] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.065507][T29109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.087746][T29109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.114278][T27024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.132201][T27024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.151150][T27024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.178908][T27024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.314532][ T5829] Bluetooth: hci3: command tx timeout [ 680.349454][ T9237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.385041][ T9237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.458585][ T9234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.475876][ T9234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.492437][T29359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6370'. [ 680.660497][T29365] 8021q: adding VLAN 0 to HW filter on device bond24 [ 680.675049][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6371'. [ 680.679136][T29372] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6373'. [ 680.974663][T29382] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6376'. [ 681.133023][T29389] netlink: 'syz.2.6379': attribute type 9 has an invalid length. [ 681.161635][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 681.193042][T29389] netlink: 'syz.2.6379': attribute type 9 has an invalid length. [ 681.209930][T29398] ksmbd: Unknown IPC event: 3, ignore. [ 681.231877][T29389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6379'. [ 681.339654][T29402] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 681.630944][T29424] IPv6: sit1: Disabled Multicast RS [ 681.747178][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.757521][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.769523][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.780059][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.791272][T29430] netlink: 'syz.3.6388': attribute type 1 has an invalid length. [ 681.801380][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.932739][T29427] wg1 speed is unknown, defaulting to 1000 [ 682.021667][T29438] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 682.211444][T29443] syzkaller0: entered promiscuous mode [ 682.217547][T29443] syzkaller0: entered allmulticast mode [ 682.279984][T29453] netlink: 'syz.0.6395': attribute type 26 has an invalid length. [ 682.383682][ T5829] Bluetooth: hci3: command tx timeout [ 682.485816][T29427] chnl_net:caif_netlink_parms(): no params data found [ 683.071388][T29495] netlink: 'syz.1.6407': attribute type 1 has an invalid length. [ 683.505732][T27024] bond8 (unregistering): (slave gretap1): Releasing active interface [ 683.546755][T27024] bond19 (unregistering): (slave geneve2): Releasing active interface [ 683.656145][T27024] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 683.664729][T27024] bridge1 (unregistering): left promiscuous mode [ 683.727427][T27024] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 683.736083][T27024] bridge2 (unregistering): left promiscuous mode [ 683.742743][T27024] bridge2 (unregistering): left allmulticast mode [ 683.828641][T27024] bond8 (unregistering): (slave bridge4): Releasing active interface [ 683.880450][T27024] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 683.913719][ T5829] Bluetooth: hci2: command tx timeout [ 683.928614][T27024] bond17 (unregistering): (slave bridge6): Releasing active interface [ 684.118306][T27024] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.129069][T27024] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.139475][T27024] .` (unregistering): Released all slaves [ 684.149675][T27024] bond1 (unregistering): Released all slaves [ 684.164972][T27024] bond2 (unregistering): Released all slaves [ 684.177703][T27024] bond3 (unregistering): Released all slaves [ 684.199848][T27024] bond4 (unregistering): Released all slaves [ 684.220177][T27024] bond5 (unregistering): Released all slaves [ 684.233123][T27024] bond0 (unregistering): Released all slaves [ 684.246043][T27024] bond6 (unregistering): Released all slaves [ 684.266482][T27024] bond7 (unregistering): Released all slaves [ 684.284738][T27024] bond8 (unregistering): Released all slaves [ 684.322182][T27024] bond9 (unregistering): Released all slaves [ 684.338118][T27024] bond10 (unregistering): Released all slaves [ 684.351200][T27024] bond11 (unregistering): Released all slaves [ 684.368789][T27024] bond12 (unregistering): Released all slaves [ 684.381657][T27024] bond13 (unregistering): Released all slaves [ 684.400388][T27024] bond14 (unregistering): Released all slaves [ 684.415062][T27024] bond15 (unregistering): Released all slaves [ 684.434253][T27024] bond16 (unregistering): Released all slaves [ 684.448052][T27024] bond17 (unregistering): Released all slaves [ 684.460822][T27024] bond18 (unregistering): Released all slaves [ 684.473546][T27024] bond19 (unregistering): Released all slaves [ 684.487323][T27024] bond20 (unregistering): Released all slaves [ 684.500912][T27024] bond21 (unregistering): Released all slaves [ 684.524996][T27024] bond22 (unregistering): Released all slaves [ 684.539887][T27024] bond23 (unregistering): Released all slaves [ 684.555983][T27024] bond24 (unregistering): Released all slaves [ 684.570640][T29427] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.578719][T29427] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.586653][T29427] bridge_slave_0: entered allmulticast mode [ 684.595166][T29427] bridge_slave_0: entered promiscuous mode [ 684.637024][T29427] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.675875][T29427] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.683165][T29427] bridge_slave_1: entered allmulticast mode [ 684.722422][T29427] bridge_slave_1: entered promiscuous mode [ 684.886260][T29427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.925394][T29427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.975156][T27024] tipc: Left network mode [ 685.009973][T29538] tipc: Enabled bearer , priority 0 [ 685.042607][T29538] syzkaller0: entered promiscuous mode [ 685.063644][T29538] syzkaller0: entered allmulticast mode [ 685.127960][T29427] team0: Port device team_slave_0 added [ 685.249478][T29427] team0: Port device team_slave_1 added [ 685.302124][T29544] tipc: Resetting bearer [ 685.319662][T29538] __nla_validate_parse: 7 callbacks suppressed [ 685.319681][T29538] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.6414'. [ 685.422280][T29427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.430606][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.459187][T29427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.499537][T29427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.532541][T29427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.583170][T29427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.625358][T29537] tipc: Resetting bearer [ 685.676371][T29537] tipc: Disabling bearer [ 685.870024][T29581] ipt_ECN: cannot use operation on non-tcp rule [ 685.896267][T29581] ipt_ECN: cannot use operation on non-tcp rule [ 685.965362][T29427] hsr_slave_0: entered promiscuous mode [ 685.990802][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 685.991727][ T5829] Bluetooth: hci2: command tx timeout [ 686.001683][T29427] hsr_slave_1: entered promiscuous mode [ 686.025538][T29427] debugfs: 'hsr0' already exists in 'hsr' [ 686.043117][T29427] Cannot create hsr debugfs directory [ 686.179339][T29602] netlink: 'syz.1.6429': attribute type 2 has an invalid length. [ 686.208032][T29602] netlink: 'syz.1.6429': attribute type 11 has an invalid length. [ 686.224648][T29602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6429'. [ 686.246208][T27024] hsr_slave_0: left promiscuous mode [ 686.252712][T27024] hsr_slave_1: left promiscuous mode [ 686.270197][T27024] veth1_macvtap: left promiscuous mode [ 686.277254][T27024] veth0_macvtap: left promiscuous mode [ 686.283377][T27024] veth1_vlan: left promiscuous mode [ 686.290692][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6432'. [ 686.646501][T27024] team0 (unregistering): Port device team_slave_1 removed [ 686.664105][T27024] team0 (unregistering): Port device team_slave_0 removed [ 686.909976][T29631] netlink: 'syz.3.6438': attribute type 1 has an invalid length. [ 687.211443][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6442'. [ 687.268969][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 687.507720][T29631] syzkaller0: entered promiscuous mode [ 687.514021][T29631] syzkaller0: entered allmulticast mode [ 687.612121][T27024] IPVS: stop unused estimator thread 0... [ 687.770260][T29677] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 688.066119][ T5829] Bluetooth: hci2: command tx timeout [ 690.144853][ T5829] Bluetooth: hci2: command tx timeout [ 690.922918][T29427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.960102][T29427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 691.006273][T29427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.024099][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 691.032343][ C1] lec:lec_tx_timeout: lec0 [ 691.055555][T29427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 691.077629][T29752] netlink: 'syz.3.6465': attribute type 1 has an invalid length. [ 691.136393][T29759] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6465'. [ 691.347901][T29427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.406158][T29427] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.435248][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.443015][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.468795][ T9235] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.476121][ T9235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.643438][T29790] Cannot find map_set index 65533 as target [ 691.846826][T29806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6476'. [ 691.968789][T29813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6477'. [ 692.030469][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6476'. [ 692.073137][T29427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.135337][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6480'. [ 692.309007][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6482'. [ 692.341213][T29427] veth0_vlan: entered promiscuous mode [ 692.376231][T29837] syzkaller0: entered promiscuous mode [ 692.381927][T29837] syzkaller0: entered allmulticast mode [ 692.411253][T29427] veth1_vlan: entered promiscuous mode [ 692.537660][T29427] veth0_macvtap: entered promiscuous mode [ 692.567852][T29427] veth1_macvtap: entered promiscuous mode [ 692.678171][T29427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.721387][T29427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.793340][ T9234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.833326][ T9234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.898800][ T9234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.941859][ T9234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.043065][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6496'. [ 693.202549][ T9235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.233870][ T9235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.268571][T29891] openvswitch: netlink: IP tunnel dst address not specified [ 693.406786][T29900] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 693.511842][ T9234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.564045][ T9234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.796815][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 693.833129][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 693.849393][T29935] netlink: 'syz.1.6509': attribute type 15 has an invalid length. [ 693.890883][ T9214] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 693.901546][ T9214] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 693.913149][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 693.942241][ T9214] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 693.954227][T29935] netlink: 'syz.1.6509': attribute type 15 has an invalid length. [ 693.974752][ T9214] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 694.050782][T29953] veth0_virt_wifi: entered promiscuous mode [ 694.302202][T29963] netlink: 'syz.3.6518': attribute type 1 has an invalid length. [ 694.320029][T29963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.369296][T29967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.935747][T29996] netlink: 'syz.2.6523': attribute type 1 has an invalid length. [ 694.994261][T30001] Bluetooth: MGMT ver 1.23 [ 695.196971][T30019] sctp: [Deprecated]: syz.2.6529 (pid 30019) Use of int in maxseg socket option. [ 695.196971][T30019] Use struct sctp_assoc_value instead [ 695.347513][T30026] tipc: New replicast peer: 255.255.255.255 [ 695.368539][T30026] tipc: Enabled bearer , priority 10 [ 695.580924][T30053] syzkaller1: entered promiscuous mode [ 695.589778][T30053] syzkaller1: entered allmulticast mode [ 695.644583][T30056] netlink: 'syz.1.6540': attribute type 1 has an invalid length. [ 695.659696][T30056] netlink: 'syz.1.6540': attribute type 3 has an invalid length. [ 695.827955][T30068] netlink: 'syz.2.6544': attribute type 1 has an invalid length. [ 696.104726][T30087] netlink: 'syz.3.6550': attribute type 1 has an invalid length. [ 696.114157][T30083] bond8: entered promiscuous mode [ 696.120250][T30083] bond8: entered allmulticast mode [ 696.166660][T30083] 8021q: adding VLAN 0 to HW filter on device bond8 [ 696.337703][T30106] __nla_validate_parse: 13 callbacks suppressed [ 696.337721][T30106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6556'. [ 696.355066][T30106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6556'. [ 696.417647][T30109] netlink: 'syz.3.6558': attribute type 21 has an invalid length. [ 696.426599][T30109] IPv6: NLM_F_CREATE should be specified when creating new route [ 696.440934][T30109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.448378][T30109] IPv6: NLM_F_CREATE should be set when creating new route [ 696.455699][T30109] IPv6: NLM_F_CREATE should be set when creating new route [ 696.463216][T30109] IPv6: NLM_F_CREATE should be set when creating new route [ 696.486565][T25632] tipc: Node number set to 4010152865 [ 696.730267][T30131] netlink: 'syz.2.6565': attribute type 8 has an invalid length. [ 696.856482][T30133] lo speed is unknown, defaulting to 1000 [ 696.884112][T30139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6568'. [ 696.894934][T30133] lo speed is unknown, defaulting to 1000 [ 696.907853][T30137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6567'. [ 696.948138][T30133] lo speed is unknown, defaulting to 1000 [ 696.971931][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6568'. [ 697.036534][T30148] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6567'. [ 697.099120][T30151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6568'. [ 697.169646][T30143] team0 (unregistering): Port device team_slave_0 removed [ 697.187071][T30143] team0 (unregistering): Port device team_slave_1 removed [ 697.247082][T30148] dvmrp6: entered allmulticast mode [ 697.343028][T30135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.367928][T30133] infiniband syz0: set active [ 697.384471][T30133] infiniband syz0: added lo [ 697.389384][T25630] lo speed is unknown, defaulting to 1000 [ 697.457213][T30133] RDS/IB: syz0: added [ 697.462882][T30133] smc: adding ib device syz0 with port count 1 [ 697.470173][T30133] smc: ib device syz0 port 1 has no pnetid [ 697.486222][ T797] lo speed is unknown, defaulting to 1000 [ 697.498654][T30133] lo speed is unknown, defaulting to 1000 [ 697.562142][T30174] IPv6: addrconf: prefix option has invalid lifetime [ 697.819809][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6577'. [ 697.858014][T30188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 698.045150][T30133] lo speed is unknown, defaulting to 1000 [ 698.067865][T30198] syzkaller1: entered promiscuous mode [ 698.085962][T30198] syzkaller1: entered allmulticast mode [ 698.174713][T30200] wg1 speed is unknown, defaulting to 1000 [ 698.510768][T30213] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6582'. [ 698.634555][T30200] lo speed is unknown, defaulting to 1000 [ 698.763825][T30222] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6584'. [ 698.773910][T30222] NCSI netlink: No device for ifindex 813332851 [ 699.076944][T30246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.247266][T30133] lo speed is unknown, defaulting to 1000 [ 699.338045][ T9233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 699.351030][ T9233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 699.397826][ T9233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 699.428956][ T9233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 699.519770][T30263] team0: No ports can be present during mode change [ 699.836022][T30285] validate_nla: 3 callbacks suppressed [ 699.836043][T30285] netlink: 'syz.4.6598': attribute type 39 has an invalid length. [ 699.867363][T30289] netlink: 'syz.4.6598': attribute type 39 has an invalid length. [ 700.065391][T30133] lo speed is unknown, defaulting to 1000 [ 700.131855][T30297] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 700.427949][T30311] bond1: Invalid ad_actor_system MAC address. [ 700.446247][T30311] bond1: option ad_actor_system: invalid value (1) [ 700.459385][T30317] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 700.474360][T30311] bond1 (unregistering): Released all slaves [ 700.481052][T30317] netlink: 'syz.4.6606': attribute type 2 has an invalid length. [ 700.660494][T30133] lo speed is unknown, defaulting to 1000 [ 700.809627][T30331] 8021q: VLANs not supported on tunl0 [ 700.942882][T30133] lo speed is unknown, defaulting to 1000 [ 701.156071][T30133] lo speed is unknown, defaulting to 1000 [ 701.354171][T30133] lo speed is unknown, defaulting to 1000 [ 701.456447][T30347] __nla_validate_parse: 8 callbacks suppressed [ 701.456465][T30347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6617'. [ 701.495363][T30347] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6617'. [ 701.601500][T30133] lo speed is unknown, defaulting to 1000 [ 701.679719][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6618'. [ 701.711360][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6618'. [ 701.914513][T30303] wg1 speed is unknown, defaulting to 1000 [ 701.939329][T30356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6619'. [ 702.079699][T30366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.247308][T30373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6624'. [ 702.276573][T30373] netlink: 'syz.3.6624': attribute type 1 has an invalid length. [ 702.299789][T30376] netlink: 'syz.0.6627': attribute type 16 has an invalid length. [ 702.309772][T30376] netlink: 'syz.0.6627': attribute type 17 has an invalid length. [ 702.371291][T30378] netlink: 'syz.3.6628': attribute type 10 has an invalid length. [ 702.386787][T30378] netlink: 396 bytes leftover after parsing attributes in process `syz.3.6628'. [ 702.402653][T30376] sit0: left promiscuous mode [ 702.482112][T30376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.554566][T30380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6629'. [ 702.574289][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6629'. [ 702.645092][T30385] netlink: 'syz.2.6632': attribute type 4 has an invalid length. [ 702.696949][T30385] netlink: 'syz.2.6632': attribute type 4 has an invalid length. [ 702.725755][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6632'. [ 703.890177][T30478] bond1: Removing last ns target with arp_interval on [ 703.903312][T30478] bond1: entered promiscuous mode [ 703.911033][T30478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.194672][T30510] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 705.715185][T30601] validate_nla: 1 callbacks suppressed [ 705.715204][T30601] netlink: 'syz.2.6687': attribute type 29 has an invalid length. [ 705.760997][T30602] netlink: 'syz.3.6688': attribute type 10 has an invalid length. [ 705.787192][T30602] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.064061][T30630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.206845][T30640] sock: sock_set_timeout: `syz.4.6701' (pid 30640) tries to set negative timeout [ 706.473228][T30655] __nla_validate_parse: 42 callbacks suppressed [ 706.473246][T30655] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6707'. [ 706.625574][T30664] netlink: 'syz.4.6709': attribute type 10 has an invalid length. [ 706.653312][T30664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.687698][T30664] .`: (slave batadv0): Enslaving as an active interface with an up link [ 706.791058][T30680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'. [ 706.804562][T30682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6716'. [ 706.831125][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6714'. [ 706.909615][T30680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6714'. [ 706.920496][ T9227] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.941139][ T9227] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.963612][T30680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6714'. [ 706.965706][ T9227] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 706.982883][ T9227] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 707.224887][T30704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6723'. [ 707.401669][T30716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6725'. [ 707.636053][T30729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6725'. [ 707.698069][T30729] nbd: device at index 64 is going down [ 707.879913][T30735] udevd[30735]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.908961][T30733] udevd[30733]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.993241][T30746] vcan0: entered allmulticast mode [ 708.122756][T30757] netlink: 'syz.1.6739': attribute type 25 has an invalid length. [ 708.137972][T30757] netlink: 'syz.1.6739': attribute type 9 has an invalid length. [ 708.148130][T30759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6738'. [ 708.530545][T30792] openvswitch: netlink: IPv4 tun info is not correct [ 708.550462][T30792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 708.604851][T30792] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 708.615227][T30798] netlink: 'syz.1.6749': attribute type 3 has an invalid length. [ 708.627120][T30792] gretap1: entered promiscuous mode [ 708.638640][T30792] gretap1: entered allmulticast mode [ 709.355976][T30843] delete_channel: no stack [ 711.756770][T30806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.938564][T30855] __nla_validate_parse: 5 callbacks suppressed [ 711.938584][T30855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6761'. [ 712.006716][T30855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6761'. [ 712.006959][ T9235] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.029988][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6765'. [ 712.074361][ T9235] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.114553][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6765'. [ 712.115802][ T9235] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.162583][ T9235] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.273949][T30878] netlink: 'syz.4.6768': attribute type 1 has an invalid length. [ 712.487716][T30896] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 712.527102][T30897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6775'. [ 712.710990][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6781'. [ 712.728606][T30911] bridge_slave_1: left allmulticast mode [ 712.746458][T30911] bridge_slave_1: left promiscuous mode [ 712.768829][T30911] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.794454][T30911] bridge_slave_0: left allmulticast mode [ 712.809413][T30911] bridge_slave_0: left promiscuous mode [ 712.819446][T30911] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.027651][T30934] netlink: 'syz.3.6787': attribute type 1 has an invalid length. [ 713.042294][T30936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6788'. [ 713.054958][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6787'. [ 713.083763][T30934] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6787'. [ 713.101110][T30934] netlink: 'syz.3.6787': attribute type 1 has an invalid length. [ 713.182526][T30943] vlan1: entered allmulticast mode [ 713.192395][T30943] veth0_vlan: entered allmulticast mode [ 713.278061][T30947] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6792'. [ 713.629431][T30978] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 713.834019][T30989] netlink: 'syz.4.6805': attribute type 1 has an invalid length. [ 713.841970][T30989] netlink: 'syz.4.6805': attribute type 1 has an invalid length. [ 713.851325][T30989] netlink: 'syz.4.6805': attribute type 8 has an invalid length. [ 713.855256][T30992] macvlan4: entered promiscuous mode [ 713.865566][T30992] macvlan4: entered allmulticast mode [ 713.872407][T30992] bond7: (slave macvlan4): Opening slave failed [ 713.892418][T30989] 0·: renamed from hsr_slave_1 [ 713.922032][T30989] 0·: entered allmulticast mode [ 713.938355][T30989] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 714.024920][T31001] nbd: must specify at least one socket [ 715.288494][T31013] team0: Port device team_slave_0 removed [ 715.351764][T31020] netlink: 'syz.3.6817': attribute type 16 has an invalid length. [ 715.624604][T31040] netlink: 'syz.0.6824': attribute type 1 has an invalid length. [ 715.647476][ T5824] IPVS: starting estimator thread 0... [ 715.754915][T31046] IPVS: using max 37 ests per chain, 88800 per kthread [ 715.915950][T31060] netlink: 'syz.0.6830': attribute type 9 has an invalid length. [ 715.921517][T31061] netlink: 'syz.2.6831': attribute type 7 has an invalid length. [ 716.789727][T31117] openvswitch: netlink: Duplicate key (type 2). [ 716.909973][T31124] s5ÿÿø: renamed from vlan1 [ 717.212985][T31145] x_tables: duplicate underflow at hook 1 [ 717.240292][T31146] __nla_validate_parse: 25 callbacks suppressed [ 717.240313][T31146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6862'. [ 717.305891][T31146] 8021q: adding VLAN 0 to HW filter on device bond8 [ 717.356475][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6864'. [ 717.361896][T31159] validate_nla: 4 callbacks suppressed [ 717.361916][T31159] netlink: 'syz.2.6865': attribute type 1 has an invalid length. [ 717.554368][T31173] netlink: 'syz.0.6868': attribute type 1 has an invalid length. [ 717.571813][T31174] netlink: 'syz.1.6869': attribute type 1 has an invalid length. [ 717.604458][T31174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6869'. [ 717.903374][T31192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6875'. [ 717.915455][T31192] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6875'. [ 718.205927][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6881'. [ 718.246021][T31215] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6881'. [ 718.339300][T31224] netlink: 'syz.0.6885': attribute type 1 has an invalid length. [ 718.382474][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 718.391778][T31231] openvswitch: netlink: Missing key (keys=40, expected=100) [ 718.393359][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6884'. [ 718.499584][T31237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6888'. [ 718.569052][T31241] netlink: 'syz.1.6891': attribute type 1 has an invalid length. [ 718.577236][T31241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.719725][T31248] pim6reg1: entered allmulticast mode [ 718.920240][T31267] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 718.945507][T31267] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.953834][T31267] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.966564][T31267] bridge0: entered allmulticast mode [ 719.299477][T31285] syzkaller0: entered promiscuous mode [ 719.306590][T31285] syzkaller0: entered allmulticast mode [ 719.352927][T31287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 719.397270][T31287] bond5: (slave vlan0): Enslaving as a backup interface with an up link [ 719.723395][T31314] syzkaller1: entered promiscuous mode [ 719.754862][T31314] syzkaller1: entered allmulticast mode [ 719.901983][T31328] netlink: 'syz.1.6915': attribute type 12 has an invalid length. [ 719.926293][T31328] netlink: 'syz.1.6915': attribute type 29 has an invalid length. [ 719.948482][T31330] netlink: 'syz.3.6914': attribute type 5 has an invalid length. [ 719.961463][T31328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.023936][T31336] PKCS7: Unknown OID: [4] (bad) [ 720.043681][T31336] PKCS7: Only support pkcs7_signedData type [ 720.232094][T31353] syzkaller1: entered promiscuous mode [ 720.244864][T31353] syzkaller1: entered allmulticast mode [ 720.773982][T31389] netlink: 'syz.2.6934': attribute type 4 has an invalid length. [ 720.804679][T31391] wg1 speed is unknown, defaulting to 1000 [ 720.829354][T31391] lo speed is unknown, defaulting to 1000 [ 721.036910][T31400] syzkaller0: entered promiscuous mode [ 721.044298][T31400] syzkaller0: entered allmulticast mode [ 721.077411][T31407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.238269][T31420] netlink: 'syz.3.6940': attribute type 1 has an invalid length. [ 723.788468][T31439] __nla_validate_parse: 19 callbacks suppressed [ 723.788486][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6943'. [ 723.817516][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6947'. [ 723.830831][T31443] netlink: 'syz.2.6947': attribute type 5 has an invalid length. [ 723.841048][T31443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6947'. [ 723.889821][T31451] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6948'. [ 723.952012][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6948'. [ 723.963061][T31443] geneve2: entered promiscuous mode [ 723.987216][T31443] geneve2: entered allmulticast mode [ 724.008746][T31439] vcan0 (unregistering): left allmulticast mode [ 724.033630][ T9214] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 724.112683][ T9214] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 724.172047][T31462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6952'. [ 724.197123][ T9214] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 724.208348][ T9214] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 724.309731][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6956'. [ 724.485168][T31481] IPv6: sit2: Disabled Multicast RS [ 724.566784][T31492] netlink: 'syz.2.6961': attribute type 1 has an invalid length. [ 724.748937][T31500] netlink: 'syz.4.6964': attribute type 1 has an invalid length. [ 724.778349][T31490] syzkaller0: create flow: hash 3679721847 index 1 [ 724.803176][T31500] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.818523][T31490] syzkaller0: tun_chr_ioctl cmd 2149084803 [ 724.828078][T31500] netlink: 'syz.4.6964': attribute type 9 has an invalid length. [ 724.842671][T31500] netlink: 'syz.4.6964': attribute type 11 has an invalid length. [ 724.852041][T31500] netlink: 'syz.4.6964': attribute type 12 has an invalid length. [ 724.860748][T31500] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.6964'. [ 724.981580][T31498] syzkaller0: delete flow: hash 3679721847 index 1 [ 725.021933][T31517] netlink: 'syz.1.6968': attribute type 10 has an invalid length. [ 725.063358][T31517] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.6968'. [ 725.221393][T31533] nbd: nbd1 already in use [ 725.240396][T31533] block nbd1: NBD_DISCONNECT [ 725.257957][T31533] block nbd1: Send disconnect failed -32 [ 725.264515][T31533] block nbd1: shutting down sockets [ 726.387114][T12854] lec:lec_start_xmit: lec0:No lecd attached [ 727.510983][T31536] netlink: 'syz.1.6971': attribute type 29 has an invalid length. [ 727.590989][T31550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.690924][T31564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6978'. [ 728.145051][T31600] netlink: 'syz.3.6990': attribute type 61 has an invalid length. [ 728.153211][T31597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.156075][T31603] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 728.173345][T31597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.208968][T31597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.244019][T31597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.398301][T31612] netlink: 'syz.2.6994': attribute type 25 has an invalid length. [ 728.496766][T31614] veth1_to_bond: entered allmulticast mode [ 728.594852][T31614] veth1_to_bond: left allmulticast mode [ 728.902550][T31637] __nla_validate_parse: 5 callbacks suppressed [ 728.902571][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7000'. [ 728.957305][T31637] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 729.538530][T31673] !: renamed from dummy0 (while UP) [ 729.628078][T31679] delete_channel: no stack [ 729.748027][T31688] validate_nla: 1 callbacks suppressed [ 729.748055][T31688] netlink: 'syz.4.7014': attribute type 12 has an invalid length. [ 729.800823][T31688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7014'. [ 729.814740][T31690] IPVS: set_ctl: invalid protocol: 102 224.0.0.2:20000 [ 729.841647][T31688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7014'. [ 729.961746][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7018'. [ 730.164325][T31708] Bluetooth: MGMT ver 1.23 [ 730.273064][T31720] xt_l2tp: missing protocol rule (udp|l2tpip) [ 730.461903][T31727] vlan1 (unregistering): left allmulticast mode [ 730.494730][T31727] veth0_vlan: left allmulticast mode [ 730.677233][T31733] netlink: 'syz.2.7027': attribute type 4 has an invalid length. [ 730.914452][T31754] "syz.2.7032" (31754) uses obsolete ecb(arc4) skcipher [ 731.035309][T31765] netlink: zone id is out of range [ 731.044806][T31766] batadv_slave_1: default FDB implementation only supports local addresses [ 731.050415][T31752] netlink: set zone limit has 4 unknown bytes [ 731.065549][T31765] netlink: zone id is out of range [ 731.158370][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7034'. [ 731.325289][T31763] bond5: (slave vlan0): Removing an active aggregator [ 731.338633][T31763] bond5: (slave vlan0): Releasing backup interface [ 731.417168][T31775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7036'. [ 731.598634][T31779] s5ÿÿø: entered allmulticast mode [ 731.623619][T31779] veth0_vlan: entered allmulticast mode [ 731.656165][T31782] netlink: 'syz.3.7039': attribute type 21 has an invalid length. [ 731.666499][T31781] netlink: 'syz.3.7039': attribute type 21 has an invalid length. [ 731.676179][T31782] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7039'. [ 731.689715][T31781] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7039'. [ 731.943929][T31794] bond6: entered promiscuous mode [ 731.953751][T31794] bond6: entered allmulticast mode [ 731.964763][T31794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.985488][T31803] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 732.041752][T31805] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 732.064607][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 732.072748][ C1] lec:lec_tx_timeout: lec0 [ 732.117788][T31810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7048'. [ 732.194592][T31817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.423270][T31831] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7052'. [ 732.507659][T31837] tipc: Enabled bearer , priority 0 [ 732.823851][T31837] syzkaller0: entered promiscuous mode [ 732.830564][T31837] syzkaller0: entered allmulticast mode [ 732.842313][T31837] tipc: Resetting bearer [ 733.000658][T27024] tipc: Resetting bearer [ 733.133854][T31836] tipc: Resetting bearer [ 735.510716][T31836] tipc: Disabling bearer [ 735.536931][T31861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.747859][T31880] wg1 speed is unknown, defaulting to 1000 [ 735.762524][T31889] __nla_validate_parse: 5 callbacks suppressed [ 735.762545][T31889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7066'. [ 735.788639][T31880] lo speed is unknown, defaulting to 1000 [ 735.823381][T25630] IPVS: starting estimator thread 0... [ 735.923807][T31896] IPVS: using max 33 ests per chain, 79200 per kthread [ 735.949695][T31907] netlink: 'syz.0.7069': attribute type 1 has an invalid length. [ 735.976386][T31906] dvmrp0: entered allmulticast mode [ 735.993781][T31907] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7069'. [ 736.029270][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7073'. [ 736.056465][T31911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7073'. [ 736.347062][T31932] netlink: 'syz.4.7080': attribute type 10 has an invalid length. [ 736.400657][T31932] batman_adv: batadv0: Adding interface: netdevsim0 [ 736.408192][T31932] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 736.465403][T31937] netlink: 'syz.1.7081': attribute type 12 has an invalid length. [ 736.477138][T31937] netlink: 'syz.1.7081': attribute type 29 has an invalid length. [ 736.492775][T31937] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7081'. [ 736.515945][T31937] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7081'. [ 736.599538][T31943] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7084'. [ 736.746809][T31948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7087'. [ 736.774536][T31948] bridge: RTM_NEWNEIGH with invalid ether address [ 736.803140][T31948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7087'. [ 736.828273][T31948] bridge: RTM_NEWNEIGH with invalid ether address [ 737.059235][T31961] netlink: 'syz.2.7090': attribute type 5 has an invalid length. [ 737.436913][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7102'. [ 737.453085][T31995] bond0: entered promiscuous mode [ 737.459596][T31995] bond_slave_0: entered promiscuous mode [ 737.469750][T31995] bond_slave_1: entered promiscuous mode [ 737.481271][T31995] bond0: left promiscuous mode [ 737.486838][T31995] bond_slave_0: left promiscuous mode [ 737.494991][T31995] bond_slave_1: left promiscuous mode [ 737.555997][T32005] netlink: 'syz.1.7103': attribute type 1 has an invalid length. [ 737.655804][T32012] xt_TCPMSS: Only works on TCP SYN packets [ 737.784690][T32021] syzkaller0: entered promiscuous mode [ 737.796345][T32021] syzkaller0: entered allmulticast mode [ 738.421613][T32053] gretap2: entered promiscuous mode [ 738.434154][T32053] gretap2: entered allmulticast mode [ 738.532314][T32070] tunl0: entered promiscuous mode [ 738.541707][T32070] netlink: 'syz.0.7125': attribute type 3 has an invalid length. [ 738.889360][T32091] sctp: [Deprecated]: syz.0.7131 (pid 32091) Use of int in maxseg socket option. [ 738.889360][T32091] Use struct sctp_assoc_value instead [ 739.141118][T32110] bond0: (slave batadv0): Releasing backup interface [ 739.188004][T32110] bridge_slave_0: left allmulticast mode [ 739.203992][T32110] bridge_slave_0: left promiscuous mode [ 739.210026][T32110] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.226426][T32110] bridge_slave_1: left allmulticast mode [ 739.232395][T32110] bridge_slave_1: left promiscuous mode [ 739.238651][T32110] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.249630][T32110] bond0: (slave bond_slave_0): Releasing backup interface [ 739.265948][T32110] bond0: (slave bond_slave_1): Releasing backup interface [ 739.294871][T32110] team0: Port device team_slave_0 removed [ 739.311821][T32110] team0: Port device team_slave_1 removed [ 739.322553][T32110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.332260][T32110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.341984][T32110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.351083][T32110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.361679][T32110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 739.639898][T32127] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 739.715807][T32146] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 739.805650][T32155] x_tables: duplicate underflow at hook 1 [ 739.822718][T32155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.986998][T32166] vcan0: tx drop: invalid sa for name 0xffffffffffffff7b [ 740.060784][T32166] nbd: socks must be embedded in a SOCK_ITEM attr [ 740.077535][T32178] ipvlan2: entered allmulticast mode [ 740.083023][T32178] batadv_slave_1: entered allmulticast mode [ 740.447711][T32189] bond9 (unregistering): Released all slaves [ 740.708979][T32223] x_tables: duplicate entry at hook 1 [ 740.786105][ T5829] Bluetooth: hci2: command tx timeout [ 740.829398][T32227] __nla_validate_parse: 23 callbacks suppressed [ 740.829418][T32227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7168'. [ 741.074483][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7178'. [ 741.085057][T32251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7178'. [ 741.270782][T32258] netlink: 'syz.0.7180': attribute type 1 has an invalid length. [ 741.293938][T32258] 8021q: adding VLAN 0 to HW filter on device bond9 [ 741.317606][T32258] bond9: (slave veth7): Enslaving as an active interface with a down link [ 741.393040][T32260] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 741.422239][T32260] bond9: (slave veth9): Enslaving as an active interface with a down link [ 741.431902][T32260] netlink: 'syz.0.7180': attribute type 1 has an invalid length. [ 741.440403][T32260] netlink: 'syz.0.7180': attribute type 2 has an invalid length. [ 741.670768][T32229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.821123][T32263] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 741.914637][T32269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.947147][T25631] lo speed is unknown, defaulting to 1000 [ 741.978369][T32274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 742.060136][T32282] syzkaller0: left promiscuous mode [ 742.067156][T32282] syzkaller0: left allmulticast mode [ 742.085888][T32282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7189'. [ 742.146012][T32289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7192'. [ 742.747374][T32334] Cannot find set identified by id 0 to match [ 742.832996][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7206'. [ 742.857374][T32340] bond0: entered promiscuous mode [ 742.866877][T32340] bridge0: entered promiscuous mode [ 742.881551][T32340] bond0: left promiscuous mode [ 742.887858][T32340] bridge0: left promiscuous mode [ 742.950823][T32344] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7207'. [ 743.158631][T32355] bond10: entered promiscuous mode [ 743.175727][T32359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'. [ 743.397904][T32373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7217'. [ 743.507191][T32377] wg1 speed is unknown, defaulting to 1000 [ 743.515386][T32377] lo speed is unknown, defaulting to 1000 [ 744.421250][T32422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.078411][T32412] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 745.453377][ T5824] IPVS: starting estimator thread 0... [ 745.533332][T32496] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.558657][T32493] IPVS: using max 35 ests per chain, 84000 per kthread [ 745.788129][T32524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.823265][T32524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.857658][T32525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.928412][T32521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.985660][T32536] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 746.086763][T32542] __nla_validate_parse: 10 callbacks suppressed [ 746.086786][T32542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7267'. [ 746.107476][T32539] netlink: 'syz.1.7268': attribute type 21 has an invalid length. [ 746.139543][T32539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7268'. [ 746.283726][T32549] xt_l2tp: invalid flags combination: 8 [ 746.349971][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7272'. [ 746.372997][T32549] netlink: 'syz.2.7272': attribute type 9 has an invalid length. [ 746.831716][T32587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7282'. [ 747.281241][T32620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7292'. [ 747.429824][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.504684][T32633] xt_policy: too many policy elements [ 747.560858][T32638] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7298'. [ 747.591828][T32643] netlink: 'syz.2.7302': attribute type 11 has an invalid length. [ 747.600029][T32643] netlink: 'syz.2.7302': attribute type 11 has an invalid length. [ 747.634129][T32643] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7302'. [ 747.786265][T32661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7306'. [ 747.797298][T32661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7306'. [ 747.826375][T32665] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 747.884415][T32671] IPVS: Unknown mcast interface: vcan0 [ 747.930112][T32670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7310'. [ 748.037726][T32673] syzkaller0: entered promiscuous mode [ 748.044498][T32673] syzkaller0: entered allmulticast mode [ 748.234056][T32690] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 749.508418][T32631] Bluetooth: hci4: command 0x0401 tx timeout [ 750.761320][T32698] netlink: 'syz.2.7314': attribute type 13 has an invalid length. [ 750.907343][T32725] macvlan0: entered promiscuous mode [ 751.170595][T32745] netlink: 'syz.1.7331': attribute type 11 has an invalid length. [ 751.184984][T32745] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.7331'. [ 751.325048][T32739] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 751.339443][T32754] tipc: Enabling of bearer rejected, failed to enable media [ 751.349650][T32752] syzkaller0: entered promiscuous mode [ 751.358593][T32752] syzkaller0: entered allmulticast mode [ 751.704826][ T313] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 751.843225][ T325] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 751.880719][ T325] netlink: 656 bytes leftover after parsing attributes in process `syz.4.7346'. [ 751.892524][ T327] netlink: 656 bytes leftover after parsing attributes in process `syz.4.7346'. [ 751.908802][ T328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7347'. [ 751.941959][ T332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 751.982557][ T332] veth3: entered allmulticast mode [ 752.070314][ T336] netlink: 'syz.1.7350': attribute type 11 has an invalid length. [ 752.110461][ T336] bond6: option resend_igmp: invalid value (32767) [ 752.117472][ T336] bond6: option resend_igmp: allowed values 0 - 255 [ 752.156615][ T336] bond6 (unregistering): Released all slaves [ 752.281748][ T351] x_tables: duplicate underflow at hook 4 [ 752.307484][ T351] x_tables: duplicate underflow at hook 4 [ 752.555477][ T374] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7362'. [ 752.656886][ T383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7365'. [ 752.683002][ T386] sctp: [Deprecated]: syz.4.7366 (pid 386) Use of int in max_burst socket option. [ 752.683002][ T386] Use struct sctp_assoc_value instead [ 752.756434][ T388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7367'. [ 752.794426][ T390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.913626][ T394] syzkaller1: entered promiscuous mode [ 752.935246][ T394] syzkaller1: entered allmulticast mode [ 753.014512][ T410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7372'. [ 753.024056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.024093][ C1] lec:lec_tx_timeout: lec0 [ 753.076284][ T415] openvswitch: netlink: Message has 592 unknown bytes. [ 753.100452][ T415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.103886][ T418] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 753.137656][ T417] dvmrp0: entered allmulticast mode [ 753.261053][ T420] gre1: entered promiscuous mode [ 753.266587][ T420] gre1: entered allmulticast mode [ 753.382589][ T430] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 753.485071][ T432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7378'. [ 753.573288][ T442] netlink: 'syz.4.7384': attribute type 2 has an invalid length. [ 753.647609][ T447] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 753.666480][ T447] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 753.815133][ T464] netlink: 'syz.0.7391': attribute type 11 has an invalid length. [ 753.827604][ T462] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 754.008456][ T472] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 754.071635][ T476] tipc: Enabling of bearer rejected, failed to enable media [ 754.102299][ T475] netlink: 'syz.1.7394': attribute type 8 has an invalid length. [ 754.142093][ T475] bond0: entered promiscuous mode [ 754.147974][ T475] bond_slave_0: entered promiscuous mode [ 754.156466][ T475] bond_slave_1: entered promiscuous mode [ 754.206359][ T475] gretap0: entered promiscuous mode [ 754.213343][ T475] erspan0: entered promiscuous mode [ 754.229423][ T475] debugfs: 'hsr1' already exists in 'hsr' [ 754.238361][ T475] Cannot create hsr debugfs directory [ 754.246032][ T475] hsr1: entered promiscuous mode [ 754.451271][ T505] team_slave_0: entered allmulticast mode [ 754.494982][ T506] team_slave_0: entered promiscuous mode [ 754.577412][ T517] netlink: 'syz.3.7408': attribute type 1 has an invalid length. [ 754.623287][ T517] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 754.747954][ T529] nbd: must specify a size in bytes for the device [ 754.913020][ T533] netlink: 'syz.1.7410': attribute type 10 has an invalid length. [ 755.052233][ T9227] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.082176][ T9227] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 755.396297][ T580] netlink: 'syz.0.7425': attribute type 13 has an invalid length. [ 755.550246][ T584] pim6reg1: entered promiscuous mode [ 755.556632][ T584] pim6reg1: entered allmulticast mode [ 755.701444][ T599] netlink: 'syz.1.7430': attribute type 1 has an invalid length. [ 756.087303][ T625] netlink: 'syz.2.7438': attribute type 5 has an invalid length. [ 756.145318][ T635] netlink: 'syz.2.7438': attribute type 5 has an invalid length. [ 756.154980][ T628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.239331][ T638] can: request_module (can-proto-0) failed. [ 756.374575][ T648] pim6reg1: entered promiscuous mode [ 756.385480][ T648] pim6reg1: entered allmulticast mode [ 756.634058][ T671] __nla_validate_parse: 13 callbacks suppressed [ 756.634077][ T671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7452'. [ 756.792883][ T683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7455'. [ 757.670513][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7462'. [ 757.678257][ T690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.985833][ T738] netlink: 'syz.4.7468': attribute type 12 has an invalid length. [ 758.050377][ T741] wg1 speed is unknown, defaulting to 1000 [ 758.078781][ T733] netlink: 'syz.2.7467': attribute type 3 has an invalid length. [ 758.100884][ T741] lo speed is unknown, defaulting to 1000 [ 758.115544][ T733] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7467'. [ 758.990337][ T772] wireguard0: entered allmulticast mode [ 759.190776][ T791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7481'. [ 759.208453][ T789] validate_nla: 1 callbacks suppressed [ 759.208471][ T789] netlink: 'syz.4.7482': attribute type 30 has an invalid length. [ 759.239685][ T789] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 759.439499][ T814] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 759.721350][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 760.097261][ T868] x_tables: duplicate underflow at hook 1 [ 760.216668][ T873] ip6t_REJECT: ECHOREPLY is not supported [ 760.226038][ T874] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7500'. [ 760.260438][ T875] syzkaller0: entered promiscuous mode [ 760.274898][ T875] syzkaller0: entered allmulticast mode [ 760.327757][ T885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7503'. [ 760.339662][ T885] unsupported nlmsg_type 40 [ 760.346090][ T884] tipc: Enabling of bearer rejected, failed to enable media [ 760.399150][ T888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7504'. [ 760.418286][ T888] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7504'. [ 760.437206][ T890] netlink: 'syz.2.7505': attribute type 1 has an invalid length. [ 760.567127][ T901] netlink: 'syz.2.7508': attribute type 13 has an invalid length. [ 760.577721][ T901] veth0_macvtap: left promiscuous mode [ 760.602629][ T901] macvtap0: entered allmulticast mode [ 760.614922][ T901] macvtap0: refused to change device tx_queue_len [ 760.738236][ T919] xt_hashlimit: size too large, truncated to 1048576 [ 760.747641][ T917] xt_hashlimit: size too large, truncated to 1048576 [ 760.817000][ T923] tipc: Enabling of bearer rejected, already enabled [ 760.951694][ T941] ipvlan3: entered allmulticast mode [ 761.134246][ T955] gtp1: entered promiscuous mode [ 761.139232][ T955] gtp1: entered allmulticast mode [ 761.925369][ T1023] __nla_validate_parse: 6 callbacks suppressed [ 761.925392][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7533'. [ 761.936652][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7535'. [ 761.955421][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7535'. [ 761.963601][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7533'. [ 761.999520][ T1031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7537'. [ 762.017312][ T1031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7537'. [ 762.146566][ T1031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7537'. [ 762.166297][ T1031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7537'. [ 762.257779][ T1055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.534950][ T1080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7544'. [ 762.580173][ T1080] syz_tun (unregistering): left allmulticast mode [ 762.896229][ T1097] dvmrp0: left allmulticast mode [ 762.923807][ T1098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7548'. [ 763.366311][ T1118] tipc: Started in network mode [ 763.371664][ T1118] tipc: Node identity f69d66a235d2, cluster identity 4711 [ 763.380839][ T1118] tipc: Enabled bearer , priority 0 [ 763.397623][ T1116] syzkaller0: entered promiscuous mode [ 763.403380][ T1116] syzkaller0: entered allmulticast mode [ 764.262549][ T1175] "syz.3.7573" (1175) uses obsolete ecb(arc4) skcipher [ 764.379941][ T5824] tipc: Node number set to 3276760738 [ 764.455863][ T1190] netlink: 'syz.0.7577': attribute type 61 has an invalid length. [ 764.465330][ T1190] netlink: 'syz.0.7577': attribute type 1 has an invalid length. [ 764.540929][ T1196] nbd: must specify an index to disconnect [ 765.044946][ T1223] syzkaller0: entered promiscuous mode [ 765.050809][ T1223] syzkaller0: entered allmulticast mode [ 765.077861][ T1223] tipc: Enabled bearer , priority 0 [ 765.139924][ T1222] tipc: Resetting bearer [ 765.192887][ T1222] tipc: Disabling bearer [ 765.236349][ T1232] ip6gre1: entered promiscuous mode [ 765.370036][ T1235] syzkaller0: entered promiscuous mode [ 765.375998][ T1235] syzkaller0: entered allmulticast mode [ 765.386033][ T1238] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 768.061441][ T1245] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 768.070906][ T1238] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 768.135504][ T1238] netlink: 'syz.2.7593': attribute type 29 has an invalid length. [ 768.381747][ T1297] __nla_validate_parse: 16 callbacks suppressed [ 768.381767][ T1297] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7605'. [ 768.398360][ T1295] netlink: 'syz.1.7604': attribute type 2 has an invalid length. [ 768.720519][ T1327] Cannot find set identified by id 65534 to match [ 769.125866][ T1260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.316425][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.373054][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.382967][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.384644][ T1334] lo speed is unknown, defaulting to 1000 [ 769.395624][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.427542][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.447386][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.461351][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 769.598227][ T1346] netlink: 'syz.4.7618': attribute type 1 has an invalid length. [ 769.624528][ T1346] netlink: 'syz.4.7618': attribute type 2 has an invalid length. [ 769.705003][ T1353] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7620'. [ 769.786890][ T1336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7613'. [ 770.101486][ T1371] ip6tnl0: Caught tx_queue_len zero misconfig [ 770.692276][ T1409] netlink: 'syz.0.7631': attribute type 1 has an invalid length. [ 771.006677][ T1429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.416192][ T1466] delete_channel: no stack [ 771.909488][ T1494] syzkaller0: entered promiscuous mode [ 771.925217][ T1494] syzkaller0: entered allmulticast mode [ 772.206192][ T1510] netlink: 'syz.2.7663': attribute type 2 has an invalid length. [ 773.576913][ T1564] __nla_validate_parse: 56 callbacks suppressed [ 773.576934][ T1564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7677'. [ 773.622057][ T1566] netlink: 'syz.1.7678': attribute type 1 has an invalid length. [ 773.653299][ T1566] bond10: entered promiscuous mode [ 773.660090][ T1566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 773.686625][ T1566] bond10: (slave bridge3): making interface the new active one [ 773.694907][ T1566] bridge3: entered promiscuous mode [ 773.701369][ T1566] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 773.728292][ T1566] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 773.741793][ T1566] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 773.743246][ T1550] delete_channel: no stack [ 773.836094][ T1576] IPv6: sit4: Disabled Multicast RS [ 773.850346][ T1576] sit4: entered allmulticast mode [ 774.088242][ T1591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7687'. [ 774.101293][ T1591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7687'. [ 774.112190][ T1593] netlink: 59 bytes leftover after parsing attributes in process `syz.2.7688'. [ 774.391405][ T1617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7694'. [ 774.541701][ T1634] netlink: 'syz.3.7698': attribute type 1 has an invalid length. [ 774.588967][ T1643] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 774.622705][ T1634] bond9: entered promiscuous mode [ 774.637279][ T1634] 8021q: adding VLAN 0 to HW filter on device bond9 [ 774.692654][ T1647] bond9: (slave bridge4): making interface the new active one [ 774.700603][ T1647] bridge4: entered promiscuous mode [ 774.707995][ T1647] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 774.757444][ T1647] bridge0: Device is already in use. [ 774.766288][ T1647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7698'. [ 774.766902][ T1649] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7703'. [ 774.895439][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7705'. [ 774.914286][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 774.973446][ T1671] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7709'. [ 775.026909][ T1675] netlink: 'syz.4.7711': attribute type 10 has an invalid length. [ 775.168727][ T1682] syzkaller0: entered promiscuous mode [ 775.187779][ T1682] syzkaller0: entered allmulticast mode [ 775.211064][ T1692] lo: Caught tx_queue_len zero misconfig [ 775.392707][ T1702] netlink: 'syz.2.7720': attribute type 1 has an invalid length. [ 775.481639][ T1708] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 775.483815][ T1711] netlink: 'syz.0.7723': attribute type 2 has an invalid length. [ 775.492527][ T1707] netlink: 'syz.4.7722': attribute type 1 has an invalid length. [ 775.518703][ T1710] dvmrp6: entered allmulticast mode [ 775.728371][ T1726] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20004 [ 775.858268][ T1737] syzkaller1: entered promiscuous mode [ 775.867192][ T1737] syzkaller1: entered allmulticast mode [ 776.094228][ T1746] delete_channel: no stack [ 776.161019][ T1750] delete_channel: no stack [ 776.459911][ T5829] block nbd1: Receive control failed (result -32) [ 776.467417][T32631] block nbd4: Receive control failed (result -32) [ 776.613908][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.621876][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.903980][ T1755] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 776.959880][ T1796] netem: incorrect gi model size [ 776.986800][ T1796] netem: change failed [ 777.079397][ T1807] openvswitch: netlink: Actions may not be safe on all matching packets [ 777.108563][ T1805] tipc: Enabling of bearer rejected, failed to enable media [ 777.355111][ T1812] syzkaller0: entered promiscuous mode [ 777.361174][ T1812] syzkaller0: entered allmulticast mode [ 780.647247][ T1868] xt_CT: No such helper "snmp_trap" [ 780.647440][ T1859] xt_CT: No such helper "snmp_trap" [ 780.768689][ T1875] __nla_validate_parse: 16 callbacks suppressed [ 780.768712][ T1875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7767'. [ 780.822476][ T1880] netlink: 'syz.0.7768': attribute type 1 has an invalid length. [ 780.843965][ T1880] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7768'. [ 781.051530][ T1896] netlink: 'syz.0.7774': attribute type 1 has an invalid length. [ 781.140657][ T1896] 8021q: adding VLAN 0 to HW filter on device bond14 [ 781.166872][ T1904] bond14: (slave geneve2): making interface the new active one [ 781.192880][ T1904] bond14: (slave geneve2): Enslaving as an active interface with an up link [ 781.423666][ T1922] netlink: 'syz.1.7781': attribute type 1 has an invalid length. [ 781.435782][ T1923] netlink: 'syz.4.7778': attribute type 1 has an invalid length. [ 781.447646][ T1922] netlink: 'syz.1.7781': attribute type 2 has an invalid length. [ 781.457707][ T1922] netlink: 'syz.1.7781': attribute type 1 has an invalid length. [ 781.468410][ T1922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7781'. [ 781.600478][ T1935] netlink: 'syz.0.7784': attribute type 1 has an invalid length. [ 781.629251][ T1931] syzkaller0: entered promiscuous mode [ 781.635340][ T1931] syzkaller0: entered allmulticast mode [ 781.838631][ T1951] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 781.881824][ T1951] 8021q: adding VLAN 0 to HW filter on device bond15 [ 781.974812][ T9235] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.014512][ T9235] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.046438][ T9235] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.070292][ T9235] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.119069][ T1966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7792'. [ 782.209361][ T1971] Cannot find set identified by id 1 to match [ 782.227001][ T9227] bond0: (slave bond_slave_0): interface is now down [ 782.235910][ T9227] bond0: (slave bond_slave_1): interface is now down [ 782.254777][ T9227] bond0: now running without any active interface! [ 782.404929][ T1985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7799'. [ 782.885878][ T2011] : entered promiscuous mode [ 782.906232][ T2013] vlan2: entered allmulticast mode [ 782.911576][ T2013] hsr0: entered allmulticast mode [ 782.932877][ T2013] hsr_slave_0: entered allmulticast mode [ 782.941426][ T2013] hsr_slave_1: entered allmulticast mode [ 782.985813][ T2015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7805'. [ 783.167447][ T2030] Bluetooth: MGMT ver 1.23 [ 783.178804][ T2028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7808'. [ 783.196004][ T2028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7808'. [ 783.215736][ T2032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7811'. [ 783.253347][ T2032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7811'. [ 783.515089][ T2051] gretap2: entered promiscuous mode [ 783.534000][ T2051] gretap2: entered allmulticast mode [ 784.797721][ T2108] tipc: Invalid UDP bearer configuration [ 784.797777][ T2108] tipc: Enabling of bearer rejected, failed to enable media [ 785.140716][ T2134] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 785.276289][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 785.288831][T32631] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 785.467323][ T2157] bond16: entered promiscuous mode [ 785.483106][ T2157] 8021q: adding VLAN 0 to HW filter on device bond16 [ 785.542575][ T2157] 8021q: adding VLAN 0 to HW filter on device bond16 [ 785.550269][ T2157] bond16: (slave sit4): The slave device specified does not support setting the MAC address [ 785.563904][ T2157] bond16: (slave sit4): Error -95 calling set_mac_address [ 785.787634][ T2180] __nla_validate_parse: 13 callbacks suppressed [ 785.787656][ T2180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7855'. [ 785.824705][ T2180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7855'. [ 785.898622][ T2191] Cannot find add_set index 2 as target [ 785.970650][ T2195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7860'. [ 786.139068][ T2210] tap0: tun_chr_ioctl cmd 2148553947 [ 786.267447][ T2214] syzkaller0: entered promiscuous mode [ 786.276059][ T2214] syzkaller0: entered allmulticast mode [ 786.315450][ T2214] netlink: 'syz.3.7866': attribute type 1 has an invalid length. [ 786.422660][ T2227] openvswitch: netlink: IP tunnel dst address not specified [ 786.639022][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7875'. [ 786.648797][ T2244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7875'. [ 786.865745][ T2261] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7879'. [ 786.977206][ T2270] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 786.992960][ T2274] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 787.081246][ T2279] netlink: 472 bytes leftover after parsing attributes in process `syz.0.7886'. [ 787.097725][ T2277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7885'. [ 787.169512][ T7855] IPVS: starting estimator thread 0... [ 787.284118][ T2285] IPVS: using max 31 ests per chain, 74400 per kthread [ 787.317921][ T2297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7891'. [ 787.327883][ T2297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7891'. [ 787.735623][ T2326] vlan0: entered promiscuous mode [ 787.744194][ T2326] vlan0: entered allmulticast mode [ 787.749430][ T2326] veth0_vlan: entered allmulticast mode [ 789.114497][ T2376] netlink: 'syz.3.7909': attribute type 4 has an invalid length. [ 789.124304][ T2376] netlink: 'syz.3.7909': attribute type 12 has an invalid length. [ 789.549617][T12854] lec:lec_start_xmit: lec0:No lecd attached [ 790.392345][ T2306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.587237][ T2380] dvmrp0: entered allmulticast mode [ 790.616714][ T2381] netlink: 'syz.2.7911': attribute type 21 has an invalid length. [ 790.724718][ T2395] netlink: 'syz.1.7915': attribute type 1 has an invalid length. [ 790.830287][ T2395] bond11: entered promiscuous mode [ 790.836178][ T2395] 8021q: adding VLAN 0 to HW filter on device bond11 [ 790.961305][ T2426] netlink: 'syz.0.7920': attribute type 4 has an invalid length. [ 790.973037][ T2395] bond11: (slave bridge4): making interface the new active one [ 790.982660][ T2426] __nla_validate_parse: 3 callbacks suppressed [ 790.982677][ T2426] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7920'. [ 790.984519][ T2406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7914'. [ 790.992658][ T2431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7921'. [ 790.998961][ T2395] bridge4: entered promiscuous mode [ 791.029241][ T2395] bridge4: left promiscuous mode [ 791.178802][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7923'. [ 791.614939][ T2474] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 791.823374][ T2499] Can't find ip_set type has`:net,port [ 791.926125][ T2495] xt_hashlimit: overflow, rate too high: 0 [ 791.940464][ T2507] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.7939'. [ 791.993785][ T2507] 8021q: VLANs not supported on ip6tnl0 [ 792.203314][ T2532] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7943'. [ 792.538131][ T2565] netlink: 'syz.4.7948': attribute type 33 has an invalid length. [ 792.544747][ T2563] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7950'. [ 792.592156][ T2563] netlink: 888 bytes leftover after parsing attributes in process `syz.2.7950'. [ 792.625253][ T2563] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 792.813178][ T2580] netlink: 'syz.0.7955': attribute type 21 has an invalid length. [ 792.827618][ T2580] netlink: 'syz.0.7955': attribute type 6 has an invalid length. [ 792.892682][ T2580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7955'. [ 792.939658][ T2585] netlink: 'syz.1.7953': attribute type 4 has an invalid length. [ 793.044148][ T2593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7958'. [ 793.393211][ T2618] netlink: 'syz.2.7965': attribute type 10 has an invalid length. [ 793.515456][ T2640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.534969][ T2630] netlink: 'syz.0.7967': attribute type 12 has an invalid length. [ 793.553428][ T2630] netlink: 'syz.0.7967': attribute type 11 has an invalid length. [ 793.589815][ T2630] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 793.831266][ T2665] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 793.966773][ T2680] gtp1: entered promiscuous mode [ 793.972171][ T2680] gtp1: entered allmulticast mode [ 794.029164][ T2676] tipc: Resetting bearer [ 794.248343][ T2712] lo: entered promiscuous mode [ 794.254308][ T2712] tunl0: entered promiscuous mode [ 794.269548][ T2712] gre0: entered promiscuous mode [ 794.287691][ T2712] gretap0: entered promiscuous mode [ 794.301689][ T2712] erspan0: entered promiscuous mode [ 794.310357][ T2714] openvswitch: netlink: Missing valid actions attribute. [ 794.317377][ T2712] ip_vti0: entered promiscuous mode [ 794.318500][ T2714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.468306][ T2730] tipc: Enabled bearer , priority 0 [ 794.478842][ T2729] tipc: Disabling bearer [ 794.572161][ T2737] ipt_ECN: cannot use operation on non-tcp rule [ 794.646353][ T2743] Cannot find add_set index 2 as target [ 794.698316][ T2743] team0: Port device wireguard1 added [ 794.819220][ T9233] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.829665][ T9233] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 794.843879][ T9233] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.852812][ T9233] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 794.934579][ T9237] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.960518][ T9237] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 794.980553][ T9237] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.013164][ T9237] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 795.023559][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 795.031756][ C1] lec:lec_tx_timeout: lec0 [ 795.122745][ T2783] netlink: 'syz.3.8006': attribute type 6 has an invalid length. [ 795.160911][ T2784] netlink: 'syz.3.8006': attribute type 8 has an invalid length. [ 795.168023][ T2789] erspan0: entered allmulticast mode [ 795.177738][ T2783] netlink: 'syz.3.8006': attribute type 5 has an invalid length. [ 796.208545][ T2873] __nla_validate_parse: 150 callbacks suppressed [ 796.208567][ T2873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8022'. [ 796.347858][ T2880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8024'. [ 796.360604][ T2880] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8024'. [ 796.400187][ T2878] tipc: Enabled bearer , priority 0 [ 796.487709][ T2891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8027'. [ 796.516027][ T2878] syzkaller0: entered promiscuous mode [ 796.523098][ T2878] syzkaller0: entered allmulticast mode [ 796.534180][ T2878] tipc: Resetting bearer [ 796.552909][ T2877] tipc: Resetting bearer [ 796.563715][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8028'. [ 796.572911][ T2895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8028'. [ 796.707239][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8031'. [ 796.855972][ T2906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8031'. [ 799.194763][ T2877] tipc: Disabling bearer [ 799.208679][ T2895] geneve2: entered promiscuous mode [ 799.214362][ T2895] geneve2: entered allmulticast mode [ 799.616620][ T2942] openvswitch: netlink: IP tunnel dst address not specified [ 799.728750][ T2950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8045'. [ 799.855106][ T2966] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 800.262070][ T2998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8052'. [ 800.713995][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 802.578085][ T2942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.776069][ T3008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8058'. [ 802.909432][ T3019] validate_nla: 14 callbacks suppressed [ 802.909454][ T3019] netlink: 'syz.0.8056': attribute type 1 has an invalid length. [ 802.910904][ T3018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.989560][ T3024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8060'. [ 803.040176][ T3023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8056'. [ 803.101729][ T3019] bond18: (slave bridge0): making interface the new active one [ 803.112638][ T3019] bond18: (slave bridge0): Enslaving as an active interface with an up link [ 803.137669][ T3023] 8021q: adding VLAN 0 to HW filter on device bond18 [ 803.214231][ T3039] tipc: Enabling of bearer rejected, failed to enable media [ 803.449516][ T3056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8067'. [ 803.609460][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8072'. [ 803.619095][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8072'. [ 803.632539][ T3069] netlink: 'syz.2.8071': attribute type 13 has an invalid length. [ 803.642519][ T3069] netlink: 'syz.2.8071': attribute type 27 has an invalid length. [ 803.738604][ T3072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8073'. [ 803.786292][ T3076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.931505][ T3080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8077'. [ 803.967080][ T3084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8081'. [ 804.202346][ T3100] bond15: ARP target 1.0.0.0 is already present [ 804.211781][ T3100] bond15: option arp_ip_target: invalid value (1) [ 804.238472][ T3100] bond15 (unregistering): Released all slaves [ 804.409054][ T3117] tipc: Failed to remove unknown binding: 66,0,0/0:4164608896/4164608897 [ 804.422950][ T3117] tipc: Failed to remove unknown binding: 66,0,0/0:4164608896/4164608897 [ 804.469895][ T3119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8087'. [ 804.479770][ T3119] netlink: 'syz.0.8087': attribute type 3 has an invalid length. [ 804.491143][ T3117] syzkaller0: entered promiscuous mode [ 804.497882][ T3117] syzkaller0: entered allmulticast mode [ 804.829785][ T3144] netlink: 'syz.3.8097': attribute type 1 has an invalid length. [ 805.066692][ T3169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.078964][ T3166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.131490][ T3171] netlink: 'syz.3.8104': attribute type 1 has an invalid length. [ 805.175251][ T3175] netlink: 'syz.2.8106': attribute type 1 has an invalid length. [ 805.671527][ T3218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.945089][ T3224] syzkaller0: entered promiscuous mode [ 805.952586][ T3224] syzkaller0: entered allmulticast mode [ 806.114613][ T5829] Bluetooth: hci2: link tx timeout [ 806.122939][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 806.494263][ T3273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.595753][ T3280] lo speed is unknown, defaulting to 1000 [ 808.144371][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 808.868756][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 809.102122][ T3242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.290566][ T3311] netlink: 'syz.0.8136': attribute type 10 has an invalid length. [ 809.301760][ T3314] __nla_validate_parse: 48 callbacks suppressed [ 809.301780][ T3314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8137'. [ 809.316446][ T3319] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8135'. [ 809.378912][ T3325] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8139'. [ 809.434721][ T3330] netlink: 'syz.3.8141': attribute type 61 has an invalid length. [ 809.436489][ T3329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.620984][ T3341] geneve1: entered allmulticast mode [ 809.632469][ T3345] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8146'. [ 809.741707][ T3350] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8148'. [ 809.836344][ T3359] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 809.894660][ T3364] netlink: 'syz.1.8153': attribute type 1 has an invalid length. [ 809.943067][ T3367] netlink: 'syz.3.8154': attribute type 11 has an invalid length. [ 810.013438][ T3369] º: renamed from veth1_vlan (while UP) [ 810.031398][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8156'. [ 810.042796][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8156'. [ 810.239666][ T3382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8159'. [ 810.256471][ T3381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8159'. [ 810.269212][ T3386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8159'. [ 810.319688][ T3390] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 810.333836][ T3390] bond14 (unregistering): Released all slaves [ 810.524266][ T3411] bond15: entered promiscuous mode [ 810.756864][ T3423] Cannot find del_set index 4 as target [ 811.052191][ T3444] xt_policy: output policy not valid in PREROUTING and INPUT [ 811.311477][ T3468] netlink: 'syz.3.8177': attribute type 1 has an invalid length. [ 811.332368][ T3469] netlink: 'syz.3.8177': attribute type 1 has an invalid length. [ 811.350226][ T3472] lo: entered allmulticast mode [ 811.434728][ T3461] lo: left allmulticast mode [ 811.920032][ T3514] netlink: 'syz.4.8189': attribute type 11 has an invalid length. [ 812.195995][ T3547] netlink: 'syz.0.8197': attribute type 1 has an invalid length. [ 812.195995][ T3548] netlink: 'syz.0.8197': attribute type 1 has an invalid length. [ 812.239690][ T3548] 8021q: adding VLAN 0 to HW filter on device bond19 [ 812.461152][ T3568] netlink: 'syz.0.8202': attribute type 10 has an invalid length. [ 812.496276][ T3568] !: entered promiscuous mode [ 812.524902][ T3568] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 812.651780][ T3580] lo speed is unknown, defaulting to 1000 [ 812.746904][ T3584] netlink: 'syz.0.8207': attribute type 21 has an invalid length. [ 812.969140][ T3584] can: request_module (can-proto-0) failed. [ 813.189458][ T3605] bond14: entered promiscuous mode [ 813.196344][ T3605] 8021q: adding VLAN 0 to HW filter on device bond14 [ 813.758475][ T3635] bridge0: entered allmulticast mode [ 813.935372][ T3641] xt_cgroup: xt_cgroup: no path or classid specified [ 814.063726][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 814.071774][ C1] lec:lec_tx_timeout: lec0 [ 814.352080][ T3673] __nla_validate_parse: 28 callbacks suppressed [ 814.352103][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8231'. [ 814.678215][ T3701] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 814.695698][ T3699] validate_nla: 2 callbacks suppressed [ 814.695717][ T3699] netlink: 'syz.2.8236': attribute type 12 has an invalid length. [ 814.789526][ T3710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8236'. [ 814.834908][ T3713] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8243'. [ 814.922105][ T3699] bond5: option primary_reselect: invalid value (255) [ 814.931205][ T3699] bond5 (unregistering): Released all slaves [ 814.971768][ T3712] bridge0: port 1(macsec0) entered blocking state [ 814.978948][ T3712] bridge0: port 1(macsec0) entered disabled state [ 814.987737][ T3712] macsec0: entered allmulticast mode [ 814.993370][ T3712] veth1_macvtap: entered allmulticast mode [ 815.015199][ T3712] macsec0: entered promiscuous mode [ 815.197892][ T3738] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 815.237013][ T3739] lo speed is unknown, defaulting to 1000 [ 815.355476][ T3746] x_tables: duplicate underflow at hook 1 [ 815.442005][ T3751] netlink: 'syz.4.8256': attribute type 3 has an invalid length. [ 815.474151][ T3756] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8255'. [ 815.592877][ T3756] veth5: entered allmulticast mode [ 815.612147][ T3759] geneve3: entered promiscuous mode [ 815.623915][ T9235] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 32864 - 0 [ 815.642744][ T9235] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 32864 - 0 [ 815.655147][ T9235] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 32864 - 0 [ 815.717950][ T3767] netlink: 'syz.4.8260': attribute type 10 has an invalid length. [ 815.764605][ T3767] wlan1: mtu less than device minimum [ 815.770275][ T3767] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 815.922159][ T3777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8263'. [ 816.098858][ T3793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8267'. [ 816.769388][ T3836] netlink: 'syz.4.8277': attribute type 1 has an invalid length. [ 816.841612][ T3840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8279'. [ 816.869847][ T3840] netlink: 'syz.2.8279': attribute type 7 has an invalid length. [ 816.891113][ T3840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8279'. [ 816.927561][ T3847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8280'. [ 816.972670][ T3847] ip6gre1: entered promiscuous mode [ 817.000221][ T3847] ip6gre1: entered allmulticast mode [ 817.114042][ T3861] openvswitch: netlink: IP tunnel dst address not specified [ 817.532006][ T3887] syzkaller1: entered promiscuous mode [ 817.538150][ T3887] syzkaller1: entered allmulticast mode [ 817.609117][ T3891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8292'. [ 817.867390][ T3908] netlink: 'syz.2.8298': attribute type 12 has an invalid length. [ 818.230446][ T3918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.284476][ T3937] netlink: 'syz.2.8304': attribute type 1 has an invalid length. [ 818.325887][ T3947] bond21: Unable to set down delay as MII monitoring is disabled [ 818.345740][ T3947] bond21 (unregistering): Released all slaves [ 818.399844][ T3937] 8021q: adding VLAN 0 to HW filter on device bond5 [ 818.516776][ T3938] bond5: (slave geneve4): making interface the new active one [ 818.526127][ T3938] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 818.778038][ T9227] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8 [ 818.896005][ T3968] netlink: 'syz.0.8315': attribute type 1 has an invalid length. [ 819.100338][ T3997] netlink: 'syz.0.8322': attribute type 1 has an invalid length. [ 819.156890][ T4002] ipt_REJECT: ECHOREPLY no longer supported. [ 819.232905][ T4007] gre3: entered promiscuous mode [ 819.259793][ T4007] gre3: entered allmulticast mode [ 819.645567][ T4045] __nla_validate_parse: 7 callbacks suppressed [ 819.645588][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8336'. [ 819.723215][ T4048] netlink: 'syz.3.8337': attribute type 21 has an invalid length. [ 819.755577][ T4048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.969187][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8344'. [ 819.978431][ T4071] openvswitch: netlink: Flow actions attr not present in new flow. [ 820.085037][ T4079] sch_fq: defrate 0 ignored. [ 820.103179][ T4079] netlink: 'syz.3.8343': attribute type 1 has an invalid length. [ 820.192466][ T4079] bond14: entered promiscuous mode [ 820.214131][ T4079] 8021q: adding VLAN 0 to HW filter on device bond14 [ 820.277780][ T4079] bond14: (slave bridge6): making interface the new active one [ 820.286262][ T4079] bridge6: entered promiscuous mode [ 820.293096][ T4079] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 820.345780][ T4091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.357996][ T4091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 820.370304][ T4091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.401689][ T4093] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 820.422400][ T4098] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 820.478980][ T4091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.494911][ T4091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 820.506031][ T4091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.590872][ T4091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.611714][ T4091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 820.622941][ T4091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.669096][ T4104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.758714][ T4109] netlink: 'syz.0.8354': attribute type 9 has an invalid length. [ 820.759659][ T4091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 820.778572][ T4091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 820.796130][ T4091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.880713][ T4112] netlink: 'syz.3.8355': attribute type 1 has an invalid length. [ 820.896339][ T4112] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8355'. [ 820.906651][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8355'. [ 820.918462][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8355'. [ 820.946186][ T9214] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.961128][ T9214] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 820.970339][ T9214] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.991704][ T4112] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 821.028672][ T4119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8357'. [ 821.047992][ T9214] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.064318][ T4119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8357'. [ 821.073464][ T9214] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 821.093266][ T9214] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.210251][ T9214] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.219839][ T9214] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 821.228846][ T9214] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.245449][ T9214] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 821.264088][ T9214] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 821.278497][ T9214] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.316415][ T4132] geneve5: entered promiscuous mode [ 821.326341][ T4132] geneve5: entered allmulticast mode [ 821.346026][ T9234] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 19999 - 0 [ 821.356606][ T9234] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 19999 - 0 [ 821.367083][ T9234] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 19999 - 0 [ 821.386268][ T4141] x_tables: duplicate underflow at hook 1 [ 821.512842][ T4147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8367'. [ 821.559390][ T4147] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8367'. [ 821.569516][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8368'. [ 822.505587][ T4179] bond15: entered promiscuous mode [ 822.511346][ T4179] 8021q: adding VLAN 0 to HW filter on device bond15 [ 822.525130][ T4178] netlink: 'syz.1.8373': attribute type 3 has an invalid length. [ 822.609766][ T4193] netlink: 'syz.0.8378': attribute type 2 has an invalid length. [ 822.640811][ T4178] 8021q: adding VLAN 0 to HW filter on device bond15 [ 822.674415][ T4178] bond15: (slave sit3): The slave device specified does not support setting the MAC address [ 822.697803][ T4200] netlink: 'syz.3.8377': attribute type 1 has an invalid length. [ 822.699043][ T4178] bond15: (slave sit3): Error -95 calling set_mac_address [ 822.729999][ T4191] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 822.984769][ T4231] syzkaller0: entered promiscuous mode [ 822.991116][ T4231] syzkaller0: entered allmulticast mode [ 825.607824][ T4193] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.797561][ T4257] __nla_validate_parse: 3 callbacks suppressed [ 825.797581][ T4257] netlink: 596 bytes leftover after parsing attributes in process `syz.3.8393'. [ 826.048312][ T4279] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8397'. [ 826.101716][ T4279] : renamed from hsr0 (while UP) [ 826.264670][ T4296] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8403'. [ 826.346832][ T4305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8405'. [ 826.372548][ T4307] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.8406'. [ 826.390502][ T4307] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8406'. [ 826.412015][ T4305] netlink: 'syz.0.8405': attribute type 1 has an invalid length. [ 826.423731][ T4307] netlink: 'syz.4.8406': attribute type 1 has an invalid length. [ 826.431792][ T4307] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8406'. [ 826.451519][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8408'. [ 826.457396][ T4312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.488814][ T4311] chnl_net:caif_netlink_parms(): no params data found [ 826.559363][ T4317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8409'. [ 826.593836][ T4319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8410'. [ 826.984483][ T4346] 0·: renamed from hsr_slave_1 (while UP) [ 827.007052][ T4346] 0·: entered allmulticast mode [ 827.013102][ T4346] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 827.029402][ T4351] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 827.047930][ T4351] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 827.171095][ T4363] netlink: 'syz.4.8423': attribute type 1 has an invalid length. [ 827.385633][ T4379] bond15: entered promiscuous mode [ 827.391031][ T4379] bond15: entered allmulticast mode [ 827.452396][ T4386] netlink: 'syz.1.8429': attribute type 1 has an invalid length. [ 827.511790][ T4386] bond16: entered promiscuous mode [ 827.518132][ T4386] 8021q: adding VLAN 0 to HW filter on device bond16 [ 827.526995][ T4384] tipc: Enabling of bearer rejected, failed to enable media [ 827.591333][ T4386] bond16: (slave bridge6): making interface the new active one [ 827.600790][ T4386] bridge6: entered promiscuous mode [ 827.609947][ T4386] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 827.805554][ T4413] erspan0: entered promiscuous mode [ 827.811094][ T4413] vlan1: entered promiscuous mode [ 827.844927][ T4420] x_tables: duplicate underflow at hook 2 [ 828.683285][ T4471] macvlan2: entered promiscuous mode [ 828.697311][ T4471] macvlan2: entered allmulticast mode [ 828.729795][ T4471] bond18: (slave macvlan2): Opening slave failed [ 828.822496][ T4480] vlan1: entered allmulticast mode [ 828.828033][ T4480] mac80211_hwsim hwsim89 wlan0: entered allmulticast mode [ 829.648419][ T4530] netlink: 'syz.3.8466': attribute type 1 has an invalid length. [ 829.717012][ T4530] netlink: 'syz.3.8466': attribute type 1 has an invalid length. [ 829.723261][ T4540] openvswitch: netlink: IP tunnel dst address not specified [ 830.103928][ T4569] netlink: 'syz.2.8476': attribute type 1 has an invalid length. [ 830.306919][ T4582] bond17: entered promiscuous mode [ 830.312552][ T4582] 8021q: adding VLAN 0 to HW filter on device bond17 [ 830.349917][ T4582] bridge8: entered promiscuous mode [ 830.364478][ T4582] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 830.449953][ T4582] macvlan3: entered promiscuous mode [ 830.456115][ T4582] macvlan3: entered allmulticast mode [ 830.462681][ T4582] bond17: (slave macvlan3): Error -98 calling set_mac_address [ 830.510263][ T4598] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 830.554775][ T4600] netlink: 'syz.1.8486': attribute type 3 has an invalid length. [ 833.167182][ T4603] : entered promiscuous mode [ 833.172752][ T4610] __nla_validate_parse: 25 callbacks suppressed [ 833.172771][ T4610] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8488'. [ 833.306906][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8492'. [ 833.382161][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8492'. [ 833.541260][ T4648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8496'. [ 833.565773][ T4650] bond0: entered allmulticast mode [ 833.571330][ T4650] bond_slave_0: entered allmulticast mode [ 833.618566][ T4650] bond_slave_1: entered allmulticast mode [ 833.653748][ T4650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.678108][ T4662] tipc: Enabling of bearer rejected, failed to enable media [ 833.874787][ T4677] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8505'. [ 833.954270][ T4685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8503'. [ 834.088737][ T4694] netlink: 'syz.3.8510': attribute type 29 has an invalid length. [ 834.116550][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8510'. [ 834.135543][ T4701] xt_l2tp: v2 tid > 0xffff: 1114244 [ 834.145231][ T4703] tipc: Enabled bearer , priority 0 [ 834.163806][ T4689] lo speed is unknown, defaulting to 1000 [ 834.176533][ T4697] syzkaller0: entered promiscuous mode [ 834.182662][ T4697] syzkaller0: entered allmulticast mode [ 834.299016][ T4707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8513'. [ 834.341949][ T4711] tipc: Trying to set illegal importance in message [ 834.566155][ T4721] netlink: 'syz.1.8519': attribute type 3 has an invalid length. [ 834.712017][ T4726] netlink: 'syz.1.8521': attribute type 1 has an invalid length. [ 834.857237][ T4688] tipc: Resetting bearer [ 834.902601][ T4688] tipc: Disabling bearer [ 834.952258][ T4728] tap0: tun_chr_ioctl cmd 1074025676 [ 834.961757][ T4728] tap0: owner set to 0 [ 834.976700][ T4728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8522'. [ 835.180481][ T4741] syzkaller0: entered promiscuous mode [ 835.198686][ T4741] syzkaller0: entered allmulticast mode [ 835.506102][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8528'. [ 835.661085][ T4752] team1: entered promiscuous mode [ 835.666652][ T4752] team1: entered allmulticast mode [ 835.965764][ T4778] 8021q: VLANs not supported on ip_vti0 [ 836.189108][ T4792] netlink: 'syz.2.8539': attribute type 2 has an invalid length. [ 836.817180][ T4831] openvswitch: netlink: IP tunnel dst address not specified [ 837.096610][ T4836] bond17: Removing last ns target with arp_interval on [ 837.155481][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.167540][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.179761][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.189148][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.199163][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 837.357533][ T4846] netlink: 'syz.0.8554': attribute type 1 has an invalid length. [ 837.369817][ T4838] lo speed is unknown, defaulting to 1000 [ 837.419384][T27618] ================================================================== [ 837.427567][T27618] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 837.435341][T27618] Read of size 8 at addr ffff8880636f80a8 by task khidpd_00030400/27618 [ 837.444284][T27618] [ 837.446832][T27618] CPU: 0 UID: 0 PID: 27618 Comm: khidpd_00030400 Not tainted syzkaller #0 PREEMPT(full) [ 837.446851][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.446865][T27618] Call Trace: [ 837.446874][T27618] [ 837.446883][T27618] dump_stack_lvl+0xe8/0x150 [ 837.446954][T27618] print_report+0xba/0x230 [ 837.446977][T27618] ? __mutex_lock+0x812/0x1300 [ 837.446991][T27618] kasan_report+0x117/0x150 [ 837.447030][T27618] ? __mutex_lock+0x812/0x1300 [ 837.447047][T27618] __mutex_lock+0x812/0x1300 [ 837.447063][T27618] ? __mutex_lock+0x5ac/0x1300 [ 837.447077][T27618] ? l2cap_unregister_user+0x6a/0x1b0 [ 837.447165][T27618] ? __pfx___mutex_lock+0x10/0x10 [ 837.447183][T27618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 837.447243][T27618] ? lockdep_hardirqs_on+0x7a/0x110 [ 837.447287][T27618] l2cap_unregister_user+0x6a/0x1b0 [ 837.447304][T27618] hidp_session_thread+0x3cb/0x440 [ 837.447375][T27618] ? __pfx_hidp_session_thread+0x10/0x10 [ 837.447391][T27618] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 837.447410][T27618] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 837.447427][T27618] ? __kthread_parkme+0x7a/0x1f0 [ 837.447466][T27618] ? __kthread_parkme+0x19c/0x1f0 [ 837.447487][T27618] kthread+0x388/0x470 [ 837.447501][T27618] ? __pfx_hidp_session_thread+0x10/0x10 [ 837.447516][T27618] ? __pfx_kthread+0x10/0x10 [ 837.447530][T27618] ret_from_fork+0x51e/0xb90 [ 837.447562][T27618] ? __pfx_ret_from_fork+0x10/0x10 [ 837.447579][T27618] ? __switch_to+0xc7d/0x1450 [ 837.447604][T27618] ? __pfx_kthread+0x10/0x10 [ 837.447618][T27618] ret_from_fork_asm+0x1a/0x30 [ 837.447646][T27618] [ 837.447651][T27618] [ 837.622783][T27618] The buggy address belongs to the physical page: [ 837.629626][T27618] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880636fb0c0 pfn:0x636f8 [ 837.640735][T27618] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 837.648205][T27618] raw: 00fff00000000000 ffffea00018d7308 ffff8880b8640c40 0000000000000000 [ 837.657643][T27618] raw: ffff8880636fb0c0 0000000000000000 00000000ffffffff 0000000000000000 [ 837.666646][T27618] page dumped because: kasan: bad access detected [ 837.673072][T27618] page_owner tracks the page as freed [ 837.679229][T27618] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 26855, tgid 26855 (syz-executor), ts 632255288669, free_ts 837407117207 [ 837.698076][T27618] post_alloc_hook+0x231/0x280 [ 837.703138][T27618] get_page_from_freelist+0x24dc/0x2580 [ 837.709052][T27618] __alloc_frozen_pages_noprof+0x18d/0x380 [ 837.715359][T27618] alloc_pages_mpol+0x232/0x4a0 [ 837.720353][T27618] ___kmalloc_large_node+0x4e/0x150 [ 837.725717][T27618] __kmalloc_large_node_noprof+0x18/0x90 [ 837.732304][T27618] __kmalloc_noprof+0x3e8/0x760 [ 837.737231][T27618] hci_alloc_dev_priv+0x28/0x2060 [ 837.742639][T27618] vhci_create_device+0x120/0x650 [ 837.747864][T27618] vhci_write+0x3ce/0x4a0 [ 837.752373][T27618] vfs_write+0x61d/0xb90 [ 837.756833][T27618] ksys_write+0x150/0x270 [ 837.761378][T27618] do_syscall_64+0x14d/0xf80 [ 837.766851][T27618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.773466][T27618] page last free pid 26855 tgid 26855 stack trace: [ 837.780319][T27618] __free_frozen_pages+0xc2b/0xdb0 [ 837.785737][T27618] bt_host_release+0x82/0x90 [ 837.790837][T27618] device_release+0x9e/0x1d0 [ 837.795786][T27618] kobject_put+0x228/0x560 [ 837.800646][T27618] vhci_release+0x15a/0x1a0 [ 837.805305][T27618] __fput+0x44f/0xa70 [ 837.809644][T27618] task_work_run+0x1d9/0x270 [ 837.814513][T27618] do_exit+0x70f/0x23c0 [ 837.818954][T27618] do_group_exit+0x21b/0x2d0 [ 837.823793][T27618] get_signal+0x1284/0x1330 [ 837.828448][T27618] arch_do_signal_or_restart+0xbc/0x830 [ 837.834186][T27618] exit_to_user_mode_loop+0x86/0x480 [ 837.839846][T27618] do_syscall_64+0x32d/0xf80 [ 837.844796][T27618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.851307][T27618] [ 837.853653][T27618] Memory state around the buggy address: [ 837.859820][T27618] ffff8880636f7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 837.868006][T27618] ffff8880636f8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 837.876447][T27618] >ffff8880636f8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 837.885150][T27618] ^ [ 837.891355][T27618] ffff8880636f8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 837.899944][T27618] ffff8880636f8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 837.908259][T27618] ================================================================== [ 837.918260][T27618] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 837.925666][T27618] CPU: 0 UID: 0 PID: 27618 Comm: khidpd_00030400 Not tainted syzkaller #0 PREEMPT(full) [ 837.935566][T27618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.946159][T27618] Call Trace: [ 837.949723][T27618] [ 837.952668][T27618] vpanic+0x56c/0xa60 [ 837.956680][T27618] ? __pfx_vpanic+0x10/0x10 [ 837.961634][T27618] panic+0xc5/0xd0 [ 837.965543][T27618] ? __pfx_panic+0x10/0x10 [ 837.970350][T27618] ? __mutex_lock+0x812/0x1300 [ 837.975197][T27618] ? __mutex_lock+0x812/0x1300 [ 837.980183][T27618] check_panic_on_warn+0x89/0xb0 [ 837.985829][T27618] ? __mutex_lock+0x812/0x1300 [ 837.990782][T27618] end_report+0x73/0x180 [ 837.995406][T27618] ? __mutex_lock+0x812/0x1300 [ 838.000267][T27618] kasan_report+0x128/0x150 [ 838.004864][T27618] ? __mutex_lock+0x812/0x1300 [ 838.009793][T27618] __mutex_lock+0x812/0x1300 [ 838.014485][T27618] ? __mutex_lock+0x5ac/0x1300 [ 838.019376][T27618] ? l2cap_unregister_user+0x6a/0x1b0 [ 838.025128][T27618] ? __pfx___mutex_lock+0x10/0x10 [ 838.030266][T27618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 838.036514][T27618] ? lockdep_hardirqs_on+0x7a/0x110 [ 838.042243][T27618] l2cap_unregister_user+0x6a/0x1b0 [ 838.047795][T27618] hidp_session_thread+0x3cb/0x440 [ 838.053001][T27618] ? __pfx_hidp_session_thread+0x10/0x10 [ 838.058826][T27618] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 838.065770][T27618] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 838.072464][T27618] ? __kthread_parkme+0x7a/0x1f0 [ 838.077574][T27618] ? __kthread_parkme+0x19c/0x1f0 [ 838.082872][T27618] kthread+0x388/0x470 [ 838.087025][T27618] ? __pfx_hidp_session_thread+0x10/0x10 [ 838.092652][T27618] ? __pfx_kthread+0x10/0x10 [ 838.097504][T27618] ret_from_fork+0x51e/0xb90 [ 838.102363][T27618] ? __pfx_ret_from_fork+0x10/0x10 [ 838.107726][T27618] ? __switch_to+0xc7d/0x1450 [ 838.112940][T27618] ? __pfx_kthread+0x10/0x10 [ 838.117534][T27618] ret_from_fork_asm+0x1a/0x30 [ 838.122651][T27618] [ 838.126529][T27618] Kernel Offset: disabled [ 838.131027][T27618] Rebooting in 86400 seconds..