last executing test programs: 5.372195738s ago: executing program 0 (id=8601): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast}, [@remote, @default, @remote, @rose, @default, @default, @remote, @default]}, &(0x7f00000000c0)=0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x1, 0x4000, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x4041) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x500}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x15}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x78f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x44880}, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r4) r5 = accept4(r4, &(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000680)=0x80, 0x800) sendmsg$alg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="955b5dd630f420a33317d04a6bab8f5c40f77e81b9a90a00", 0x18}, {&(0x7f0000000700)="83e244fb215d9e31c822464be7ab35b2be87063c7495e77bb85f694302bf17067f549fa2f5c0873c4946ccc23e1230a01dccecc5a7a1add2269c17f6a5ebfede8f4afa7d35e6377956", 0x49}, {&(0x7f0000000780)="a955dedbebdad32cea17535dd92a1fefc7cf8ba9969a37e5f01b40ef9dd09addbf36f3ee45ea803c00380650990cde5a84dba3002b78688a0c7674b1380ce8728976dc3084c3fa3c91ec31107057", 0x4e}, {&(0x7f0000000800)="c4faa4a356d522e2830442b454b1791841003bf0ab441f1fa69ed6", 0x1b}, {&(0x7f0000000840)}], 0x5, 0x0, 0x0, 0x20008004}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x44010) r7 = socket(0xa, 0x1, 0x78d4) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xd, 0x9, 0x0, 0x80, 0x62a4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa0088048}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x138, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffb}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4ca}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1bc00000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x81]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc3b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x16d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x48005}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r9, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc9}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xe2da}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8015}, 0x40004) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x7320080a5d29bb4b}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r9, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50815}, 0x40000d0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r1) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000001380)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000010c0)={0x27c, r11, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa53}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff1ccd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfce9}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fe7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x202}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa36f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{0x1, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x5a}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x1, 0x3}]}, @fwd={0x3}, @enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xd, 0x5}]}, @struct={0x5, 0x5, 0x0, 0x4, 0x0, 0xffffffdd, [{0x8, 0x4, 0x4f3d}, {0x10, 0x3, 0x1}, {0x2, 0x1, 0xffff}, {0xb, 0x2, 0x6d}, {0xd, 0x3, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f0000001780)=""/203, 0xbb, 0xcb, 0x1, 0x1, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0], 0x0, 0xf8, &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x9, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x0, 0x24, &(0x7f0000001540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xc8}, @ldst={0x1, 0x2, 0x1, 0x5, 0x8, 0x50, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x632176b9bb084624, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcb}], &(0x7f0000001680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x31, r14, 0x8, &(0x7f00000018c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x1, 0xc, 0x5, 0x6}, 0x10, r15, 0xffffffffffffffff, 0x0, &(0x7f0000002200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x200}, 0x94) 5.19614268s ago: executing program 0 (id=8603): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.11149316s ago: executing program 0 (id=8607): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc233}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x143d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x804) 5.030606693s ago: executing program 0 (id=8609): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000010000000000000700000000000000000008000201000000002e2a"], 0x0, 0x34}, 0x28) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0) 4.908550914s ago: executing program 0 (id=8614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001ad0000000000000000d5070fc01aa866272e6e02000000000000000000"], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0xffffffffffffffff, "b019e93a2b7fab96e0aa834d3a9e7cfc12178ac0ab1ec1b8cab6ddaa0000da90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000003c0)='y', 0x1}, {&(0x7f0000000540)="e7", 0x1}, {&(0x7f00000005c0)='#', 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f0000001e00)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='\x00', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c6", 0x1}, {&(0x7f0000001dc0)='[', 0x1}, {&(0x7f0000001f80)='d', 0x1}, {&(0x7f0000001f00)="94", 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000b80)="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", 0x159}, {&(0x7f0000001e40)='=', 0x1}, {&(0x7f0000001f40)="cd", 0x1}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) (async) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) 4.641733343s ago: executing program 0 (id=8617): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="06000000914fc94c0c79aaf5598e4fbcafb2126be3608491297e00c7b4023418", 0x20) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x5, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) 4.038337444s ago: executing program 1 (id=8623): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x80000000}]}, 0x34}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x140, 0x0, &(0x7f0000001140)="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", 0x0, 0x400000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='GPL\x00'}, 0x90) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 3.012023775s ago: executing program 1 (id=8629): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3000000}, 0x0, 0x0) 3.010877169s ago: executing program 2 (id=8630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r6, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r11, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) getsockopt$inet6_buf(r10, 0x29, 0x1c, &(0x7f00000000c0)=""/231, &(0x7f0000000040)=0xe7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000009400007311390000000000851000000200000085000000760000001d7860c57f5ee516e63b487d6c049cd0ce4e00000400009500a505000000008211875f52abcfb3534dc82a4c1eb33d70e27367d4c74b32156bf8d6a31c85e4ec1303adf77f6f6765c8dd7cd1f1d34c660749f538bf0a52cd4ee485dca006735420817d3cd3e553422dd47ac30c77c6fe489c6d69a1240c0a411ac60765e4ac5c0555d080def82add4a5504005f516b2dd5509156954189432c2e684964c5ff9e9b696ce522f6bb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.793977653s ago: executing program 2 (id=8632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESDEC=r2, @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) (async) r7 = socket$key(0xf, 0x3, 0x2) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x300000, 0x1000, 0x9, 0x2}, 0x20) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) (async) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032dbd7000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="080006005e", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048084) 2.673760175s ago: executing program 4 (id=8633): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000004c0)=0xa, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000004000ff00000100012e2106000600800a000010000280ebd162f404001480040027800000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r8, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0xffff, 0xb}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) 2.669826638s ago: executing program 2 (id=8634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008558020005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.610355542s ago: executing program 2 (id=8635): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0xffffff8f}, 0xc) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000040)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xa) 2.549514078s ago: executing program 4 (id=8637): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, 0x0, 0x0}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 2.445737463s ago: executing program 2 (id=8639): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0xbc529153b073ce1e, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2", 0xa1}], 0x4}}, {{0x0, 0xfffffe61, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8", 0xda}, {0x0}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.348108712s ago: executing program 4 (id=8641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1}, 0x60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100026ba0e2be7f379852831be443a4c010000000000000000000000000a58000010060a0b040000000000000000020000002c000480100001800a00010072656469720000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}}, 0x0) 2.247714152s ago: executing program 4 (id=8642): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800a00010071756575650000001c0002800e00014000090000060003400002000006000240000900000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000840)=0x36, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) (async) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r5, &(0x7f0000000bc0)={0x11, 0xf5, r10, 0x1, 0x56, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001d000100254899264d8f9cd2bbcb2ccd3c9ef000000000000000003e590000", @ANYRES32=r10, @ANYBLOB="02009604"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="f88c402106bca79501c71b7400bbd3601d643bf948a3bed893e8e5cd600be86700de8e42d907444a3caab94de5f2c8951a1245d5c425f81c2b1647a448855a4c8929869519e48d72be63f771f96323d8f93645544fe3711f9196d986bb8b96c283de251106c546f91294d4307f08fd148c731cfcf3378bec673e8d9f29746b", 0x7f}], 0x1, &(0x7f0000000280)=[@ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @ssrr={0x89, 0x23, 0xbf, [@broadcast, @multicast2, @loopback, @multicast1, @rand_addr=0x64010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x16}]}, @ssrr={0x89, 0xb, 0xb5, [@local, @dev={0xac, 0x14, 0x14, 0x21}]}, @lsrr={0x83, 0xb, 0xf1, [@multicast1, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x50, 0x0, 0x7, {[@end, @rr={0x7, 0x13, 0xd0, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010101, @multicast1]}, @lsrr={0x83, 0x2b, 0x30, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x110}}, {{&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000004c0)="9cf90acdee05d9feea6f2cc1ed88de6e147f46e9e516c8b1bf32c0faa83e363b85ed3c1472764dc2f6d2e4b7d2ce97eb7dbf74e1583f517a2c1c3d1a6d911da7a92237a9225dc6b8617259ced230c28af2183767eb1e12471a7ed5fda08c213f269f2a531d3653b5d82e37634168646fd5591919eebb96ce864da5dc8f91cff185dffc3087a5966134ffdb6e8ac8e6fbed760b5d473b45aebd13f8998514a6907e162d287bbcc739017ce35a05a2d18d468d0029d674e42ca2e890f3fe8b16fd2243a067e728f546bee0d5c580325809114420c06e5e77a142283b7d75825ce5d741aa17b15da41d3839c1d5ed1b99574bd880ff", 0xf4}, {&(0x7f0000000180)="546a76e944a0a1021bb7e83fdcd280f6b29ceb", 0x13}], 0x2, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x14, 0xb8, 0x1, 0xb, [{@remote, 0x8}, {@multicast1, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xc9, [@multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @local, @local, @empty, @remote, @loopback, @empty, @empty, @loopback]}, @generic={0x86, 0x7, "040000002b"}, @timestamp_addr={0x44, 0x4c, 0x91, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff2d4d}, {@empty, 0x3}, {@loopback, 0x6}, {@multicast1, 0xc0000000}, {@empty, 0x9}, {@rand_addr=0x64010101}]}]}}}], 0x180}}, {{&(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)="0b948751062d04f512d7bbf0057731ea952e5d3888d7587c42cb5d681fd1c888a3c289c05a73983a3c19ec957ef6563feb6c40b3f80e6857b44eec22df8c74aef10a21a5851201334d90806bdbd4fe5c35833b34eaf5fd7e9c9227a4cf51317fa2f75880b64590a71edff0f9bfb95433b1ea", 0x72}, {&(0x7f0000000900)="16df3dbc7ae6c5ed3c1d8f2cd7159748498ca71b2b7afead82e0325a35f3cc7bc5c333a0e7eb42f76b377cea460b11a3b65788aaa4a29ae62e93aafca2be934cca73253ba627c26cdf489d899a15008a197ccac9d58980a09194e42e026bfbb6cdc9ff2026e928a948be2203ef4ca897e4ef75f3dfe5f93bccf88ab5153c239bcc21d46e36aa30521cf4b0e6852169cedd717a8879a9e704bc5f08b9570ae996b69d2377d3a8b14232338a15cd995c4c5c582f09b49a35bfb38035920d044aa15c8fce660f3de6ed54d0d688229a263ebf09317b6742f3949cf2a42521", 0xdd}, {&(0x7f0000000a00)="0e8cb9141225cf55b9541a3ddd22db193df6c7619b41fa4e5c7e13d6e5c542c3410533e015b194b72c39db58735481337a067d3faa5c127bdbe472c18cd668da7ea92eb87ea9b5c8b7c94e0951713dcf77114bedacb48f9148a198268c0b0eec3117205101cc4bbbb0459b258b5e95cc0894cc0542ac9a50599e1f2b5413fb9a0501aa5187f2d7440591d75cc92f158d387f608779da8506acb3f0cac39b70e0fe1b110b332bbca4c90a041377cf1ea05d0721569c53d5ff419d2f21ce562666a79a30a426c57f3f7611884a4dea496b3a645bd1286513c7741f7fd4986fbab162870468fdf97ab61b3753b452020c056d3afc26514e", 0xf6}], 0x3}}], 0x3, 0x4040024) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1.999233185s ago: executing program 1 (id=8645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={0x0}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={0x0}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x20004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000f6dbdf25200000000800030001e5623817faec7e37846c3a5ca23888547f81d0a84a30318f7ce122751515a51a6be15dbb0564af268f8ccf69c46740538e28cf6bc6658980aa5837b5106ee79bde00000000000000007ea27287d9ae3f3d880fa35b5b87bbd706d8f47e03ec928e008040560f25ffa5eea6b41541d75c60cd29e4e8", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000f6dbdf25200000000800030001e5623817faec7e37846c3a5ca23888547f81d0a84a30318f7ce122751515a51a6be15dbb0564af268f8ccf69c46740538e28cf6bc6658980aa5837b5106ee79bde00000000000000007ea27287d9ae3f3d880fa35b5b87bbd706d8f47e03ec928e008040560f25ffa5eea6b41541d75c60cd29e4e8", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) socket$inet(0x2, 0x2, 0x1) (async) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x7}, 0x240088d4) (async) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x7}, 0x240088d4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, 0x0, 0x894) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, 0x0, 0x8080) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, 0x0, 0x4c000) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000400)={0x1, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 1.971383928s ago: executing program 3 (id=8646): socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x6, 0x408) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000440)={'caif0\x00', @broadcast}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x701, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="d641a8c403f5824ac16642ba90cad1e120bc4fd76f9798a71ceaaccef809594f77348ff26c68e3fe2ec362b6920631d5fb806dfed51cff46b056d38d010ae79fc5ccd2f59a5355fc660e6c58f6b1c49a9319f39b111ad450c72b3dce2498b8506232", 0x62}, {&(0x7f0000000180)="aee22b914b627c7322ad32afe4a5be091f37fa771f99ed6ae1cb693a51a77287d20952f09ebc437513acb451075b150e5beff685903dbc82c2d3cc9d8a1d8282fbc2ce35de7b39774ffa17dc22f1", 0x4e}, {&(0x7f0000000240)="cfda5ed688468cadfda01e69da59ade87c5f40540b02e9bffd0a951eb8f1309af394b2da58fe8131b4b29256be396ce2e9f868f632aca46b17fcba78a7043ad3b8e8dcd6776c1b52924c3530d44407200decc816fa03beb31a89322ac147fc2a74522a815bcfa9abfde7d7e3959f2355c7ae55", 0x73}, {0x0}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="82a0ec84fa9095a64aeb298b75dee05f0be01f6542cf842a416e2f7944bec7bf9e51cc0d2544459698c356b2204f1a141f0bdedd53c9538a17a8bacd2a475f608a13429d68a88b8b19c3ade972f86b1a", 0x50}], 0x6, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x4000001) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x6, 0x1, 0x9, 0x7, 0x7fffffff}, &(0x7f0000000600)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000640)={r5, 0x4, 0x1}, 0x8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000008c0)={{r3, &(0x7f0000000700)='\xfd&\\\x00', 0x62203, &(0x7f0000000740)={@align=0x9, {0x7fff, 0xd816, 0x800, 0x400}}, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4dd}, {[0xaf8a, 0xdbfd, 0x5, 0xff6a]}, 0x5827c34f, 0xaa, &(0x7f0000000800)=""/170}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000940)={0x3}, 0x1) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000980)=0x6, &(0x7f00000009c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000b80)={0x0, @adiantum, 0x0, @desc3}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000bc0)={r5, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000c00)={'geneve1\x00', @broadcast}) syz_genetlink_get_family_id$smc(&(0x7f0000000c80), r4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x20004014}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r4) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 1.880420366s ago: executing program 1 (id=8647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x100, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x51, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x206, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000100)="1fcc0a4d810135509922dd934fa147db4ad0559f9a5e543778b0957b0cbac8aa431b138759bbba48e879e10b0e96b01eaecc7ea0ee52fadec8b75b924302ea6c47e90389482b2c252c5da458a9a200225049b818589202bd331fa1528f6b88384e62568d397e5e102cc155ff207b67f939d8d1cf8022aab956a70e12d7df1a33", 0x80, 0x40000, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000007c80)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r7, 0xa5c59466aaff822d, 0x70bd31, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x60040) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x80, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r13) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="00010000040000000000000000000000000000000000c2b87dd0873844685082568512fccb4fe5ade8c0055d03c28af648be7f7a13ccaead5a210c54c8da2138c66afe7a8db3b095cdfd59f765d665d422cd35e9fd75c005999ac599d081", @ANYRES16=r12], 0x1c}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4000) 1.788388271s ago: executing program 4 (id=8648): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x0, 0x2, {{0x14, 0x4, 0x2, 0x1f, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x35, 0x3, [{0x1, 0x3, 'f'}, {0x7, 0x12, "5a231262cf2488ad2f3b7d5e106354ad"}, {0x7, 0x4, "1b47"}, {0x2, 0xe, "362e194afd07f98cc22fd703"}, {0x7, 0x8, "73e391f9a2ca"}]}]}}}}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0xb, 0x4, 0x5, 0xffff, @vifc_lcl_ifindex=r3, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 1.712247873s ago: executing program 3 (id=8649): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000002c0)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="e6713d92b65b19b8a25c63b5c5004ced419840e4163d5a43cde58bfd1d308c48ccd139d1d297b09403cbf540d8aeb1459ae6ca19f20599f5650f779b3cb387323303535cc698662da352c32d1703b0a55ad3e2d55854ce1989447aaea380884cdaccc537904f5a78de4288db98f90943e47e9c43961a2046298f37d226c1b941d7e9cedc664f3002060e98cbaf626e13d73c4e2332ffdf5c4e697fd8e3d73cd94ef950502f65a911e282a9b62f102da38b8f3b6c7b08d490fe6c5d4dcd91a54e22e7050ee3fdd9", 0xc7}], 0x1, &(0x7f00000004c0)=[{0x28, 0x107, 0x4, "aae393320df24f73153eedd41789172017a736b8f1c00bba"}, {0x48, 0x107, 0x23, "8006d668ae723c931a6b14d44eb2196a34800182ec34f4bb5afe2fd32b6ed0f2f58eb02e5d232bf8ae10e8aa89d62de80956f3"}, {0xe8, 0x115, 0x8, "0002a61130e7e0ac288d07d270db294fdf562926213c573dbd0b64e0114d07e0c202f64f33bc0705ce6e3be2737472d8f3bba09d93e535e1284560aee9ceddccb36456cc015d14ded14a60248976a9d69f2704249833179045a16ead9b50dd689628ae960d25060e9714240f38a5d85c5f4d2b044ce5f204cbbe054cba80eb100705218c59396843ecf5b1b858a9bd37f845415967dcffeb799eefe9e38969534186279fd9f79e6be8d19d05753087b4a62a91e125c1618a5262509eb8b59019e4e39a9c032466c77d75e003d108c2b45a6f27e342f2b0"}, {0x90, 0x117, 0x4, "53922dedf6e198e8442fbb46683a2be78a0803656992155e8800446df5eb8fcd70c74ff5281a013cc2dd24e51553519dd17b52ce478d23d1f688b2a53616c5c767b9d79871f56067c896d64e54cd049a36334afa62499b54c6df90a4fe20c08cda6f657de6752b1055eec17d8e114d4b20e6f463aed33659d8"}, {0x70, 0x101, 0x1, "cb7dbde9f431dbb2538e0df0fc906c6579d42821599ebedc2660a83a19f03bdd354d7caa008e275379f553ec83bdd0ef54888a1585e98a7e6b7778d02f0f35cd2c30ee80ac88b593ecd76618c275c20bf77dc7363b1dde5907c48df424e2"}, {0xd0, 0x10a, 0x40, "bd7073d5087e2c3b587be13d519e9968037c562cf226ef89cbfb980ea5e4480d25efb078c974f770c10efb6b2247662afb6c39dada7c19a457672ce8a0205b152ca3808d7b8296f9175ec9893f2e48eee887d1a4a8e4014083203d3d0b5c00584f81f948693bc4cc66b0ba65f76902bc24c0fa29e761a81e8e414964af891a7a2b09c9e2ce1139e7f35c649bde1f987d91b85f7b08c6a18b3bdb09cab4e914088733f94c94d89b898922c9067fe2921690033f2f4d746b47426303cc12"}, {0xd0, 0x6, 0x8, "5d92dd58e95d041f2d59aab8851ae4ce25d2ea3a0e5f34550b9f7cf4c7434d5e71d25d2e48d992fb82ff15afcf9ac8198e92eb4674c2b6b56711b9f870c72459f2c8a1809f7b41f7cdc2defdcd0f71c119310a3439e60fd592ad44d5bd09f2126827bbe47c980e378a944c8f897067dfe0425f14719baafc0c548d4e5e9b3b066b06a706e49d303940f9c63f83b2e14a136ef8629a9202e2a25d0f6a139658bb250c53424baa698f9676c8d48b755732a5654ef5e9213dd23ce80b4a022d"}], 0x3f8}}], 0x1, 0xf000000) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x5, 0x2002a}, 0x2c) (async, rerun: 64) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80000) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x404c044) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) (rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="3dbe8adac8bf5150f55fda32ac799f21582ef9c334723253c3c620fe50d8eae7cfa7450133ba5a12e783c1d047b62a19faf93ed7b0de6d", 0x37}, {&(0x7f0000000200)="643b29f6706ba78cb711b834b99abfd0d6e3dc9735c8c1cf26ff78881052b55294a1d46515f46937d635e0f6d87d00c9fefcc8e42020baec4c706a67a0f23680d7f0077cc4fa12164be67c66d7344747f827881d4ed3d712adaa9bfb46feaf17ce11163d2462caa02b78f8cd3c63e411635b0c3671f1be09bb4563356654afc1ebd96d7558948ff301495e486b60e85daceb74f564f389d5bd17940ebc16971374b43a34f132905134854a61b89f", 0xae}], 0x2}, 0x40000) 1.597664382s ago: executing program 3 (id=8650): r0 = socket$inet6(0xa, 0x3, 0xff) sendto(r0, 0x0, 0x30, 0x4000800, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) socket(0x2, 0x80000, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000fbdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900070000002a00000014050000010100"/40], 0x44}}, 0x0) 1.311619803s ago: executing program 2 (id=8651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendmmsg$inet(r5, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="6cbdeae0f104c94ae1c7935b951a70f23eb828cb946b2753639e8d4349be919b00599ea84e86ba1701e023af9b617d779305b977335999fd", 0x38}, {&(0x7f0000000b00)="d5c212949e686bf9dee01446bc56c9d9901806d97014abe1f0526162e5687b05", 0x20}], 0x4c}}], 0x1, 0xef3e0214205cd91) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000068000ff00000000000000000f536e9614d1fda611d67b881abf27f651300000004000b0008ba3fbcd4a7ffdd2eaf77c4776f6ea9e72f7d57dd037200e7f447a3ae20c6e707382a58a962355129dbedfaede9454a98e2852ef1841b670fdc059f55f49efdddb85e9bf217b936aafd5d454e5d3dcfd758"], 0x28}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) socket$inet(0x2, 0x6, 0x1) (async) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0xc0d1}, 0x90) 1.30846664s ago: executing program 3 (id=8652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x46, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x80}}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001e000000000000000c0000000c"], 0x0, 0x2a}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a010000000000000000bc0f9f65000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b00003e000000010000000900020073797a30000000000900010073797a300000002c430003802c000380140001"], 0x110}}, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x5}, 0x8) socket$kcm(0x10, 0x2, 0x0) 1.184145387s ago: executing program 3 (id=8653): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async, rerun: 32) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1.063958877s ago: executing program 3 (id=8654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0xffffffff, 0x4) 960.089999ms ago: executing program 1 (id=8655): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xa000000}, 0x0, 0x0) 870.346579ms ago: executing program 4 (id=8656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000068000100fcdffffffeffffff0a000000000000000600070003080028"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="95da59203023ac31a94842fe992f072fdf32fa07dfdec92e2b55dab8f4b1dfc19db58fd9a9e55efe13d1ee1aa3c624ad62177ebdcea72456b3a8e2eb07766340be8732579b6dc4d17a23369249c84bfb43f46767dffc34ef18f89438e76123a26a80588bc1055304e65be885c0a8b21d428897fd8419c68849e7f30bb568c607fc820a3b6bbd64d8fc5416a7a93451e8513bdf6653d5", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd0000f8a4000800", @ANYRES32, @ANYRES8=0x0, @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x2, 0x4, 0xb, 0x5, 0x18, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x29}, @ldst={0x3, 0x1, 0x0, 0x6, 0x7, 0x10, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x7ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r7, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0xb, 0x8}, {0x2, 0x1, 0x7, 0x2}, {0x3, 0x3, 0x7, 0xb}, {0x3, 0x3, 0x7, 0x5}, {0x0, 0x2, 0x8, 0xb}], 0x10, 0x7fffffff}, 0x94) 0s ago: executing program 1 (id=8657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) socket$netlink(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth0_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440), 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f78c00000000000000000100000008000200030000001200010076657468305f6d616376746170000000"], 0x30}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x4000084, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600010025cdc65f1ea9494a406e9f3a3180bda8664fc0904b38764fc13204087706309b822777ec11d5f8e44a3b3587b7d12b922273411c834701c5003b153cfefdf6226e35e25b38d7bf74a3ee1f5753099d411468d3a79b9841d8f26ecf59cab5f90f1b5bf983481385fab1621a052a53dee9d382028484570213ae549db62d6ac69f880e1ccbdc8cac3dce960000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) listen(r6, 0x0) socket$kcm(0x10, 0x5, 0x4) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) sendmsg$qrtr(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x2a, 0x2, 0x8000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb371c4de509cd96734d533d57d5583a11036497d65cd8d09f0fc3d423943bcbd9d5fe5fd60247844c720813a1570cf9ea658259d833cfb6bfe4d06849dfa837e0bbd969b578a5bfbf0f44f59e067ff1c8b95b6614bff6bf6afc0a50594b163ad35234161c7d29c8687dfc1baa061e6c2959cda6e1d44d99", 0x78}], 0x1, &(0x7f0000000180)=[{0x88, 0x119, 0x10001, "cce651f5605953776d113b8b5536848422e040bb2b9707080aa6a994e13de3d54f1d51377c76bafe000b86852653bf23ffaca0ed9fe9a13fa8538e3df5df3d04914182201bec475cfc32a8e554eb1c14ee4072229462c0228b7bd3b9739dc4b4477ace6c9295a7e93c10932924a6bbe3a335bd"}], 0x88, 0x81}, 0x38) kernel console output (not intermixed with test programs): 18][T29818] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 630.789166][T29851] bond9: entered promiscuous mode [ 630.823447][T29851] bond9: entered allmulticast mode [ 630.833274][T29851] 8021q: adding VLAN 0 to HW filter on device bond9 [ 630.944850][T29479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 630.985305][T29869] veth0_macvtap: left promiscuous mode [ 631.054860][T29479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.630868][T29479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.683921][T29887] team0 (unregistering): Port device team_slave_0 removed [ 632.715108][T29887] team0 (unregistering): Port device team_slave_1 removed [ 632.742846][T29479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.042948][T29479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.060312][T29917] TC_ACT_REPEAT abuse ? [ 633.139484][T29917] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.147248][T29917] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.290717][T29917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.317187][T29917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.716214][T15825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.743294][T15825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.773297][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.820399][T29479] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.853517][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.870385][T29953] netlink: 'syz.0.6498': attribute type 9 has an invalid length. [ 633.917497][T29956] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 633.929476][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.936675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.086829][T14017] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.094075][T14017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.140281][T29966] team0 (unregistering): Port device team_slave_0 removed [ 634.179388][T29966] team0 (unregistering): Port device team_slave_1 removed [ 634.231054][T29970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.273971][T29970] !: renamed from dummy0 (while UP) [ 634.300874][T29970] xt_ecn: cannot match TCP bits for non-tcp packets [ 634.559760][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.568761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.617796][T29978] syzkaller0: entered allmulticast mode [ 634.648123][T29992] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 634.648237][T29992] sctp: [Deprecated]: syz.2.6505 (pid 29992) Use of int in maxseg socket option. [ 634.648237][T29992] Use struct sctp_assoc_value instead [ 634.871302][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.879390][ C0] lec:lec_tx_timeout: lec0 [ 634.884376][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.895042][T30001] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 635.084273][T30001] bond10 (unregistering): Released all slaves [ 635.258042][T29479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.417620][T29479] veth0_vlan: entered promiscuous mode [ 635.462745][T29479] veth1_vlan: entered promiscuous mode [ 635.528938][T29479] veth0_macvtap: entered promiscuous mode [ 635.578170][T29479] veth1_macvtap: entered promiscuous mode [ 635.685356][T29479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.705959][T29479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.792615][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.801068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.832125][T14000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.860066][T14000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.887453][T30055] __nla_validate_parse: 7 callbacks suppressed [ 635.887472][T30055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6517'. [ 635.962169][T30055] openvswitch: netlink: Flow actions attr not present in new flow. [ 636.084806][T14000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.135673][T14000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.167888][T30064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6518'. [ 636.403795][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.421355][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.486655][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.498862][T30082] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 636.506855][T30080] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6521'. [ 636.531445][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.689906][T30088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6525'. [ 636.729784][T30088] veth0: entered promiscuous mode [ 636.739988][T30089] veth0: left promiscuous mode [ 636.950697][T14017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.959185][T14017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.077268][T30119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6532'. [ 637.088691][T30121] netlink: 'syz.1.6534': attribute type 1 has an invalid length. [ 637.097032][T30122] netlink: 'syz.1.6534': attribute type 1 has an invalid length. [ 637.109417][T30119] openvswitch: netlink: Flow key attr not present in new flow. [ 637.173330][T30124] erspan0: entered promiscuous mode [ 637.191854][T30124] erspan0: entered allmulticast mode [ 637.410761][T30146] syzkaller1: entered promiscuous mode [ 637.425912][T30146] syzkaller1: entered allmulticast mode [ 637.446967][T30150] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6543'. [ 637.483901][T30150] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 637.503076][T30157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 637.583562][T30157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6545'. [ 637.602156][T30157] bridge2: port 1(erspan0) entered blocking state [ 637.608845][T30157] bridge2: port 1(erspan0) entered disabled state [ 637.616954][T30157] erspan0: entered allmulticast mode [ 637.625163][T30157] erspan0: entered promiscuous mode [ 637.633948][T30157] bridge2: port 1(erspan0) entered blocking state [ 637.640464][T30157] bridge2: port 1(erspan0) entered forwarding state [ 637.945797][T30178] netlink: 'syz.2.6553': attribute type 12 has an invalid length. [ 637.969355][T30178] bond1: option primary_reselect: invalid value (255) [ 637.978070][T30178] bond1 (unregistering): Released all slaves [ 638.076432][T30181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6554'. [ 638.086114][T30181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6554'. [ 638.114556][T30181] gretap1: entered promiscuous mode [ 638.125401][T30181] gretap1: entered allmulticast mode [ 638.506638][T30208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.632743][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.891319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 639.899423][ C0] lec:lec_tx_timeout: lec0 [ 639.904256][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 642.086122][T30250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.335254][T30302] __nla_validate_parse: 6 callbacks suppressed [ 642.335276][T30302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6589'. [ 642.473329][T30310] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 642.489895][T30312] netlink: 'syz.0.6594': attribute type 1 has an invalid length. [ 642.490154][T30309] bridge2: port 1(erspan0) entered disabled state [ 642.530891][T30309] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.545441][T30315] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6595'. [ 642.694506][T30309] syz_tun: left promiscuous mode [ 642.725199][T30312] 8021q: adding VLAN 0 to HW filter on device bond10 [ 642.747931][T30316] veth17: entered promiscuous mode [ 642.756670][T30316] bond10: (slave veth17): Enslaving as an active interface with a down link [ 642.768251][T14017] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.786864][T14017] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 642.798299][T14017] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.807755][T14017] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 642.825916][T14017] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.842327][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.845965][T14017] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 642.851368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.866256][T14017] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.876403][T14017] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 642.886102][T30318] wg1 speed is unknown, defaulting to 1000 [ 642.902912][T30318] lo speed is unknown, defaulting to 1000 [ 643.006750][T30327] erspan0: left allmulticast mode [ 643.018571][T30327] erspan0: left promiscuous mode [ 643.024083][T30327] bridge2: port 1(erspan0) entered disabled state [ 643.038490][T30327] bridge_slave_0: left allmulticast mode [ 643.045137][T30327] bridge_slave_0: left promiscuous mode [ 643.050924][T30327] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.094484][T30327] bond0: (slave bridge_slave_1): Releasing backup interface [ 643.126765][T30327] bond0: (slave 7#ÿ): Releasing backup interface [ 643.151081][T30327] bond0: (slave bond_slave_1): Releasing backup interface [ 643.174023][T30327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.521511][T30358] Bluetooth: MGMT ver 1.23 [ 643.762815][T30375] x_tables: duplicate underflow at hook 1 [ 643.774127][T30373] tipc: Started in network mode [ 643.780270][T30373] tipc: Node identity ac14140f, cluster identity 4711 [ 643.787530][T30373] tipc: New replicast peer: 255.255.255.255 [ 643.798025][T30373] tipc: Enabled bearer , priority 10 [ 644.043349][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6614'. [ 644.155621][T30395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6614'. [ 644.408974][T30406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6620'. [ 644.464699][T30405] netlink: 'syz.3.6620': attribute type 1 has an invalid length. [ 644.525201][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6622'. [ 644.562514][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6622'. [ 644.567004][T30414] netlink: 'syz.4.6624': attribute type 1 has an invalid length. [ 644.691691][T30414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.861222][T30422] veth3: entered promiscuous mode [ 644.900522][T30422] bond1: (slave veth3): Enslaving as an active interface with a down link [ 644.911408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 644.919432][ C0] lec:lec_tx_timeout: lec0 [ 644.924297][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 644.947300][T30425] vlan0: entered promiscuous mode [ 644.952504][T30425] bridge0: entered promiscuous mode [ 645.019696][T30439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6630'. [ 645.035836][T30439] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6630'. [ 645.106553][ T5941] tipc: Node number set to 2886997007 [ 645.215674][T15695] IPVS: starting estimator thread 0... [ 645.238195][T30452] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6634'. [ 645.263297][T30450] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 645.304159][T30462] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 645.333730][T30453] IPVS: using max 37 ests per chain, 88800 per kthread [ 645.480753][T30474] hsr_slave_0: left promiscuous mode [ 645.487207][T30474] hsr_slave_1: left promiscuous mode [ 645.577770][T30466] team0: Device ip6gre1 is of different type [ 645.601123][T30479] netlink: 'syz.0.6642': attribute type 1 has an invalid length. [ 645.626650][T30481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.630314][T30476] team0: Device ip6gre1 is of different type [ 645.688366][T30479] 8021q: adding VLAN 0 to HW filter on device bond11 [ 645.748640][T30488] xt_cgroup: invalid path, errno=-2 [ 645.754682][T30484] veth19: entered promiscuous mode [ 645.765789][T30484] bond11: (slave veth19): Enslaving as an active interface with a down link [ 645.827904][T30497] netlink: 'syz.4.6645': attribute type 13 has an invalid length. [ 645.897026][T30497] macvtap0: entered allmulticast mode [ 645.906135][T30497] macvtap0: refused to change device tx_queue_len [ 645.918008][T30503] tipc: Started in network mode [ 645.931504][T30503] tipc: Node identity ac14140f, cluster identity 4711 [ 645.942217][T30503] tipc: New replicast peer: 255.255.255.255 [ 645.952453][T30503] tipc: Enabled bearer , priority 10 [ 646.150586][T30515] FAULT_INJECTION: forcing a failure. [ 646.150586][T30515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.164246][T30515] CPU: 0 UID: 0 PID: 30515 Comm: syz.4.6654 Not tainted syzkaller #0 PREEMPT(full) [ 646.164272][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 646.164282][T30515] Call Trace: [ 646.164290][T30515] [ 646.164298][T30515] dump_stack_lvl+0xe8/0x150 [ 646.164327][T30515] should_fail_ex+0x412/0x560 [ 646.164354][T30515] _copy_from_user+0x2d/0xb0 [ 646.164382][T30515] ___sys_sendmsg+0x1c6/0x360 [ 646.164409][T30515] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.164460][T30515] ? __fget_files+0x2a/0x420 [ 646.164486][T30515] ? __fget_files+0x3a0/0x420 [ 646.164521][T30515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 646.164542][T30515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.164571][T30515] ? __pfx_ksys_write+0x10/0x10 [ 646.164604][T30515] do_syscall_64+0x14d/0xf80 [ 646.164625][T30515] ? trace_irq_disable+0x3b/0x150 [ 646.164651][T30515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.164671][T30515] ? clear_bhb_loop+0x40/0x90 [ 646.164694][T30515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.164714][T30515] RIP: 0033:0x7f9429b9c799 [ 646.164733][T30515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.164750][T30515] RSP: 002b:00007f942aa25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.164771][T30515] RAX: ffffffffffffffda RBX: 00007f9429e15fa0 RCX: 00007f9429b9c799 [ 646.164786][T30515] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 000000000000000c [ 646.164799][T30515] RBP: 00007f942aa25090 R08: 0000000000000000 R09: 0000000000000000 [ 646.164812][T30515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.164823][T30515] R13: 00007f9429e16038 R14: 00007f9429e15fa0 R15: 00007fff3a822e98 [ 646.164862][T30515] [ 646.362026][T30519] kthread_run failed with err -4 [ 646.434182][T30529] netlink: 'syz.1.6657': attribute type 178 has an invalid length. [ 646.488225][T30531] netlink: 'syz.2.6659': attribute type 1 has an invalid length. [ 646.525603][T30531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.562715][T30531] veth5: entered promiscuous mode [ 646.574701][T30531] bond1: (slave veth5): Enslaving as an active interface with a down link [ 646.578876][T30534] netlink: 'syz.0.6660': attribute type 21 has an invalid length. [ 646.633642][T30539] syzkaller0: entered promiscuous mode [ 646.644543][T30539] syzkaller0: entered allmulticast mode [ 647.020747][T30570] IPVS: length: 239 != 24 [ 647.041410][ T5941] tipc: Node number set to 2886997007 [ 647.089632][T30574] "syz.3.6671" (30574) uses obsolete ecb(arc4) skcipher [ 647.205828][T30526] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 647.250411][T30579] netlink: 'syz.3.6673': attribute type 1 has an invalid length. [ 647.284268][T30579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.304903][T30579] veth7: entered promiscuous mode [ 647.315876][T30579] bond2: (slave veth7): Enslaving as an active interface with a down link [ 647.367408][T30585] macsec1: entered promiscuous mode [ 647.403448][T30588] netlink: 'syz.1.6676': attribute type 8 has an invalid length. [ 647.817654][T30614] __nla_validate_parse: 11 callbacks suppressed [ 647.817674][T30614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6686'. [ 647.844491][T30615] netlink: 'syz.3.6684': attribute type 2 has an invalid length. [ 647.876755][T30615] netlink: 'syz.3.6684': attribute type 1 has an invalid length. [ 647.904669][T30615] netlink: 'syz.3.6684': attribute type 1 has an invalid length. [ 647.921441][T30615] netlink: 'syz.3.6684': attribute type 2 has an invalid length. [ 647.986888][T30620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6687'. [ 648.015014][T30626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6691'. [ 648.039379][T30626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6691'. [ 648.153738][T30636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.168288][T30637] nbd: must specify a size in bytes for the device [ 648.185349][T30636] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.238562][T30636] netlink: 'syz.4.6694': attribute type 6 has an invalid length. [ 648.248466][T30646] netlink: 'syz.3.6698': attribute type 1 has an invalid length. [ 648.261672][T30636] netlink: 'syz.4.6694': attribute type 5 has an invalid length. [ 648.277558][T30636] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.293157][T30636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.303621][T30636] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.312881][T30636] netlink: 'syz.4.6694': attribute type 6 has an invalid length. [ 648.320751][T30636] netlink: 'syz.4.6694': attribute type 5 has an invalid length. [ 648.331568][T30636] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6694'. [ 648.340721][T30636] netlink: 'syz.4.6694': attribute type 6 has an invalid length. [ 648.390949][T30650] bond3: (slave gretap1): making interface the new active one [ 648.400749][T30650] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 648.432283][ T5143] Bluetooth: hci0: command 0x0c20 tx timeout [ 648.475274][T30654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.512063][T30654] veth5: entered promiscuous mode [ 648.525372][T30654] bond2: (slave veth5): Enslaving as an active interface with a down link [ 648.595937][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.604644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.645878][T30665] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 648.946752][T30687] vlan1: entered promiscuous mode [ 648.947938][T30692] RDS: rds_bind could not find a transport for 8af4:3482:519a:c0d1:a000:1200:ffff:ffff, load rds_tcp or rds_rdma? [ 648.980788][T30687] gretap0: entered promiscuous mode [ 649.145363][T30709] netem: change failed [ 649.145774][T30711] netlink: Unknown conntrack attr (0) [ 649.156316][T30711] netlink: Unknown conntrack attr (0) [ 649.207841][T30711] netlink: Unknown conntrack attr (0) [ 649.214085][T30711] netlink: Unknown conntrack attr (0) [ 649.233148][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.250346][T30711] netlink: Unknown conntrack attr (0) [ 649.277769][T30711] netlink: Unknown conntrack attr (0) [ 649.500561][T30739] xt_hashlimit: size too large, truncated to 1048576 [ 649.590777][T30736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.803396][T30753] syzkaller0: entered promiscuous mode [ 649.814300][T30753] syzkaller0: entered allmulticast mode [ 649.931319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.939356][ C0] lec:lec_tx_timeout: lec0 [ 649.944470][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.224894][T30775] wg1 speed is unknown, defaulting to 1000 [ 650.242881][T30775] lo speed is unknown, defaulting to 1000 [ 650.715231][T30801] syzkaller0: entered promiscuous mode [ 650.720879][T30801] syzkaller0: entered allmulticast mode [ 650.778244][ T5941] hid-generic 0005:04F3:5508.0001: item fetching failed at offset 0/3 [ 650.813165][ T5941] hid-generic 0005:04F3:5508.0001: probe with driver hid-generic failed with error -22 [ 650.999636][T30814] FAULT_INJECTION: forcing a failure. [ 650.999636][T30814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.013413][T30814] CPU: 1 UID: 0 PID: 30814 Comm: syz.1.6743 Not tainted syzkaller #0 PREEMPT(full) [ 651.013438][T30814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 651.013450][T30814] Call Trace: [ 651.013458][T30814] [ 651.013466][T30814] dump_stack_lvl+0xe8/0x150 [ 651.013496][T30814] should_fail_ex+0x412/0x560 [ 651.013525][T30814] _copy_from_iter+0x1d3/0x1670 [ 651.013554][T30814] ? rcu_is_watching+0x15/0xb0 [ 651.013584][T30814] ? __pfx__copy_from_iter+0x10/0x10 [ 651.013616][T30814] ? netlink_sendmsg+0x650/0xb40 [ 651.013640][T30814] ? skb_put+0x11b/0x210 [ 651.013670][T30814] netlink_sendmsg+0x6c0/0xb40 [ 651.013703][T30814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.013730][T30814] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.013755][T30814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.013779][T30814] ____sys_sendmsg+0x972/0x9f0 [ 651.013806][T30814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.013840][T30814] ? import_iovec+0x73/0xa0 [ 651.013869][T30814] ___sys_sendmsg+0x2a5/0x360 [ 651.013919][T30814] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.013972][T30814] ? __fget_files+0x2a/0x420 [ 651.013997][T30814] ? __fget_files+0x3a0/0x420 [ 651.014033][T30814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.014054][T30814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.014082][T30814] ? __pfx_ksys_write+0x10/0x10 [ 651.014112][T30814] do_syscall_64+0x14d/0xf80 [ 651.014130][T30814] ? trace_irq_disable+0x3b/0x150 [ 651.014155][T30814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.014172][T30814] ? clear_bhb_loop+0x40/0x90 [ 651.014195][T30814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.014212][T30814] RIP: 0033:0x7fbbcf99c799 [ 651.014230][T30814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.014246][T30814] RSP: 002b:00007fbbcdbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.014268][T30814] RAX: ffffffffffffffda RBX: 00007fbbcfc15fa0 RCX: 00007fbbcf99c799 [ 651.014282][T30814] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 000000000000000c [ 651.014295][T30814] RBP: 00007fbbcdbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 651.014306][T30814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.014317][T30814] R13: 00007fbbcfc16038 R14: 00007fbbcfc15fa0 R15: 00007ffe0fd44d18 [ 651.014348][T30814] [ 651.398887][T30822] net_ratelimit: 28 callbacks suppressed [ 651.398908][T30822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.485778][T30833] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 651.566907][T30836] delete_channel: no stack [ 651.725217][T30849] syzkaller0: entered promiscuous mode [ 651.730774][T30849] syzkaller0: entered allmulticast mode [ 651.738812][T30849] nbd: must specify at least one socket [ 652.017032][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.044082][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.078076][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.127511][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.172598][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.189205][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.200556][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.211127][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.234714][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.277840][T30870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 652.699483][T30918] ip6t_srh: unknown srh match flags 4000 [ 652.726494][T30920] pimreg: entered allmulticast mode [ 652.736512][T30921] bridge_slave_1: left allmulticast mode [ 652.753655][T30921] bridge_slave_1: left promiscuous mode [ 652.759446][T30921] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.784428][T30921] bridge_slave_0: left allmulticast mode [ 652.821749][T30921] bridge_slave_0: left promiscuous mode [ 652.825881][T30923] __nla_validate_parse: 247 callbacks suppressed [ 652.825899][T30923] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6779'. [ 652.827730][T30921] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.866721][T30930] validate_nla: 133 callbacks suppressed [ 652.866743][T30930] netlink: 'syz.4.6781': attribute type 1 has an invalid length. [ 652.951063][T30930] bond3: entered promiscuous mode [ 652.961444][T30930] bond3: entered allmulticast mode [ 652.966987][T30930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.052923][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6786'. [ 653.275349][T30941] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6786'. [ 653.391244][T30970] xt_policy: too many policy elements [ 653.438418][T30975] syzkaller0: entered promiscuous mode [ 653.471775][T30975] syzkaller0: entered allmulticast mode [ 653.537328][T30981] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6795'. [ 653.566515][T30978] netlink: 'syz.1.6794': attribute type 83 has an invalid length. [ 653.600763][T30983] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6796'. [ 653.730490][T30994] netlink: 'syz.2.6799': attribute type 1 has an invalid length. [ 653.806313][T31003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6803'. [ 653.814329][T30994] bond2: entered promiscuous mode [ 653.820753][T30994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.828332][T31005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6799'. [ 653.849056][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6801'. [ 653.859402][T31003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6803'. [ 653.875301][T31009] netlink: 'syz.0.6801': attribute type 10 has an invalid length. [ 653.901810][T31009] team0: Port device vxcan1 added [ 654.104325][T31027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6810'. [ 654.190289][T31034] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 654.388260][T31050] delete_channel: no stack [ 654.577960][T31067] vlan2: entered allmulticast mode [ 654.584656][T31067] bridge_slave_0: entered allmulticast mode [ 654.751224][T31086] ip6gre1: entered promiscuous mode [ 654.951595][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 654.959692][ C0] lec:lec_tx_timeout: lec0 [ 654.964397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.641555][ T5143] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 655.644240][ T5837] Bluetooth: hci0: command 0x0c20 tx timeout [ 655.836450][T31163] xt_bpf: check failed: parse error [ 655.928896][T31108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.937190][T31108] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 656.010837][T31108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 656.036544][T31108] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 656.059563][T31108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 656.067059][T31108] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 656.095984][T31108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 656.111753][T31108] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 656.134858][T31108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 656.149528][T31108] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 656.518820][T31189] tipc: Enabling of bearer rejected, failed to enable media [ 656.648764][T31200] lo: entered promiscuous mode [ 656.683091][T31200] tunl0: entered promiscuous mode [ 656.718231][T31200] gre0: entered promiscuous mode [ 656.777994][T31200] gretap0: entered promiscuous mode [ 656.863802][T31200] erspan0: entered promiscuous mode [ 656.883837][T31200] ip_vti0: entered promiscuous mode [ 656.927982][T31210] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.935710][T31210] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.066087][T31224] netlink: 'syz.1.6859': attribute type 2 has an invalid length. [ 657.126421][T31229] netlink: 'syz.3.6860': attribute type 1 has an invalid length. [ 657.234353][T31229] 8021q: adding VLAN 0 to HW filter on device bond4 [ 657.292362][T31245] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:0 [ 657.339188][T31238] veth9: entered promiscuous mode [ 657.369685][T31238] bond4: (slave veth9): Enslaving as an active interface with a down link [ 657.464534][T31237] bond1: option miimon: invalid value (18446744073709551585) [ 657.490858][T31237] bond1: option miimon: allowed values 0 - 2147483647 [ 657.526206][T31237] bond1 (unregistering): Released all slaves [ 657.684121][T31260] veth9: entered promiscuous mode [ 657.690092][T31260] veth9: entered allmulticast mode [ 657.790877][T31264] syzkaller0: entered promiscuous mode [ 657.804391][T31264] syzkaller0: entered allmulticast mode [ 657.835382][T31270] xt_hashlimit: size too large, truncated to 1048576 [ 657.938523][T31278] –: renamed from vxcan1 (while UP) [ 658.059733][T31284] netlink: 'syz.1.6870': attribute type 21 has an invalid length. [ 658.154173][T31284] __nla_validate_parse: 15 callbacks suppressed [ 658.154193][T31284] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6870'. [ 659.824466][T31284] netlink: 'syz.1.6870': attribute type 5 has an invalid length. [ 659.832985][T31284] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6870'. [ 659.971585][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 659.979624][ C0] lec:lec_tx_timeout: lec0 [ 659.984294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.038712][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6879'. [ 660.055412][T31321] netlink: 'syz.2.6878': attribute type 4 has an invalid length. [ 660.173940][T31330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6882'. [ 660.190160][T31330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6882'. [ 660.585532][T31352] wg1 speed is unknown, defaulting to 1000 [ 660.641042][T31352] lo speed is unknown, defaulting to 1000 [ 660.785804][T31374] xt_hashlimit: max too large, truncated to 1048576 [ 660.867524][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6891'. [ 660.989854][T31382] bond3: entered promiscuous mode [ 661.032958][T31382] 8021q: adding VLAN 0 to HW filter on device bond3 [ 661.129497][T31390] bridge1: entered promiscuous mode [ 661.162768][T31390] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 661.190279][T31397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.286667][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 661.324074][T31390] macvlan0: entered promiscuous mode [ 661.338500][T31390] macvlan0: entered allmulticast mode [ 662.082114][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6906'. [ 662.182100][T31451] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 662.468680][T31474] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.475925][T31474] bridge0: port 2(bridge_slave_1) entered listening state [ 662.483361][T31474] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.490524][T31474] bridge0: port 1(bridge_slave_0) entered listening state [ 662.586389][T31481] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6913'. [ 662.639732][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6914'. [ 662.693895][T15832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.721546][T31212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.729377][T15832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.856198][T31212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 662.975900][T31506] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 663.071971][T31212] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 663.285524][T31529] __nla_validate_parse: 2 callbacks suppressed [ 663.285544][T31529] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6926'. [ 663.294759][T31531] openvswitch: netlink: IPv6 tunnel dst address is zero [ 663.389298][T31539] batman_adv: batadv0: Adding interface: dummy0 [ 663.399827][T31539] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.428927][T31539] batman_adv: batadv0: Interface activated: dummy0 [ 663.438804][T31539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6930'. [ 663.448040][T31539] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6930'. [ 663.472809][T31539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6930'. [ 663.509921][T31539] batadv0: mtu less than device minimum [ 663.520421][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.532632][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.544326][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.553517][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6933'. [ 663.555957][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.575294][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.586987][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.598536][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.599268][T31548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6932'. [ 663.610298][T31539] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 663.656902][T31551] netlink: 'syz.0.6934': attribute type 1 has an invalid length. [ 663.776122][T31556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.797127][T31560] netlink: 'syz.3.6937': attribute type 1 has an invalid length. [ 663.957497][T31561] syzkaller0: entered promiscuous mode [ 663.966468][T31561] syzkaller0: entered allmulticast mode [ 663.998607][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 664.143397][T31584] syz_tun: entered promiscuous mode [ 664.148883][T31584] macvtap0: entered promiscuous mode [ 664.188270][T31584] syz_tun: left promiscuous mode [ 664.275314][T31600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6949'. [ 664.467222][T31610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6952'. [ 664.582443][T31620] netlink: 'syz.1.6955': attribute type 10 has an invalid length. [ 664.622290][T31620] team0: Device – is of different type [ 664.746013][T31632] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode [ 664.868036][T31640] netlink: 'syz.1.6963': attribute type 10 has an invalid length. [ 664.893275][T31640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.933600][T31640] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 664.988718][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.996178][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 665.004252][ C0] lec:lec_tx_timeout: lec0 [ 665.008978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 665.062988][T31650] xt_hashlimit: size too large, truncated to 1048576 [ 665.141912][T31658] netlink: 'syz.1.6968': attribute type 11 has an invalid length. [ 665.363571][T31672] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 665.561005][T31692] xt_TCPMSS: Only works on TCP SYN packets [ 665.570343][T31683] x_tables: duplicate entry at hook 1 [ 665.661451][T31698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6983'. [ 665.817648][T31705] netlink: 'syz.4.6986': attribute type 2 has an invalid length. [ 665.960053][T31715] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 666.307633][T31731] syzkaller0: entered promiscuous mode [ 666.314252][T31731] syzkaller0: entered allmulticast mode [ 666.321823][T31745] netlink: 'syz.1.6997': attribute type 4 has an invalid length. [ 666.464906][T31749] No such timeout policy "syz0" [ 666.527906][T31752] netlink: 'syz.2.6999': attribute type 1 has an invalid length. [ 666.545378][T31752] netlink: 'syz.2.6999': attribute type 2 has an invalid length. [ 666.545824][T31751] bridge2: entered promiscuous mode [ 666.553829][T31752] netlink: 'syz.2.6999': attribute type 1 has an invalid length. [ 666.579247][T31751] bridge2: entered allmulticast mode [ 666.831809][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.189341][T31762] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 668.215613][T31766] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 668.446026][T31786] __nla_validate_parse: 12 callbacks suppressed [ 668.446048][T31786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7011'. [ 668.505489][T31792] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 668.512178][T31791] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 668.834658][T31820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7019'. [ 669.047284][T31825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7019'. [ 669.057949][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7021'. [ 669.220770][T31851] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7023'. [ 669.266233][T31850] wg1 speed is unknown, defaulting to 1000 [ 669.341859][T31850] lo speed is unknown, defaulting to 1000 [ 669.666682][T31867] sctp: [Deprecated]: syz.0.7031 (pid 31867) Use of int in maxseg socket option. [ 669.666682][T31867] Use struct sctp_assoc_value instead [ 670.053384][T31896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7041'. [ 670.109987][T31900] SET target dimension over the limit! [ 670.388759][T31909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7047'. [ 670.792395][T31935] net_ratelimit: 16 callbacks suppressed [ 670.792413][T31935] IPVS: rr: FWM 3 0x00000003 - no destination available [ 670.831312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 670.839391][ C0] lec:lec_tx_timeout: lec0 [ 670.844780][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 670.899999][T31938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7053'. [ 670.975605][T31942] netlink: 'syz.0.7055': attribute type 12 has an invalid length. [ 671.111936][T31948] bond6: option min_links: invalid value (18446744073709551614) [ 671.119778][T31948] bond6: option min_links: allowed values 0 - 2147483647 [ 671.146343][T31948] bond6 (unregistering): Released all slaves [ 671.222777][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 671.248069][T31960] netlink: 'syz.4.7059': attribute type 7 has an invalid length. [ 671.345791][T31960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7059'. [ 671.371794][T31960] netlink: 'syz.4.7059': attribute type 7 has an invalid length. [ 671.380576][T15832] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.395670][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.400115][T15832] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.426756][T15832] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.446832][T31967] IPv6: addrconf: prefix option has invalid lifetime [ 671.451132][T15832] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.526055][T31971] syzkaller0: entered promiscuous mode [ 671.536304][T31971] syzkaller0: entered allmulticast mode [ 671.598520][T31975] tipc: Enabling of bearer rejected, failed to enable media [ 671.623594][T31973] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 671.997923][T32002] netlink: 'syz.4.7071': attribute type 2 has an invalid length. [ 672.031962][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.142223][T32009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.443289][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.680887][T32053] set match dimension is over the limit! [ 672.826225][T32062] veth13: entered allmulticast mode [ 672.878601][T32067] team0: No ports can be present during mode change [ 673.018939][T32080] netlink: 'syz.3.7097': attribute type 1 has an invalid length. [ 673.225021][T32082] vlan3: entered allmulticast mode [ 673.230335][T32082] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode [ 673.483488][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.499092][T32116] ipt_REJECT: TCP_RESET invalid for non-tcp [ 673.623562][T32129] __nla_validate_parse: 13 callbacks suppressed [ 673.623582][T32129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7111'. [ 673.651239][T32130] bridge3: entered promiscuous mode [ 673.656753][T32130] bridge3: entered allmulticast mode [ 674.042212][T15832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.052348][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.077625][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.119206][T15695] IPVS: starting estimator thread 0... [ 674.211405][T32160] IPVS: using max 30 ests per chain, 72000 per kthread [ 674.591575][T32178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7125'. [ 674.703675][T32181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7126'. [ 675.476055][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 675.727650][T32186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7126'. [ 675.808829][T32191] netlink: 'syz.3.7129': attribute type 1 has an invalid length. [ 675.817842][T32192] netlink: 'syz.4.7128': attribute type 4 has an invalid length. [ 675.851587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 675.859621][ C0] lec:lec_tx_timeout: lec0 [ 675.864753][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 675.881533][T32191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 675.889623][T32196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 675.954308][T32197] veth15: entered promiscuous mode [ 675.984679][T32197] bond6: (slave veth15): Enslaving as an active interface with a down link [ 676.030314][T32203] team0: Device ip6gre2 is of different type [ 676.066742][T32210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7135'. [ 676.106616][T32204] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 676.138273][T32204] net_ratelimit: 3 callbacks suppressed [ 676.138291][T32204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 676.163556][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7133'. [ 676.176387][T32207] syzkaller0: entered promiscuous mode [ 676.183345][T32207] syzkaller0: entered allmulticast mode [ 676.190557][T32215] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 676.208234][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7133'. [ 676.210344][T32215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.236506][T32207] netlink: 'syz.4.7134': attribute type 1 has an invalid length. [ 676.244720][T32207] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7134'. [ 676.587309][T32244] netlink: 'syz.4.7145': attribute type 21 has an invalid length. [ 676.603704][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.605404][T32248] netlink: 'syz.4.7145': attribute type 21 has an invalid length. [ 676.654290][T32250] xt_cgroup: path and classid specified [ 676.715697][T32245] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7143'. [ 676.747175][T32245] bond0 (unregistering): Released all slaves [ 676.832024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.052319][T32282] netlink: 'syz.2.7157': attribute type 1 has an invalid length. [ 677.137965][T32282] bond4: entered promiscuous mode [ 677.151599][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.164844][T32282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.188716][T32288] ipvlan0: entered allmulticast mode [ 677.220576][T32288] bond4: entered allmulticast mode [ 677.250448][T32282] bond4: (slave bridge2): making interface the new active one [ 677.260856][T32282] bridge2: entered promiscuous mode [ 677.266678][T32282] bridge2: entered allmulticast mode [ 677.274341][T32282] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 677.414947][T32305] ip6gre1: entered promiscuous mode [ 677.477913][T32310] netlink: 'syz.1.7163': attribute type 3 has an invalid length. [ 677.485845][T32310] netlink: 'syz.1.7163': attribute type 1 has an invalid length. [ 677.631997][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.656976][T32325] bond7: ARP target 1.0.0.0 is already present [ 677.664670][T32325] bond7: option arp_ip_target: invalid value (1) [ 677.673229][T32325] bond7 (unregistering): Released all slaves [ 678.189789][T32362] tap0: tun_chr_ioctl cmd 1074025672 [ 678.203162][T32362] tap0: ignored: set checksum disabled [ 678.570950][T32387] netlink: 'syz.1.7188': attribute type 7 has an invalid length. [ 678.605514][T32387] nbd: nbd1 already in use [ 678.610394][T32387] block nbd1: NBD_DISCONNECT [ 678.620247][T32387] block nbd1: Send disconnect failed -32 [ 678.630564][T32387] block nbd1: shutting down sockets [ 678.675976][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.925635][T32400] __nla_validate_parse: 13 callbacks suppressed [ 678.925653][T32400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7191'. [ 679.485855][T15818] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 679.495099][T15818] bridge5 (unregistering): left promiscuous mode [ 679.626110][T15818] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 679.636778][T15818] bond0 (unregistering): Released all slaves [ 679.647236][T15818] bond1 (unregistering): (slave veth3): Releasing active interface [ 679.667447][T15818] bond1 (unregistering): Released all slaves [ 679.686275][T15818] bond2 (unregistering): (slave veth5): Releasing active interface [ 679.696596][T15818] bond2 (unregistering): Released all slaves [ 679.709540][T15818] bond3 (unregistering): Released all slaves [ 679.723073][T15695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.726182][T15818] bond4 (unregistering): Released all slaves [ 679.748137][T15818] bond5 (unregistering): Released all slaves [ 679.760196][T15818] bond6 (unregistering): Released all slaves [ 679.772660][T15818] bond7 (unregistering): Released all slaves [ 679.785608][T15818] bond8 (unregistering): Released all slaves [ 679.800442][T15818] bond9 (unregistering): Released all slaves [ 679.930994][T32400] netlink: 'syz.1.7191': attribute type 1 has an invalid length. [ 679.961630][T32400] netlink: 'syz.1.7191': attribute type 2 has an invalid length. [ 679.962299][T32418] netlink: 'syz.0.7193': attribute type 2 has an invalid length. [ 679.983945][T15695] wg1 speed is unknown, defaulting to 1000 [ 679.990161][T15695] syz2: Port: 1 Link DOWN [ 680.000342][T15818] 9: left promiscuous mode [ 680.193768][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.260046][T15818] tipc: Disabling bearer [ 680.279822][T15818] tipc: Left network mode [ 680.364874][T32433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.377283][T32432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7198'. [ 680.382062][T32436] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7197'. [ 680.387825][T32432] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7198'. [ 680.458531][T32437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7200'. [ 680.712746][T32451] IPv6: NLM_F_CREATE should be specified when creating new route [ 680.871324][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 680.879426][ C0] lec:lec_tx_timeout: lec0 [ 680.884185][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 680.958037][T32464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.059776][T32477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7212'. [ 681.243934][T14000] net_ratelimit: 2 callbacks suppressed [ 681.243954][T14000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.259978][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.275712][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.382574][T15818] hsr_slave_0: left promiscuous mode [ 681.404806][T15818] hsr_slave_1: left promiscuous mode [ 681.442378][T15818] º: left allmulticast mode [ 681.447230][T15818] veth1_macvtap: left promiscuous mode [ 681.470889][T15818] º: left promiscuous mode [ 681.594128][T32519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7218'. [ 681.749911][T15818] team0 (unregistering): Port device batadv1 removed [ 681.805788][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.538220][T32537] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 682.648198][T32544] syzkaller1: entered promiscuous mode [ 682.654276][T32544] syzkaller1: entered allmulticast mode [ 682.833540][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.835582][T15818] IPVS: stop unused estimator thread 0... [ 682.926186][T32566] syzkaller0: entered promiscuous mode [ 682.937984][T32566] syzkaller0: entered allmulticast mode [ 682.995306][T32566] xt_hashlimit: size too large, truncated to 1048576 [ 683.023063][T32574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7232'. [ 683.054897][T32569] validate_nla: 9 callbacks suppressed [ 683.054916][T32569] netlink: 'syz.0.7231': attribute type 1 has an invalid length. [ 683.118854][T32578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7233'. [ 683.148749][T32578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7233'. [ 683.191154][T32569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.232016][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.367994][T32579] bond0: (slave geneve2): making interface the new active one [ 683.377494][T32579] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 683.750892][T32615] netlink: 'syz.3.7239': attribute type 58 has an invalid length. [ 683.877128][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.088687][T32628] __nla_validate_parse: 2 callbacks suppressed [ 684.088706][T32628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7243'. [ 684.127310][T32629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7242'. [ 684.194060][T32631] syzkaller1: entered promiscuous mode [ 684.207201][T32631] syzkaller1: entered allmulticast mode [ 684.250440][T32643] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 684.264473][T32643] netlink: 'syz.3.7247': attribute type 2 has an invalid length. [ 684.487575][T32658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7250'. [ 684.917326][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.031693][T32696] syzkaller0: entered promiscuous mode [ 685.037206][T32696] syzkaller0: entered allmulticast mode [ 685.330697][T32724] x_tables: unsorted underflow at hook 1 [ 685.331742][T32728] x_tables: unsorted underflow at hook 1 [ 685.393534][T32722] nbd: must specify at least one socket [ 685.577456][T32750] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 685.632972][T32752] netlink: 'syz.0.7275': attribute type 21 has an invalid length. [ 685.891529][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 685.899616][ C0] lec:lec_tx_timeout: lec0 [ 685.904553][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 685.933320][ T310] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7281'. [ 685.953042][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.271557][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.390732][ T341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7287'. [ 686.440498][ T341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7287'. [ 686.792097][ T359] xt_hashlimit: size too large, truncated to 1048576 [ 686.993216][T15825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.001943][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.010101][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.020054][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.462742][ T393] bond7: entered promiscuous mode [ 687.509800][ T393] macvlan2: entered promiscuous mode [ 687.516276][ T393] macvlan2: entered allmulticast mode [ 687.525014][ T393] bond7: (slave macvlan2): Opening slave failed [ 687.849566][ T424] netlink: 'syz.4.7304': attribute type 1 has an invalid length. [ 687.870775][ T424] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7304'. [ 687.917986][ T435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7307'. [ 687.950680][ T427] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.966564][ T443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7304'. [ 687.999559][ T435] netlink: 'syz.1.7307': attribute type 1 has an invalid length. [ 688.008749][ T443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7304'. [ 688.032390][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.066398][ T435] netlink: 'syz.1.7307': attribute type 1 has an invalid length. [ 688.076874][ T435] netlink: 'syz.1.7307': attribute type 2 has an invalid length. [ 688.085316][ T448] netlink: 'syz.1.7307': attribute type 23 has an invalid length. [ 688.169664][ T435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.179098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.343372][ T461] pimreg: left allmulticast mode [ 688.404174][ T465] veth23: entered allmulticast mode [ 688.507340][ T465] veth25: entered allmulticast mode [ 688.689679][ T486] tipc: Started in network mode [ 688.697384][ T486] tipc: Node identity 1ae549ea65a9, cluster identity 4711 [ 688.730237][ T486] tipc: Enabled bearer , priority 0 [ 688.859604][ T497] syzkaller0: entered promiscuous mode [ 688.915242][ T497] syzkaller0: entered allmulticast mode [ 689.006797][ T497] tipc: Resetting bearer [ 689.075008][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.086512][ T505] syzkaller1: entered promiscuous mode [ 689.094504][ T505] syzkaller1: entered allmulticast mode [ 689.200632][ T516] 8021q: VLANs not supported on syzkaller1 [ 689.221566][ T526] bridge0: port 3(syz_tun) entered blocking state [ 689.229714][ T526] bridge0: port 3(syz_tun) entered disabled state [ 689.262152][ T526] syz_tun: entered allmulticast mode [ 689.275832][ T526] syz_tun: entered promiscuous mode [ 689.286779][ T526] bridge0: port 3(syz_tun) entered blocking state [ 689.293386][ T526] bridge0: port 3(syz_tun) entered listening state [ 689.303849][ T483] tipc: Resetting bearer [ 689.321044][T31212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.359632][ T538] __nla_validate_parse: 4 callbacks suppressed [ 689.359651][ T538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7330'. [ 689.375616][ T538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7330'. [ 690.911585][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 690.919630][ C0] lec:lec_tx_timeout: lec0 [ 690.924628][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 691.386957][ T483] tipc: Disabling bearer [ 691.399016][ T534] netlink: 'syz.3.7329': attribute type 12 has an invalid length. [ 691.420637][T15698] tipc: Node number set to 2135706090 [ 692.020527][ T638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7344'. [ 692.104904][ T649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7347'. [ 692.111546][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 692.123548][T14000] net_ratelimit: 2 callbacks suppressed [ 692.123565][T14000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.138049][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.144008][ T648] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7346'. [ 692.164798][ T649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7347'. [ 692.176557][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.191671][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.192393][ T649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7347'. [ 692.226115][ T652] dvmrp0: entered allmulticast mode [ 692.228058][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7346'. [ 692.262987][ T648] 8021q: VLANs not supported on wlan0 [ 692.280551][ T654] x_tables: duplicate underflow at hook 3 [ 692.351617][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.445597][ T662] netlink: 'syz.4.7351': attribute type 9 has an invalid length. [ 692.459266][ T662] netlink: 'syz.4.7351': attribute type 11 has an invalid length. [ 692.471527][ T662] netlink: 'syz.4.7351': attribute type 12 has an invalid length. [ 692.479706][ T662] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.7351'. [ 692.518336][ T672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7355'. [ 692.530169][ T672] x_tables: duplicate underflow at hook 1 [ 692.547760][ T673] netlink: 'syz.2.7354': attribute type 12 has an invalid length. [ 692.583262][T15818] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.592877][ T673] netlink: 'syz.2.7354': attribute type 12 has an invalid length. [ 692.607080][T15818] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.628501][T15818] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.650267][T15818] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.751669][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 693.009000][ T702] netlink: 'syz.4.7362': attribute type 1 has an invalid length. [ 693.096020][ T702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.128282][ T708] veth7: entered promiscuous mode [ 693.148786][ T708] bond4: (slave veth7): Enslaving as an active interface with a down link [ 693.168456][ T702] vlan1: entered allmulticast mode [ 693.173896][ T702] bond4: entered allmulticast mode [ 693.180522][ T702] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 693.242256][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.332469][ T719] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 693.336674][ T721] syzkaller0: entered promiscuous mode [ 693.351749][ T721] syzkaller0: entered allmulticast mode [ 693.448003][ T723] netlink: 'syz.2.7368': attribute type 12 has an invalid length. [ 693.617972][ T739] netlink: 'syz.4.7372': attribute type 30 has an invalid length. [ 693.687457][ T744] netlink: 'syz.4.7372': attribute type 30 has an invalid length. [ 693.901890][ T758] netlink: 'syz.2.7377': attribute type 1 has an invalid length. [ 693.945346][ T758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.004650][ T758] veth11: entered promiscuous mode [ 694.014280][ T758] bond8: (slave veth11): Enslaving as an active interface with a down link [ 694.040350][ T774] vlan1: entered allmulticast mode [ 694.045685][ T774] bond8: entered allmulticast mode [ 694.053151][ T774] bond8: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 694.158926][ T782] xt_hashlimit: size too large, truncated to 1048576 [ 694.213946][ T786] xt_hashlimit: max too large, truncated to 1048576 [ 694.273593][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.376563][ T803] __nla_validate_parse: 8 callbacks suppressed [ 694.376581][ T803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7385'. [ 694.494810][ T808] netlink: 'syz.3.7387': attribute type 8 has an invalid length. [ 694.680195][ T822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.876419][ T835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7394'. [ 694.917986][ T830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7394'. [ 695.017819][ T845] xt_hashlimit: size too large, truncated to 1048576 [ 695.083905][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.117752][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.166445][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.433603][ T879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7407'. [ 695.796012][ T914] SET target dimension over the limit! [ 695.914543][ T919] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7414'. [ 695.931629][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 695.939694][ C0] lec:lec_tx_timeout: lec0 [ 695.944650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 695.988292][ T919] netlink: 'syz.1.7414': attribute type 2 has an invalid length. [ 696.035382][ T929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7417'. [ 696.382632][ T974] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.7427'. [ 696.527935][ T977] gre2: entered promiscuous mode [ 696.543146][ T982] netlink: 'syz.0.7430': attribute type 1 has an invalid length. [ 696.553774][ T977] gre2: entered allmulticast mode [ 696.684208][ T1000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7430'. [ 696.752823][ T991] bond12: (slave bridge7): making interface the new active one [ 696.774116][ T991] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 696.813281][ T1000] 8021q: adding VLAN 0 to HW filter on device bond12 [ 696.849295][ T1008] x_tables: duplicate underflow at hook 1 [ 697.031788][ T1022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7438'. [ 697.050743][ T1022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7438'. [ 697.161493][ T1040] net_ratelimit: 95 callbacks suppressed [ 697.161512][ T1040] netlink: Unknown conntrack attr (0) [ 697.231985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.240697][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.391636][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.735666][ T1089] netlink: 'syz.0.7453': attribute type 1 has an invalid length. [ 697.830199][ T1095] IPVS: Error connecting to the multicast addr [ 697.877726][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.887295][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.983679][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.992799][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.001609][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.010332][ T1104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.287631][ T1120] netlink: 'syz.3.7465': attribute type 1 has an invalid length. [ 698.348348][ T1120] bond9: entered promiscuous mode [ 698.367784][ T1120] 8021q: adding VLAN 0 to HW filter on device bond9 [ 698.409872][ T1120] bond9: (slave bridge4): making interface the new active one [ 698.424529][ T1120] bridge4: entered promiscuous mode [ 698.430999][ T1120] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 698.572741][ T1140] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 698.746947][ T1147] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 698.876030][ T1164] dvmrp6: entered allmulticast mode [ 698.976117][ T1170] netlink: 'syz.0.7476': attribute type 64 has an invalid length. [ 699.101819][ T1170] netlink: 'syz.0.7476': attribute type 1 has an invalid length. [ 699.119049][ T1170] netlink: 'syz.0.7476': attribute type 1 has an invalid length. [ 699.484338][ T1212] __nla_validate_parse: 19 callbacks suppressed [ 699.484359][ T1212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7487'. [ 699.527648][ T1212] team0 (unregistering): Port device team_slave_0 removed [ 699.539165][ T1212] team0 (unregistering): Port device team_slave_1 removed [ 700.148376][ T1237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7497'. [ 700.159811][ T1237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7497'. [ 700.254681][ T1250] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7496'. [ 700.272883][ T1249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.283916][ T1250] bridge_slave_1: default FDB implementation only supports local addresses [ 700.492524][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.500406][ T1261] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7503'. [ 700.531887][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.540010][ T1261] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7503'. [ 700.562365][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.570211][ T1261] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7503'. [ 700.597154][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.606114][ T1261] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7503'. [ 700.615730][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.641791][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7504'. [ 700.650909][ T1261] netlink: 396 bytes leftover after parsing attributes in process `syz.2.7503'. [ 700.661066][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.669763][ T1261] netlink: 'syz.2.7503': attribute type 10 has an invalid length. [ 700.951300][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 700.959392][ C0] lec:lec_tx_timeout: lec0 [ 700.971666][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 701.033765][ T1282] macvlan0: left promiscuous mode [ 701.038847][ T1282] macvlan0: left allmulticast mode [ 701.140845][ T1289] bridge0: port 3(syz_tun) entered disabled state [ 701.147594][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.223657][ T1298] syzkaller0: entered promiscuous mode [ 701.235296][ T1298] syzkaller0: entered allmulticast mode [ 702.108945][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.137653][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.578792][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.594459][T15698] net_ratelimit: 13 callbacks suppressed [ 702.594478][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.601431][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.644680][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.654497][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.675065][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.686980][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.700244][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.738265][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.853740][ T1371] : entered promiscuous mode [ 702.984071][ T1387] mac80211_hwsim hwsim76 ÿ: renamed from wlan1 [ 703.125273][ T1402] delete_channel: no stack [ 703.141217][ T1404] bond0: (slave rose0): Error: Device can not be enslaved while up [ 703.290403][ T1411] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.312758][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.322102][ T1419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.343062][ T1411] bond10: (slave gretap2): making interface the new active one [ 703.352201][ T1411] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 703.642509][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.389678][ T1500] validate_nla: 64 callbacks suppressed [ 704.389699][ T1500] netlink: 'syz.2.7571': attribute type 7 has an invalid length. [ 704.408486][ T1500] netlink: 'syz.2.7571': attribute type 7 has an invalid length. [ 704.570483][ T1517] __nla_validate_parse: 74 callbacks suppressed [ 704.570503][ T1517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7575'. [ 704.666489][ T1525] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7577'. [ 704.677813][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.690455][ T1525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7577'. [ 704.831853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.869946][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'. [ 705.080157][ T1557] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7585'. [ 705.103346][ T1557] nbd: illegal input index -8454144 [ 705.454442][ T1582] netlink: set zone limit has 4 unknown bytes [ 705.663190][ T1603] netlink: 'syz.4.7594': attribute type 1 has an invalid length. [ 705.693932][ T1603] netlink: 'syz.4.7594': attribute type 2 has an invalid length. [ 705.712024][T15698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.766449][ T1603] bond5 (unregistering): Released all slaves [ 705.786742][ T1615] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 705.797957][ T1617] netlink: 'syz.0.7599': attribute type 39 has an invalid length. [ 705.981578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 705.989685][ C0] lec:lec_tx_timeout: lec0 [ 705.995190][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 706.194330][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7607'. [ 706.203328][ T1647] netlink: 'syz.1.7607': attribute type 1 has an invalid length. [ 706.211079][ T1647] netlink: 'syz.1.7607': attribute type 2 has an invalid length. [ 706.284967][ T1651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.356954][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.431822][ T1658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.449565][ T1662] netlink: 'syz.0.7611': attribute type 2 has an invalid length. [ 706.470631][ T1662] netlink: 'syz.0.7611': attribute type 1 has an invalid length. [ 706.481852][ T1668] netlink: 'syz.1.7613': attribute type 1 has an invalid length. [ 706.489611][ T1668] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7613'. [ 706.501724][ T1662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7611'. [ 706.514517][ T1668] netlink: 582 bytes leftover after parsing attributes in process `syz.1.7613'. [ 706.530558][ T1669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.553877][ T1672] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7615'. [ 706.627400][ T1675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.678662][ T1679] syzkaller0: entered promiscuous mode [ 706.684324][ T1679] syzkaller0: entered allmulticast mode [ 706.695552][ T1678] batman_adv: batadv0: Interface deactivated: dummy0 [ 706.714085][ T1678] batman_adv: batadv0: Removing interface: dummy0 [ 707.145159][ T1713] tipc: MTU too low for tipc bearer [ 707.252633][ T1713] syzkaller0: entered promiscuous mode [ 707.258796][ T1713] syzkaller0: entered allmulticast mode [ 707.456674][ T1728] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 709.320925][ T1768] net_ratelimit: 1 callbacks suppressed [ 709.320948][ T1768] openvswitch: netlink: Flow actions attr not present in new flow. [ 709.392947][ T1778] sctp: [Deprecated]: syz.3.7643 (pid 1778) Use of int in max_burst socket option. [ 709.392947][ T1778] Use struct sctp_assoc_value instead [ 709.411140][ T1777] openvswitch: netlink: IP tunnel dst address not specified [ 709.451466][ T1777] validate_nla: 4 callbacks suppressed [ 709.451484][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.479883][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.489957][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.512006][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.520459][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.530824][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.539744][ T1777] netlink: 'syz.1.7644': attribute type 29 has an invalid length. [ 709.751879][ T1798] netlink: 'syz.2.7650': attribute type 1 has an invalid length. [ 709.829292][ T1798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 709.891232][ T1798] bond9: (slave veth13): Enslaving as an active interface with a down link [ 709.941128][ T1801] : entered promiscuous mode [ 709.956269][ T1798] vlan1: entered allmulticast mode [ 709.963107][ T1798] veth0_to_bond: entered allmulticast mode [ 709.984023][ T1798] bond9: (slave vlan1): Opening slave failed [ 709.993072][ T1809] __nla_validate_parse: 10 callbacks suppressed [ 709.993092][ T1809] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7650'. [ 710.025608][ T1810] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 710.042544][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7652'. [ 710.089650][ T1820] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20003 [ 710.393777][ T1839] sit1: entered promiscuous mode [ 710.398967][ T1839] sit1: entered allmulticast mode [ 710.486764][ T1845] netlink: 'syz.2.7663': attribute type 10 has an invalid length. [ 710.501888][ T1845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7663'. [ 710.701965][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7669'. [ 710.745036][ T1863] veth8: entered allmulticast mode [ 710.976708][ T1882] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7676'. [ 711.001304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 711.009367][ C0] lec:lec_tx_timeout: lec0 [ 711.014189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 711.040340][ T1888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7677'. [ 711.050885][ T1875] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 711.107436][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7677'. [ 711.339996][ T1915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7686'. [ 711.350036][ T1914] syzkaller0: entered promiscuous mode [ 711.357023][ T1914] syzkaller0: entered allmulticast mode [ 711.782029][ T1947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7695'. [ 711.867374][ T1955] pim6reg: entered allmulticast mode [ 711.898569][ T1955] IPVS: set_ctl: invalid protocol: 103 172.30.1.3:20003 [ 711.900880][ T1958] nbd: couldn't find a device at index 0 [ 712.114523][ T1972] lo: left promiscuous mode [ 712.120746][ T1972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.210217][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7709'. [ 712.832152][ T2039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.858554][ T2036] xt_hashlimit: size too large, truncated to 1048576 [ 713.512076][ T2087] tipc: Enabled bearer , priority 0 [ 713.599817][ T2095] tcf_pedit_act: 7 callbacks suppressed [ 713.599913][ T2095] tc action pedit offset must be on 32 bit boundaries [ 714.317999][ T2088] tipc: Disabling bearer [ 714.566649][ T2110] validate_nla: 9 callbacks suppressed [ 714.566668][ T2110] netlink: 'syz.2.7744': attribute type 1 has an invalid length. [ 714.659245][ T2110] 8021q: adding VLAN 0 to HW filter on device bond10 [ 714.788260][ T2116] veth15: entered promiscuous mode [ 714.793380][ T2127] netlink: 'syz.0.7747': attribute type 1 has an invalid length. [ 714.816782][ T2116] bond10: (slave veth15): Enslaving as an active interface with a down link [ 714.862639][ T2110] vlan1: entered allmulticast mode [ 714.867800][ T2110] bond10: entered allmulticast mode [ 714.876973][ T2110] bond10: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 714.986265][ T2127] 8021q: adding VLAN 0 to HW filter on device bond14 [ 714.997596][ T2142] netlink: 'syz.1.7753': attribute type 1 has an invalid length. [ 715.017325][ T2131] bond14: (slave veth29): Enslaving as an active interface with a down link [ 715.027429][ T2143] __nla_validate_parse: 13 callbacks suppressed [ 715.027447][ T2143] netlink: 26 bytes leftover after parsing attributes in process `syz.1.7753'. [ 715.038030][ T2145] netlink: 'syz.1.7753': attribute type 10 has an invalid length. [ 715.045745][ T2142] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7753'. [ 715.182239][ T2120] bond14: (slave veth31): Enslaving as an active interface with a down link [ 715.207846][ T2120] netlink: 'syz.0.7747': attribute type 1 has an invalid length. [ 715.216552][ T2145] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 715.229393][ T2145] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 715.238915][ T2120] netlink: 'syz.0.7747': attribute type 2 has an invalid length. [ 715.268279][ T2155] syzkaller0: entered promiscuous mode [ 715.286149][ T2155] syzkaller0: entered allmulticast mode [ 715.375945][ T2158] netlink: 'syz.2.7756': attribute type 10 has an invalid length. [ 715.618423][ T2177] netlink: 'syz.2.7762': attribute type 63 has an invalid length. [ 715.653995][ T2177] netlink: 'syz.2.7762': attribute type 63 has an invalid length. [ 715.659963][ T2178] syzkaller0: entered promiscuous mode [ 715.692066][ T2178] syzkaller0: entered allmulticast mode [ 715.711097][ T2178] tipc: Enabled bearer , priority 0 [ 715.727369][ T2180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7763'. [ 715.727949][ T2178] sctp: [Deprecated]: syz.0.7761 (pid 2178) Use of int in max_burst socket option deprecated. [ 715.727949][ T2178] Use struct sctp_assoc_value instead [ 715.764532][ T2176] tipc: Resetting bearer [ 715.774038][ T2182] netlink: 'syz.4.7764': attribute type 1 has an invalid length. [ 715.805656][ T2176] tipc: Disabling bearer [ 715.855103][ T2182] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.875739][ T2187] veth13: entered promiscuous mode [ 715.885658][ T2187] bond7: (slave veth13): Enslaving as an active interface with a down link [ 715.944623][ T2182] vlan1: entered allmulticast mode [ 715.949849][ T2182] bond7: entered allmulticast mode [ 715.957195][ T2182] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 716.001935][ T2191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 716.149006][ T2198] syzkaller0: entered promiscuous mode [ 716.154909][ T2198] syzkaller0: entered allmulticast mode [ 716.250124][ T2211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7771'. [ 716.557723][ T2231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7778'. [ 716.680143][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7779'. [ 716.752093][ T2252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7783'. [ 716.779602][ T2252] geneve3: entered promiscuous mode [ 716.786604][T15818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.800913][T15818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.816060][T15818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.835253][T15818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.869003][ T2261] macvlan0: entered promiscuous mode [ 716.871622][ T2259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7784'. [ 716.898584][ T2262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7786'. [ 716.908015][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7786'. [ 717.071361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 717.079542][ C0] lec:lec_tx_timeout: lec0 [ 717.084397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 718.452401][ T2361] xt_limit: Overflow, try lower: 271964/0 [ 718.702303][ T2376] IPv6: Can't replace route, no match found [ 720.524062][ T2501] validate_nla: 6 callbacks suppressed [ 720.524080][ T2501] netlink: 'syz.4.7839': attribute type 3 has an invalid length. [ 720.701153][ T2510] __nla_validate_parse: 10 callbacks suppressed [ 720.701173][ T2510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7842'. [ 720.934235][ T2528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7848'. [ 720.944388][ T2528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7848'. [ 721.034349][ T2542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7853'. [ 721.051588][ T2545] Unsupported ieee802154 address type: 0 [ 721.055056][ T2544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7851'. [ 721.108488][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7853'. [ 721.123538][ T2542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7853'. [ 721.137349][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7853'. [ 721.380163][ T2578] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7859'. [ 721.436406][ T2582] bond11: Unable to set up delay as MII monitoring is disabled [ 721.447444][ T2582] bond11 (unregistering): Released all slaves [ 721.537209][ T2593] syzkaller1: entered promiscuous mode [ 721.562000][ T2593] syzkaller1: entered allmulticast mode [ 721.582903][ T2593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7859'. [ 722.115412][ T2642] openvswitch: netlink: EtherType 50a is less than min 600 [ 722.136767][ T2645] netlink: 'syz.2.7875': attribute type 10 has an invalid length. [ 722.184805][ T2648] xt_hashlimit: size too large, truncated to 1048576 [ 722.544285][ T2676] netlink: 'syz.4.7882': attribute type 1 has an invalid length. [ 722.735524][ T2694] batadv_slave_0: entered promiscuous mode [ 722.831313][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 722.839388][ C0] lec:lec_tx_timeout: lec0 [ 722.844933][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 723.409824][ T2762] netlink: 'syz.0.7903': attribute type 9 has an invalid length. [ 723.417857][ T2762] netlink: 'syz.0.7903': attribute type 6 has an invalid length. [ 723.510840][ T2770] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 723.520674][ T2778] xt_hashlimit: max too large, truncated to 1048576 [ 723.575702][ T2770] 8021q: adding VLAN 0 to HW filter on device bond15 [ 723.749575][ T2796] IPv6: sit2: Disabled Multicast RS [ 723.847282][ T2798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.857519][ T2798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 724.018378][ T2830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.079184][ T2834] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 724.114059][ T29] audit: type=1800 audit(1773368182.854:6): pid=2839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7921" name="memory.events" dev="tmpfs" ino=1461 res=0 errno=0 [ 724.551115][ T10] IPVS: starting estimator thread 0... [ 724.643924][ T2882] syzkaller0: entered promiscuous mode [ 724.649435][ T2882] syzkaller0: entered allmulticast mode [ 724.693260][ T2876] IPVS: using max 35 ests per chain, 84000 per kthread [ 724.889719][ T2893] ip6gre2: entered allmulticast mode [ 724.915767][ T2895] netlink: 'syz.0.7937': attribute type 83 has an invalid length. [ 725.044059][ T2907] xt_HMARK: proto mask must be zero with L3 mode [ 725.451747][ T2937] netlink: 'syz.3.7951': attribute type 10 has an invalid length. [ 725.694289][ T2960] openvswitch: netlink: IP tunnel dst address not specified [ 725.722356][ T2963] netlink: 'syz.3.7958': attribute type 1 has an invalid length. [ 725.768580][ T2963] 8021q: adding VLAN 0 to HW filter on device bond11 [ 725.820568][ T2963] veth19: entered promiscuous mode [ 725.834675][ T2963] bond11: (slave veth19): Enslaving as an active interface with a down link [ 726.008572][ T2982] netlink: 'syz.3.7964': attribute type 11 has an invalid length. [ 726.012889][ T2984] __nla_validate_parse: 13 callbacks suppressed [ 726.012908][ T2984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7965'. [ 726.023303][ T2982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7964'. [ 726.032313][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 726.214883][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7968'. [ 726.479422][ T3017] IPVS: persistence engine module ip_vs_pe_À not found [ 726.496200][ T3014] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 726.551476][ T3022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7972'. [ 726.571902][ T3014] time_mt_check: 23 callbacks suppressed [ 726.572046][ T3014] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 726.727132][ T3028] veth0_to_batadv: entered allmulticast mode [ 727.024962][ T3052] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7983'. [ 727.185073][ T3065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.344825][ T3077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7989'. [ 727.355224][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7989'. [ 727.852874][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 727.860989][ C0] lec:lec_tx_timeout: lec0 [ 727.865865][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 728.863430][ T3088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7991'. [ 728.875640][ T3088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7991'. [ 728.968202][ T3091] netlink: 'syz.2.7992': attribute type 21 has an invalid length. [ 728.969243][ T3101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7996'. [ 728.995981][ T3101] netlink: 'syz.1.7996': attribute type 7 has an invalid length. [ 729.238960][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.281408][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.390606][ T3121] syzkaller0: entered promiscuous mode [ 729.397796][ T3121] syzkaller0: entered allmulticast mode [ 729.664287][ T3139] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 729.703792][ T3139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.097679][ T3172] netlink: 'syz.4.8011': attribute type 5 has an invalid length. [ 730.604408][ T3202] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 730.704307][ T3224] syzkaller0: entered promiscuous mode [ 730.709969][ T3224] syzkaller0: entered allmulticast mode [ 731.027994][ T3242] __nla_validate_parse: 12 callbacks suppressed [ 731.028013][ T3242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8030'. [ 731.058782][ T3242] macsec1: entered promiscuous mode [ 731.066427][ T3242] macsec1: entered allmulticast mode [ 731.071965][ T3242] bridge0: entered allmulticast mode [ 731.077977][ T3242] bridge0: port 4(macsec1) entered blocking state [ 731.090993][ T3242] bridge0: port 4(macsec1) entered disabled state [ 731.123104][ T3242] bridge0: left allmulticast mode [ 731.419716][ T3246] syzkaller0: entered promiscuous mode [ 731.427775][ T3246] syzkaller0: entered allmulticast mode [ 731.447523][ T3272] xt_CONNSECMARK: invalid mode: 0 [ 732.884490][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 732.892528][ C0] lec:lec_tx_timeout: lec0 [ 732.897160][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 733.318185][ T3305] netlink: 'syz.3.8046': attribute type 10 has an invalid length. [ 733.352612][ T3305] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8046'. [ 733.457312][ T3316] xt_l2tp: v2 doesn't support IP mode [ 733.524647][ T3327] netlink: 'syz.0.8051': attribute type 9 has an invalid length. [ 733.780035][ T3353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8059'. [ 733.989914][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8064'. [ 733.991825][ T3364] tipc: Started in network mode [ 733.999475][ T3366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8064'. [ 734.019669][ T3364] tipc: Node identity ba45f661763, cluster identity 4711 [ 734.033097][ T3364] tipc: Enabled bearer , priority 0 [ 734.048972][ T3366] netlink: 'syz.1.8064': attribute type 15 has an invalid length. [ 734.113037][ T3364] syzkaller0: entered promiscuous mode [ 734.118743][ T3364] syzkaller0: entered allmulticast mode [ 734.136037][ T3364] tipc: Resetting bearer [ 734.154849][T15832] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 734.177643][T15832] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 734.226858][ T3363] tipc: Resetting bearer [ 734.447828][ T3393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8070'. [ 735.205143][ T5837] block nbd3: Receive control failed (result -32) [ 735.880620][ T3363] tipc: Disabling bearer [ 735.890166][T15832] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 735.919808][T31213] tipc: Node number set to 3430282849 [ 735.946598][T15832] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 736.044834][ T3409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8073'. [ 736.064538][ T3409] netlink: 'syz.3.8073': attribute type 7 has an invalid length. [ 736.081231][ T3409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8073'. [ 736.197393][ T3420] vlan0: entered promiscuous mode [ 736.242647][ T3420] bridge0: entered promiscuous mode [ 736.316428][ T3426] gretap2: entered allmulticast mode [ 736.371903][ T3437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8079'. [ 736.381018][ T3436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8079'. [ 736.636854][ T3451] bond16: option mode: invalid value (133) [ 736.693806][ T3451] bond16 (unregistering): Released all slaves [ 736.811078][ T3414] lec:lec_atm_close: lec0: Shut down! [ 736.828231][ T3446] sctp: [Deprecated]: syz.1.8081 (pid 3446) Use of int in max_burst socket option deprecated. [ 736.828231][ T3446] Use struct sctp_assoc_value instead [ 736.850193][ T3456] bond16: option mode: invalid value (133) [ 736.877480][ T3456] bond16 (unregistering): Released all slaves [ 737.000002][ T3473] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8087'. [ 737.227084][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8091'. [ 737.277356][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8091'. [ 737.328651][ T3490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.504326][ T3500] syzkaller0: entered promiscuous mode [ 737.506241][ T3506] netlink: 'syz.2.8096': attribute type 1 has an invalid length. [ 737.518612][ T3500] syzkaller0: entered allmulticast mode [ 737.524566][ T3506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8096'. [ 737.524590][ T3506] netlink: 658 bytes leftover after parsing attributes in process `syz.2.8096'. [ 737.524604][ T3506] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8096'. [ 738.109203][ T3533] syzkaller1: entered promiscuous mode [ 738.118917][ T3533] syzkaller1: entered allmulticast mode [ 738.128444][ T3535] tunl0: entered allmulticast mode [ 738.206166][ T3541] netlink: 'syz.1.8108': attribute type 9 has an invalid length. [ 738.226610][ T3534] tunl0: left allmulticast mode [ 738.227110][ T3541] netlink: 'syz.1.8108': attribute type 11 has an invalid length. [ 738.247610][ T3541] netlink: 'syz.1.8108': attribute type 11 has an invalid length. [ 738.270738][ T3541] netlink: 'syz.1.8108': attribute type 11 has an invalid length. [ 738.293126][ T3541] netlink: 'syz.1.8108': attribute type 11 has an invalid length. [ 738.779849][ T3581] sctp: [Deprecated]: syz.2.8124 (pid 3581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.779849][ T3581] Use struct sctp_sack_info instead [ 738.991232][ T3590] syzkaller0: entered promiscuous mode [ 738.997687][ T3590] syzkaller0: entered allmulticast mode [ 739.745684][ T3646] tipc: Enabling of bearer rejected, already enabled [ 739.994705][ T3674] lo speed is unknown, defaulting to 1000 [ 740.314353][ T3696] ipt_ECN: cannot use operation on non-tcp rule [ 740.711596][ T3725] netlink: 'syz.1.8165': attribute type 1 has an invalid length. [ 740.913585][ T3734] netlink: 'syz.4.8171': attribute type 1 has an invalid length. [ 741.046121][ T3734] bond8: entered promiscuous mode [ 741.087935][ T3734] 8021q: adding VLAN 0 to HW filter on device bond8 [ 741.097778][ T3755] __nla_validate_parse: 15 callbacks suppressed [ 741.097797][ T3755] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8174'. [ 741.125080][ T3756] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8174'. [ 741.127070][ T3742] macvtap1: entered allmulticast mode [ 741.153772][ T3748] bond8: (slave bridge6): making interface the new active one [ 741.166496][ T3748] bridge6: entered promiscuous mode [ 741.185655][ T3748] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 741.206527][ T3752] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 741.352499][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8179'. [ 741.356002][ T3771] netlink: 'syz.0.8178': attribute type 1 has an invalid length. [ 741.373310][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8177'. [ 741.374315][ T3771] netlink: 280 bytes leftover after parsing attributes in process `syz.0.8178'. [ 741.397045][ T3771] netlink: 'syz.0.8178': attribute type 25 has an invalid length. [ 741.416899][ T3771] netlink: 'syz.0.8178': attribute type 25 has an invalid length. [ 741.550072][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8181'. [ 741.811304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 741.819401][ C0] lec:lec_tx_timeout: lec0 [ 741.825021][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 741.974688][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 742.021427][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8189'. [ 742.051085][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8189'. [ 742.385775][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8195'. [ 742.840095][ T3855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.932403][ T3863] netlink: 'syz.1.8204': attribute type 8 has an invalid length. [ 743.356642][ T3901] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 743.435817][ T3911] netlink: 'syz.4.8219': attribute type 1 has an invalid length. [ 743.464736][ T3911] openvswitch: netlink: Duplicate or invalid key (type 0). [ 743.517202][ T3911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.753831][ T3932] IPVS: set_ctl: invalid protocol: 92 172.20.20.37:20000 [ 743.961984][ T3945] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 744.177556][ T3968] netlink: 'syz.3.8239': attribute type 1 has an invalid length. [ 744.236374][ T3968] 8021q: adding VLAN 0 to HW filter on device bond12 [ 744.258341][ T3970] netlink: 'syz.0.8237': attribute type 1 has an invalid length. [ 744.270162][ T3970] netlink: 'syz.0.8237': attribute type 1 has an invalid length. [ 744.302043][ T3971] veth21: entered promiscuous mode [ 744.311103][ T3971] bond12: (slave veth21): Enslaving as an active interface with a down link [ 744.353230][ T3968] vlan2: entered allmulticast mode [ 744.358613][ T3968] bond12: entered allmulticast mode [ 744.368419][ T3968] bond12: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 744.718116][T15832] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.736037][T15832] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.774325][T15832] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.805753][T15832] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.837950][ T4003] tipc: Invalid UDP bearer configuration [ 744.837998][ T4003] tipc: Enabling of bearer rejected, failed to enable media [ 746.831614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 746.839676][ C0] lec:lec_tx_timeout: lec0 [ 746.844651][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.929920][ T4013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.148029][ T4079] __nla_validate_parse: 18 callbacks suppressed [ 748.148049][ T4079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8264'. [ 748.202076][ T4079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8264'. [ 748.254200][ T4079] validate_nla: 4 callbacks suppressed [ 748.254223][ T4079] netlink: 'syz.2.8264': attribute type 6 has an invalid length. [ 748.319478][ T4079] netlink: 'syz.2.8264': attribute type 5 has an invalid length. [ 748.355722][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8264'. [ 748.387304][ T4079] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8264'. [ 748.569564][ T4110] netlink: 'syz.1.8273': attribute type 2 has an invalid length. [ 748.578031][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8273'. [ 748.701141][ T4120] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8276'. [ 748.820858][ T4130] dvmrp0: left allmulticast mode [ 749.214002][ T4165] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8288'. [ 749.243659][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8288'. [ 749.253198][ T4166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8288'. [ 749.302451][ T4174] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8290'. [ 749.316451][ T4172] netlink: 'syz.2.8289': attribute type 4 has an invalid length. [ 749.347397][ T4175] bond11: option fail_over_mac: invalid value (16) [ 749.357076][ T4175] bond11 (unregistering): Released all slaves [ 749.839260][ T4218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.878270][ T4219] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 750.072902][ T4233] tipc: Enabled bearer , priority 0 [ 750.161022][ T4242] netlink: 'syz.3.8311': attribute type 10 has an invalid length. [ 750.229475][ T4233] syzkaller0: entered promiscuous mode [ 750.235368][ T4233] syzkaller0: entered allmulticast mode [ 750.242715][ T4233] tipc: Resetting bearer [ 750.360930][ T4255] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 750.366895][T14018] tipc: Resetting bearer [ 750.419037][ T4228] tipc: Resetting bearer [ 750.509125][ T4261] Bluetooth: MGMT ver 1.23 [ 751.851291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 751.859361][ C0] lec:lec_tx_timeout: lec0 [ 751.864259][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 752.715370][ T4228] tipc: Disabling bearer [ 753.230705][ T4336] __nla_validate_parse: 4 callbacks suppressed [ 753.230728][ T4336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8333'. [ 753.895235][ T4349] netlink: 'syz.0.8337': attribute type 13 has an invalid length. [ 754.180376][ T4380] sctp: [Deprecated]: syz.4.8346 (pid 4380) Use of int in max_burst socket option. [ 754.180376][ T4380] Use struct sctp_assoc_value instead [ 754.356718][ T4386] lo: entered promiscuous mode [ 754.372552][ T4386] tunl0: entered promiscuous mode [ 754.408276][ T4386] gre0: left allmulticast mode [ 754.479425][ T4386] gretap0: entered promiscuous mode [ 754.495311][ T4402] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 754.510558][ T4386] erspan0: entered promiscuous mode [ 754.525206][ T4386] ip_vti0: entered promiscuous mode [ 754.631483][ T4409] netlink: 'syz.2.8354': attribute type 29 has an invalid length. [ 754.652233][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 754.663271][ T4408] netlink: 'syz.2.8354': attribute type 29 has an invalid length. [ 754.671204][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 754.828990][ T4427] netlink: 'syz.2.8362': attribute type 1 has an invalid length. [ 754.886070][ T4427] 8021q: adding VLAN 0 to HW filter on device bond11 [ 754.919851][ T4427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8362'. [ 754.940038][ T4435] : renamed from bond0 (while UP) [ 754.948378][ T4427] IPVS: Unknown mcast interface: vcan0 [ 755.080518][ T4443] netlink: 'syz.3.8365': attribute type 1 has an invalid length. [ 755.080518][ T4442] netlink: 'syz.3.8365': attribute type 1 has an invalid length. [ 755.094960][ T4446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8366'. [ 755.199047][ T4443] bond13: entered promiscuous mode [ 755.219900][ T4443] 8021q: adding VLAN 0 to HW filter on device bond13 [ 755.575940][ T4484] netlink: 'syz.1.8377': attribute type 2 has an invalid length. [ 755.597738][ T4484] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8377'. [ 755.696450][ T4490] netlink: 'syz.1.8380': attribute type 1 has an invalid length. [ 755.751849][ T4490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.826850][ T4490] vlan0: entered promiscuous mode [ 755.832168][ T4490] bond0: entered promiscuous mode [ 755.837588][ T4490] vlan0: entered allmulticast mode [ 755.843367][ T4490] bond0: entered allmulticast mode [ 755.884082][ T4490] bond0: (slave bridge6): making interface the new active one [ 755.913643][ T4490] bridge6: entered promiscuous mode [ 755.925803][ T4490] bridge6: entered allmulticast mode [ 755.943604][ T4490] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 756.113535][ T4516] tipc: Enabled bearer , priority 0 [ 756.126891][ T4516] syzkaller0: entered promiscuous mode [ 756.133082][ T4516] syzkaller0: entered allmulticast mode [ 756.197841][ T4516] syzkaller0: mtu less than device minimum [ 756.234138][ T4514] tipc: Resetting bearer [ 756.312492][ T4514] tipc: Disabling bearer [ 756.371234][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8394'. [ 756.414439][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8394'. [ 756.746425][ T4557] syzkaller1: entered promiscuous mode [ 756.752531][ T4557] syzkaller1: entered allmulticast mode [ 756.840187][ T4566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8404'. [ 756.863420][ T4567] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 756.871321][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 756.871349][ C0] lec:lec_tx_timeout: lec0 [ 756.871896][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 756.917715][ T4568] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 756.941961][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8405'. [ 756.960535][ T4575] netlink: 'syz.0.8407': attribute type 23 has an invalid length. [ 756.970482][ T4577] netlink: 'syz.3.8408': attribute type 21 has an invalid length. [ 757.017572][T15818] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.028414][T15818] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.058291][T15818] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.075098][T15818] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.357624][ T4664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.412934][ T4655] 8021q: adding VLAN 0 to HW filter on device bond12 [ 758.667857][ T4677] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 758.675426][ T4677] syzkaller1: linktype set to 823 [ 758.712887][ T4688] __nla_validate_parse: 9 callbacks suppressed [ 758.712906][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8442'. [ 758.734940][ T4687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8442'. [ 758.785851][ T4687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8442'. [ 758.797064][ T4688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8442'. [ 758.999020][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8448'. [ 759.079462][ T4720] validate_nla: 3 callbacks suppressed [ 759.079479][ T4720] netlink: 'syz.3.8449': attribute type 63 has an invalid length. [ 759.275211][ T4731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8455'. [ 759.383735][ T4735] netlink: 'syz.4.8456': attribute type 1 has an invalid length. [ 759.399067][ T4738] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8457'. [ 759.633921][ T4764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8463'. [ 759.677784][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'. [ 759.787531][ T4774] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 759.928762][ T4779] netlink: 'syz.2.8467': attribute type 1 has an invalid length. [ 759.987993][ T4779] 8021q: adding VLAN 0 to HW filter on device bond13 [ 760.062238][ T4786] veth17: entered promiscuous mode [ 760.076575][ T4786] bond13: (slave veth17): Enslaving as an active interface with a down link [ 760.098506][ T4779] vlan1: entered allmulticast mode [ 760.104227][ T4779] bond13: entered allmulticast mode [ 760.112558][ T4779] bond13: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 760.676461][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8479'. [ 761.063046][ T4846] hsr0: Caught tx_queue_len zero misconfig [ 761.265885][ T4858] 8021q: adding VLAN 0 to HW filter on device bond16 [ 761.677952][ T4894] netlink: 'syz.2.8501': attribute type 1 has an invalid length. [ 761.769158][ T4898] veth19: entered promiscuous mode [ 761.861061][ T4894] 8021q: adding VLAN 0 to HW filter on device bond14 [ 761.891292][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 761.899344][ C0] lec:lec_tx_timeout: lec0 [ 761.904891][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 762.195199][ T4925] tipc: Enabling of bearer rejected, failed to enable media [ 762.568228][ T4952] netlink: 'syz.4.8513': attribute type 1 has an invalid length. [ 762.606182][ T4945] bond17: (slave vcan2): refused to change device type [ 762.633360][ T4952] bond9: (slave gretap2): making interface the new active one [ 762.642548][ T4952] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 762.669831][ T4950] batadv1: entered allmulticast mode [ 762.787875][ T4966] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 763.053411][ T4983] bridge7: port 1(veth17) entered blocking state [ 763.061679][ T4983] bridge7: port 1(veth17) entered disabled state [ 763.082468][ T4983] veth17: entered allmulticast mode [ 763.089684][ T4983] veth17: entered promiscuous mode [ 763.128622][ T4990] bridge5: entered promiscuous mode [ 763.139795][ T4990] bridge5: entered allmulticast mode [ 763.147492][ T4984] bridge7: port 2(veth0_to_bond) entered blocking state [ 763.155016][ T4984] bridge7: port 2(veth0_to_bond) entered disabled state [ 763.163983][ T4984] veth0_to_bond: entered allmulticast mode [ 763.174921][ T4984] veth0_to_bond: entered promiscuous mode [ 763.233652][ T4999] xt_hashlimit: size too large, truncated to 1048576 [ 763.372938][ T5013] netlink: 'syz.2.8531': attribute type 1 has an invalid length. [ 763.621704][ T5023] nbd4: detected capacity change from 0 to 127 [ 763.638801][ T5837] block nbd4: Receive control failed (result -32) [ 763.669241][ T5029] block nbd4: Dead connection, failed to find a fallback [ 763.677070][ T5029] block nbd4: shutting down sockets [ 763.688198][ T5029] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.699080][ T5029] Buffer I/O error on dev nbd4, logical block 0, async page read [ 763.708094][ T5029] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.718709][ T5029] Buffer I/O error on dev nbd4, logical block 1, async page read [ 763.725704][ T5030] sctp: [Deprecated]: syz.3.8535 (pid 5030) Use of int in max_burst socket option. [ 763.725704][ T5030] Use struct sctp_assoc_value instead [ 763.741849][ T5029] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.752335][ T5029] Buffer I/O error on dev nbd4, logical block 2, async page read [ 763.760295][ T5029] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.774511][ T5029] Buffer I/O error on dev nbd4, logical block 3, async page read [ 763.785064][ T5029] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.795293][ T5029] Buffer I/O error on dev nbd4, logical block 0, async page read [ 763.803854][ T5029] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.820400][ T5032] netlink: zone id is out of range [ 763.826570][ T5029] Buffer I/O error on dev nbd4, logical block 1, async page read [ 763.834900][ T5032] netlink: zone id is out of range [ 763.839452][ T5029] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.840139][ T5032] netlink: zone id is out of range [ 763.840153][ T5032] netlink: zone id is out of range [ 763.840162][ T5032] netlink: zone id is out of range [ 763.851583][ T5029] Buffer I/O error on dev nbd4, logical block 2, async page read [ 763.882534][ T5034] lo: entered promiscuous mode [ 763.888016][ T5034] tunl0: entered promiscuous mode [ 763.894118][ T5034] gre0: entered promiscuous mode [ 763.900030][ T5034] erspan0: entered promiscuous mode [ 763.902210][ T5038] __nla_validate_parse: 19 callbacks suppressed [ 763.902229][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8539'. [ 763.906671][ T5034] ip_vti0: entered promiscuous mode [ 763.926915][ T5029] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.934677][ T5032] netlink: get zone limit has 4 unknown bytes [ 763.980244][ T5038] xt_addrtype: ipv6 does not support BROADCAST matching [ 763.987726][ T5029] Buffer I/O error on dev nbd4, logical block 3, async page read [ 763.987826][ T5029] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 763.987850][ T5029] Buffer I/O error on dev nbd4, logical block 0, async page read [ 764.079170][ T5029] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 764.120319][ T5029] Buffer I/O error on dev nbd4, logical block 1, async page read [ 764.150588][ T5029] ldm_validate_partition_table(): Disk read failed. [ 764.164322][ T5047] netlink: 'syz.2.8542': attribute type 29 has an invalid length. [ 764.181897][ T5029] Dev nbd4: unable to read RDB block 0 [ 764.188072][ T5029] nbd4: unable to read partition table [ 764.217325][ T5054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8542'. [ 764.222949][ T5029] ldm_validate_partition_table(): Disk read failed. [ 764.263530][ T5029] Dev nbd4: unable to read RDB block 0 [ 764.269623][ T5029] nbd4: unable to read partition table [ 764.297791][ T5056] lo: Caught tx_queue_len zero misconfig [ 764.344925][ T5047] syzkaller0: entered promiscuous mode [ 764.350436][ T5047] syzkaller0: entered allmulticast mode [ 764.546874][ T5074] netlink: 'syz.1.8550': attribute type 9 has an invalid length. [ 764.699165][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8551'. [ 764.722059][ T5083] netlink: 87 bytes leftover after parsing attributes in process `syz.3.8551'. [ 764.847210][ T5096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8557'. [ 764.848547][ T5095] netlink: 'syz.4.8556': attribute type 1 has an invalid length. [ 764.880278][ T5094] netlink: 'syz.4.8556': attribute type 1 has an invalid length. [ 764.960791][ T5094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.197603][ T5114] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8562'. [ 765.390128][ T5132] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8568'. [ 765.553801][ T5139] syzkaller0: entered promiscuous mode [ 765.570567][ T5139] syzkaller0: entered allmulticast mode [ 765.790536][ T5163] netlink: 'syz.0.8577': attribute type 1 has an invalid length. [ 765.847640][ T5163] 8021q: adding VLAN 0 to HW filter on device bond18 [ 766.027650][ T5176] syzkaller0: entered promiscuous mode [ 766.041771][ T5176] syzkaller0: entered allmulticast mode [ 766.048295][ T29] audit: type=1107 audit(1773368224.784:7): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 766.076735][ T5179] netlink: 'syz.1.8583': attribute type 2 has an invalid length. [ 766.169060][ T5123] delete_channel: no stack [ 766.252346][ T5183] syzkaller1: entered promiscuous mode [ 766.258223][ T5183] syzkaller1: entered allmulticast mode [ 766.378811][ T5200] nbd: couldn't find device at index 1 [ 766.576914][ T5220] netlink: 'syz.2.8591': attribute type 1 has an invalid length. [ 766.631209][ T5206] netlink: 'syz.4.8589': attribute type 10 has an invalid length. [ 766.659335][ T5220] netlink: 476 bytes leftover after parsing attributes in process `syz.2.8591'. [ 766.681383][ T5220] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.8591'. [ 766.696044][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8591'. [ 766.746347][ T5225] netlink: 'syz.0.8593': attribute type 1 has an invalid length. [ 766.796086][ T5225] netlink: 'syz.0.8593': attribute type 1 has an invalid length. [ 766.911564][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 766.919808][ C0] lec:lec_tx_timeout: lec0 [ 766.924467][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 766.928799][ T5236] bond19: (slave gretap3): making interface the new active one [ 766.952269][ T5236] bond19: (slave gretap3): Enslaving as an active interface with an up link [ 766.985449][ T5235] syzkaller0: entered promiscuous mode [ 766.990952][ T5235] syzkaller0: entered allmulticast mode [ 767.032223][ T5235] 0: reclassify loop, rule prio 0, protocol 800 [ 767.104443][ T5248] 8021q: adding VLAN 0 to HW filter on device bond15 [ 767.389657][ T5272] xt_HMARK: proto mask must be zero with L3 mode [ 767.415801][ T5272] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 767.577187][ T5282] syzkaller1: entered promiscuous mode [ 767.583119][ T5282] syzkaller1: entered allmulticast mode [ 767.594085][ T5282] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 767.608933][ T5285] dvmrp6: left allmulticast mode [ 767.692947][ T5282] xt_hashlimit: size too large, truncated to 1048576 [ 768.223612][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.236217][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.247269][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.255389][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.265320][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.302329][ T5322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.327161][ T5322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.334853][ T5322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.353777][ T5322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.366186][ T5322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.465449][ T5316] lo speed is unknown, defaulting to 1000 [ 768.849722][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.514912][ T5355] __nla_validate_parse: 11 callbacks suppressed [ 769.514930][ T5355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8631'. [ 769.534902][ T5346] 8021q: adding VLAN 0 to HW filter on device bond11 [ 769.552969][ T5347] veth19: entered promiscuous mode [ 769.565665][ T5347] bond11: (slave veth19): Enslaving as an active interface with a down link [ 769.584576][ T5348] vlan1: entered allmulticast mode [ 769.589754][ T5348] bond11: entered allmulticast mode [ 769.597610][ T5348] bond11: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 769.632113][ T5358] validate_nla: 8 callbacks suppressed [ 769.632134][ T5358] netlink: 'syz.3.8631': attribute type 83 has an invalid length. [ 769.676024][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8632'. [ 769.687154][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8632'. [ 769.725952][ T5355] macvtap2: entered promiscuous mode [ 769.731551][ T5355] vlan0: entered promiscuous mode [ 769.738358][ T5355] macvtap2: entered allmulticast mode [ 769.748393][ T5355] vlan0: entered allmulticast mode [ 769.755003][ T5355] veth0_vlan: entered allmulticast mode [ 769.888956][T15825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.929720][ T5378] netlink: 'syz.4.8637': attribute type 1 has an invalid length. [ 769.940952][ T5378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.076642][ T5389] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 770.093876][T15825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.292559][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8642'. [ 770.410445][T15825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.438800][ T5322] Bluetooth: hci4: command tx timeout [ 770.510682][T15825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.595692][ T5316] chnl_net:caif_netlink_parms(): no params data found [ 770.669736][ T5419] pimreg: entered allmulticast mode [ 770.773555][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.780875][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.793121][ T5316] bridge_slave_0: entered allmulticast mode [ 770.802407][ T5316] bridge_slave_0: entered promiscuous mode [ 770.812394][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8648'. [ 770.853846][ T5419] netlink: 50 bytes leftover after parsing attributes in process `syz.4.8648'. [ 770.893437][ T5419] netlink: 50 bytes leftover after parsing attributes in process `syz.4.8648'. [ 770.932467][ T5436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8650'. [ 770.967084][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.979829][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.991135][ T5316] bridge_slave_1: entered allmulticast mode [ 771.000140][ T5316] bridge_slave_1: entered promiscuous mode [ 771.582692][ T5462] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8656'. [ 771.744487][T15825] bond19 (unregistering): (slave gretap3): Releasing active interface [ 771.774790][T15825] bond0 (unregistering): (slave geneve2): Releasing active interface [ 771.886256][T15825] bond7 (unregistering): (slave bridge2): Releasing active interface [ 771.896234][T15825] bridge2 (unregistering): left promiscuous mode [ 771.902778][T15825] bridge2 (unregistering): left allmulticast mode [ 771.931508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 771.939797][ C0] lec:lec_tx_timeout: lec0 [ 772.145315][T15825] bond12 (unregistering): (slave bridge7): Releasing active interface [ 772.376431][T15825] bond1 (unregistering): Released all slaves [ 772.399886][T15825] bond2 (unregistering): (slave veth3): Releasing active interface [ 772.410641][T15825] bond2 (unregistering): Released all slaves [ 772.432217][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 772.444497][ T10] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 772.453006][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 772.462288][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 772.472367][ T10] Workqueue: events l2cap_info_timeout [ 772.477921][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 772.483821][ T10] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 772.503605][ T10] RSP: 0018:ffffc900000f7828 EFLAGS: 00010202 [ 772.509674][ T10] RAX: dffffc0000000000 RBX: ffffffff8973f0f8 RCX: 0000000080000001 [ 772.517640][ T10] RDX: 0000000000000000 RSI: ffffffff8973f0f8 RDI: 000000000000004c [ 772.525607][ T10] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 772.533572][ T10] R10: dffffc0000000000 R11: ffffffff8aadccf0 R12: 0000000000000000 [ 772.541657][ T10] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 772.549621][ T10] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 772.558541][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.565124][ T10] CR2: 00007f065cb74e9c CR3: 000000007663e000 CR4: 00000000003526f0 [ 772.573180][ T10] Call Trace: [ 772.576640][ T10] [ 772.579873][ T10] __kasan_check_byte+0x12/0x40 [ 772.584988][ T10] lock_acquire+0x79/0x2e0 [ 772.589579][ T10] lock_sock_nested+0x48/0x100 [ 772.594360][ T10] ? l2cap_sock_ready_cb+0x46/0x160 [ 772.599665][ T10] l2cap_sock_ready_cb+0x46/0x160 [ 772.604833][ T10] l2cap_conn_start+0x779/0xff0 [ 772.609865][ T10] ? __pfx_l2cap_conn_start+0x10/0x10 [ 772.615504][ T10] ? l2cap_info_timeout+0x60/0xa0 [ 772.620697][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 772.625717][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 772.630746][ T10] l2cap_info_timeout+0x68/0xa0 [ 772.635591][ T10] ? process_scheduled_works+0xa25/0x1830 [ 772.641326][ T10] process_scheduled_works+0xb02/0x1830 [ 772.646961][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 772.652942][ T10] ? assign_work+0x3d5/0x5e0 [ 772.657524][ T10] worker_thread+0xa50/0xfc0 [ 772.662125][ T10] kthread+0x388/0x470 [ 772.666186][ T10] ? __pfx_worker_thread+0x10/0x10 [ 772.671402][ T10] ? __pfx_kthread+0x10/0x10 [ 772.675984][ T10] ret_from_fork+0x51e/0xb90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 772.680754][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 772.686120][ T10] ? __switch_to+0xc7d/0x1450 [ 772.690807][ T10] ? __pfx_kthread+0x10/0x10 [ 772.695573][ T10] ret_from_fork_asm+0x1a/0x30 [ 772.700344][ T10] [ 772.703368][ T10] Modules linked in: [ 772.708318][ T10] ---[ end trace 0000000000000000 ]--- [ 772.729761][ T5322] Bluetooth: hci4: command tx timeout [ 772.764313][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 772.770283][ T10] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 772.791314][ T10] RSP: 0018:ffffc900000f7828 EFLAGS: 00010202 [ 772.797595][ T10] RAX: dffffc0000000000 RBX: ffffffff8973f0f8 RCX: 0000000080000001 [ 772.808551][T15825] bond3 (unregistering): (slave veth7): Releasing active interface [ 772.816689][ T10] RDX: 0000000000000000 RSI: ffffffff8973f0f8 RDI: 000000000000004c [ 772.827279][ T10] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 772.837482][ T10] R10: dffffc0000000000 R11: ffffffff8aadccf0 R12: 0000000000000000 [ 772.846630][T15825] bond3 (unregistering): Released all slaves [ 772.857652][ T10] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 772.866457][T15825] bond4 (unregistering): (slave veth9): Releasing active interface [ 772.874440][ T10] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 772.883833][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.890463][ T10] CR2: 00007f283bb47e20 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 772.891783][T15825] bond4 (unregistering): Released all slaves [ 772.898922][ T10] Kernel panic - not syncing: Fatal exception [ 772.904741][ T10] Kernel Offset: disabled