last executing test programs: 5.406955398s ago: executing program 0 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 5.125571402s ago: executing program 0 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8000, 0x8750, 0x0, 0x557, {{0x16, 0x4, 0x2, 0x9, 0x58, 0x67, 0x0, 0x8f, 0x4, 0x0, @remote, @empty, {[@generic={0x83, 0x11, "3620ad868b6e382ee656200bebc59b"}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0x2, [0xfc3, 0x4, 0x5]}, @lsrr={0x83, 0xb, 0xf9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x29, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, @local, @rand_addr=0x64010102]}]}}}}}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9f}], &(0x7f0000000200)='syzkaller\x00', 0x1e13, 0xa2, &(0x7f0000000300)=""/162, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x7, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x2, 0x2, 0xb, 0x6}, {0x3, 0x1, 0xd, 0x3}, {0x0, 0x2, 0xc}], 0x10, 0x7ff}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x15, &(0x7f0000000640)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}], &(0x7f0000000700)='GPL\x00', 0xa, 0xb7, &(0x7f0000000740)=""/183, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0xc}], 0x10, 0xda}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffec0, &(0x7f0000000140)={&(0x7f0000000a00)=@dellink={0x88, 0x11, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x203, 0x80}, [@IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}]}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3876820a80a1985779ac363307675b58"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7f120241e113322fdc6f78d250510bc4"}]}]}, 0x88}}, 0x20040080) 4.898717332s ago: executing program 0 (id=2908): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000800070303000200140010004514002800000000082f9078ac1e0001ffffffff81004e219707b0a9dc0d71633e4dc1426d19add6f33bb70a7752b98d303e8ab863474d782209c7148ddbaeae5a59cac7ac3efcc49698e85aa79effd1a328c774aa1f3fd4db892a0c592bfacb76e250b0819969f65d44087dbda93dfc3c0d1fe095dd78ea69", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0x36) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x35, 0x0, &(0x7f0000000280)) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.496659094s ago: executing program 0 (id=2913): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) connect$pppoe(r1, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000008c0)="ab36bb1d1e97066fbddb0a9a7918896e5fe8d16f6e3c3e44446d030467d59627135d4e0ba3c8fecd9797b789e26fcffc39e4541078c61aaf021c38632b253f5dba3cb20a2dca3fd7", 0x48}, {&(0x7f0000000940)="935b825961637eedd13847a2b4d1cfcde13c358b3424954a3d0e1b594854f14578b3a704295041e5ba9ce03aa1a855780284276938d06ed7a033277ce11d486101dc80e052c8c77a98a58a6952f3e3fd981045ab65f4c0caf555ec441ecef9155c99b8ed5d021b27d1fc42271e4d326261a2ca03ad6fa2798f4b070cdefd16593fa491647009f75d0abfa339cae23f3b0a958413ae00bb375bbf66199721b22486b64fbd79ddc0699721432365bbc8cbb144738129f760626ac30e6243f8580cf98cf01ca69f97586de55012288cd0a9a6f16ada47e8f32b1d005d0268aee0ea90ad81cfe5acb5032cd6", 0xea}, {&(0x7f0000000a40)="f0bda5dd40985afe7197", 0xa}, {&(0x7f0000000a80)="4076987192ae1bbfa67d906469ad89929ae093fe37d3d277f0edc5bb2549ac0e7d3cc1deccf9ff822d0dcf0082c5ef8859996416b0d9741fe3f6e2fd319ceb9d8f07e7427dc9859c881662dfa8d8b5be36091d72110e83234c4b9aac6d96863de31fe9518a", 0x65}, {&(0x7f0000000b00)="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", 0x44a}], 0x5}}], 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRESHEX=r1, @ANYRES16=r2, @ANYRES32], 0x5c}}, 0x40) 4.154760909s ago: executing program 0 (id=2915): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8936, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x2, 0x3ff, 0x14, @private0, @loopback, 0x20, 0x7800, 0x3, 0x1ff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xfffffffe, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x5f, 0x4, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x10, 0x8, 0xeb73, 0x3716}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r11, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0xc000}, 0x20040001) 3.82649516s ago: executing program 0 (id=2920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x4000) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 2.554348249s ago: executing program 2 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4e3dd9b5f9daf1b8de8cc231b3e3cf40000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf250400000014000100ff02000000000000000000000000000114000100ff010000000000000000000000000001"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000004}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x14}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fddbdfba00b704b7d931bb25070000000a0004007770616e3000000008000100010000000e001700"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20040000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @dev}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r9, @ANYBLOB="000000e7ff05000014003500626f6e643000000000000000000004000a0001"], 0x40}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r10, 0x0, 0x0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f00000000c0)='\'!\x00', 0x501900, &(0x7f0000000100)={@_ha_fsid={[0x10000, 0x7]}, {0x7, 0x5, 0xffff, 0x1}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfff, 0xc}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000340)={r12, 0xfffb, 0xa, [0xfffc, 0x8, 0x7, 0xffff, 0x3, 0xffff, 0x4, 0x8, 0xc029, 0xa6c9]}, &(0x7f0000000580)=0x1c) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r13, 0x89ec, &(0x7f00000004c0)={0x7, 0xf7}) 2.151578295s ago: executing program 4 (id=2937): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f00000009c0)={0x9, 0x3, 0x3ff, 0x2, 0x3}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x4c, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06f4ffffff00000008000000020100000000f7e9c10000000000000000000000000000e05b55a6b9a5d4769cdbf551e116a5b2f10f0745151ee9561a13b282e89767a208651db2d7e0b8f6b79b8a08bbe11f8d57dd835f1c8c875f2e43d7587e275cfc40a5488b02589f5577820ccd5e786c38846f3fea520f73b935", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r6 = socket$isdn(0x22, 0x3, 0x11) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000005c0)=r5, 0x4) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000700)={{}, [@netrom, @bcast, @default, @default, @bcast, @netrom, @rose]}, &(0x7f0000000780)=0x48, 0x80000) ioctl$sock_netdev_private(r7, 0x89f6, &(0x7f00000007c0)="82e92b032f056479eea2039c1b1f55ef978d48e616647ce53c564028551868c77c3fd0738a4f674ed97c1bd4a186d58a8d0dd92b35777dab8b176a278b5a3c90ddede83698f294f6715d016571004a46b32e470f37c027c12c73333143a5ed64e8208bd1e4f8b3eddd891115af30e9010de44e8faa98712a6aa618f344515e7573a95acc006f72ab") setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000640)={r1, r0, 0x5, 0xec, &(0x7f0000000340)="feb42abc5f8b52b7dbadaca48f609bd543aad045c462bdd7708bbe9d567da57cc74d70e85bfdf62adba76aa6985751b6e6f6901d8ec31df5896baa44df4a74eeb262835d51651fd48c50d45bf21de08d577f90833214c638a5d95a38edaee531ceab85ac8525c37514b3a9e78f8b7b2395df01f3f1029b50e7e628abfc7465049d894356d0b6f588575997c0c919d5304d85e822b185fac2946203f52bef322bffc27f7c8a7217f1d46a186a63f632a9ffbace19332e4e6e206bba13ec5f19079fa5a124b551e4b6a8380e16366c30c7f3af03d01898b79b93fa19abb15fcbc18a782dced3944453cc91529f", 0x7, 0x2, 0xac, 0x7, 0x2, 0x0, 0x6, 'syz1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r10, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x656c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$rfkill(r5, &(0x7f00000001c0)={0x7, 0x6, 0x2}, 0x8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYRES8=r12], 0x18}], 0x1}, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) mmap$xdp(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x1000003, 0x10, r13, 0x100000000) 2.135096479s ago: executing program 2 (id=2939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x824) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x824) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @loopback}, 0xc) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) (async) 1.910890074s ago: executing program 4 (id=2940): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x3ef, @remote, 0xb2}}, [0x9, 0x6, 0x8, 0x2, 0xca3, 0x101, 0xfffffffffffffffa, 0x3, 0xf, 0x3, 0x5, 0x22, 0xb000000000000000, 0x7, 0xbf]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x5}, 0x8) 1.910615581s ago: executing program 3 (id=2941): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000080c0), 0x0, 0x71) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000340)={0xeb, 0x9, 0x8001, 0x1, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x6}, &(0x7f0000000400)=0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket(0x2d, 0x2, 0x0) close(r8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000440)={r5, 0x7, 0x6, [0x6, 0x6, 0xca, 0x0, 0x0, 0x4]}, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x24, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xa800) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write(r3, &(0x7f0000000240)="166cb254460f16dfd6f4759665ec4d00ba2551c178d29a459e1f7daf1f9a9e55c0b618119b8c1024000ada42e466f62437", 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000003416b7030000000000008500000005000000bf09000000000000b6090100000000006500000000000000186b000009000000000000008c0100005f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x140809a}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x604, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 1.828774631s ago: executing program 2 (id=2942): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @aes128, 0x0, @desc1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="864052dd456e5e8dfa0b192afc3c6462125930112ba093dcdb4848c8e57d3faf97a6a6efd8eaf5bcc03ced7d13ceb344b631cdf9f0a5a364864c3ca9ae52fb345b7f40b2c835a325623c59f09486f3ab31369fb6136ac21f07b5d8cdaa9dd5dc50fc72754d705963e3afc3c910855677239a50cc2f31a4bc0339d4efabbb404406511907c57299fccdd7755682d2a705145183d0", 0x94}, {&(0x7f0000000380)="6767d64d1777fb93d26895fc61b4", 0xe}, {&(0x7f00000003c0)="e9baff98d7f9d55b352a74c1d6b88b696620fcbc285e84d7ee983fc036f1321bb663d37796d8eac4058562a759ccee96d65415191275f0b4778aff1cd961ebbbd719357af20fd995637269f476893a9c6066c088a12186667406943044f9a9c0be516158f70ec255eb0972f8c6f2df21de81c81a190de78662e3dc376584db6fbc2a23520cf127b936e78f43573d4e62af1bab215387f0278e61721f", 0x9c}, {&(0x7f0000000480)="00da2685f4274dda9aef26eb941d977040ec577b51ae44ffecb92a0a3fed3d70908f944f8c09aeb007f24c34639617464d02a03e8fdb1dbd8cea33956f82393dc861c56302238eabe2118d859f40a0b99c538a356fa24a7910ace7e9e65d11d3c2cd31fac9fabb46ca9d7fb167a52f15dda0302b46cd77695ebf70bfd0df3eab8fc14003c30390390d37a83b72895939ec38ad3f65acc7d383a29f58f45500f678e7769cfb15ea4eb1891c7d84ac898b3f1e", 0xb2}, {&(0x7f0000000c80)="9c7771a11c3bc9a4a127a73c75a0e56cd22bdc9ca78a433e124321fafc4a5aeda519f3cb0ead1a4b72ac87a82ca9fe5ecc1adc95a13f343cea3488fb7d7bb6afa3d3e82e79afdc2f441fb12b9e7e591cbdc55bcd4dc73717d2cf357e8c75eeae5765e160da420431027c256a4b0682788d13a61245e93b35df811a4bd9d75d3409485e47ae983b0c4e8bd40689ef1d515e8e6173beb72c8615259dc3159e6f12541fc3076251404dd4e3c51cd814d53da1cef906460dee4a70db75b405e14c70b7f965a3112f11ee6e444c11589120d93fe97a954f2710b1756b6f79d3c2c06011c1ae68d5ee885ec447e2432d803da38f3525f833afe597bf", 0xf9}, {&(0x7f0000000600)="f596f6aa474c9dfd512031da78a6ffa567d09896c70ff4ffd7ff92f98d63fa3bcb24ef8df90f3dee0184faafc8952fae7f44d5405e50b001e4235507c3ad03c23754cce8d4256f3bd564675d4e348e13f6a8bdb746857d328ff62675fa1df20ea672d3a6cb91fc9f5d2c910e5c715d0ecb5603ca35e74a7a30455fd85dcfc2f1c68fdef8517154741761435efd41c211d4bcce5420a05b0d9dd5f05f15b3f5a9bf7d694ba0e2a353b87fbc12915f07fa3d442cd0d4e1f87b107c90f3d0edcee5bd19bbcd6a4c3bcb24e2", 0xca}], 0x6}}, {{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast2}, 0x3, 0x3, 0x3, 0x3}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="baf0d676fc2a69253002942f3ddb934a9cee8422341070d94eb6f0d430d75929c82677ea9b92965f2fb9b22e4ee55de54523b17353fd290ef582afd5518b8b3ac1b0c06fc732085318d78ae3fb738b161d4c9499cbf3d65988b1dac08f7fbf273e4d5c742c98533d2b27e6cde4f0f0a19dbfa892f91da60db06478d0bd0ccd4ca827358f48fe89ce3c725b37f7ed2361a5d4c6a62564c08610d092178b61dcde09bc534e6034619e05643a737059d4d3693197859c356fb899", 0xb9}, {&(0x7f00000008c0)="aa65aa740dd92ad5993dd8fc226d58709d24079729150eb94c609221301f85866987447b60bc31b277cbd9261ae1d35a17200bbf32768d3e2bdb73ffb0e5ca7a8497ad77ab8bcaadea72edb6620a3b482a5e0bd541b56e512dabce3d0d5f7b430b6d20b2fbc78d037b50ce36341b03b80b48a9295f47b3edd84aeafb418f93f53380e8da0aaf6fb8f6cb8b3cb508c89910866a0c540d89", 0x97}, {&(0x7f0000000980)="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", 0xfc}], 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x130}}], 0x2, 0x20004841) 1.658917585s ago: executing program 4 (id=2944): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000023eb9d99626268c0da43a3f06b83af3500", @ANYRES16=r1, @ANYRESDEC=r1], 0x20}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) (async) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0)=0x4, 0x4) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000000)={'macvlan0\x00', 0xc8d}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r11, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000025c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x130, 0x12, 0x0, 0x1, [{0x12c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x110, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x109, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x800) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000080)) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2}, 0x6) (async) write(r2, &(0x7f0000000000)="3f000000010040", 0x7) 1.489160144s ago: executing program 3 (id=2945): close(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) sendmsg$nl_route(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x20c, r3, 0x601, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4055077991d9614b7978e2a50d420a4a13badb588cb638e36a066bc576b33c16"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d574eff05b3084d54522053d4a2970a7e2e5fd838dc7058a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe40f}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5f193923cb09b1f9177cbbb912b18bd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "34fd120cc96a7dc2"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0e531bc5be390db30a2fda486b6c1b4258fdc7fe8914af0a8491629a22e80bb8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56b3cef4d18d3c24f8b4ded056ba9df8fa093a0bd236bfa3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8a286fd77ec451487216a81ae8569c5f851ee02767065fda0670f38f8f3647cc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e82991f310f17efd96fdf358bff56854c239b4c56e0f41c7"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bbecb7a180ce18d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bd10855210f46d3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b1069abc2fc8f35e0bea7799342be8a1e28a236be016a960"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bb30370fa3ce74a53d615323851a49b0a2b1ea5ecf6bf1918b11c25d6f09f504"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="59dcab8e85491c5808bbb56377da9aba46706761840d4bc3"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4fc84444feee08be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="097109ef167513d2d223f348aa44ccb4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4195ace71cde8541a841d4fbfc0ce8e0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9280d70c2db59a50176e0db8bb0167ce"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="33fb49bcd99be7aaecdff9be23ded9ba5dae792256975d68"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.429531135s ago: executing program 2 (id=2946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0600000004000000080000000a00000000000000", @ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007001000"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001c001000000000000000001815b200", @ANYRES32=r1, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) unshare(0x26020480) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02020000521100"/16], 0x10}}, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001940)="2e000000100081886b05e96253600c4ff435e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x38}, {&(0x7f0000001980)="c559c77254bfb9cadab2b4cc7cc90a93733ea30d631e4d757338278804aef90bd82ee0a129afa2c38370322b04d478b2ac8cef9cc4441cefde206560238a2268397857b78347d90633c940dadb0c92a09f53c8031a02379376d1e215a961473812319719d6d5d351e12820cfb08ed90c754db0aa5e09b57a4a1f3eddee81d32c8ae3125976497cd4c71314d2336a4f8adc2a765eb22745d98dc8c811df6d953fad31f1ba72b985960ef9c25d8bee", 0xd2}], 0x2}, 0x80054) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001900)={r0, &(0x7f00000003c0)="1d680d23681484363907c1f745c8dcf0ec203f982edd0124ef6e75ac4f9cf16a4b929765c82df92e4cadd2297b0afc460cadb9c6282400b33cd0ac402f0d6fbb204e305591d10f6de79401c4d4996226bd2b58742c5bbbcefe26", &(0x7f00000018c0)=""/53}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=ANY=[@ANYBLOB="0100feffffff00ffffe0000002fc0100000081000000000000000000010001071b4e230005000000003a00000000000000000000000000000000da9ff202ac40816f08b9e69cc20e212d464c6d326c75f5a031824b66baf42d948768c2eb7d91c556459f87ac4c3b30884147c436893c9d30f20a51dfd504611757939966c53eada0420576", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00fffeffff"], 0x140}}, 0x844) (async, rerun: 64) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000001c40)="4bcde204ee755d55e752fa156918ca8072deee1bc75f903fe96c1729c26292") (async, rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) (async) sendmsg$kcm(r0, &(0x7f0000001880)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000440)="3a5a498373a07a6dd6ecfdc6dea68f91b508eb82ea36ac70469f1e70207321878460ea5ab257ffc5f33708abebf536458b715dedf1083c02c49b8b8aad5db677bb6a1534dc2f10483ddfd243badc791a612785c0f53a34dbde8f58dc97d360ea78c585cc3204dca3391c872dc9b6b2bb59694863c9d24b96d234bfcd66396c73d5baed6e4e301acf05a5acabb80a16487f6c4a952c41ebf67206afdddb3d8326961110d5bc63f7825543d707aaf794b16f17d019318cf3f46d475ab6561a75b33c29d469614a723bf36faa76fa34f16d92972d5793752faa0b421bc110e9f5f5a6ee8e567e61a318e493bbe98a9cfbc6d2de144e2e42bc5ce16838af043535f591ea1fc6ff6bc461c336d2aaad9f97147f78b11106fd7ca9b3c00848563f0387943e4509a7e40c2d234c03ed4a219efa07b549a58466019d04a1f280071f2f6d9ffe21677b275d24b97443a754ace57a776b49f2cb1003f929a5a37c82add4a36e03affc265d07f31e47bceb7294cfbb6525481031b793a92c22728761944401e4e480aeadfa51a7f24e2a233ca716de31b72237d5ff59f5349cf2530a505cc96836433c3b564a58e7b14e6eda811ff38938b4ebfbc868cc749316cf86485fa0aefff52e8150c9e456137d24db0ce8b7ad4910ab0c00c99146779586971874cdda4d1c1ab7b9d983529fa17ff64bb8624128aea2d952c6f3e77eea087f7297d0e19a4c32604348470220e6432aa0610845866c8b0bc2f03f4e21d9456a4fd8489c207717222202797d1f67fdfd17c79558f2dde4a16927c2c5bb93362b56e4b2c7f8c129cde09d36da4d883725a755777aef4134de2aea1ded3218d4dbf2311fd4c0eebd93457edae6276b8222113e89ac5a859933d3ce4e923db7dd5f931c531c4f80fa67307c86e035cd5d7c98dad07241d271b6eafd16427ed8d781f31fd24846ebff67e54897d507dfac2f836abef1edf73876703229e73f8de5413b6c97b90f05e7efd86ba2e8fcc1e0863903b80af763bf00cce69c1815e0e45d487fbe719ab75edc26cfce36f2234d91ad61f43925e2495ca2af4b89027c7dbc7a724e7451fd6b05d1d51b36bf8695ff132306e8b2b47dbf5337b58f5dd73d5ea0539d311aefcdd67dfde4aff998d47a5cbc6adfca780b8c52cc0ebc99e178e7f20c6d84e6495c4544820b5680a41ed3271cb790db47ef6b8a3c7f9f12fc8d6c5a9de76299b6409fa28cae54c0ddc6737207b19786d2f5bb0fef329aee6fc1c12598d2c7f1632d7e4000f19b952a02fffd8e230965f4056069ce8027d2b5d57dac0579cf94a94d99130eb68b86252d84666d973d9239b60f6adf723c798362590327d9c1a0ea1e967e635071a42bff7a10f6d2bd0120369e838298c45b832275ca3ae79d8aa511b95273d9ea43391d8b7426b07594d28d5e361c046b29452d9ded77c92b7c611e9fa7fa96fdd87057ffdb6dfc87293df9336e9e4aae4d8f0ddd5eb4d206dde036ce88388dc90c81b249465701e742c5fccea00f435c44802fedef2a96b7fbe52fc466d51fad5d18d7c49f554e95338923af0b386a8a408924906bf8fe52dc0ea733b4d13f9f8556272dce63e36dcf25c20290e2dbcf2e0647154bbba4d20f9ef417bd896c5202ec6dd889bbf1c5a5d50596a602c6ad2ecc5659e3af561ccb8ec1e5fe9fa8cdb00ada7cd324806910c887788331fce9a35a011fb58542572c4fcdfc8e44c599a7fca573988dd333463a1ef164ccf58e29818b93966413213dfb87671b0a63cd92b900ba509bad296ffc5cfbb769b657c31bbb10ab466ff760933a73a7cdf20b4bd575b008ab68b722b5d88ed2d0e2d68bbdb1926c73270b8c102dd29f118646702e1546e117bec9699de102b52551a3a9f0dffac905c99b9fa1a1239d6f46357f9211dd4ee363bc9a4441d273b15e2129dbd45136eec9a0939e8ff584266e2911d68838b471e0b0065acefb6a6a609d76c2b4c7816c94fd5d9cfb3f007491d5670280a4d1b69a6f4a1a2b46e4cc4505337bd45fe5f63fd80f011b4a18b15846514d9f7e759b3f3263bbfa4c227d3fbbca3e76351aba861a1f516829053185bcc66ace7427671dc92a220adcebc0dfb30969bdca0c6b55c59773b95ef156678bb92c818822ba6d7816435cf0359b3236826737acc0c96a41d2bd95700a6df43c7df09f217e4284013117a3a45219096b8ead2f79d7e26c09a2404b56f2234286028b38c2893e30282bc3afb05437d6e2c992a3e081c9b5486f7a5634768e0f94dcc77c5421797a5e6e2c00d740a1da6f7bac30ff55170ee01eb8e4e8cd0aaf369180dab0bf3276f2dd8dd2fe93ced5bcb81eb3e7ec8678be913c285633f8336c1f290cfb1f8253d7c25a6b9c4f44d1d65697ef6fce686d965479df911b0379a31e0a3f74b4338c736132b12682823c99d076de0a7673ed1c400beeae1d611cc411f16b4498fd28553fe154f90ce101b4c20e7f192fcb392c671f39c8665712e2a076424785fd30fa9a9c0a5f61b70396571085653878d63907d8285a90de69e3405ce40ad040327b0a5a3619a2065698967e1055a7c19ab050fe1331e917b3b1673321c706ab15b343c032b023e7b16b088d1ecf269c606d24b32bcabbb804689cca4df37b2ef22445cc760e9d2ce6d3b098d7279a9071dbf1a89fa7a432ac2545f15d39abbecf3196f647b6b9afe13af443134723e63e03030a60720f1a1445eacd6595feaa50e15b723fdd7c849cdc5dfe24d500e81ef279647e080b957a506967753e53322507db954b53437a24a37ff25c76627ed41f12f127354df1ac4d6f58ae927c5624f4760e0659187dff9387c6b9edb12dfb86f23b21556e9eb669b643b251cfca3a834793661e94ac5d465e74d5283dc5d53ffcb6e72211b9fe55e4f68efb0078aa39f402244bd7cf9a3321b792ffc5575a52cd73833b4a28c31c0265f237bcc58ac4d25adbfef2c9cbbc1b25fd2e325b70ac26fc1f23078b726a9889164189941476b080a46165edee86d0d3770dbde670c4e2da3c807b916964c34fba56691f91a2f3954df1c1ae9e3ad2746a351b18c77172e24d39dafc35e3c52d059c85540e6ac6b2bbb5a9e5fdded78daee65eb4f3bf5cb2a6b66c8b1979a3d953454e7a468d1e793cbeaae504f5fd9a67cb55621343c0c07e185ef3b1b6235aa31ba9d871b1ade4efba0322ad646b23409a19f414b5309e653a514bea1ebc93c1d8700404bee05dd770993f750c01a6b380ba3d608efd272482210d507b509de88a5cc9383772addc69a54d53cecbc201046fed95eb45e2b041adf394ab248dfb2afdedad9a34216c901d4cdc862a827e2202f6f1f2e40c22415605ac6b325e6c832b62560a49305b80db0a21ca7a1dee4fb95fcd1c4fd9da3540cfd12ee3b5de484ef0627a1f18f3de87d22900e2d3a5621704cfe2a106c737097460066ef43b71e031cb0b31a49270218b683d71e4fc2c38e5c2331ef27c766dad4e99a925812a1550d8388bd3c044e3525ec9117b01eed5c0563836be21e0f0570a49e65ad3138a2493a939077638c83f2da5fa37a1c702e7db74bc0d57ffd518679732d1b83f4469d66f27707be1beee28481de068c1c08ef67e225f66e2061390de7476e406b2df443c24497a68fc46b0cf6ead144b0930e94a2899e22a5b519ac22779547d5b93e10bfa4b3bc9bfac861b71de7bad57f874a0d55676db2ed4b592c9ddd34eec3d7a39854a2ab7eeb44b0ae00886aa4801a252c130536c3ada6005c10918eec86499c11e7324b204da02f2e575b4a3a0a9422feea3543e064aef2c65d50a6227a1c8a23c7c05b901d4307c2c6c226dcc50ddf20750c899fb94f600c6872685c14d5c73b3c253e2645b341f6d20333e118515bb13c8543bd64cb62219cbd16b0d676349cd83afe28f8f92ddbe518fef2b5296068b87415135fd22f3d200d3261b1152a22777c200e4d2f63f25e0b816f338293321ce26e76dd767cc217025b73b061c15f75e1d11c70a098d79dc423a69c62205fca362d85baefdd42911c8bd237ae2962f1854e64c09b606e568146d72704812aa60858d14aaca43af32b6ebb15cb755feacc6101aa3e1b6397c5d8e8c4dcb7860aacc4cc43e2f9ca8c893e273803914009e9af9ba8da92cc8c20e88db5d4fdea4ceb5d1a699852780e1a0b1914d4377515b33718ae3d11aaee4f80d581994adae5fbe5cbfad4063da99ef4dd0235a272363d1a3a41d5e711db4d6dfe48f69ab4c8ef793b1358918d44c68812e730034d306a7db0eff4c99f5be2de96fdc49044f94bbb956f09500d1f9c26f20f75dc7aa1ef862dc9d3b93d8cf2d0b0cdd447095a3ed2fae336c9f65a70bce67cc70b506e2130a3acca17848235efb77913f52d3193f0e68d254efe84cefcc5ffd6f5c0c73dc2a178953f70bcbd9caa5ffef9ea3861729feb4a1e9d89ea759d748df70832641447b3df2e72317f3767aa8dad9b4648ecc23aa82562d1e83106dd189f0c1db12c992750e9d4abc139c135dcb61aee2c8f64b5450d1a51c40691bbd68492adf98757e2db5f705fb8ef7aa05ee18cdc836614640759af78233e44ad35219f7d916ac100bb7206b6043374f73751c5877d00b7e04231f7a36a39f447d51871f7140fc6db4286f8e89f0092a71a3efd72845ae26fd2cb16fff20558b387f8680554ebc8d876cc26cf3678fc0feea651872b7f3f6d39d021bfe54ee586851f832e886528ae253d9c098e61c547c87837d5a1de956f1eeba441a8e6b62dbda0cd683fbcf9dfaaf1241783c1b1ef503fbe44dc411283a7c26f7dff2f5dbf7a216156687fcfcf5f4c7ca90b49b91007c013faa0daf1ce209145848ce2f7d96bdd238d17556d72d38fb327058ecd790d6869424b36d778f4a38af12793716f5f3fb7a02c915ff025b3639ba8ab3d963d012a9b06dad1f4870642abce73f53615aecc494d9510527f7af175510bf32164bb3c3c425dbeb40a85fe8ff43b7b8888775baf2718a992830ebe288be7ffc935cf556d543e696f3dca8502e3b81566de8f54a0b9ad091f717da96670d796e1fe52ee53fb20e6aceea465b5b4138b21b250ec8ea165c115444bbb7f2de387ec2149e862a7c378714fa2726291a159054b15b8a25362be9a28be4787103fe48abdf2aa1913c52bf33fb810c03e85c137cbdad19dcb0a1ae63ce55f624ebfed3206737b9039535306894596ed55e1c6701b582e352b4487cbd5b5237b64446c1bce890eb78dfdd282c1d2048223cb7e946ede3f9704ecbf6cb86560389dd1e3705939781912cc7c9a0eb33d4e11361fcb9d45338ebf4e8ea1130937b1e3261e72e3b0f505360fdfb877d25cd9a657e90bb060d8ed58db851fadef21bfc9b571483ea355882e9bddfe9f9d60822f2da3c65dd86d5ee4ac1134bebe2a4df25e6874586b6be806ce01107920e5cc94c574cc138dd07fcecc31922ee56a79e9391ab27377d8698f595613574bff25a9123b6cf4a340fc726eaecaf8388b11632448733438983cfd35d291554fbe498c68e36c7316080f04ecad92cf567757392a85afee1d620d1d0a6744c65e9544a13436724189a2040552017834255f254f1b298ee8433dd013b0a3a6b779f6cc622a6219cc9bf14e6487dd8d83e5e98843e5baded42d131be81760573f27e35f57eb915d91ca9fd088e28bdbe67b6c3897ca46278bb13fd469b11caf42688dc4a4db0f8a50074e0c6a9382a3483b09526873c0e67429a31424305479b328e059533b24c087f65382197e8bf3a1f339093d6cb3d0c78", 0x1000}, {&(0x7f0000001440)="9c6a0a83af159e8b1f7947e2314a4a97d1720708b6a9636c887e6d9774fca12cd8d703c181d755eb564c1a329df170f7238fbd91205648b0d98db612c5a00953aebc", 0x42}, {&(0x7f00000014c0)="d4b6ec9889b26f298e941ea0645540efea62f11135ad1cf5179f33feb998c47350c3b6ac44c3800ca9c0362ee1fbb9071cdb338391067bc29fc49d77dc3512ab687e0c6a81074a490f58142d25adc54ff0116fc56a5201", 0x57}, {&(0x7f0000001540)="503907b1d35a4a6181e152d76a9b5cade15f30dad4c9e8a220f451d97d11d6ac933dbe905218d68c22a5e3a518fb9f65b18f17cf26465d3f20910f6ce136ebecc0a4d2644755cbd2d2de7083fc4a3c0b80", 0x51}, {&(0x7f00000015c0)="cef23617e2b46ab7e09f00f664e96189ab6ef314a4f5d285125fb1732b2b867c3a172b33d1ed06a783f1829eab94cdf9852d8443c9ea193a74a502d12ee429d2e1b39dd3f1426bd00568f67359b40278b66829793a8a16f394999b8f5415c208c9abfcb3dcd21fce3926e70e00feb16ce74e4cb4af485ef6e6f9fd148bf618db861b1aef5747576cfafe9342b6cb8f166f78f9776c56396150afd266eb87648cb99b5c7fb051f1b54bd3cddf2c71563a01c03489d8fefc328461485ba01a1334a63bcfbef3293c50b840bb2e7d88d47c", 0xd0}, {&(0x7f00000016c0)="32b6645b75f217311601b35541d2a70a2b7dd43ed22a4bd9a0a1bcc982", 0x1d}, {&(0x7f0000001700)="2461c7b3ab36a04ad2343e7caba3a5ee50112e8b5ec6cd7bfa8cf613aec34d272c959cca44d3899d09848da71ff062327d9048574a40255df80e3cf67ba2c3f3758181e5aca8f7d14847e3be017d35c3aaca06f9807c0fd64415342cc5056fb93307a38f734f6aa0180b42743d97eaf9bc4f06c8226b1ccfde2bbf1f46b7de4a87d2551a02ff83707fe07306ba2290b2b83c2eb6f66ae29a2aec63f9da5d5d710646a3618a09eb6e8a6545882137c6c1aa50fa", 0xb3}], 0x7, &(0x7f0000001840)=ANY=[@ANYBLOB="28000001c5000000840000000002080000006104a467eb7f91c79729ec23259b0dac181f9b017b00"], 0x28}, 0x50) 1.326772209s ago: executing program 1 (id=2947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="d8989d4d525376ed5dabcf960aca2f62d05c2762b9627230a27e02b352933517d683da5ac86e50b516cef08074415d6e205e76f55761150d69171db8760647e04bfbfdc5dbaf08cab0f76e1c62402ee3e597ede8b826a765beee2061811e0bdc65e6b918b31a510ceda0e8aab57d3545b50aa559fea9dd0f324c69dee72dfe1b62b955345935f1dbc7cab2d5887d0729797b98d8a8f7", @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4c080) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) (async) listen(r5, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) (async, rerun: 32) r7 = socket(0x14, 0x2, 0x4) (rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x4e9, @private2, 0x2040000}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r9, 0x400000}, &(0x7f0000000340)=0x8) (rerun: 32) 1.205780331s ago: executing program 4 (id=2948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) 1.198923595s ago: executing program 3 (id=2949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 994.754385ms ago: executing program 2 (id=2950): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x240, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "cb92935151d99585d6fb90c326ddb8d910be89b247112f6aa06bd338129e698b", "2f4e39a2f612c9d609b2999d5d7a13c5", {"daf12c82f9524856fbe9da0c1fe1cd42", "d18fa673b535169448bd72f65c3538e7"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0x0, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) r5 = socket(0x10, 0x803, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x6000, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x0, 0x0, 0x2, 0x5}, 0x20) close(r6) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c00125e0b00010067726574617000001c00028006000e0700000008000700ac14142808000a00149ab5d7f9e00152000000000000000000", @ANYRES32=r7, @ANYBLOB], 0x54}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 994.069614ms ago: executing program 4 (id=2951): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x200) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000e80)={&(0x7f0000000000)=0x2f8, 0x1fc, &(0x7f0000000900), &(0x7f0000000500)}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x1c}}, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000909000000008000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x8917, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f5f, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001180)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x24c, 0x0, 0xc08, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x24c}}, 0x10000) sendto(r9, &(0x7f0000000000), 0x0, 0x44000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}, 0x4}], 0x1, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf37, 0x6f}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x8085) recvfrom(r1, &(0x7f0000000380)=""/49, 0xfec6, 0x10022, 0x0, 0x0) 960.902879ms ago: executing program 3 (id=2952): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r2, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x10d71000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xa913b000) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000000700)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0xb4, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x10, 0xffff}, {0x2, 0xfff3}}, [@TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xe, 0xb, 0x1, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0x1]}}, {{0x1c, 0x1, {0x8, 0xa1, 0xf24, 0x2ee3, 0x1, 0x9, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x9, 0xfa, 0x3, 0x0, 0x2, 0x7fffffff, 0x1ff, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xb, 0x9, 0x1, 0xa, 0x2, 0x5, 0x80000000}}, {0x4}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000700004002dbd7000fedbdf2507000000", @ANYRES32=r8, @ANYBLOB="100001800c00048008000100000800708a31b22a2f000c00018008000100760001000c00018006008d6e3614418c6e7e428745a930d8b71c2824042fd39acc06c3291c97d1978b51bdd3de5ce98bd66d5a1c20dde1930da85b26895676bd88b2411d7e000000000000eddad16d5605834500"/129], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r10 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r10, 0x894b, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 805.868523ms ago: executing program 3 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r4, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c90", 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b", 0x36}], 0x1}, 0x9fc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f02f839e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) 658.914066ms ago: executing program 1 (id=2954): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket(0x840000000002, 0x3, 0x102) (async) r1 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r1, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x14, 0x7, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom(r2, 0x0, 0x0, 0x2021, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x64, 0x48, 0x4, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, r3, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}}, 0x2000000) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x64, 0x48, 0x4, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x1, 0x0, r3, 0xa}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x64}}, 0x2000000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x2, 0x1}, 0xe) 626.463631ms ago: executing program 1 (id=2955): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r4}, 0x38) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=@newtaction={0x1c4, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x1b0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_nat={0x15c, 0xe, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x87b, 0x0, 0x8, 0x1}, @local, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x8, 0x1000, 0x1}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x3, 0x4, 0xd, 0x7}, @empty, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xd025, 0x6, 0x1, 0x6}, @empty, @empty, 0xffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x8, 0x5}, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, 0xffffff00, 0x1}}]}, {0x6c, 0x6, "be03c739e71147f9732c5150d94e3d1d491a22a8ab172d21df76e98a9fddc79073ed2ad1f1559160d8987e1fb09ad9011e038a80ae14eec3eaf2284471451b1e40e34bf50c30e550e1768594b3e6aadbb68162e80dd89882d1567bf0aa44f25d57affad05b7b7eb1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1c4}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=@newtaction={0x1c4, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x1b0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_nat={0x15c, 0xe, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x87b, 0x0, 0x8, 0x1}, @local, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x6, 0x8, 0x1000, 0x1}, @empty, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x3, 0x4, 0xd, 0x7}, @empty, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xd025, 0x6, 0x1, 0x6}, @empty, @empty, 0xffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x8, 0x5}, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, 0xffffff00, 0x1}}]}, {0x6c, 0x6, "be03c739e71147f9732c5150d94e3d1d491a22a8ab172d21df76e98a9fddc79073ed2ad1f1559160d8987e1fb09ad9011e038a80ae14eec3eaf2284471451b1e40e34bf50c30e550e1768594b3e6aadbb68162e80dd89882d1567bf0aa44f25d57affad05b7b7eb1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1c4}}, 0x0) 546.416606ms ago: executing program 3 (id=2956): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x1, 0x2a00}}, 0x1c}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) 398.676018ms ago: executing program 1 (id=2957): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500004069b9a075f697000400000006907864010104ac06", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc00000090780000020499041d12910000000000006f00"/32], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x102, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000680)={0xfffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000008788e70c3351ed4872b965620000000085000000ab0000009500000000080000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmmsg$sock(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654", 0x48}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7", 0x56}, {&(0x7f0000000900)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}], 0x2, 0x20000044) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000640)={&(0x7f0000000300)=[{0x9, 0x1, 0x0, {0x1379, 0xff, 0x2}}, {0xc4a, 0x1, 0x0, {0xd, 0x7ff, 0x2}}], 0x2, 0x20, 0x8}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={0x0, @isdn={0x22, 0xa, 0xf8, 0x5, 0x1}, @llc={0x1a, 0x311, 0x0, 0x9, 0x9, 0x5}, @tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x4}}, 0x50f, 0x0, 0x0, 0x0, 0xfda7, 0x0, 0x2, 0xe6a, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r9, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r9, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) syz_init_net_socket$llc(0x1a, 0x6, 0x0) 171.931672ms ago: executing program 1 (id=2958): close(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) sendmsg$nl_route(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x20c, r3, 0x601, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4055077991d9614b7978e2a50d420a4a13badb588cb638e36a066bc576b33c16"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d574eff05b3084d54522053d4a2970a7e2e5fd838dc7058a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe40f}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5f193923cb09b1f9177cbbb912b18bd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "34fd120cc96a7dc2"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0e531bc5be390db30a2fda486b6c1b4258fdc7fe8914af0a8491629a22e80bb8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56b3cef4d18d3c24f8b4ded056ba9df8fa093a0bd236bfa3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8a286fd77ec451487216a81ae8569c5f851ee02767065fda0670f38f8f3647cc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e82991f310f17efd96fdf358bff56854c239b4c56e0f41c7"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bbecb7a180ce18d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8bd10855210f46d3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b1069abc2fc8f35e0bea7799342be8a1e28a236be016a960"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bb30370fa3ce74a53d615323851a49b0a2b1ea5ecf6bf1918b11c25d6f09f504"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="59dcab8e85491c5808bbb56377da9aba46706761840d4bc3"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4fc84444feee08be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="097109ef167513d2d223f348aa44ccb4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4195ace71cde8541a841d4fbfc0ce8e0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9280d70c2db59a50176e0db8bb0167ce"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="33fb49bcd99be7aaecdff9be23ded9ba5dae792256975d68"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 113.060267ms ago: executing program 1 (id=2959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) r3 = socket(0x11, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 64) r7 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r7, r8, 0x0, 0xd029) (async) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000880)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x200400d1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 24.538985ms ago: executing program 2 (id=2960): r0 = socket$inet6(0xa, 0x80d, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [0xffff00, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff, 0xffffff00], 'syz_tun\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x7, 0x2, 0x4f}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x77, 0x2, 0x1, [0x8, 0x1000, 0x40, 0x9, 0xfff8, 0x1, 0x6, 0x2, 0x6, 0x7, 0xfee2, 0x2, 0xfff1, 0x2, 0x6, 0x9], 0x3}}, @common=@ah={{0x30}, {[0x3, 0x4d6], 0x8, 0x2, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @remote, [0xff, 0x0, 0xffffff00, 0xffff00], [0xff, 0xff000000, 0xff, 0xff], 'nr0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x6c, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x2}, {0x1, 0x5}}}}, {{@ipv6={@private1, @remote, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0xff, 0x0, 0xff000000], 'vcan0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x84, 0x2, 0x1, 0x40}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x6], 0x6, 0x22, 0x1}}, @common=@dst={{0x48}, {0x1, 0x4, 0x0, [0xfffe, 0xd, 0x5, 0x7, 0x0, 0x5, 0x6, 0xf, 0x200, 0x1, 0x8, 0x0, 0x2, 0x2, 0x98a, 0x3], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010004000000fbe7df2501000000080001064f80a8c01f1515ef53bb59529c811900001400048005000300010000000500030006000000080002000200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="00ef04f6", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250200000014000500fe88000000000000000000000000000108000400030000000500010000000000080004000100000008000800e00000021400060000000000000000000000ffffac14141c14000500fe8000000000000000000000000000aa08000700ac1414aa08000800000000000800020007000000"], 0x88}, 0x1, 0x0, 0x0, 0xc040814}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x40) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1cdb0000", @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x48094) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r12, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 0s ago: executing program 4 (id=2961): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async, rerun: 32) r5 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="02012cbd7000fcdbdf2505000000050006000200c1ff7ca60000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x881) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): cal block 3, async page read [ 188.733060][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.742263][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 188.750130][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.759283][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 188.767505][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.777186][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.787816][ T5990] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.797124][ T5990] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.805105][ T5990] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.814248][ T5990] Buffer I/O error on dev nbd1, logical block 1, async page read [ 188.822251][ T5990] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.831352][ T5990] Buffer I/O error on dev nbd1, logical block 2, async page read [ 188.840151][ T5990] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.849378][ T5990] Buffer I/O error on dev nbd1, logical block 3, async page read [ 188.862983][ T5990] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.873850][ T5990] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.881803][ T5990] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.890979][ T5990] Buffer I/O error on dev nbd1, logical block 1, async page read [ 188.901740][ T5990] ldm_validate_partition_table(): Disk read failed. [ 188.910848][ T5990] Dev nbd1: unable to read RDB block 0 [ 188.918547][ T5990] nbd1: unable to read partition table [ 188.949032][ T5990] ldm_validate_partition_table(): Disk read failed. [ 188.959910][ T5990] Dev nbd1: unable to read RDB block 0 [ 188.967535][ T5990] nbd1: unable to read partition table [ 189.671948][ T9875] tipc: Disabling bearer [ 189.877968][ T9911] __nla_validate_parse: 5 callbacks suppressed [ 189.878000][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 189.957762][ T9908] syzkaller0: entered promiscuous mode [ 189.972048][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 189.979575][ T9908] syzkaller0: entered allmulticast mode [ 189.984062][ C0] lec:lec_tx_timeout: lec0 [ 189.991283][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 190.008626][ T9908] sctp: [Deprecated]: syz.1.1023 (pid 9908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.008626][ T9908] Use struct sctp_sack_info instead [ 190.134576][ T9916] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 190.159505][ T9916] bond5 (unregistering): Released all slaves [ 190.284900][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 190.352530][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 190.445829][ T9940] net_ratelimit: 113 callbacks suppressed [ 190.445848][ T9940] netlink: zone id is out of range [ 190.480366][ T9939] netlink: zone id is out of range [ 190.779156][ T9947] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1034'. [ 190.807062][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 190.816252][ T9947] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 190.828838][ T9947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1034'. [ 191.418727][ T9997] tipc: Trying to set illegal importance in message [ 191.430611][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 191.459727][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 191.492951][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 191.591280][T10003] bond3: entered promiscuous mode [ 191.597499][T10003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.658172][T10008] ipvlan2: entered allmulticast mode [ 191.683918][T10008] bond3: entered allmulticast mode [ 191.757891][T10003] ipvlan3: entered allmulticast mode [ 191.800833][T10020] netlink: 'syz.1.1055': attribute type 58 has an invalid length. [ 191.814936][T10002] ipvlan4: entered allmulticast mode [ 191.825034][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 191.977413][T10025] netlink: 'syz.4.1056': attribute type 29 has an invalid length. [ 192.216618][T10034] syzkaller0: entered promiscuous mode [ 192.234435][T10034] syzkaller0: entered allmulticast mode [ 192.271224][T10034] syzkaller0: tun_net_xmit 64726 [ 192.296406][ T9546] syzkaller0: tun_net_xmit 70 [ 192.417520][T10038] syzkaller0: entered promiscuous mode [ 192.423653][T10038] syzkaller0: entered allmulticast mode [ 193.307161][T10089] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 193.459352][T10099] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 193.467548][T10099] netlink: 'syz.3.1080': attribute type 2 has an invalid length. [ 193.475781][T10099] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 193.576463][T10089] macvlan2: entered promiscuous mode [ 193.581901][T10089] macvlan2: entered allmulticast mode [ 193.596986][T10089] bond5: entered promiscuous mode [ 193.617671][T10089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.667523][T10089] bond5: left promiscuous mode [ 193.995383][T10119] netlink: 'syz.3.1086': attribute type 62 has an invalid length. [ 194.008478][T10121] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 194.047202][T10121] SET target dimension over the limit! [ 194.376432][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393710][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.465720][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.012168][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 195.021948][ C0] lec:lec_tx_timeout: lec0 [ 195.026869][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 195.167557][T10170] netem: incorrect gi model size [ 195.200268][T10170] netem: change failed [ 195.313145][T10175] __nla_validate_parse: 14 callbacks suppressed [ 195.313167][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'. [ 195.403043][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 195.567822][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 195.659688][T10193] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 195.970772][ T5928] IPVS: starting estimator thread 0... [ 196.082681][T10208] IPVS: using max 26 ests per chain, 62400 per kthread [ 196.435601][T10225] netlink: 'syz.2.1112': attribute type 39 has an invalid length. [ 196.635317][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1115'. [ 196.844503][T10249] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1119'. [ 197.196174][T10268] netlink: 'syz.1.1123': attribute type 12 has an invalid length. [ 198.174734][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 198.400810][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 198.423529][T10325] veth0: entered promiscuous mode [ 198.457776][T10325] x_tables: duplicate entry at hook 2 [ 198.468812][T10324] veth0: left promiscuous mode [ 198.872826][T10346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1142'. [ 199.399195][T10373] block nbd0: NBD_DISCONNECT [ 199.422246][T10373] block nbd0: Send disconnect failed -32 [ 199.523289][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 199.657538][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 199.770325][T10395] ksmbd: Unknown IPC event: 3, ignore. [ 199.788806][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.835055][T10390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.858809][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.905661][T10398] netlink: 'syz.4.1157': attribute type 29 has an invalid length. [ 199.935266][T10399] tipc: Enabled bearer , priority 14 [ 200.042024][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 200.050142][ C0] lec:lec_tx_timeout: lec0 [ 200.055202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 200.555635][T10431] __nla_validate_parse: 2 callbacks suppressed [ 200.555656][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 200.577748][T10431] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 200.747463][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1167'. [ 200.830612][T10431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.920103][T10437] vlan4: entered allmulticast mode [ 200.932262][T10437] veth0_to_bond: entered allmulticast mode [ 201.013926][T10437] bond2: (slave vlan4): making interface the new active one [ 201.071504][T10437] bond2: (slave vlan4): Enslaving as an active interface with an up link [ 201.371198][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 201.496539][T10461] macsec1: entered promiscuous mode [ 201.503456][T10468] netlink: 'syz.2.1170': attribute type 3 has an invalid length. [ 201.520579][T10468] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 201.552137][T10468] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1170'. [ 201.889824][T10486] netlink: 'syz.4.1176': attribute type 12 has an invalid length. [ 201.954470][T10486] netlink: 'syz.4.1176': attribute type 29 has an invalid length. [ 201.978732][T10493] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 202.010621][T10486] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1176'. [ 202.011910][T10493] x_tables: duplicate underflow at hook 1 [ 202.061085][T10486] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 202.108710][T10486] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1176'. [ 202.355537][T10513] tipc: Started in network mode [ 202.381948][T10513] tipc: Node identity ac14140f, cluster identity 4711 [ 202.410316][T10513] tipc: New replicast peer: 255.255.255.255 [ 202.423068][T10513] tipc: Enabled bearer , priority 10 [ 202.447136][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 202.463758][T10512] vlan3: entered allmulticast mode [ 202.469092][T10512] bond0: entered allmulticast mode [ 202.474730][T10512] bond_slave_0: entered allmulticast mode [ 202.480635][T10512] bond_slave_1: entered allmulticast mode [ 203.297625][T10562] netlink: 'syz.4.1191': attribute type 11 has an invalid length. [ 203.313331][T10564] ip6t_srh: unknown srh invflags 4000 [ 203.403530][T10567] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 203.419984][T10567] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1193'. [ 203.618098][ T808] tipc: Node number set to 2886997007 [ 203.659220][T10584] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 203.670764][T10584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1193'. [ 203.798020][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 203.958375][T10597] netlink: 'syz.1.1198': attribute type 10 has an invalid length. [ 204.106116][T10597] dummy0: entered promiscuous mode [ 204.124917][T10597] bridge0: port 3(dummy0) entered blocking state [ 204.139354][T10597] bridge0: port 3(dummy0) entered disabled state [ 204.153803][T10597] dummy0: entered allmulticast mode [ 204.169620][T10603] netlink: 'syz.2.1203': attribute type 23 has an invalid length. [ 204.177668][T10597] bridge0: port 3(dummy0) entered blocking state [ 204.184344][T10597] bridge0: port 3(dummy0) entered forwarding state [ 205.062045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 205.070241][ C0] lec:lec_tx_timeout: lec0 [ 205.075874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 205.317278][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.700601][T10674] tipc: Enabled bearer , priority 0 [ 205.726323][T10674] syzkaller0: entered promiscuous mode [ 205.745945][T10674] syzkaller0: entered allmulticast mode [ 205.859193][T10674] tipc: Resetting bearer [ 205.897756][T10672] tipc: Resetting bearer [ 205.913278][T10683] __nla_validate_parse: 2 callbacks suppressed [ 205.913299][T10683] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1225'. [ 205.986818][T10672] tipc: Disabling bearer [ 206.066698][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 206.078235][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 206.188889][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 206.240754][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 206.316993][T10710] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1232'. [ 206.328405][T10710] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1232'. [ 206.360274][T10698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.549631][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 206.661388][T10723] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 206.679630][T10723] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1238'. [ 206.693099][T10724] sctp: [Deprecated]: syz.1.1235 (pid 10724) Use of int in maxseg socket option. [ 206.693099][T10724] Use struct sctp_assoc_value instead [ 206.929242][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 207.021367][T10740] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 207.957744][T10779] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 207.974945][T10777] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 208.058920][T10779] veth0_vlan: left promiscuous mode [ 208.090079][T10779] veth0_vlan: entered promiscuous mode [ 208.135150][T10779] team0: Device veth0_vlan failed to register rx_handler [ 208.182756][ T1050] tipc: Resetting bearer [ 208.199007][T10777] veth0_vlan: left promiscuous mode [ 208.235923][T10777] veth0_vlan: entered promiscuous mode [ 208.280481][T10777] team0: Device veth0_vlan failed to register rx_handler [ 208.315196][T10790] tipc: Enabling of bearer rejected, failed to enable media [ 208.574038][T10808] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 208.603935][T10808] bond5 (unregistering): Released all slaves [ 208.660995][T10811] tipc: Started in network mode [ 208.672957][T10811] tipc: Node identity fff, cluster identity 10 [ 208.688008][T10811] tipc: Node number set to 4095 [ 209.136049][T10830] netlink: 'syz.0.1266': attribute type 3 has an invalid length. [ 209.241390][T10837] netlink: 'syz.2.1268': attribute type 11 has an invalid length. [ 209.424404][T10842] bond5 (unregistering): Released all slaves [ 209.871499][T10869] netlink: 'syz.4.1276': attribute type 7 has an invalid length. [ 209.901675][T10869] netlink: 'syz.4.1276': attribute type 8 has an invalid length. [ 209.912956][T10869] netlink: 'syz.4.1276': attribute type 7 has an invalid length. [ 209.920831][T10869] netlink: 'syz.4.1276': attribute type 8 has an invalid length. [ 209.930084][T10869] netlink: 'syz.4.1276': attribute type 7 has an invalid length. [ 209.940703][T10869] netlink: 'syz.4.1276': attribute type 8 has an invalid length. [ 209.950000][T10869] netlink: 'syz.4.1276': attribute type 7 has an invalid length. [ 209.958213][T10869] netlink: 'syz.4.1276': attribute type 8 has an invalid length. [ 209.977090][T10869] netlink: 'syz.4.1276': attribute type 7 has an invalid length. [ 210.092103][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 210.100228][ C0] lec:lec_tx_timeout: lec0 [ 210.105113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 210.309672][T10886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.544381][T10894] bond0: (slave veth0_to_bond): Releasing active interface [ 210.628103][T10900] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 211.261617][T10942] __nla_validate_parse: 27 callbacks suppressed [ 211.261638][T10942] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1292'. [ 211.441080][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 211.465194][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 211.813313][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 211.813802][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 211.827273][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 211.920121][T10977] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.938936][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 212.007058][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 212.026812][T10984] netlink: 'syz.2.1308': attribute type 11 has an invalid length. [ 212.051420][T10984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 212.072317][T10983] netlink: 'syz.2.1308': attribute type 11 has an invalid length. [ 212.082831][T10983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'. [ 212.551804][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 213.627049][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 213.702491][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 213.735369][T11040] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.001091][T11065] tipc: Enabling of bearer rejected, failed to enable media [ 214.477962][T11086] syzkaller0: entered promiscuous mode [ 214.483681][T11086] syzkaller0: entered allmulticast mode [ 214.601900][T11093] validate_nla: 7 callbacks suppressed [ 214.601921][T11093] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 214.621139][T11089] tipc: New replicast peer: 255.255.255.255 [ 214.628975][T11089] tipc: Enabled bearer , priority 10 [ 215.112022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 215.121110][ C0] lec:lec_tx_timeout: lec0 [ 215.126270][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 215.431925][T11130] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 215.447042][T11130] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 215.742249][ T5844] tipc: Node number set to 353754609 [ 216.099391][T11155] syzkaller0: entered promiscuous mode [ 216.127593][T11155] syzkaller0: entered allmulticast mode [ 216.393763][T11169] netlink: 'syz.0.1365': attribute type 1 has an invalid length. [ 216.426464][T11140] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 216.434690][T11140] __nla_validate_parse: 14 callbacks suppressed [ 216.434710][T11140] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1353'. [ 216.521235][T11173] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 216.529595][T11173] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 216.597953][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'. [ 216.918066][T11182] bond0: entered promiscuous mode [ 216.958951][T11182] bond0: left promiscuous mode [ 217.078202][T11192] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 217.094595][T11192] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1372'. [ 217.122071][T11192] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 217.132611][T11190] netlink: 'syz.2.1373': attribute type 8 has an invalid length. [ 217.138272][T11192] netlink: 'syz.1.1372': attribute type 8 has an invalid length. [ 217.157075][T11190] sch_fq: defrate 0 ignored. [ 217.165816][T11192] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1372'. [ 217.183292][T11192] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1372'. [ 217.286170][T11200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 217.338178][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 217.360842][ T1050] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.386538][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.397024][ T1050] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.513045][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.590451][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 217.620405][T11214] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 217.649454][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 217.677390][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 217.782247][ T5908] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.867217][T11214] bond5: entered promiscuous mode [ 217.888238][T11214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.066311][T11221] bond5: (slave bridge3): making interface the new active one [ 218.112119][T11221] bridge3: entered promiscuous mode [ 218.146528][T11221] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 218.171455][T11215] tipc: Started in network mode [ 218.187706][T11215] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 218.197606][T11215] tipc: Enabled bearer , priority 14 [ 218.311856][T11250] syzkaller0: entered promiscuous mode [ 218.318418][T11250] syzkaller0: entered allmulticast mode [ 218.325125][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025c72c00: rx timeout, send abort [ 218.435510][T11255] IPVS: Unknown mcast interface: syzkaller1 [ 218.527403][T11263] IPVS: Unknown mcast interface: syzkaller1 [ 218.539817][T11259] Cannot find del_set index 4 as target [ 218.604224][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880417a2c00: rx timeout, send abort [ 218.816979][T11278] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 218.825276][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804109e000: rx timeout, send abort [ 218.835733][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025c72c00: abort rx timeout. Force session deactivation [ 218.863217][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88804109e000: connection exists (fe ff). last cmd: 20 [ 219.030767][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.104389][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880417a2400: rx timeout, send abort [ 219.112788][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880417a2c00: abort rx timeout. Force session deactivation [ 219.126517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804109c000: rx timeout, send abort [ 219.255388][T11300] bond6: entered promiscuous mode [ 219.260882][T11300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.317965][ T5908] tipc: Node number set to 10463914 [ 219.612758][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880417a2400: abort rx timeout. Force session deactivation [ 219.634812][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804109c000: abort rx timeout. Force session deactivation [ 219.716996][T11324] tipc: Trying to set illegal importance in message [ 219.725130][T11323] tipc: Trying to set illegal importance in message [ 220.142040][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 220.150134][ C0] lec:lec_tx_timeout: lec0 [ 220.155234][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 220.462452][T11353] validate_nla: 4 callbacks suppressed [ 220.462472][T11353] netlink: 'syz.4.1418': attribute type 8 has an invalid length. [ 220.566289][T11359] 8021q: VLANs not supported on ip6_vti0 [ 221.193689][T11391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.412258][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 221.718421][T11419] __nla_validate_parse: 11 callbacks suppressed [ 221.718440][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 222.241618][T11452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1442'. [ 222.301847][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 222.794937][T11481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.899750][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 222.908978][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 223.375380][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 223.471785][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 223.601030][T11508] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 223.774982][T11508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.859062][T11519] vlan1: entered allmulticast mode [ 223.866208][T11519] team_slave_0: entered allmulticast mode [ 223.991252][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 224.169077][T11538] netlink: 'syz.3.1464': attribute type 11 has an invalid length. [ 224.177678][T11541] netlink: 'syz.1.1466': attribute type 11 has an invalid length. [ 224.421300][T11547] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 224.641279][T11567] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 224.706407][T11569] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1471'. [ 225.079418][T11585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.162632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 225.170791][ C0] lec:lec_tx_timeout: lec0 [ 225.176851][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 225.321843][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 225.360842][T11598] bond6 (unregistering): Released all slaves [ 225.391532][T11605] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 225.575913][T11612] netlink: 'syz.0.1485': attribute type 1 has an invalid length. [ 225.598824][T11612] nbd: error processing sock list [ 225.860153][T11628] xt_hashlimit: size too large, truncated to 1048576 [ 226.084970][T11643] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 226.338788][T11643] bond3: entered promiscuous mode [ 226.361486][T11656] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 226.377572][T11643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.506643][T11664] nft_compat: unsupported protocol 0 [ 226.529398][T11647] bond3: (slave bridge0): making interface the new active one [ 226.562870][T11647] bridge0: entered promiscuous mode [ 226.580334][T11647] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 226.743244][T11656] bond7: entered promiscuous mode [ 226.765665][T11656] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.865821][T11664] bond7: (slave bridge2): making interface the new active one [ 226.884586][T11664] bridge2: entered promiscuous mode [ 226.901743][T11664] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 227.051236][T11682] xt_hashlimit: size too large, truncated to 1048576 [ 227.156985][T11686] __nla_validate_parse: 4 callbacks suppressed [ 227.157005][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 227.277755][T11686] vlan5: entered allmulticast mode [ 227.328990][T11686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1498'. [ 227.521164][T11695] syzkaller0: entered promiscuous mode [ 227.527464][T11695] syzkaller0: entered allmulticast mode [ 227.599673][T11695] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 227.637034][T11686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.647282][T11686] bond_slave_0: left promiscuous mode [ 227.661571][T11686] bond_slave_0: left allmulticast mode [ 227.673257][T11686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.683840][T11686] bond_slave_1: left promiscuous mode [ 227.689819][T11686] bond_slave_1: left allmulticast mode [ 227.699080][T11686] bond0 (unregistering): Released all slaves [ 229.576850][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.240179][T11765] nbd: must specify an index to disconnect [ 230.340835][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1514'. [ 230.527751][T11776] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1520'. [ 230.567309][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1521'. [ 230.605780][T11776] sctp: [Deprecated]: syz.0.1520 (pid 11776) Use of int in maxseg socket option. [ 230.605780][T11776] Use struct sctp_assoc_value instead [ 230.790278][T11788] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 230.806865][T11783] batadv0: entered promiscuous mode [ 230.825929][T11783] macsec2: entered promiscuous mode [ 230.832597][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 230.845573][T11783] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 230.869550][T11783] batadv0: left promiscuous mode [ 231.012006][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 231.020110][ C0] lec:lec_tx_timeout: lec0 [ 231.025936][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 231.174960][T11789] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 231.192262][T11789] bond0: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 231.206142][T11789] bond0: (slave vxcan5): making interface the new active one [ 231.214859][T11789] bond0: (slave vxcan5): Enslaving as an active interface with an up link [ 231.709637][T11840] netlink: 'syz.3.1535': attribute type 13 has an invalid length. [ 231.711413][T11827] xt_hashlimit: size too large, truncated to 1048576 [ 231.762886][T11841] team0: No ports can be present during mode change [ 231.806115][T11840] veth0_macvtap: left promiscuous mode [ 231.848210][T11840] macvtap0: entered allmulticast mode [ 231.888577][T11840] macvtap0: refused to change device tx_queue_len [ 232.004674][T11850] netlink: 'syz.0.1536': attribute type 10 has an invalid length. [ 232.084989][T11854] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 232.126398][T11854] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 232.129707][T11859] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1539'. [ 232.230545][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'. [ 232.281204][T11846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.855514][T11891] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 232.874012][T11891] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 232.892415][T11891] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 232.922412][T11891] netlink: 'syz.3.1545': attribute type 3 has an invalid length. [ 232.951032][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 232.974731][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 232.996234][T11894] ip6_vti0: entered promiscuous mode [ 233.009339][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 233.119196][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 233.143676][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 236.042020][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 236.050091][ C0] lec:lec_tx_timeout: lec0 [ 236.055102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 236.199744][T11939] syzkaller1: entered promiscuous mode [ 236.241168][T11939] syzkaller1: entered allmulticast mode [ 236.493697][T11970] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 236.502636][T11970] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1558'. [ 236.531830][T11969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1557'. [ 236.796238][T11978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.871772][T11992] nbd: must specify an index to disconnect [ 236.954744][T11998] netlink: 'syz.0.1560': attribute type 61 has an invalid length. [ 236.998838][T11998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'. [ 237.171797][T12008] netlink: 'syz.2.1568': attribute type 27 has an invalid length. [ 237.397184][T12013] xt_hashlimit: overflow, try lower: 3/0 [ 237.781179][T12035] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1574'. [ 238.904811][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1584'. [ 239.257645][T12097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.651293][T12112] openvswitch: netlink: Key type 53 is out of range max 32 [ 239.671190][T12112] openvswitch: netlink: Key type 53 is out of range max 32 [ 239.760656][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1596'. [ 239.837529][T12125] sctp: [Deprecated]: syz.3.1596 (pid 12125) Use of int in max_burst socket option. [ 239.837529][T12125] Use struct sctp_assoc_value instead [ 239.985419][T12130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.122756][T12137] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1601'. [ 240.226440][T12135] tipc: Enabled bearer , priority 10 [ 240.247325][T12133] tipc: Enabling of bearer rejected, already enabled [ 240.403937][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 240.423434][T12154] xt_hashlimit: size too large, truncated to 1048576 [ 240.769030][T12165] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1608'. [ 240.973989][T12173] netem: change failed [ 240.991298][T12172] delete_channel: no stack [ 241.062015][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 241.070115][ C0] lec:lec_tx_timeout: lec0 [ 241.075452][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 241.129494][T12181] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1612'. [ 241.200074][T12184] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 241.221212][T12185] veth0_to_bridge: entered promiscuous mode [ 241.265816][T12183] veth0_to_bridge: left promiscuous mode [ 241.281678][T12184] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 241.296720][T12184] CPU: 1 UID: 0 PID: 12184 Comm: syz.1.1613 Not tainted syzkaller #0 PREEMPT(full) [ 241.296763][T12184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.296790][T12184] Call Trace: [ 241.296799][T12184] [ 241.296807][T12184] dump_stack_lvl+0xe8/0x150 [ 241.296849][T12184] sysfs_warn_dup+0x8e/0xa0 [ 241.296873][T12184] sysfs_do_create_link_sd+0xc0/0x110 [ 241.296899][T12184] device_add_class_symlinks+0x1cf/0x240 [ 241.296937][T12184] device_add+0x475/0xbb0 [ 241.296973][T12184] wiphy_register+0x1dc5/0x2dc0 [ 241.297023][T12184] ? __pfx_wiphy_register+0x10/0x10 [ 241.297053][T12184] ? __pfx_netdev_run_todo+0x10/0x10 [ 241.297079][T12184] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 241.297109][T12184] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 241.297144][T12184] ieee80211_register_hw+0x3d82/0x4a70 [ 241.297193][T12184] ? ieee80211_register_hw+0x1901/0x4a70 [ 241.297254][T12184] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 241.297301][T12184] ? __asan_memset+0x22/0x50 [ 241.297325][T12184] ? __hrtimer_setup+0x1b7/0x260 [ 241.297352][T12184] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 241.297385][T12184] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 241.297446][T12184] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.297470][T12184] ? kstrndup+0xbf/0x160 [ 241.297515][T12184] hwsim_new_radio_nl+0xf6a/0x1c00 [ 241.297566][T12184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.297610][T12184] ? rcu_is_watching+0x15/0xb0 [ 241.297636][T12184] ? trace_kmalloc+0x2a/0xf0 [ 241.297670][T12184] ? __nla_parse+0x40/0x60 [ 241.297701][T12184] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 241.297732][T12184] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 241.297772][T12184] genl_family_rcv_msg_doit+0x22a/0x330 [ 241.297811][T12184] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.297856][T12184] ? bpf_lsm_capable+0x9/0x20 [ 241.297887][T12184] ? security_capable+0x7e/0x2c0 [ 241.297929][T12184] genl_rcv_msg+0x61c/0x7a0 [ 241.297965][T12184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.297998][T12184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.298024][T12184] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.298059][T12184] netlink_rcv_skb+0x232/0x4b0 [ 241.298082][T12184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.298116][T12184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.298156][T12184] ? down_read+0x270/0x2e0 [ 241.298186][T12184] ? genl_rcv+0xd/0x40 [ 241.298215][T12184] genl_rcv+0x28/0x40 [ 241.298241][T12184] netlink_unicast+0x75c/0x8e0 [ 241.298285][T12184] netlink_sendmsg+0x813/0xb40 [ 241.298318][T12184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.298345][T12184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.298368][T12184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.298399][T12184] ____sys_sendmsg+0x972/0x9f0 [ 241.298422][T12184] ? __might_fault+0xaf/0x130 [ 241.298455][T12184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.298491][T12184] ? import_iovec+0x73/0xa0 [ 241.298521][T12184] ___sys_sendmsg+0x2a5/0x360 [ 241.298543][T12184] ? __lock_acquire+0x6b5/0x2cf0 [ 241.298582][T12184] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.298641][T12184] ? futex_wait+0x2a2/0x390 [ 241.298701][T12184] ? __fget_files+0x2a/0x420 [ 241.298722][T12184] ? __fget_files+0x3a0/0x420 [ 241.298756][T12184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.298784][T12184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.298820][T12184] ? rcu_is_watching+0x15/0xb0 [ 241.298853][T12184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.298878][T12184] do_syscall_64+0x15f/0xf80 [ 241.298906][T12184] ? trace_irq_disable+0x3b/0x140 [ 241.298935][T12184] ? clear_bhb_loop+0x40/0x90 [ 241.298963][T12184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.298984][T12184] RIP: 0033:0x7faafef9cdd9 [ 241.299013][T12184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.299030][T12184] RSP: 002b:00007faaffd81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.299060][T12184] RAX: ffffffffffffffda RBX: 00007faaff215fa0 RCX: 00007faafef9cdd9 [ 241.299076][T12184] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 241.299089][T12184] RBP: 00007faaff032d69 R08: 0000000000000000 R09: 0000000000000000 [ 241.299102][T12184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.299113][T12184] R13: 00007faaff216038 R14: 00007faaff215fa0 R15: 00007ffd3c2f8118 [ 241.299150][T12184] [ 242.508695][T12192] syzkaller0: entered promiscuous mode [ 242.519238][T12220] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1624'. [ 242.539373][T12192] syzkaller0: entered allmulticast mode [ 242.597210][T12222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1624'. [ 242.631558][T12224] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1624'. [ 242.782885][T12232] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 242.787616][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 242.825098][T12212] netlink: 'syz.3.1623': attribute type 30 has an invalid length. [ 242.948083][T12232] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.014726][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 243.036391][T12248] netlink: 'syz.3.1623': attribute type 30 has an invalid length. [ 243.073762][T12235] bond8: (slave geneve3): making interface the new active one [ 243.110955][T12235] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 243.249045][ T12] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 243.278496][ T12] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 243.333194][ T12] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 243.353486][ T12] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 243.372464][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 243.834157][T12281] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 243.889810][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1641'. [ 244.234337][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 244.313172][T12301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 244.507837][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 244.752885][T12317] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1653'. [ 244.932163][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 244.986771][ T29] IPVS: starting estimator thread 0... [ 245.082385][T12334] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.555413][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 245.564832][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 245.740353][T12370] bond0: entered promiscuous mode [ 245.778512][T12370] bond0: left promiscuous mode [ 245.962092][T12377] bridge3: entered promiscuous mode [ 245.981726][T12377] bridge3: entered allmulticast mode [ 246.022067][T12384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.082700][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 246.090842][ C0] lec:lec_tx_timeout: lec0 [ 246.096426][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 246.129414][T12384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.273707][T12393] netlink: 'syz.2.1676': attribute type 1 has an invalid length. [ 246.749260][T12404] : entered promiscuous mode [ 249.027138][T12386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.559452][T12427] bond9: Unable to set down delay as MII monitoring is disabled [ 249.602677][T12427] bond9 (unregistering): Released all slaves [ 249.638918][T12441] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 249.775568][T12426] bond9: Unable to set down delay as MII monitoring is disabled [ 249.787255][T12426] bond9 (unregistering): Released all slaves [ 249.794853][T12446] __nla_validate_parse: 5 callbacks suppressed [ 249.794872][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 249.907202][T12446] macsec1: entered promiscuous mode [ 249.918676][T12446] bridge0: entered promiscuous mode [ 249.939306][T12446] macsec1: entered allmulticast mode [ 249.963111][T12446] bridge0: entered allmulticast mode [ 249.990478][T12446] bridge0: port 3(macsec1) entered blocking state [ 250.014560][T12446] bridge0: port 3(macsec1) entered disabled state [ 250.024179][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 250.072452][T12446] bridge0: left allmulticast mode [ 250.209261][ T5908] bridge0: left promiscuous mode [ 250.395095][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 250.498635][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'. [ 250.692539][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.804432][T12505] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1700'. [ 250.924585][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.968799][T12503] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1701'. [ 251.122315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 251.130413][ C0] lec:lec_tx_timeout: lec0 [ 251.135262][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 251.283724][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1703'. [ 252.032565][ T6351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.372417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.382818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.391237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.400290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.410629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.915221][T12448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.134061][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.307197][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 253.826319][T12563] vlan1: entered promiscuous mode [ 253.844937][T12563] bridge0: entered promiscuous mode [ 253.859650][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 253.882549][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 253.991543][T12574] syzkaller1: entered promiscuous mode [ 254.000014][T12574] syzkaller1: entered allmulticast mode [ 254.136432][ T6351] bond2: (slave vlan4): link status definitely down, disabling slave [ 254.166831][ T6351] bond2: now running without any active interface! [ 254.295644][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.402365][ T6351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.816270][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.142324][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 256.150463][ C0] lec:lec_tx_timeout: lec0 [ 256.155243][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 256.502820][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.516496][T12548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.997541][T12607] bond0: Master is either lo or non-ether device [ 257.240683][T12621] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.1733'. [ 257.274085][T12621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.300733][T12621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.341006][T12621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.386270][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.420197][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.485860][T12635] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002 [ 257.523948][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.579190][T12640] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1741'. [ 257.610232][T12640] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 257.617724][ T6351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.730053][T12643] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 257.818342][T12643] team0 (unregistering): Port device team_slave_0 removed [ 257.829433][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 257.881844][T12643] team0 (unregistering): Port device team_slave_1 removed [ 258.086747][T12666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1748'. [ 258.157069][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1748'. [ 258.276653][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1746'. [ 258.292217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.300710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.313877][T12671] : entered promiscuous mode [ 258.569226][T12683] veth0: entered promiscuous mode [ 258.596150][T12680] veth0: left promiscuous mode [ 259.011481][T12703] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 259.055985][T12703] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1759'. [ 259.093603][T12703] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 259.127199][T12703] netlink: 'syz.4.1759': attribute type 8 has an invalid length. [ 259.168897][T12703] netlink: 582 bytes leftover after parsing attributes in process `syz.4.1759'. [ 259.202136][T12703] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1759'. [ 259.327802][T12712] bond0: (slave bond_slave_0): Releasing backup interface [ 259.361382][T12712] bond_slave_0: left allmulticast mode [ 259.428309][T12712] bond0: (slave bond_slave_1): Releasing backup interface [ 259.447013][T12712] bond_slave_1: left allmulticast mode [ 259.509311][T12712] team0: Port device team_slave_0 removed [ 259.550442][T12712] team0: Port device team_slave_1 removed [ 259.565630][T12712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.582282][T12712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.608519][T12724] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 259.653509][T12719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1764'. [ 259.855173][T12734] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 259.962641][T12734] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 259.988412][T12734] gretap0: entered promiscuous mode [ 259.998481][T12734] gretap0: entered allmulticast mode [ 260.217621][T12763] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 260.242255][T12748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.287260][T12763] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 260.318005][T12751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.328184][T12763] netlink: 'syz.0.1774': attribute type 7 has an invalid length. [ 260.337371][T12751] bond6: (slave xfrm2): The slave device specified does not support setting the MAC address [ 260.349130][T12763] netlink: 'syz.0.1774': attribute type 8 has an invalid length. [ 260.350785][T12751] bond6: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 260.363406][T12763] NCSI netlink: No device for ifindex 131092 [ 260.386273][T12751] bond6: (slave xfrm2): making interface the new active one [ 260.395803][T12751] bond6: (slave xfrm2): Enslaving as an active interface with an up link [ 260.566953][T12742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.579003][T12742] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 260.610760][T12758] tipc: Enabling of bearer rejected, failed to enable media [ 260.811052][T12742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.845452][T12742] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 260.984517][T12742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.996027][T12742] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.150161][T12742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.162641][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 261.170855][ C0] lec:lec_tx_timeout: lec0 [ 261.175956][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 261.200527][T12742] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 261.240435][T12789] netlink: 'syz.4.1782': attribute type 29 has an invalid length. [ 261.392299][T12797] xt_hashlimit: size too large, truncated to 1048576 [ 261.888851][ T1050] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 261.898532][ T1050] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.968932][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 261.981479][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.999522][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.008502][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.025740][ T9545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 262.034375][ T9545] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.072203][ T9545] net_ratelimit: 9 callbacks suppressed [ 262.072223][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.182595][ T6351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.332318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.340696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.349095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.357879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.366748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.375428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.384363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.393168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.012108][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 267.020202][ C0] lec:lec_tx_timeout: lec0 [ 267.025661][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 267.624361][ T9545] net_ratelimit: 3 callbacks suppressed [ 267.624391][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.742358][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.812334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.820771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.829225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.838300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.847001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.862266][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.962405][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.032049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 272.040128][ C0] lec:lec_tx_timeout: lec0 [ 272.045263][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 272.062304][ T6346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.172404][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.272631][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.932287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.940630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.949505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.958227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.966890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.412567][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.652574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.512619][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.932424][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.052085][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 277.060217][ C0] lec:lec_tx_timeout: lec0 [ 277.065437][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 278.712445][ T9545] net_ratelimit: 1 callbacks suppressed [ 278.712463][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.822495][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.692389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.700803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.709259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.718297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.727133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.922483][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.042653][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.072361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 282.080435][ C0] lec:lec_tx_timeout: lec0 [ 282.085086][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 283.142457][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.540532][T12805] __nla_validate_parse: 6 callbacks suppressed [ 283.540551][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 283.562581][T12810] sctp: [Deprecated]: syz.2.1788 (pid 12810) Use of int in max_burst socket option deprecated. [ 283.562581][T12810] Use struct sctp_assoc_value instead [ 283.584544][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 283.967472][T12829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1793'. [ 284.173105][T12836] xt_hashlimit: size too large, truncated to 1048576 [ 284.244243][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.584385][T12850] netlink: 'syz.3.1801': attribute type 29 has an invalid length. [ 284.680954][T12850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1801'. [ 284.844455][ T30] audit: type=1107 audit(1777196591.894:3): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ñi½Þ‡ä,É|2f(«ÒDÚWßQ0ºÁM&¼•ÀîtŒìÞ[ù÷ðªÒ@0ú8Fk÷À;”ͤB\ÖuÄwÿ¡rÁ®ÎÂi¦ØŽ´4æf=»ŠÌ,l>ŸêôET2KË@ [ 284.844455][ T30] ã»ø®Gõ™¤RMüØú§a>_?ŒÐ)ŒgÊ7ÿ‰€ÈƒXÁ^:Þj [ 284.844455][ T30] ™x •o]C!ÈÇe”`gb)0¥ê¸$|@y’þG&“3¶x…ÈÅ—8+nË‘íã§ïÑ”¤.YõìÃeØî¸ ØH?Ïù¯¦ù:—í8³²§nØ' [ 284.882564][T12860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'. [ 284.898275][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 284.978037][T12860] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'. [ 284.987384][T12863] : renamed from bond0 (while UP) [ 285.238689][T12880] vlan0: entered promiscuous mode [ 285.373146][ T355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.481194][T12889] netlink: 'syz.4.1811': attribute type 1 has an invalid length. [ 285.609968][T12889] bond6: (slave geneve2): making interface the new active one [ 285.636837][T12889] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 285.646820][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 285.727279][ T9545] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 285.740997][ T9545] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.804762][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 285.836456][ T9545] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.848407][ T9545] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.916164][T12907] syzkaller0: entered promiscuous mode [ 285.941031][T12907] syzkaller0: entered allmulticast mode [ 286.050684][T12913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1816'. [ 286.458143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.466723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.475224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.484170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.493045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.522465][ T6346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.532467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.784634][T12947] sctp: [Deprecated]: syz.2.1823 (pid 12947) Use of int in max_burst socket option. [ 286.784634][T12947] Use struct sctp_assoc_value instead [ 287.092386][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 287.100494][ C0] lec:lec_tx_timeout: lec0 [ 287.105761][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 287.750528][T12993] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 288.175311][T13020] vlan1: entered allmulticast mode [ 288.180769][T13020] veth0_vlan: entered allmulticast mode [ 288.321896][T13024] pim6reg527: entered allmulticast mode [ 288.612591][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 288.674936][T13040] __nla_validate_parse: 4 callbacks suppressed [ 288.674956][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 288.754837][T13041] netlink: 'syz.0.1848': attribute type 1 has an invalid length. [ 288.797609][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 288.846808][T13045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1850'. [ 288.869733][T13045] tipc: Enabling of bearer rejected, failed to enable media [ 288.894706][T13045] vlan5: entered promiscuous mode [ 288.901003][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 289.017203][T13049] syzkaller0: entered promiscuous mode [ 289.029996][T13060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.042795][T13049] syzkaller0: entered allmulticast mode [ 289.066935][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.075427][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.082318][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.089202][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.096091][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.102954][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.109765][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.116636][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.123510][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.130331][T13049] tc action pedit 'at' offset 134217728 out of bounds [ 289.328104][T13068] ip6tnl2: entered promiscuous mode [ 289.473869][T13076] vlan3: entered allmulticast mode [ 289.479167][T13076] bond0: entered allmulticast mode [ 289.856608][T13098] netlink: 'syz.1.1865': attribute type 32 has an invalid length. [ 289.873004][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 289.889292][T13100] netem: incorrect gi model size [ 289.898931][T13100] netem: change failed [ 290.046501][T13098] bond0: option coupled_control: invalid value (192) [ 290.056079][T13098] bond0 (unregistering): Released all slaves [ 290.087315][T13080] netlink: 'syz.4.1861': attribute type 10 has an invalid length. [ 290.115371][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.159000][T13080] bridge_slave_1: left allmulticast mode [ 290.184786][T13080] bridge_slave_1: left promiscuous mode [ 290.220606][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.760318][T13134] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1875'. [ 291.329700][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 291.356264][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 291.613418][T13176] team0: Port device gretap1 added [ 291.623344][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 291.738784][T13191] netlink: 'syz.1.1891': attribute type 9 has an invalid length. [ 292.112272][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 292.120373][ C0] lec:lec_tx_timeout: lec0 [ 292.125444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 292.383991][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 292.577062][T13224] netlink: 'syz.2.1903': attribute type 6 has an invalid length. [ 292.632567][T13224] netlink: 'syz.2.1903': attribute type 5 has an invalid length. [ 293.224588][T13262] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 293.408155][T13263] bond7: peer notification delay (25) is not a multiple of miimon (261), value rounded to 0 ms [ 293.443225][T13263] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 293.499304][T13263] bond7 (unregistering): Released all slaves [ 293.512847][T13274] netlink: 'syz.1.1914': attribute type 4 has an invalid length. [ 293.805227][T13285] netlink: 'syz.0.1916': attribute type 33 has an invalid length. [ 293.970879][T13287] tipc: Enabled bearer , priority 0 [ 293.988240][T13287] syzkaller0: MTU too low for tipc bearer [ 293.996680][T13287] tipc: Disabling bearer [ 294.057882][T13300] __nla_validate_parse: 7 callbacks suppressed [ 294.057910][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'. [ 294.095452][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1922'. [ 294.098634][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1922'. [ 294.713243][T13297] net_ratelimit: 1 callbacks suppressed [ 294.713252][T13297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.977979][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 295.045753][T13316] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1924'. [ 295.540210][T13338] pimreg: entered allmulticast mode [ 295.730572][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 295.764302][T13345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1933'. [ 295.815278][T13345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1933'. [ 296.145415][T13370] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1939'. [ 296.161568][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 296.235812][T13371] macsec1: entered promiscuous mode [ 296.265250][T13371] bridge0: entered promiscuous mode [ 296.296875][T13371] macsec1: entered allmulticast mode [ 296.352801][T13371] bridge0: entered allmulticast mode [ 296.390119][T13371] bridge0: port 4(macsec1) entered blocking state [ 296.416519][T13371] bridge0: port 4(macsec1) entered disabled state [ 296.448088][T13371] bridge0: left allmulticast mode [ 296.542213][ T5844] bridge0: left promiscuous mode [ 296.600742][T13389] block nbd0: not configured, cannot reconfigure [ 296.788325][T13396] ip6gre1: entered allmulticast mode [ 296.819219][T13385] syzkaller1: entered promiscuous mode [ 296.833305][T13385] syzkaller1: entered allmulticast mode [ 297.003292][T13406] xt_l2tp: invalid flags combination: 0 [ 297.132332][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 297.140559][ C0] lec:lec_tx_timeout: lec0 [ 297.147291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 297.617805][ T6351] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.643241][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.651086][ T6351] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.864862][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.992506][T13450] netlink: 'syz.2.1962': attribute type 9 has an invalid length. [ 298.173857][T13453] bond4 (unregistering): Released all slaves [ 298.337950][T13453] bond4 (unregistering): Released all slaves [ 298.537202][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 298.666032][T13453] bond4 (unregistering): Released all slaves [ 298.991172][T13453] bond4 (unregistering): Released all slaves [ 299.144634][T13491] __nla_validate_parse: 9 callbacks suppressed [ 299.144655][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 299.225245][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 299.367534][T13502] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1971'. [ 299.766865][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'. [ 300.345049][T13551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1987'. [ 300.662969][T13561] netlink: 'syz.3.1989': attribute type 6 has an invalid length. [ 300.708227][T13566] netlink: 'syz.4.1990': attribute type 21 has an invalid length. [ 300.774094][T13567] netlink: 'syz.4.1990': attribute type 21 has an invalid length. [ 300.952637][T13566] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 300.980166][T13566] bond7 (unregistering): Released all slaves [ 301.154655][T13567] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 301.168653][T13567] bond7 (unregistering): Released all slaves [ 301.449494][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1995'. [ 301.631838][T13581] syzkaller0: entered promiscuous mode [ 301.649722][T13581] syzkaller0: entered allmulticast mode [ 301.670383][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 301.690809][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 301.894967][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 301.917060][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a5d3000: rx timeout, send abort [ 301.939246][T13621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 302.161986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 302.170132][ C0] lec:lec_tx_timeout: lec0 [ 302.175174][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 302.289681][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 302.417366][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a5d2c00: rx timeout, send abort [ 302.426019][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a5d3000: abort rx timeout. Force session deactivation [ 302.925748][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a5d2c00: abort rx timeout. Force session deactivation [ 304.229710][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 304.547097][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 304.746841][T13684] netlink: 'syz.1.2010': attribute type 1 has an invalid length. [ 305.190850][T13699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2019'. [ 305.301886][T13702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.365115][T13705] netlink: 'syz.0.2022': attribute type 4 has an invalid length. [ 305.383490][T13705] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2022'. [ 305.582080][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 306.333299][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2032'. [ 306.346421][T13743] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2032'. [ 306.438186][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2036'. [ 306.506804][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2037'. [ 306.538117][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 306.628637][T13759] netlink: 'syz.2.2038': attribute type 2 has an invalid length. [ 306.649883][T13759] netlink: 'syz.2.2038': attribute type 2 has an invalid length. [ 306.774668][T13769] syzkaller0: entered promiscuous mode [ 306.794249][T13769] syzkaller0: entered allmulticast mode [ 307.035306][T13784] wg0: mtu less than device minimum [ 307.182121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 307.190246][ C0] lec:lec_tx_timeout: lec0 [ 307.195925][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.277548][T13796] xt_hashlimit: size too large, truncated to 1048576 [ 307.913924][T13828] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 308.258645][T13840] syzkaller0: entered promiscuous mode [ 308.272800][T13840] syzkaller0: entered allmulticast mode [ 308.305178][T13840] netlink: 'syz.0.2061': attribute type 2 has an invalid length. [ 308.366788][T13840] netlink: 'syz.0.2061': attribute type 11 has an invalid length. [ 308.378977][ T9545] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 308.432281][T13838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.765374][T13865] veth1_macvtap: left promiscuous mode [ 309.009189][T13876] netlink: 'syz.2.2070': attribute type 12 has an invalid length. [ 309.562486][T13897] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 309.675533][T13907] bond0: entered allmulticast mode [ 309.680905][T13907] bond_slave_0: entered allmulticast mode [ 309.687512][T13907] bond_slave_1: entered allmulticast mode [ 309.699715][T13907] netlink: 'syz.3.2081': attribute type 2 has an invalid length. [ 310.225708][T13929] __nla_validate_parse: 11 callbacks suppressed [ 310.225730][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 310.760119][T13951] SET target dimension over the limit! [ 310.862112][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.146378][T13982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2095'. [ 313.284736][T13938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.412061][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6210 ms [ 313.420190][ C0] lec:lec_tx_timeout: lec0 [ 313.425927][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 313.591046][T14033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2108'. [ 313.710328][T14036] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 313.981637][T14053] validate_nla: 2 callbacks suppressed [ 313.981659][T14053] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 314.170707][T14053] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.225513][T14053] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2114'. [ 314.498857][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 314.911865][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2126'. [ 314.950931][T14105] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2127'. [ 315.114894][T14116] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2128'. [ 315.164325][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2128'. [ 315.257092][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 315.672125][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2135'. [ 316.860117][T14180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2142'. [ 317.114452][T14180] team0: Device vlan3 is already an upper device of the team interface [ 317.147848][T14194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2145'. [ 317.258617][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.271096][T14199] netlink: 'syz.0.2145': attribute type 39 has an invalid length. [ 317.447401][T14199] syz_tun (unregistering): left allmulticast mode [ 317.621288][T14215] netlink: 'syz.4.2148': attribute type 11 has an invalid length. [ 317.658315][T14215] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2148'. [ 317.723399][T14215] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2148'. [ 317.804007][T14218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2149'. [ 317.969682][T14222] bond7: (slave bond_slave_1): Device is not our slave [ 318.005116][T14222] bond7: option active_slave: invalid value (bond_slave_1) [ 318.025571][T14222] bond7 (unregistering): Released all slaves [ 318.341492][T14242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2153'. [ 318.505303][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 318.714764][T14252] netem: incorrect ge model size [ 318.723288][T14252] netem: change failed [ 318.796611][T14255] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2158'. [ 319.063153][T14270] tipc: Enabling of bearer rejected, already enabled [ 319.172063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 319.180161][ C0] lec:lec_tx_timeout: lec0 [ 319.185276][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.474433][T14286] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.500994][T14324] netlink: 'syz.4.2176': attribute type 9 has an invalid length. [ 320.531231][T14324] __nla_validate_parse: 3 callbacks suppressed [ 320.531251][T14324] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2176'. [ 320.555683][T14330] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2177'. [ 320.809269][T14336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.363958][T14348] bridge_slave_0: invalid flags given to default FDB implementation [ 321.629278][T14360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2189'. [ 321.759635][T14365] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 321.808142][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2190'. [ 321.836501][T14365] veth0_vlan: left promiscuous mode [ 321.862686][T14365] veth0_vlan: entered promiscuous mode [ 321.873195][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 321.895214][T14365] team0: Device veth0_vlan failed to register rx_handler [ 321.930355][T14372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.335047][T14389] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2199'. [ 322.433507][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 322.465531][T14394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2202'. [ 322.553825][T14398] tipc: Can't bind to reserved service type 0 [ 322.875086][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.163360][T14434] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2211'. [ 323.389037][T14442] bond4: (slave lo): Releasing backup interface [ 323.422051][T14442] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 323.443190][T14442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.464364][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.730289][T14457] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2220'. [ 323.843504][T14462] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 324.058153][T14478] delete_channel: no stack [ 324.354109][T14492] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 324.382220][T14492] bond4: entered promiscuous mode [ 324.387751][T14492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.012148][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 325.020246][ C0] lec:lec_tx_timeout: lec0 [ 325.025960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.690302][T14456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.983490][T14515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.032700][T14516] __nla_validate_parse: 2 callbacks suppressed [ 327.032719][T14516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 327.178664][T14528] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.199588][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 327.200338][T14528] bond9 (unregistering): Released all slaves [ 327.208623][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'. [ 327.300060][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 327.327560][T14536] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 327.647976][T14550] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 327.663695][T14550] bond0: (slave lo): Error: Device can not be enslaved while up [ 328.042319][T14567] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 328.108965][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 328.126090][T14567] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 328.134465][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 328.444626][T14583] netlink: 'syz.3.2255': attribute type 10 has an invalid length. [ 328.472671][T14583] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 328.486337][T14587] x_tables: duplicate underflow at hook 1 [ 328.486362][T14586] xt_nat: multiple ranges no longer supported [ 328.654987][T14595] xfrm1: entered allmulticast mode [ 328.663438][T14600] netlink: 'syz.3.2259': attribute type 21 has an invalid length. [ 328.880174][T14607] netlink: 'syz.0.2264': attribute type 2 has an invalid length. [ 329.015582][ T9545] wlan1: Trigger new scan to find an IBSS to join [ 329.120549][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 329.438865][T14635] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 329.469667][T14635] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 329.631749][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 329.683650][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 329.725463][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 329.753937][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2273'. [ 330.030533][T14663] sctp: [Deprecated]: syz.4.2279 (pid 14663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.030533][T14663] Use struct sctp_sack_info instead [ 330.052627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 330.060841][ C0] lec:lec_tx_timeout: lec0 [ 330.066353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 330.200986][T14668] openvswitch: netlink: Key type 30 is not supported [ 330.234776][T14670] openvswitch: netlink: Message has -2 unknown bytes. [ 330.298802][T14674] netlink: 'syz.0.2283': attribute type 63 has an invalid length. [ 331.013148][T14679] veth1_vlan: left allmulticast mode [ 331.141334][ T1050] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.173933][ T1050] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.213041][ T1050] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.254041][ T1050] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.308721][ T1050] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.360688][ T1050] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.485182][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.504248][T14728] block nbd2: not configured, cannot reconfigure [ 331.551643][T14729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.974253][ T355] wlan1: Trigger new scan to find an IBSS to join [ 332.051725][T14752] ieee802154 phy1 wpan1: encryption failed: -90 [ 332.062338][T14754] __nla_validate_parse: 37 callbacks suppressed [ 332.062357][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2302'. [ 332.105066][T14756] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2301'. [ 332.115313][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2302'. [ 332.245207][T14759] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2301'. [ 332.542932][T14774] netlink: 'syz.4.2308': attribute type 6 has an invalid length. [ 332.561141][T14775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2307'. [ 332.572226][T14779] netlink: 'syz.4.2308': attribute type 6 has an invalid length. [ 332.601838][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2307'. [ 332.635451][T14783] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 333.299073][T14811] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.435267][T14809] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2314'. [ 333.507745][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 333.542506][T14823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2318'. [ 333.577700][T14816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2318'. [ 333.873381][T14833] syzkaller0: entered promiscuous mode [ 333.886930][T14833] syzkaller0: entered allmulticast mode [ 334.399388][T14852] netlink: 'syz.0.2329': attribute type 16 has an invalid length. [ 334.422377][T14852] netlink: 'syz.0.2329': attribute type 17 has an invalid length. [ 334.496708][T14852] sit0: left promiscuous mode [ 334.659829][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.667304][T14852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.674966][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.682365][T14852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.706855][ T12] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 334.732743][T14852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.023179][ T355] wlan1: Trigger new scan to find an IBSS to join [ 335.083933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.092123][ C0] lec:lec_tx_timeout: lec0 [ 335.097523][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 335.942580][ T355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.395756][T14857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.637163][T14904] __nla_validate_parse: 3 callbacks suppressed [ 337.637183][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 337.689656][T14910] IPv6: sit2: Disabled Multicast RS [ 337.944172][T14924] netlink: 'syz.3.2343': attribute type 17 has an invalid length. [ 337.969919][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 337.994280][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2343'. [ 338.063524][T14928] block nbd2: not configured, cannot reconfigure [ 338.247217][T14940] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 338.301140][T14943] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.318106][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 338.359397][T14945] netlink: 'syz.2.2352': attribute type 4 has an invalid length. [ 338.387096][T14945] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 338.421667][T14945] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2352'. [ 339.019047][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 339.385642][T14991] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2369'. [ 339.516624][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 339.831813][T15007] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2376'. [ 340.054844][T15018] openvswitch: netlink: IP tunnel dst address not specified [ 340.113154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 340.121266][ C0] lec:lec_tx_timeout: lec0 [ 340.126245][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.213504][T15025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2383'. [ 340.479525][T15038] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 340.677741][T15046] veth5: entered promiscuous mode [ 340.687107][T15046] veth5: entered allmulticast mode [ 340.711513][T15046] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 341.180466][T15066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 341.248918][T15074] erspan0: entered promiscuous mode [ 341.264701][T15074] gretap0: entered promiscuous mode [ 341.317886][T15075] tipc: Enabled bearer , priority 0 [ 341.339619][T15071] syzkaller0: entered promiscuous mode [ 341.358512][T15071] syzkaller0: entered allmulticast mode [ 341.438045][T15071] tipc: Resetting bearer [ 341.459100][T15069] tipc: Resetting bearer [ 341.476397][T15081] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 341.515921][T15069] tipc: Disabling bearer [ 341.879078][T15096] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 341.950243][T15096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.127883][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.688931][T15146] __nla_validate_parse: 8 callbacks suppressed [ 342.688952][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 342.818290][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 342.847892][T15154] wireguard: wg0: Could not create IPv4 socket [ 343.301871][T15178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.340299][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2426'. [ 343.558270][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 343.615274][T15189] netlink: 'syz.0.2429': attribute type 11 has an invalid length. [ 343.649140][T15189] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2429'. [ 343.695527][T15195] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.144014][T15211] raw_sendmsg: syz.3.2434 forgot to set AF_INET. Fix it! [ 344.184653][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2434'. [ 344.263497][ T5505] veth0_vlan: left promiscuous mode [ 344.334024][ T5505] veth0_vlan: entered promiscuous mode [ 344.560981][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.954117][ T87] batman_adv: batadv0: MLD Querier appeared [ 345.142872][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 345.151094][ C0] lec:lec_tx_timeout: lec0 [ 345.156348][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 345.215791][T15258] vlan4: entered promiscuous mode [ 345.247365][T15258] geneve1: entered promiscuous mode [ 345.276869][T15258] vlan4: entered allmulticast mode [ 345.318587][T15258] geneve1: entered allmulticast mode [ 345.386933][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2450'. [ 345.407316][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 345.609880][T15284] syz.3.2453 uses old SIOCAX25GETINFO [ 345.671534][T15289] netlink: 'syz.2.2450': attribute type 6 has an invalid length. [ 345.704735][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2450'. [ 345.786915][T15292] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2457'. [ 346.027900][T15298] syzkaller0: entered promiscuous mode [ 346.051300][T15298] syzkaller0: entered allmulticast mode [ 346.400911][T15326] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 346.556661][T15334] syzkaller0: entered promiscuous mode [ 346.564009][T15334] syzkaller0: entered allmulticast mode [ 347.972559][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.992701][T15305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.286282][T15362] __nla_validate_parse: 5 callbacks suppressed [ 349.286303][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'. [ 349.318793][T15364] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2475'. [ 349.388264][T15366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.436072][T15366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.818485][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 349.851544][T15393] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2484'. [ 349.869609][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2486'. [ 349.895740][T15389] tipc: Enabling of bearer rejected, already enabled [ 350.172928][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 350.181055][ C0] lec:lec_tx_timeout: lec0 [ 350.186082][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 350.241037][T15414] nbd2: detected capacity change from 0 to 63 [ 350.255067][T15417] block nbd2: NBD_DISCONNECT [ 350.327687][T15417] block nbd2: Disconnected due to user request. [ 350.337754][T15417] block nbd2: shutting down sockets [ 350.355127][ C1] blk_print_req_error: 138 callbacks suppressed [ 350.355148][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.370756][ C1] buffer_io_error: 138 callbacks suppressed [ 350.370779][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 350.386143][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.395324][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 350.406741][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.415926][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 350.426298][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.435448][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 350.443690][T12969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.453230][T12969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 350.461270][T12969] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.484849][T12969] Buffer I/O error on dev nbd2, logical block 1, async page read [ 350.504206][T12969] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.524056][T12969] Buffer I/O error on dev nbd2, logical block 2, async page read [ 350.547975][T15419] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 350.551276][T12969] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.619993][T12969] Buffer I/O error on dev nbd2, logical block 3, async page read [ 350.671511][T12969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.708228][T12969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 350.738168][T12969] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.774921][T12969] Buffer I/O error on dev nbd2, logical block 1, async page read [ 350.806842][T12969] ldm_validate_partition_table(): Disk read failed. [ 350.817018][T12969] Dev nbd2: unable to read RDB block 0 [ 350.825447][T12969] nbd2: unable to read partition table [ 350.880268][T12969] ldm_validate_partition_table(): Disk read failed. [ 350.908124][T12969] Dev nbd2: unable to read RDB block 0 [ 350.929899][T12969] nbd2: unable to read partition table [ 351.159480][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 351.189440][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2501'. [ 351.227162][T15442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 351.399478][T15467] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 351.536841][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 351.549672][T15474] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 351.555907][T15467] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.557952][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 351.578524][T15474] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 351.592698][T15474] netlink: 'syz.3.2505': attribute type 10 has an invalid length. [ 351.691608][T15479] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 351.956090][T15497] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 351.965943][T15497] bond9 (unregistering): Released all slaves [ 353.050323][T15535] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 353.319804][T15535] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.332577][T15532] nbd0: detected capacity change from 0 to 63 [ 353.353576][T15550] bond10: option mode: unable to set because the bond device is up [ 353.370654][T15526] netlink: 'syz.0.2519': attribute type 10 has an invalid length. [ 353.460190][ T5848] block nbd0: Receive control failed (result -32) [ 353.460190][ T50] block nbd0: Receive control failed (result -104) [ 353.709967][T15566] openvswitch: netlink: IP tunnel dst address not specified [ 353.797667][T15562] pim6reg1: entered promiscuous mode [ 353.808407][T15562] pim6reg1: entered allmulticast mode [ 353.898483][T15571] xt_hashlimit: size too large, truncated to 1048576 [ 354.050736][T15582] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 354.191773][T15582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.218722][T15588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.690227][T15609] __nla_validate_parse: 8 callbacks suppressed [ 354.690248][T15609] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2538'. [ 354.919979][T15623] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 355.043117][T15623] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.466538][T15645] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2550'. [ 355.485159][T15645] netlink: 'syz.4.2550': attribute type 2 has an invalid length. [ 355.515906][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2550'. [ 355.637972][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 355.823379][T15664] bond12: option miimon: invalid value (18446744073709551585) [ 355.831168][T15664] bond12: option miimon: allowed values 0 - 2147483647 [ 355.847580][T15664] bond12 (unregistering): Released all slaves [ 355.971948][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 355.980235][ C0] lec:lec_tx_timeout: lec0 [ 355.985826][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.051714][T15674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2559'. [ 356.227424][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 356.375855][T15685] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2564'. [ 356.396483][T15685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2564'. [ 356.841629][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2573'. [ 356.992473][T15715] netlink: 'syz.2.2575': attribute type 4 has an invalid length. [ 357.009408][T15715] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2575'. [ 357.034599][ T30] audit: type=1800 audit(1777196664.084:4): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2573" name="memory.events" dev="tmpfs" ino=2554 res=0 errno=0 [ 357.066125][T15715] netlink: 'syz.2.2575': attribute type 11 has an invalid length. [ 357.643278][T15738] netlink: 'syz.0.2582': attribute type 16 has an invalid length. [ 357.655026][T15742] sctp: [Deprecated]: syz.4.2583 (pid 15742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.655026][T15742] Use struct sctp_sack_info instead [ 357.674310][T15738] netlink: 'syz.0.2582': attribute type 3 has an invalid length. [ 358.041565][T15759] netlink: 'syz.4.2586': attribute type 2 has an invalid length. [ 358.225382][T15769] syzkaller0: entered promiscuous mode [ 358.240337][T15769] syzkaller0: entered allmulticast mode [ 358.867610][T15790] syzkaller0: entered promiscuous mode [ 358.880606][T15790] syzkaller0: entered allmulticast mode [ 359.026023][T15806] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 361.021971][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 361.030094][ C0] lec:lec_tx_timeout: lec0 [ 361.035498][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.425672][T15841] __nla_validate_parse: 6 callbacks suppressed [ 361.425693][T15841] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2603'. [ 361.638411][T15853] team0: Port device gretap2 added [ 361.670388][T15852] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 362.095773][T15883] netlink: 'syz.4.2614': attribute type 1 has an invalid length. [ 362.236652][T15883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 362.306057][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2616'. [ 362.536446][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 362.692531][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 362.766213][T15918] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2621'. [ 362.784660][T15918] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 362.980823][T15928] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2624'. [ 363.142464][T15930] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 363.311692][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 363.431549][T15934] bond10: (slave bridge5): making interface the new active one [ 363.455902][T15934] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 363.626072][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 364.327926][T15986] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 364.345367][T15991] xt_hashlimit: size too large, truncated to 1048576 [ 364.364161][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 364.394927][T15986] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2638'. [ 364.433848][T15986] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 364.489190][T15990] xt_hashlimit: size too large, truncated to 1048576 [ 365.193811][T16028] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 365.665719][T16053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2650'. [ 365.804190][T16066] netlink: 'syz.0.2652': attribute type 1 has an invalid length. [ 365.833474][T16066] netlink: 'syz.0.2652': attribute type 2 has an invalid length. [ 366.041961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 366.050146][ C0] lec:lec_tx_timeout: lec0 [ 366.055789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 366.143073][T16079] gtp0: entered promiscuous mode [ 366.148289][T16079] gtp0: entered allmulticast mode [ 366.553132][T16114] netlink: 'syz.3.2661': attribute type 13 has an invalid length. [ 366.626239][T16117] __nla_validate_parse: 2 callbacks suppressed [ 366.626259][T16117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2662'. [ 366.671570][T16117] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2662'. [ 366.705610][T16117] netlink: 'syz.4.2662': attribute type 6 has an invalid length. [ 366.742550][T16117] netlink: 'syz.4.2662': attribute type 5 has an invalid length. [ 366.777329][T16117] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2662'. [ 366.960668][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'. [ 367.011334][T16133] openvswitch: netlink: Flow key attr not present in new flow. [ 367.115476][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 367.299505][T16148] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2670'. [ 367.587959][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 367.630631][T16166] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 367.727174][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 367.781785][T16174] netlink: 'syz.4.2674': attribute type 10 has an invalid length. [ 367.802687][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 367.834221][T16162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.844217][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.891619][T16170] 8021q: adding VLAN 0 to HW filter on device bond9 [ 367.928634][T16170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.952318][T16170] bond9: (slave bond0): making interface the new active one [ 367.992911][T16170] bond9: (slave bond0): Enslaving as an active interface with an up link [ 368.370098][T16151] netlink: 'syz.2.2671': attribute type 29 has an invalid length. [ 368.401141][T16151] netlink: 'syz.2.2671': attribute type 29 has an invalid length. [ 368.631797][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 368.860359][T16206] netlink: 'syz.4.2682': attribute type 10 has an invalid length. [ 369.034763][T16216] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 369.192706][T16228] netlink: 'syz.4.2686': attribute type 32 has an invalid length. [ 369.439701][T16228] bond10: Setting coupled_control to off (0) [ 369.652087][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 369.710868][T16257] netlink: 'syz.2.2691': attribute type 29 has an invalid length. [ 369.758131][T16257] netlink: 'syz.2.2691': attribute type 29 has an invalid length. [ 369.795995][T16251] netlink: 'syz.2.2691': attribute type 29 has an invalid length. [ 369.829586][T16262] netlink: 'syz.1.2693': attribute type 2 has an invalid length. [ 370.029818][T16262] xt_nat: multiple ranges no longer supported [ 370.639181][T16297] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 370.974601][T16318] sctp: [Deprecated]: syz.1.2708 (pid 16318) Use of int in max_burst socket option deprecated. [ 370.974601][T16318] Use struct sctp_assoc_value instead [ 371.062677][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.070860][ C0] lec:lec_tx_timeout: lec0 [ 371.076781][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 371.769810][T16346] __nla_validate_parse: 14 callbacks suppressed [ 371.769832][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 371.812690][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 371.845999][T16357] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2717'. [ 372.021223][T16367] s5ÿÿø: entered promiscuous mode [ 372.036084][T16367] vlan5: entered promiscuous mode [ 372.244428][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 372.260002][T16376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2720'. [ 372.276739][T16372] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 372.296909][T16372] bond11 (unregistering): Released all slaves [ 372.611696][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 372.644054][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 372.721831][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 372.753938][T16401] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2730'. [ 372.791151][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2730'. [ 372.848355][T16401] validate_nla: 5 callbacks suppressed [ 372.848374][T16401] netlink: 'syz.4.2730': attribute type 83 has an invalid length. [ 373.004058][T16412] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 373.057375][T16412] bond11 (unregistering): Released all slaves [ 373.206957][T16431] xt_ecn: cannot match TCP bits for non-tcp packets [ 373.572173][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.583019][T16438] bridge0: port 4(ipvlan7) entered blocking state [ 373.603871][T16438] bridge0: port 4(ipvlan7) entered disabled state [ 373.634507][T16438] ipvlan7: entered allmulticast mode [ 373.659128][T16438] bridge0: entered allmulticast mode [ 373.683854][T16438] ipvlan7: left allmulticast mode [ 373.710246][T16438] bridge0: left allmulticast mode [ 373.758831][T16451] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 373.808563][T16451] bond11: entered promiscuous mode [ 373.835575][T16451] 8021q: adding VLAN 0 to HW filter on device bond11 [ 373.952880][T16458] netlink: 'syz.2.2745': attribute type 3 has an invalid length. [ 374.317954][T16474] bond7: entered allmulticast mode [ 374.377282][T16477] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.481355][T16474] bridge13: entered promiscuous mode [ 374.502994][T16474] bridge13: entered allmulticast mode [ 374.517388][T16474] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 375.239607][T16535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.509857][T16548] bridge_slave_0: default FDB implementation only supports local addresses [ 375.687396][T16557] netlink: 'syz.3.2768': attribute type 29 has an invalid length. [ 375.794207][T16557] netlink: 'syz.3.2768': attribute type 29 has an invalid length. [ 375.942803][T16561] bond12: option xmit_hash_policy: invalid value (64) [ 375.966547][T16561] bond12 (unregistering): Released all slaves [ 376.092547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.100695][ C0] lec:lec_tx_timeout: lec0 [ 376.105810][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.233160][T16634] netlink: 'syz.4.2790': attribute type 10 has an invalid length. [ 377.368575][T16648] __nla_validate_parse: 10 callbacks suppressed [ 377.368598][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 377.433544][T16648] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 377.495598][T16652] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 377.518174][T16652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.269768][T16690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2798'. [ 378.701378][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.850730][T16719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2805'. [ 379.233002][T16740] openvswitch: netlink: IP tunnel dst address not specified [ 379.255074][T14704] IPVS: starting estimator thread 0... [ 379.365757][T16742] IPVS: using max 27 ests per chain, 64800 per kthread [ 379.470531][T16749] netlink: 'syz.0.2813': attribute type 2 has an invalid length. [ 379.494030][T16749] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2813'. [ 379.663443][T16754] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 379.703206][T16757] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2817'. [ 379.849744][T16754] bond7: entered promiscuous mode [ 379.873699][T16754] bond7: entered allmulticast mode [ 379.883927][T16754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.028683][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'. [ 380.057954][T16781] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2821'. [ 380.171708][T16788] ±ÿ: renamed from team_slave_1 (while UP) [ 380.216575][T16786] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 380.268187][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'. [ 380.464838][T16806] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 380.616976][T16811] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2829'. [ 381.015845][T16837] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 381.122537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.130666][ C0] lec:lec_tx_timeout: lec0 [ 381.135718][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.238582][T16846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.867762][T16883] batadv2: entered allmulticast mode [ 382.180484][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2858'. [ 382.284201][T16911] netlink: 'syz.2.2859': attribute type 1 has an invalid length. [ 382.371181][T16911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.454463][T16918] bond8: (slave veth9): Enslaving as an active interface with a down link [ 382.488356][T16918] __nla_validate_parse: 1 callbacks suppressed [ 382.488378][T16918] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2859'. [ 382.526966][T16911] bond8: (slave dummy0): making interface the new active one [ 382.537059][T16911] dummy0: entered promiscuous mode [ 382.544088][T16911] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 382.575258][T16918] bond8: (slave dummy0): Releasing active interface [ 382.582176][T16918] dummy0 (unregistering): left promiscuous mode [ 382.927473][T16949] netlink: 'syz.4.2869': attribute type 1 has an invalid length. [ 383.085436][T16952] pim6reg: entered allmulticast mode [ 383.110949][T16955] bond11: (slave vxcan7): The slave device specified does not support setting the MAC address [ 383.122941][T16955] bond11: (slave vxcan7): Error -95 calling set_mac_address [ 383.197227][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 383.220678][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 383.459979][T16952] syzkaller0: entered promiscuous mode [ 383.487039][T16952] syzkaller0: entered allmulticast mode [ 383.648269][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 383.688243][T16986] hsr_slave_0: left promiscuous mode [ 383.723677][T16986] hsr_slave_1: left promiscuous mode [ 383.754761][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 383.829051][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 383.837028][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 383.844431][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 383.851802][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 383.859422][ T25] block nbd0: Dead connection, failed to find a fallback [ 383.870390][ T25] block nbd0: shutting down sockets [ 383.876186][ T25] blk_print_req_error: 138 callbacks suppressed [ 383.876204][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.894789][ T25] buffer_io_error: 138 callbacks suppressed [ 383.894809][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 383.908820][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.918029][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 383.926001][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.935538][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 383.943555][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.952960][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 383.960972][T12819] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.970316][T12819] Buffer I/O error on dev nbd0, logical block 0, async page read [ 383.979301][T12819] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.988878][T12819] Buffer I/O error on dev nbd0, logical block 1, async page read [ 383.997252][T12819] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.006583][T12819] Buffer I/O error on dev nbd0, logical block 2, async page read [ 384.015031][T12819] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.024291][T12819] Buffer I/O error on dev nbd0, logical block 3, async page read [ 384.032397][T12819] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.041501][T12819] Buffer I/O error on dev nbd0, logical block 0, async page read [ 384.049840][T12819] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.059510][T12819] Buffer I/O error on dev nbd0, logical block 1, async page read [ 384.070811][T12819] ldm_validate_partition_table(): Disk read failed. [ 384.079707][T12819] Dev nbd0: unable to read RDB block 0 [ 384.087594][T12819] nbd0: unable to read partition table [ 384.136822][T12819] ldm_validate_partition_table(): Disk read failed. [ 384.179807][T12819] Dev nbd0: unable to read RDB block 0 [ 384.216740][T12819] nbd0: unable to read partition table [ 384.457812][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'. [ 384.479732][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'. [ 384.508864][T17017] sctp: [Deprecated]: syz.1.2886 (pid 17017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.508864][T17017] Use struct sctp_sack_info instead [ 384.564765][T17016] ip6tnl2: entered allmulticast mode [ 385.006961][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'. [ 385.724053][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 385.817571][T17083] syzkaller1: entered promiscuous mode [ 385.836083][T17083] syzkaller1: entered allmulticast mode [ 386.141957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.150051][ C0] lec:lec_tx_timeout: lec0 [ 386.154828][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.861640][T17132] netlink: 'syz.1.2917': attribute type 11 has an invalid length. [ 386.892739][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 386.908150][T17135] netlink: 'syz.4.2919': attribute type 1 has an invalid length. [ 386.919116][T17132] vlan3: entered allmulticast mode [ 386.965725][T17135] bond12: entered promiscuous mode [ 386.988602][T17135] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.174958][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.196044][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.205332][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.215142][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.230066][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.550385][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2923'. [ 387.599458][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'. [ 387.676654][T17153] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 387.702083][T17153] netlink: 'syz.1.2925': attribute type 2 has an invalid length. [ 388.084774][T17172] syzkaller1: entered promiscuous mode [ 388.090487][T17172] syzkaller1: entered allmulticast mode [ 388.373258][T17143] chnl_net:caif_netlink_parms(): no params data found [ 388.612965][T17199] vlan3: entered promiscuous mode [ 388.626571][T17199] vlan3: entered allmulticast mode [ 388.639246][T17199] hsr_slave_1: entered allmulticast mode [ 388.764796][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2940'. [ 388.793373][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.821069][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.832435][T17143] bridge_slave_0: entered allmulticast mode [ 388.860476][T17143] bridge_slave_0: entered promiscuous mode [ 388.869743][T17215] netlink: 'syz.2.2942': attribute type 4 has an invalid length. [ 388.890917][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.907624][T17215] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2942'. [ 388.910727][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.958036][T17143] bridge_slave_1: entered allmulticast mode [ 388.980506][T17143] bridge_slave_1: entered promiscuous mode [ 388.990067][T17216] lo: entered promiscuous mode [ 389.002909][T17216] netlink: 'syz.3.2941': attribute type 2 has an invalid length. [ 389.024103][T17216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.054083][T17215] .`: renamed from bond0 [ 389.124433][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 389.252069][ T5853] Bluetooth: hci5: command tx timeout [ 389.269361][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.293571][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.312315][T17230] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2946'. [ 389.345586][T17143] team0: Port device team_slave_0 added [ 389.355469][T17143] team0: Port device team_slave_1 added [ 389.469712][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.492167][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.518984][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.548249][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.568124][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.644909][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.718223][T17250] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 389.739102][T17250] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 389.796602][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 389.853451][T17257] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.937115][T17250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.998183][T17143] hsr_slave_0: entered promiscuous mode [ 390.009277][T17143] hsr_slave_1: entered promiscuous mode [ 390.017204][T17143] debugfs: 'hsr0' already exists in 'hsr' [ 390.024375][T17143] Cannot create hsr debugfs directory [ 390.357207][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.370015][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.381256][T17143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33119 - 0 [ 390.556861][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.568592][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.597244][T17143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33119 - 0 [ 390.651540][T17283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2960'. [ 390.693012][T17283] [ 390.695415][T17283] ====================================================== [ 390.702481][T17283] WARNING: possible circular locking dependency detected [ 390.709543][T17283] syzkaller #0 Not tainted [ 390.713988][T17283] ------------------------------------------------------ [ 390.721044][T17283] syz.2.2960/17283 is trying to acquire lock: [ 390.727141][T17283] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 390.736338][T17283] [ 390.736338][T17283] but task is already holding lock: [ 390.743738][T17283] ffff88808cf47170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 390.753048][T17283] [ 390.753048][T17283] which lock already depends on the new lock. [ 390.753048][T17283] [ 390.763484][T17283] [ 390.763484][T17283] the existing dependency chain (in reverse order) is: [ 390.772532][T17283] [ 390.772532][T17283] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 390.780582][T17283] _raw_spin_lock_bh+0x36/0x50 [ 390.785915][T17283] nr_rt_ioctl+0x215/0xf90 [ 390.790906][T17283] sock_do_ioctl+0x101/0x320 [ 390.796081][T17283] sock_ioctl+0x5c6/0x7f0 [ 390.800981][T17283] __se_sys_ioctl+0xfc/0x170 [ 390.806150][T17283] do_syscall_64+0x15f/0xf80 [ 390.811346][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.817801][T17283] [ 390.817801][T17283] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 390.825679][T17283] _raw_spin_lock_bh+0x36/0x50 [ 390.831012][T17283] nr_rt_device_down+0xbe/0x860 [ 390.836430][T17283] nr_device_event+0x137/0x150 [ 390.841775][T17283] notifier_call_chain+0x1ad/0x3d0 [ 390.847454][T17283] __dev_notify_flags+0x16d/0x310 [ 390.853051][T17283] netif_change_flags+0xe8/0x1a0 [ 390.858552][T17283] dev_change_flags+0x130/0x270 [ 390.863971][T17283] dev_ioctl+0x7b4/0x1150 [ 390.868880][T17283] sock_do_ioctl+0x23e/0x320 [ 390.874045][T17283] sock_ioctl+0x5c6/0x7f0 [ 390.879009][T17283] __se_sys_ioctl+0xfc/0x170 [ 390.884156][T17283] do_syscall_64+0x15f/0xf80 [ 390.889299][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.895746][T17283] [ 390.895746][T17283] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 390.903699][T17283] __lock_acquire+0x15a5/0x2cf0 [ 390.909123][T17283] lock_acquire+0x106/0x350 [ 390.914195][T17283] _raw_spin_lock_bh+0x36/0x50 [ 390.919523][T17283] nr_rt_ioctl+0x40c/0xf90 [ 390.924486][T17283] sock_do_ioctl+0x101/0x320 [ 390.929637][T17283] sock_ioctl+0x5c6/0x7f0 [ 390.934630][T17283] __se_sys_ioctl+0xfc/0x170 [ 390.939774][T17283] do_syscall_64+0x15f/0xf80 [ 390.944923][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.951354][T17283] [ 390.951354][T17283] other info that might help us debug this: [ 390.951354][T17283] [ 390.961700][T17283] Chain exists of: [ 390.961700][T17283] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 390.961700][T17283] [ 390.975557][T17283] Possible unsafe locking scenario: [ 390.975557][T17283] [ 390.983037][T17283] CPU0 CPU1 [ 390.988430][T17283] ---- ---- [ 390.993812][T17283] lock(&nr_node->node_lock); [ 390.998619][T17283] lock(nr_node_list_lock); [ 391.005759][T17283] lock(&nr_node->node_lock); [ 391.013101][T17283] lock(nr_neigh_list_lock); [ 391.017821][T17283] [ 391.017821][T17283] *** DEADLOCK *** [ 391.017821][T17283] [ 391.026024][T17283] 2 locks held by syz.2.2960/17283: [ 391.031334][T17283] #0: ffffffff8ff61938 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 391.040870][T17283] #1: ffff88808cf47170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 391.050570][T17283] [ 391.050570][T17283] stack backtrace: [ 391.056598][T17283] CPU: 1 UID: 0 PID: 17283 Comm: syz.2.2960 Not tainted syzkaller #0 PREEMPT(full) [ 391.056624][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.056642][T17283] Call Trace: [ 391.056650][T17283] [ 391.056658][T17283] dump_stack_lvl+0xe8/0x150 [ 391.056691][T17283] print_circular_bug+0x2e1/0x300 [ 391.056715][T17283] check_noncircular+0x12e/0x150 [ 391.056738][T17283] __lock_acquire+0x15a5/0x2cf0 [ 391.056773][T17283] ? irqentry_exit+0x218/0x730 [ 391.056798][T17283] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.056823][T17283] ? irqentry_exit+0x218/0x730 [ 391.056845][T17283] ? trace_irq_disable+0x3b/0x140 [ 391.056873][T17283] ? nr_rt_ioctl+0x40c/0xf90 [ 391.056888][T17283] lock_acquire+0x106/0x350 [ 391.056913][T17283] ? nr_rt_ioctl+0x40c/0xf90 [ 391.056930][T17283] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 391.056952][T17283] ? lock_acquire+0x221/0x350 [ 391.056979][T17283] ? nr_rt_ioctl+0x40c/0xf90 [ 391.056994][T17283] _raw_spin_lock_bh+0x36/0x50 [ 391.057015][T17283] ? nr_rt_ioctl+0x40c/0xf90 [ 391.057030][T17283] nr_rt_ioctl+0x40c/0xf90 [ 391.057051][T17283] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 391.057073][T17283] ? apparmor_capable+0x126/0x170 [ 391.057099][T17283] ? capable+0x88/0xe0 [ 391.057125][T17283] ? nr_ioctl+0x1b1/0x3b0 [ 391.057149][T17283] sock_do_ioctl+0x101/0x320 [ 391.057174][T17283] ? __pfx_sock_do_ioctl+0x10/0x10 [ 391.057195][T17283] ? do_futex+0x333/0x420 [ 391.057218][T17283] sock_ioctl+0x5c6/0x7f0 [ 391.057241][T17283] ? __pfx_sock_ioctl+0x10/0x10 [ 391.057262][T17283] ? __fget_files+0x2a/0x420 [ 391.057280][T17283] ? __fget_files+0x3a0/0x420 [ 391.057296][T17283] ? __fget_files+0x2a/0x420 [ 391.057320][T17283] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.057344][T17283] ? __pfx_sock_ioctl+0x10/0x10 [ 391.057369][T17283] __se_sys_ioctl+0xfc/0x170 [ 391.057393][T17283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.057411][T17283] do_syscall_64+0x15f/0xf80 [ 391.057434][T17283] ? trace_irq_disable+0x3b/0x140 [ 391.057457][T17283] ? clear_bhb_loop+0x40/0x90 [ 391.057477][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.057494][T17283] RIP: 0033:0x7f291879cdd9 [ 391.057510][T17283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.057526][T17283] RSP: 002b:00007f29169f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.057545][T17283] RAX: ffffffffffffffda RBX: 00007f2918a15fa0 RCX: 00007f291879cdd9 [ 391.057558][T17283] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 391.057569][T17283] RBP: 00007f2918832d69 R08: 0000000000000000 R09: 0000000000000000 [ 391.057581][T17283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.057591][T17283] R13: 00007f2918a16038 R14: 00007f2918a15fa0 R15: 00007fff7f6a6278 [ 391.057612][T17283] [ 391.202182][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.345885][ C0] lec:lec_tx_timeout: lec0 [ 391.351314][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 391.373773][ T5853] Bluetooth: hci5: command tx timeout [ 391.486984][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.520440][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.539855][T17143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33119 - 0 [ 391.727326][T17143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.764955][T17143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.802539][T17143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33119 - 0 [ 392.094332][ T6344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.109155][ T6344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.132570][ T6344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.201119][ T6344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.211576][ T6344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.222569][ T6344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.268433][ T6344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.278965][ T6344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.289791][ T6344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.367209][ T6344] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.378824][ T6344] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.388711][ T6344] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 392.455750][ T6344] bridge_slave_0: left allmulticast mode [ 392.461559][ T6344] bridge_slave_0: left promiscuous mode [ 392.467853][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.481231][ T6344] lo: left allmulticast mode [ 392.545502][ T6344] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 392.596250][ T6344] bond1 (unregistering): (slave gretap1): Releasing active interface [ 392.622706][ T6344] bond6 (unregistering): (slave geneve2): Releasing active interface [ 392.734788][ T6344] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 392.744469][ T6344] bridge3 (unregistering): left promiscuous mode [ 392.904932][ T6344] bond1 (unregistering): Released all slaves [ 392.915798][ T6344] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 392.924562][ T6344] veth0_to_bond: left promiscuous mode [ 392.930233][ T6344] veth0_to_bond: left allmulticast mode [ 392.937803][ T6344] bond2 (unregistering): Released all slaves [ 392.948247][ T6344] bond3 (unregistering): Released all slaves [ 392.958665][ T6344] bond4 (unregistering): Released all slaves [ 392.971655][ T6344] bond5 (unregistering): Released all slaves [ 392.983204][ T6344] bond9 (unregistering): (slave bond0): Releasing active interface [ 392.996152][ T6344] bond0 (unregistering): (slave vxcan5): Releasing backup interface [ 393.006042][ T6344] bond0 (unregistering): Released all slaves [ 393.016466][ T6344] bond6 (unregistering): Released all slaves [ 393.026569][ T6344] bond7 (unregistering): Released all slaves [ 393.037218][ T6344] bond8 (unregistering): Released all slaves [ 393.051400][ T6344] bond9 (unregistering): Released all slaves [ 393.062814][ T6344] bond10 (unregistering): Released all slaves [ 393.073316][ T6344] bond11 (unregistering): Released all slaves [ 393.084084][ T6344] bond12 (unregistering): Released all slaves [ 393.179512][ T6344] tipc: Disabling bearer [ 393.195668][ T6344] tipc: Left network mode [ 393.218512][ T6344] IPVS: stopping master sync thread 6883 ... [ 393.451711][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 393.626683][ T6344] hsr_slave_0: left promiscuous mode [ 393.633596][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.641226][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.653742][ T6344] veth1_macvtap: left promiscuous mode [ 393.659378][ T6344] veth1_vlan: left promiscuous mode [ 393.666476][ T6344] veth0_vlan: left promiscuous mode [ 393.868929][ T6344] team0 (unregistering): Port device 26±ÿ removed [ 393.893970][ T6344] team0 (unregistering): Port device team_slave_0 removed [ 393.944639][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 394.233967][ T6344] bridge_slave_1: left allmulticast mode [ 394.242854][ T6344] bridge_slave_1: left promiscuous mode [ 394.255361][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.266971][ T6344] bridge_slave_0: left allmulticast mode [ 394.272791][ T6344] bridge_slave_0: left promiscuous mode [ 394.278578][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.360662][ T6344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.371626][ T6344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.386586][ T6344] bond0 (unregistering): Released all slaves [ 394.407374][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.495861][ T6344] hsr_slave_0: left promiscuous mode [ 394.502348][ T6344] hsr_slave_1: left promiscuous mode [ 394.508587][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.517581][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.617958][ T6344] team0 (unregistering): Port device team_slave_1 removed [ 394.631607][ T6344] team0 (unregistering): Port device team_slave_0 removed [ 394.788773][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4 [ 397.252035][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5900 ms [ 397.260071][ C0] lec:lec_tx_timeout: lec0 [ 397.265325][ C0] lec:lec_start_xmit: lec0:No lecd attached