last executing test programs: 6.158480277s ago: executing program 0 (id=7941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33, 0x0, r3}, {0x2, 0x2, 0x7, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x2, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x456, 0x2b}, 0xa, @in=@empty, 0xffffffdf, 0x0, 0x2, 0x81, 0x7, 0xfffffffd}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000012140100000000000000000008004b00130000000800030000000001080001df00000000"], 0x28}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004041) 5.943652905s ago: executing program 0 (id=7945): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, 0x0, 0x190) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="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", 0xff}, {&(0x7f0000000140)}], 0x2}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000b4000000b0d63966a38d16134691d18ff38b93ead3fb59c93a07385694af4fc3d2a128b932efb1085ce99e0a0f2e91c7b03dec1b7e41910b6888c5872945a62564ea512c8ff36f76f278a7bd158305deedc28d7431a3937b4764a02d046a5aa67d08d2e0f49db8893db046e53a6f05a4dbe798d662bd6104eb9c7ee991d2903698308e7c2dc08bcbb71528f1722749fa30a45c12a7e2c993b593c08d7634d48d189f72ce73ab80814f2b00"/216], &(0x7f00000001c0)=0xd8) 4.992379632s ago: executing program 0 (id=7965): sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="140381596e390a0965770342b0f8aa409da0b23dd2f541500ac4dbf5b09aa8f915357d113537927801c9f4d5b31a158d59200df6778985216be70ef11482c09abd7fd7a0183ffbdefcfe4eff64bb6bb8401d18af61613955db274e5c43d395b7282bab8b66fecb99fb673c421758106dcec5c2f7ffcc81111524baa6d7ac0ae8f099b25eddaa1842c670ac117db6c01b6176452cfd", 0x95, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0xfffff2a3, @empty, 0xd890, 0x80000000}, 0x20) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="6d93f7d67f49538a5f0bd34228c8a818d45a30f8ca4c1b5b70ff6673b3313551ba83cd1abf737997a290a312c5b371a858451b000c0016ab026d20ec86", 0x3d}, {&(0x7f0000000140)="a3e7ab58a891df9755db495ccf2eeae910be81dbbc373f3b8931b59bad26a5784214250d466c2f1efc22e9545be9415982761125b351337b40207ca91b058f07476bb1011f12d0c51b9d6e0f6e0bbc62498c6ea36166bba791ce38df30e040030d586f4527e35b71d17ddf5dcb49b3f39df1a9aa81a40d4f17c1de1c69a67c06967990c6c86422c54e52ddceeec378f172431da0be47ddd14ca251716ce8f208f23976084b29fef42d45a8c1c86826741fb1472d1f7aa49ede232e6e132cfe97d2c404044cfedfe5066568c48d85f282ec4ec64408b56921", 0xd8}, {&(0x7f0000000240)="758b429e0d4d7913d3c40d1f6ee2cfc00020bf8a6d2a47d630a596adeb83aa94ccbe4f6f3ca2e1768c915b571f8ffc228559b7b6cc083bbcdeb99e17dfce4d885c4811ec13b32c0d399ebeb9c8b20104773374adbcd1446ef71b40accfbb6eece8d9ee20b5e0312d3437a2e10c6bf1948d5c31c1139fd8026f47f2d866d91e1ec7", 0x81}, {&(0x7f0000000300)="c5c8c08fb1535a11fb45318076b22522910dd13364f6", 0x16}, {&(0x7f0000000340)="8707fbf19202db2bf567e57e5e9cba9ba937cfd594f22b9e727d8781da4a25bc82ce2a7ee72ebe57ed71911c047ab2961169bb01d3cd2147e41a88d24c1fbeb61d59f13427c734bf6f86ee8945778a116da4e6266d", 0x55}, {&(0x7f00000003c0)="acf67eaadbf808c7d59f17c7a1379d", 0xf}, {&(0x7f0000000400)="fad7c2bf758583ae78ae73c808be9acdc7d4239d6eff514e97c6390da73b7c8d2646411608e4f7bda84838300e14408b1c72a8cb78e45e7f70f6ab48f4246000123c270d2877eba18fb124f12ac16ee424d886b91a29c71874b7a868c5", 0x5d}], 0x7, &(0x7f0000000500)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x40000}, 0x4000) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000600)={0x4, 0x10, [0xec7, 0x6, 0x0, 0x3], &(0x7f00000005c0)=[0x0, 0x0]}) socketpair(0x28, 0x1, 0x6, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x41}, 0x10) getsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000840)={[{0x2d, 'cpu'}, {0x2d, 'cpu'}, {0x2d, 'freezer'}]}, 0x13) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000880)={0x6, 'virt_wifi0\x00', {0x40}, 0xff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x1a, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@tail_call, @tail_call, @cb_func={0x18, 0xb}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x648, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x41}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x9d, &(0x7f0000000a00)=""/157, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x8, 0x2f5c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40)=[{0x0, 0x2, 0xb, 0x1}, {0x1, 0x3, 0x8, 0x6}], 0x10, 0x73b}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@fallback=r0, 0x0, 0x0, 0x6, &(0x7f0000000c40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000dc0)={0x36, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@cgroup, r4, 0x2f, 0x203c, 0x0, @void, @void, @value=r7, @void, r6}, 0x20) sendmsg$alg(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000e00)="ccfd7819a13d646f0f1fc7c376e32f8e0e71cb5c5193bc80c7e7", 0x1a}, {&(0x7f0000000e40)="f450f8718ff1f90a7ba4b52aa4ea29786a0af324cb236011e91a6967b2540d0942968f93cc55fa7617f580db748437c10a71118896190fca6bc0c1260132e47db693ec239a530cd966aec5d2c7eda366bef6fbe22ee96142135c55ad694b12e04e887a50c97588f286c91e1bb7a9b7c730682125e3aa96ba8cfb783c6a937d40b75243a075143102debbf9c552547395fc04c155159beb75cfb90783e84c08732f99c9c44d0bacacf2ac12e235d10b7f4b7b52", 0xb3}, {&(0x7f0000000f00)="6e4b3f18858268cfb1949eff681ed06a3a8c6719005f294a783b271da86a2a3e872f06b2eeb4f679aa1b1655fc19f0e97359f07db125e55c15381b1ef5cfb2069e465cb29b38f0f80c53de55b73f8dbb92a04f0e594ba85ad758cde7e228d2385e10256e66b4a2df6ce1624fb01b20c4ac79a6614d3f58616adc0e06af10efc54a26b518000713cef6bf85a0fe7e6677b621013d831138a2ea0e68feabf37c151d8c9c669141171b7f27a0c898572aca1cd342b6a76a1c135f3dda09066fecbfdae127ccc4a8584779f3", 0xca}, {&(0x7f0000001000)="c0a8cffa49f8a897aed5b69f0f0651bf558ad38ce95e1f5b621e1c", 0x1b}, {&(0x7f0000001040)="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", 0xfe}, {&(0x7f0000001140)="745aa897acf39723f22350c1828577f92cc6671ecc9408c88d27f775c96e4943f0a33b65d7c26415cdbdc24937990c2f7d46eb8c82f98b18bd7ba2586b98c370d0a9368ff78e27dc60b5c7e94050fffeb1047bf8ccf1182a3b53e7737e2827070d60e07593114da3f916a222b284dd8a5d59b761883503667a3eb15e5ceefb265d9f71ff38843a87e55076d722f0f3081379386212602b89be6161f903f818b802943e07c446787d6e6519a70d51e5e3f886b3274ec339255d1918da2a232fa7533c2bdd63185837cdadc598a323c64188427343864607970632149922f639e2af0d29270382673cec76ba28072aa8837b8c97", 0xf3}], 0x6, &(0x7f00000012c0)=[@op={0x18}, @iv={0xa8, 0x117, 0x2, 0x8e, "24631c5b288fd99ca38dca073ccbc89c544ee7f16fc524495a2965093ecfe8234d1051569183f20e4aaf32aa3b56b2a4784fb3dd621546ff8e29bd25043b3dc30527ef2616e5d67aa222c79332416872e983c55b7dc37955ae833e7fd18f6a3e9a977c6e8efca33fd1d6d69e3d073347c801ceea441b108ac353bc8c860ac6c1dc40cc532124f029b61374566892"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x108, 0x5}, 0x20000004) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001440)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r8) sendmsg$AUDIT_GET(r5, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x833bca47d5cfbf52}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40010) setsockopt(r0, 0x8000, 0x8, &(0x7f00000015c0)="1da8f88c5392aa27fcc489cc66905e549aea5e924bd1b91ab73a74cce16d89e0bb6808f1d457f8860f142178c598071da73562eab60dbfa260fad8c9dfb04be03470bca84d66960b655edd6ef22ab71179a0a68e405414e138c65ee48d5a90ab075efece1307767c8ab9a50a4f1cdd759f91117ed5bda3d2f15987b7e0a41d7b41738f16afd42a93f9eeda7e4c8cae93f77f52c2443b1ad15efee764189c4cd95f54ea0c9be983af494e8b6d410d70f6f8576ff0a84cd6", 0xb7) poll(&(0x7f0000001680)=[{r4}, {r0, 0x7040}], 0x2, 0x3) openat$cgroup_type(r5, &(0x7f00000016c0), 0x2, 0x0) getpeername$l2tp(r0, &(0x7f0000001700)={0x2, 0x0, @broadcast}, &(0x7f0000001740)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001780)={0x0, r5, 0xd0d4, 0x81, 0x8, 0x7fff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000017c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@o_path={&(0x7f0000001840)='./file0\x00', 0x0, 0x18, r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@cgroup=r5, 0x20, 0x0, 0xffffffff, &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001ac0)={&(0x7f0000001a00)=""/158, 0x9e}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b40), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x160}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x10, 0x1, 'cgroup.type\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4881) 4.968013974s ago: executing program 3 (id=7966): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000004c0)=0x3, 0x4) recvmmsg(r2, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x9) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010000001700000000000a000000000000000000000005001e"], 0x24}}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300), 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 4.092458813s ago: executing program 3 (id=7967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)={0x9, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x3c}}, 0x90) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88847b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) 2.167041388s ago: executing program 2 (id=7969): r0 = socket(0x10, 0x3, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x890b, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f0000000040)='[}(}\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0xfffffff9]}, {0xd, 0x4, 0xe0000000, 0x8000000000000000}}, 0x7ff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x7}) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x40, &(0x7f0000000380)=0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000003680)={'tunl0\x00', 0x400}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) getpeername$inet(r0, &(0x7f0000000700)={0x2, 0x0, @empty}, &(0x7f0000000740)=0x10) 2.164780901s ago: executing program 0 (id=7970): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x7, 0x401, &(0x7f0000000240)="fd17f1761a0e6f789320680142306cf2f07a9ed3e561b4d1b00e3f155251ae754fee0231964b8e32870bef9887dd2b83b71a13c4e05b69b5bc17971289345af95608e710a12d21f8b296b4e200c1ad6b9c769b1a1b25a085febddc091feb132d9c598a42fe20b62f61534e091787b125576eed4e0f74c18178cb20cd99203178080fca507da3eba035fac7bfcfcfb3a6c8d2", 0x92) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x16ec7077c8c871d9}, 0x38) unshare(0x6a040000) r8 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r8, 0x400261f2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x10], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0b00000000000000000000e002fb000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x82}}]}, 0x90}}, 0x20000000) 2.164252325s ago: executing program 3 (id=7971): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge_slave_1\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0x3, 0x6, 0x101, 0x0, 0xffff0001, 0xff, 0xca21, 0x7fffffff}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)={0x3, 'caif0\x00', {0xffffffff}}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000085100000021300008500000000000000950033d9f39cda514cd9c90500000000d84150ad1dc185"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 2.135161808s ago: executing program 1 (id=7972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "03e08b113c0af5000000000000008000", '\x00', "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140)=0x904, 0x4) 1.978376273s ago: executing program 1 (id=7973): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e23}]}}]}, 0x4c}}, 0x24004010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000002900)=0xfffffffc, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1406, 0x8, 0x70bd2a, 0x6, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) 1.875570577s ago: executing program 3 (id=7975): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400480d1}, 0x4044000) listen(r0, 0xef8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.712322434s ago: executing program 1 (id=7977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000004) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) 1.711876542s ago: executing program 2 (id=7978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x521382, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1.702080309s ago: executing program 3 (id=7979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000400d77320ffae2d06000000000000"], &(0x7f0000000300)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r3, r2, 0x25, 0x8, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x20}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6, @ANYRES32=r4, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc891}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r8, @ANYRES32=r9, @ANYBLOB], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r14}, &(0x7f0000000340), &(0x7f0000000000)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r15, r17, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000600)=ANY=[], 0x0) 1.569579318s ago: executing program 1 (id=7980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x0, [0x1]}, 0x6) (async) mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, r0, 0x1000) 1.479971574s ago: executing program 0 (id=7982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xe64, 0x2, 0x2}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r4, @in={{0x2, 0x4e22, @local}}}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@remote}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 1.410130948s ago: executing program 2 (id=7983): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14050000360001002dbd70000300000002"], 0x514}], 0x1, 0x0, 0x0, 0x24008080}, 0x20000010) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x6, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088d1}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x16, 0x5, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x7ff}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3e1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c4) 1.102809002s ago: executing program 1 (id=7984): socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000240)={r8, 0x0, 0x40000000000, 0x3, 0x18, 0x1}) ioctl$SIOCSIFHWADDR(r7, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r9) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf25190000001800018014000200776c616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="db000000", @ANYRES16=r6, @ANYBLOB="000800000000ffdbdf250c0000001800058007000100696200000c0002800000020006000000"], 0x5}}, 0x0) 975.332421ms ago: executing program 0 (id=7986): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r1, &(0x7f0000000400)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8003, 0x6, 0x8000, 0x80000000}, 0x1c) 816.279305ms ago: executing program 4 (id=7987): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000000)=0x6, 0x4) 758.764175ms ago: executing program 4 (id=7988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x29, 0x43, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001680)={0x5, [0x8, 0x2efd, 0x200, 0x4, 0x81]}, &(0x7f00000016c0)=0xe) getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x29, 0x43, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001680)={0x5, [0x8, 0x2efd, 0x200, 0x4, 0x81]}, &(0x7f00000016c0)=0xe) (async) getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) (async) 712.45938ms ago: executing program 3 (id=7989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x4, 0x93825d45, 0x1, 0x7, 0x2b}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2fc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x14}, @call={0x85, 0x0, 0x0, 0xa1}, @tail_call, @map_fd={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x81, 0xd, 0x3, 0x7ff, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x4, 0x5, 0x1}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x800}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000004c0)={r0, r7}) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x7d, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r0, r8}) sendmmsg$inet(r9, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) 711.89026ms ago: executing program 2 (id=7990): r0 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async) socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) 536.474338ms ago: executing program 4 (id=7991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, &(0x7f0000002540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$inet_int(r2, 0x0, 0x1a, 0x0, &(0x7f0000002540)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) 535.695518ms ago: executing program 2 (id=7992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 508.176322ms ago: executing program 4 (id=7993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfc, {{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {}, 0x2, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83) ioctl$sock_netdev_private(r1, 0x8924, &(0x7f0000000100)="c23211c29d1520ec1c5b05758550df566c9801fcb1a3090000002db21426a5683210bf4d352ed32c1d7876bf2d738e5ac2d924123c14797ff1f095ba25f3e34058e5111535c49d417680ec507b2c95060b042a8ba9fb526911e146985f2762dd5a76") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x3) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0x2b8, 0x15, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}, [@migrate={0xe8, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x2, 0x0, 0x3500, 0x8b86256f2270aac7, 0xa}, {@in=@rand_addr=0x64010101, @in=@private=0xa010101, @in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x0, 0x0, 0x3503, 0x2, 0xa}]}, @lifetime_val={0x24, 0x9, {0xe0a3, 0x3, 0xd8a, 0xfffffffffffffff8}}, @mark={0xc, 0x15, {0x35075b, 0x3847}}, @algo_crypt={0xdf, 0x2, {{'cbc(aes-aesni)\x00'}, 0x4b8, "5d33986175e69f402b65dd0b89029cac18408bbb1de149728a19eeb235fe94fd1fbc59d2ffbc1fc37807baefe85afd0fc8362e5322ed7cafd82750e9d99c676bd27c4a74cc502d41c2035f4318dd56f88a830b84afc153a8032bbc3774958925d44caa89ccdd0a504b17a9f648ecbc83334225ad82567e900577af0e32892bba470c3052f27ae98015d3f7146e38e625bde44295237971"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 488.651476ms ago: executing program 2 (id=7994): bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x21, 0x0, 0x0, 0x7, 0x24, 0x1}, 0x48) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x4, "f42a97b9"}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="38002f800c000200000000000000000008000100000000002000038014000380060001000000000008000200020000000800010000000000"], 0x54}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'macsec0\x00'}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x410, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008022) 164.155865ms ago: executing program 4 (id=7995): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000001000000420000004000000006000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008a5b72d4b719141575d2bfb2565946c0d718544f2a23ec22cff1d48afc1d70410570ebdd61abc638623b57950f6aec8f6f9d8f9781d41e4b2f0ec8b49d19049956ecb8d3a9b79fb408b0df084f34caa8edc113c94b11f70665a066869b3089766052472dae02732ecd3b"], 0x48) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r2, &(0x7f0000000100)='-\x00', 0x24200, &(0x7f0000000140)={@_ha_fsid={[0x1, 0xfff]}, {0x7f, 0x3, 0x100, 0x4}}, 0x9, &(0x7f00000001c0), &(0x7f0000000300)=0x9}) sendmmsg(r4, &(0x7f0000000000), 0x0, 0xfc) 72.762849ms ago: executing program 4 (id=7996): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r1, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @x25={0x2, 0x2, 0x0, "5d1131846429864fd168cd48a8f352411dd59da00749aeabf7"}}, 0x2a) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 0s ago: executing program 1 (id=7997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1, 0x0, 0x20000000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 731.111754][T13669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.299277][T30092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6330'. [ 731.332392][T30089] IPVS: length: 16 != 8 [ 731.337084][T30089] IPVS: length: 16 != 8 [ 731.341509][T30089] IPVS: length: 16 != 8 [ 731.345903][T30089] IPVS: length: 16 != 8 [ 731.351369][T30089] IPVS: length: 16 != 8 [ 731.353655][T13662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.356215][T30089] IPVS: length: 16 != 8 [ 731.378692][T30089] IPVS: length: 16 != 8 [ 731.383448][T30089] IPVS: length: 16 != 8 [ 731.387835][T30089] IPVS: length: 16 != 8 [ 731.398164][T13662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.407354][T30089] IPVS: length: 16 != 8 [ 731.431149][T30089] IPVS: length: 16 != 8 [ 731.443054][T30089] IPVS: length: 16 != 8 [ 731.456696][T30089] IPVS: length: 16 != 8 [ 731.461294][T30089] IPVS: length: 16 != 8 [ 731.483402][T30089] IPVS: length: 16 != 8 [ 731.495919][T30096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6331'. [ 731.513670][T13663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.528403][T13663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.536650][T30089] IPVS: length: 16 != 8 [ 731.548746][T30096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.561969][T30089] IPVS: length: 16 != 8 [ 731.569511][T30101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6332'. [ 731.579687][T30089] IPVS: length: 16 != 8 [ 731.584165][T30089] IPVS: length: 16 != 8 [ 731.593711][T30089] IPVS: length: 16 != 8 [ 731.598477][T30089] IPVS: length: 16 != 8 [ 731.602867][T30089] IPVS: length: 16 != 8 [ 731.609681][T30089] IPVS: length: 16 != 8 [ 731.614023][T30089] IPVS: length: 16 != 8 [ 731.618645][T30089] IPVS: length: 16 != 8 [ 731.624720][T30089] IPVS: length: 16 != 8 [ 731.630101][T30089] IPVS: length: 16 != 8 [ 731.634367][T30089] IPVS: length: 16 != 8 [ 731.640971][T30089] IPVS: length: 16 != 8 [ 731.647415][T30089] IPVS: length: 16 != 8 [ 731.651821][T30089] IPVS: length: 16 != 8 [ 731.657623][T30089] IPVS: length: 16 != 8 [ 731.662016][T30089] IPVS: length: 16 != 8 [ 731.674949][T30096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.265120][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 733.273190][ C1] lec:lec_tx_timeout: lec0 [ 733.277903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 733.896652][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.907412][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.915760][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.924574][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.936196][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.980244][T30156] wg1 speed is unknown, defaulting to 1000 [ 734.123467][T13669] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.160855][T30156] chnl_net:caif_netlink_parms(): no params data found [ 734.205735][T13669] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.245205][T13669] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.270098][T30156] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.278766][T30156] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.287667][T30156] bridge_slave_0: entered allmulticast mode [ 734.296022][T30156] bridge_slave_0: entered promiscuous mode [ 734.304838][T13669] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.320411][T30156] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.328269][T30156] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.336865][T30156] bridge_slave_1: entered allmulticast mode [ 734.344482][T30156] bridge_slave_1: entered promiscuous mode [ 734.381095][T30156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.394666][T30156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.437127][T30103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.495577][T30156] team0: Port device team_slave_0 added [ 734.502189][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.538381][T30156] team0: Port device team_slave_1 added [ 734.603404][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.666798][T30165] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 734.752303][ T405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.786075][T30156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.793077][T30156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.838537][T30156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.890292][T30156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.915847][T30156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.996021][T30156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.034405][ T405] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.157657][T30189] netlink: 'syz.1.6344': attribute type 11 has an invalid length. [ 735.183850][T30189] netlink: 'syz.1.6344': attribute type 11 has an invalid length. [ 735.221954][T30189] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6344'. [ 735.681112][T13669] bond2 (unregistering): (slave gretap1): Releasing active interface [ 735.894837][T13669] bond2 (unregistering): (slave bridge1): Releasing active interface [ 736.037927][T29571] Bluetooth: hci2: command tx timeout [ 736.151119][T13669] bond3 (unregistering): (slave bridge0): Releasing active interface [ 736.159405][T13669] bond3 (unregistering): (slave bridge0): the permanent HWaddr of slave - 0a:2c:6c:59:30:fc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 736.208838][T13669] bond3 (unregistering): (slave bridge5): Releasing active interface [ 736.250997][T13669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.260673][T13669] bond0 (unregistering): Released all slaves [ 736.272076][T13669] bond1 (unregistering): Released all slaves [ 736.287986][T13669] bond2 (unregistering): Released all slaves [ 736.302004][T13669] bond3 (unregistering): Released all slaves [ 736.321764][T13669] bond4 (unregistering): (slave lo): Releasing backup interface [ 736.329877][T13669] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 736.341322][T13669] bond4 (unregistering): Released all slaves [ 736.357637][T13669] bond5 (unregistering): Released all slaves [ 736.371480][T13669] bond6 (unregistering): Released all slaves [ 736.394598][T13669] bond7 (unregistering): Released all slaves [ 736.408329][T13669] bond8 (unregistering): Released all slaves [ 736.422753][T13669] bond9 (unregistering): (slave veth3): Releasing active interface [ 736.432176][T13669] bond9 (unregistering): Released all slaves [ 736.453036][T13669] bond10 (unregistering): Released all slaves [ 738.125199][T29571] Bluetooth: hci2: command tx timeout [ 738.290205][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 738.298447][ C1] lec:lec_tx_timeout: lec0 [ 738.303304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 738.603071][T13669] tipc: Left network mode [ 738.648081][T30156] hsr_slave_0: entered promiscuous mode [ 738.667290][T30156] hsr_slave_1: entered promiscuous mode [ 738.689136][T30156] debugfs: 'hsr0' already exists in 'hsr' [ 738.698842][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'. [ 738.705134][T30156] Cannot create hsr debugfs directory [ 738.777740][T30232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6354'. [ 738.787849][T30232] x_tables: duplicate underflow at hook 2 [ 738.797142][T30232] netlink: 'syz.0.6354': attribute type 21 has an invalid length. [ 738.813813][T30238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6353'. [ 739.038818][T30241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6353'. [ 739.041447][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6356'. [ 739.057568][T30241] nbd: device at index 64 is going down [ 739.150425][T30243] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6356'. [ 739.316873][T30240] bond1: entered promiscuous mode [ 739.404200][T30250] udevd[30250]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 739.413369][T30266] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 739.457561][T30250] udevd[30250]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 739.610940][T30272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6362'. [ 739.787783][T30284] netlink: 'syz.1.6363': attribute type 1 has an invalid length. [ 739.805737][T30284] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6363'. [ 739.822968][T30284] netlink: 'syz.1.6363': attribute type 1 has an invalid length. [ 739.837858][T30284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6363'. [ 739.842679][T30283] syz.4.6366: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 739.871929][T30286] netlink: 'syz.1.6363': attribute type 2 has an invalid length. [ 739.895438][T30283] CPU: 0 UID: 0 PID: 30283 Comm: syz.4.6366 Not tainted syzkaller #0 PREEMPT(full) [ 739.895472][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.895485][T30283] Call Trace: [ 739.895495][T30283] [ 739.895505][T30283] dump_stack_lvl+0xe8/0x150 [ 739.895546][T30283] warn_alloc+0x249/0x340 [ 739.895575][T30283] ? stack_trace_save+0xa9/0x100 [ 739.895603][T30283] ? __pfx_warn_alloc+0x10/0x10 [ 739.895636][T30283] ? kasan_save_track+0x4f/0x80 [ 739.895659][T30283] ? kasan_save_track+0x3e/0x80 [ 739.895678][T30283] ? __kasan_kmalloc+0x93/0xb0 [ 739.895700][T30283] ? __kmalloc_cache_noprof+0x31c/0x660 [ 739.895722][T30283] ? xskq_create+0x56/0x170 [ 739.895751][T30283] ? xsk_setsockopt+0x54c/0x990 [ 739.895776][T30283] ? do_sock_setsockopt+0x17c/0x1b0 [ 739.895805][T30283] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 739.895835][T30283] ? do_syscall_64+0x14d/0xf80 [ 739.895871][T30283] __vmalloc_node_range_noprof+0x132/0x1730 [ 739.895933][T30283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 739.895964][T30283] ? __kasan_kmalloc+0x93/0xb0 [ 739.895996][T30283] vmalloc_user_noprof+0xad/0xe0 [ 739.896020][T30283] ? xskq_create+0xbf/0x170 [ 739.896050][T30283] xskq_create+0xbf/0x170 [ 739.896081][T30283] xsk_init_queue+0x8a/0xe0 [ 739.896113][T30283] xsk_setsockopt+0x54c/0x990 [ 739.896144][T30283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 739.896172][T30283] ? __pfx_aa_sk_perm+0x10/0x10 [ 739.896204][T30283] ? aa_sock_opt_perm+0xff/0x1a0 [ 739.896263][T30283] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 739.896288][T30283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 739.896319][T30283] do_sock_setsockopt+0x17c/0x1b0 [ 739.896358][T30283] __x64_sys_setsockopt+0x13d/0x1b0 [ 739.896397][T30283] do_syscall_64+0x14d/0xf80 [ 739.896428][T30283] ? trace_irq_disable+0x3b/0x150 [ 739.896457][T30283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.896479][T30283] ? clear_bhb_loop+0x40/0x90 [ 739.896505][T30283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.896525][T30283] RIP: 0033:0x7f3057b9c799 [ 739.896547][T30283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.896564][T30283] RSP: 002b:00007f3058a83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 739.896588][T30283] RAX: ffffffffffffffda RBX: 00007f3057e15fa0 RCX: 00007f3057b9c799 [ 739.896603][T30283] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 739.896615][T30283] RBP: 00007f3057c32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 739.896629][T30283] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.896642][T30283] R13: 00007f3057e16038 R14: 00007f3057e15fa0 R15: 00007ffe0f4f0be8 [ 739.896679][T30283] [ 739.896688][T30283] Mem-Info: [ 740.191054][T30156] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.205463][T29571] Bluetooth: hci2: command tx timeout [ 740.226545][T30283] active_anon:5733 inactive_anon:0 isolated_anon:0 [ 740.226545][T30283] active_file:3029 inactive_file:40184 isolated_file:0 [ 740.226545][T30283] unevictable:768 dirty:36 writeback:0 [ 740.226545][T30283] slab_reclaimable:12332 slab_unreclaimable:106334 [ 740.226545][T30283] mapped:29435 shmem:1361 pagetables:3665 [ 740.226545][T30283] sec_pagetables:0 bounce:0 [ 740.226545][T30283] kernel_misc_reclaimable:0 [ 740.226545][T30283] free:1297763 free_pcp:23627 free_cma:0 [ 740.302704][T30283] Node 0 active_anon:22932kB inactive_anon:0kB active_file:12116kB inactive_file:160536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48108kB dirty:140kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12824kB pagetables:14392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 740.358599][T30306] netlink: 'syz.3.6371': attribute type 29 has an invalid length. [ 740.381767][T30283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 740.423844][T30283] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 740.481036][T30156] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.491736][T30283] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 740.565693][T30283] Node 0 DMA32 free:1458796kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22732kB inactive_anon:0kB active_file:12116kB inactive_file:160536kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:38580kB local_pcp:19780kB free_cma:0kB [ 740.625230][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 740.630037][T30283] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 740.671310][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 740.688688][T30283] Node 1 Normal free:3721424kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56204kB local_pcp:26420kB free_cma:0kB [ 740.743728][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 740.749234][T13669] hsr_slave_0: left promiscuous mode [ 740.756087][T30283] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 740.771776][T30283] Node 0 DMA32: 9355*4kB (UM) 6688*8kB (U) 4198*16kB (UME) 1404*32kB (UME) 906*64kB (UME) 726*128kB (UME) 755*256kB (UME) 346*512kB (UM) 351*1024kB (UME) 179*2048kB (UM) 2*4096kB (U) = 1458572kB [ 740.794926][T30283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 740.797836][T13669] hsr_slave_1: left promiscuous mode [ 740.810686][T30283] Node 1 Normal: 4*4kB (UM) 8*8kB (UM) 14*16kB (UME) 13*32kB (UME) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 6*2048kB (UE) 903*4096kB (UM) = 3721424kB [ 740.861882][T30283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.871992][T30283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 740.884247][T30283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 740.894419][T30283] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 740.904275][T30283] 44570 total pagecache pages [ 740.909289][T30283] 0 pages in swap cache [ 740.913554][T30283] Free swap = 124996kB [ 740.919372][T30283] Total swap = 124996kB [ 740.923560][T30283] 2097051 pages RAM [ 740.927885][T30283] 0 pages HighMem/MovableOnly [ 740.932872][T30283] 427019 pages reserved [ 740.937841][T30283] 0 pages cma reserved [ 740.973993][T13669] pimreg (unregistering): left allmulticast mode [ 741.164457][T30339] __nla_validate_parse: 2 callbacks suppressed [ 741.164478][T30339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6377'. [ 741.309379][T30338] Set syz1 is full, maxelem 6117 reached [ 741.374199][T13669] vcan0 (unregistering): left allmulticast mode [ 741.428895][T30156] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.647524][T30156] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.740043][T30350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 742.005677][T30365] netlink: 'syz.0.6384': attribute type 1 has an invalid length. [ 742.022880][T13669] IPVS: stop unused estimator thread 0... [ 742.025314][T30365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6384'. [ 742.194025][T30156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.277764][T29571] Bluetooth: hci2: command tx timeout [ 742.288489][T30156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 742.400414][T30156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.454618][T30156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 742.479700][T30381] syzkaller0: entered promiscuous mode [ 742.492508][T30381] syzkaller0: entered allmulticast mode [ 742.644887][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6391'. [ 742.654235][T30402] netlink: 'syz.4.6391': attribute type 7 has an invalid length. [ 742.662549][T30402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6391'. [ 743.163923][T30156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.245903][T30427] netlink: 'syz.1.6395': attribute type 4 has an invalid length. [ 743.269030][T30156] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.299030][T30427] netlink: 'syz.1.6395': attribute type 16 has an invalid length. [ 743.308213][T13669] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.315136][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 743.315403][T13669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.323291][ C1] lec:lec_tx_timeout: lec0 [ 743.335393][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 743.359655][T30427] netlink: 'syz.1.6395': attribute type 17 has an invalid length. [ 743.386805][T13669] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.394090][T13669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.523583][T30427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.558414][T30427] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.573026][T30427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.715925][T30156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.772694][T30456] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6399'. [ 743.820676][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6401'. [ 743.884551][T30156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.146216][T30472] netlink: 'syz.0.6404': attribute type 3 has an invalid length. [ 744.205649][T30474] gre0: entered promiscuous mode [ 744.210855][T30474] gre0: entered allmulticast mode [ 744.317438][T30480] tipc: Started in network mode [ 744.330069][T30480] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 744.349705][T30480] tipc: Enabling of bearer rejected, failed to enable media [ 744.438675][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 744.503598][T30156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.514245][T30486] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6408'. [ 744.573499][T30489] "syz.4.6409" (30489) uses obsolete ecb(arc4) skcipher [ 744.582185][T30156] veth0_vlan: entered promiscuous mode [ 744.602705][T30156] veth1_vlan: entered promiscuous mode [ 744.673196][T30486] pim6reg: entered allmulticast mode [ 744.709245][T30156] veth0_macvtap: entered promiscuous mode [ 744.726807][T30487] pim6reg: left allmulticast mode [ 744.773805][T30156] veth1_macvtap: entered promiscuous mode [ 744.789349][T30501] Bluetooth: MGMT ver 1.23 [ 744.797838][T30501] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6412'. [ 744.804735][T30156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.856172][T30156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.874409][T13669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.910290][T13669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.930342][T13669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.953396][T13669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.210773][T30523] syzkaller0: entered promiscuous mode [ 745.216979][T30523] syzkaller0: entered allmulticast mode [ 745.411498][T30492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.681881][T30535] bond1: Removing last ns target with arp_interval on [ 745.713939][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.758679][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.791736][T30540] syzkaller1: entered promiscuous mode [ 745.805703][T30540] syzkaller1: entered allmulticast mode [ 745.914076][T13669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.936168][T13669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.211894][T30570] syzkaller0: entered promiscuous mode [ 746.220838][T30570] syzkaller0: entered allmulticast mode [ 746.300168][T30573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6430'. [ 746.338365][T30576] veth3: entered promiscuous mode [ 746.419431][T30583] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6434'. [ 746.442798][T30586] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6435'. [ 746.484051][T30593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6434'. [ 746.694344][T30610] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6438'. [ 746.707242][T30610] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6438'. [ 746.732004][T30610] hsr_slave_0 (unregistering): left promiscuous mode [ 746.865432][T30614] syzkaller0: entered promiscuous mode [ 746.871069][T30614] syzkaller0: entered allmulticast mode [ 748.345080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 748.353175][ C1] lec:lec_tx_timeout: lec0 [ 748.358161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 749.281643][T30577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.782581][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 749.799946][T30646] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6449'. [ 749.834915][T30646] netlink: 'syz.1.6449': attribute type 9 has an invalid length. [ 749.873822][T30644] chnl_net:caif_netlink_parms(): no params data found [ 750.158141][T30653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.298837][T30658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6453'. [ 750.347327][T30658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.440244][T30661] syzkaller0: entered promiscuous mode [ 750.447020][T30661] syzkaller0: entered allmulticast mode [ 750.473038][T30658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6453'. [ 750.743660][T30666] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 750.771346][T30675] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 750.786997][T30666] bond2: entered promiscuous mode [ 750.797572][T30666] bond2: entered allmulticast mode [ 750.803742][T30666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.111058][T30694] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.119078][T30694] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.130143][T30694] bridge0: entered allmulticast mode [ 751.163724][T30695] º: renamed from veth1_vlan (while UP) [ 751.487628][T30716] netlink: 'syz.2.6473': attribute type 10 has an invalid length. [ 751.564486][T30716] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 751.650695][T30725] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 751.663514][T30725] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 751.694079][T30730] ip6t_srh: unknown srh invflags 4000 [ 751.702151][T30730] xt_cluster: node mask cannot exceed total number of nodes [ 751.787940][T30723] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 751.825245][T30723] __nla_validate_parse: 3 callbacks suppressed [ 751.825268][T30723] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6476'. [ 751.877101][T30741] gretap0: entered promiscuous mode [ 751.886078][T30723] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6476'. [ 751.905525][T30741] vlan2: entered promiscuous mode [ 752.019282][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6482'. [ 752.207498][T30753] pim6reg: entered allmulticast mode [ 752.305305][T30758] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 752.403571][T30758] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 752.547107][T30772] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 752.565495][T30772] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6488'. [ 752.729966][T30779] netlink: 'syz.4.6492': attribute type 29 has an invalid length. [ 752.748736][T30779] netlink: 'syz.4.6492': attribute type 29 has an invalid length. [ 752.959046][T30793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.986218][T30797] netlink: 'syz.4.6496': attribute type 21 has an invalid length. [ 752.996629][T30798] netlink: 'syz.4.6496': attribute type 21 has an invalid length. [ 753.016855][T30800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.098963][T30801] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6498'. [ 753.154164][T30806] syzkaller1: entered promiscuous mode [ 753.161166][T30806] syzkaller1: entered allmulticast mode [ 753.276868][T30813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6503'. [ 753.365052][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 753.373141][ C1] lec:lec_tx_timeout: lec0 [ 753.378874][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.445121][T30821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6504'. [ 753.508294][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6505'. [ 753.529203][T30822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.557186][T30822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.569767][T30822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.579299][T30822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.624391][T30830] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 753.634923][T30833] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 753.753286][T30838] sock: sock_set_timeout: `syz.2.6509' (pid 30838) tries to set negative timeout [ 753.769034][T30838] tipc: MTU too low for tipc bearer [ 753.777085][T30838] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6509'. [ 754.332078][T30866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6519'. [ 754.367744][T30865] netlink: 'syz.1.6519': attribute type 2 has an invalid length. [ 754.590758][T29571] block nbd0: Receive control failed (result -107) [ 754.606830][T30880] nbd0: detected capacity change from 0 to 127 [ 754.633110][T30846] block nbd0: Dead connection, failed to find a fallback [ 754.654538][T30846] block nbd0: shutting down sockets [ 754.685396][T30846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.706139][T30846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 754.735931][T30846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.762630][T30846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 754.784921][T30846] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.811115][T30846] Buffer I/O error on dev nbd0, logical block 2, async page read [ 754.828992][T30890] IPVS: ip_vs_add_dest(): server weight less than zero [ 754.833407][T30846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.836697][T23190] IPVS: starting estimator thread 0... [ 754.865462][T30846] Buffer I/O error on dev nbd0, logical block 3, async page read [ 754.890351][T30846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.908957][T30846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 754.939281][T30846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.952526][T30846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 754.965270][T30891] IPVS: using max 35 ests per chain, 84000 per kthread [ 754.973522][T30846] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 754.983847][T30846] Buffer I/O error on dev nbd0, logical block 2, async page read [ 755.006014][T30846] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 755.033229][T30846] Buffer I/O error on dev nbd0, logical block 3, async page read [ 755.052550][T30846] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 755.093103][T30846] Buffer I/O error on dev nbd0, logical block 0, async page read [ 755.135293][T30846] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 755.158769][T30846] Buffer I/O error on dev nbd0, logical block 1, async page read [ 755.175956][T30846] ldm_validate_partition_table(): Disk read failed. [ 755.205706][T30846] Dev nbd0: unable to read RDB block 0 [ 755.212245][T30846] nbd0: unable to read partition table [ 755.271107][T30846] ldm_validate_partition_table(): Disk read failed. [ 755.279023][T30846] Dev nbd0: unable to read RDB block 0 [ 755.335369][T30846] nbd0: unable to read partition table [ 755.553425][T30918] wg1 speed is unknown, defaulting to 1000 [ 756.167723][T30948] openvswitch: netlink: Multiple metadata blocks provided [ 756.191741][T30948] xt_ecn: cannot match TCP bits for non-tcp packets [ 756.265571][T30956] syzkaller1: entered promiscuous mode [ 756.271104][T30956] syzkaller1: entered allmulticast mode [ 756.707368][T30981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.848808][T30992] __nla_validate_parse: 8 callbacks suppressed [ 756.848831][T30992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6551'. [ 757.125699][T31008] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6557'. [ 757.138127][T31008] syzkaller0: entered promiscuous mode [ 757.143926][T31008] syzkaller0: entered allmulticast mode [ 757.618121][T31033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6565'. [ 757.662288][T31038] block nbd0: reconnected socket [ 757.668193][T29571] block nbd0: Receive control failed (result -107) [ 757.734697][T31045] netlink: 'syz.0.6567': attribute type 6 has an invalid length. [ 758.016923][T31065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6574'. [ 758.058816][T31065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.102562][T31065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.210234][T31085] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.225510][T31083] netlink: 'syz.2.6577': attribute type 1 has an invalid length. [ 758.237073][T31083] netlink: 'syz.2.6577': attribute type 2 has an invalid length. [ 758.244835][T31083] netlink: 'syz.2.6577': attribute type 1 has an invalid length. [ 758.289490][T31083] netlink: 'syz.2.6577': attribute type 3 has an invalid length. [ 758.305870][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6579'. [ 758.309924][T31085] bridge_slave_0 (unregistering): left allmulticast mode [ 758.325185][T31086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6579'. [ 758.339367][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6577'. [ 758.366223][T31085] bridge_slave_0 (unregistering): left promiscuous mode [ 758.397576][T31085] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.470673][T31081] erspan1: entered allmulticast mode [ 758.625066][T31106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6583'. [ 758.960563][T31123] sctp: [Deprecated]: syz.0.6589 (pid 31123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.960563][T31123] Use struct sctp_sack_info instead [ 758.978895][T31134] ip6t_srh: unknown srh match flags 4000 [ 759.155029][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 759.163084][ C1] lec:lec_tx_timeout: lec0 [ 759.168902][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 759.433738][T31153] bridge1: entered promiscuous mode [ 759.444277][T31153] bridge1: entered allmulticast mode [ 759.459102][T31157] netlink: 'syz.3.6597': attribute type 3 has an invalid length. [ 759.469859][T31157] netlink: 766 bytes leftover after parsing attributes in process `syz.3.6597'. [ 759.631796][T31165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6602'. [ 759.699192][T31173] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 759.752064][T31169] bridge0: port 3(gretap0) entered blocking state [ 759.772093][T31169] bridge0: port 3(gretap0) entered disabled state [ 759.793052][T31169] gretap0: entered allmulticast mode [ 759.995731][T31188] netlink: 'syz.1.6609': attribute type 1 has an invalid length. [ 760.007393][T31188] netlink: 'syz.1.6609': attribute type 1 has an invalid length. [ 760.086983][T31192] tipc: Started in network mode [ 760.091915][T31192] tipc: Node identity ac14140f, cluster identity 4711 [ 760.106239][T31192] tipc: New replicast peer: 255.255.255.255 [ 760.124458][T31192] tipc: Enabled bearer , priority 10 [ 760.444502][T31211] netlink: 'syz.3.6616': attribute type 4 has an invalid length. [ 760.473109][T31211] netlink: 'syz.3.6616': attribute type 16 has an invalid length. [ 760.516466][T31211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 761.043439][T31234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.207416][T31234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.320944][T29110] tipc: Node number set to 2886997007 [ 761.488591][T31234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.547666][T31277] bond3: option primary_reselect: invalid value (255) [ 761.559556][T31277] bond3 (unregistering): Released all slaves [ 761.683479][T31234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.816546][T31288] syzkaller0: entered promiscuous mode [ 761.822087][T31288] syzkaller0: entered allmulticast mode [ 761.847167][T31289] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 761.857149][T31289] bond2 (unregistering): Released all slaves [ 761.894436][T16630] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.911627][T16630] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.933607][T16630] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.864583][T16630] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.951486][T31294] bond1: entered promiscuous mode [ 763.961695][T31294] bond1: entered allmulticast mode [ 763.967440][T31294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.967677][T31298] __nla_validate_parse: 76 callbacks suppressed [ 763.967692][T31298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6639'. [ 764.050947][T31297] openvswitch: netlink: IP tunnel dst address not specified [ 764.196001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 764.204136][ C1] lec:lec_tx_timeout: lec0 [ 764.209014][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 764.272961][T31262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.197414][T31322] validate_nla: 5 callbacks suppressed [ 766.197438][T31322] netlink: 'syz.1.6648': attribute type 12 has an invalid length. [ 766.494085][T31351] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6654'. [ 766.589660][T31355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.648591][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6650'. [ 766.669223][T31350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6650'. [ 766.735442][T31339] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6653'. [ 766.773728][T31362] netlink: 'syz.0.6658': attribute type 2 has an invalid length. [ 766.951887][T31366] lo speed is unknown, defaulting to 1000 [ 766.959938][T31366] lo speed is unknown, defaulting to 1000 [ 766.976139][T31366] lo speed is unknown, defaulting to 1000 [ 767.020659][T31366] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 767.036631][T31370] syzkaller0: entered promiscuous mode [ 767.042162][T31370] syzkaller0: entered allmulticast mode [ 767.121958][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6662'. [ 767.129667][T31366] lo speed is unknown, defaulting to 1000 [ 767.142125][T31366] lo speed is unknown, defaulting to 1000 [ 767.196869][T31381] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6665'. [ 767.208201][T31366] lo speed is unknown, defaulting to 1000 [ 767.219027][T31366] lo speed is unknown, defaulting to 1000 [ 767.230540][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6665'. [ 767.248767][T31366] lo speed is unknown, defaulting to 1000 [ 767.260936][T31383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6666'. [ 767.269880][T31366] lo speed is unknown, defaulting to 1000 [ 767.342553][T31384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6665'. [ 767.439076][T31388] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 767.532958][T31393] dvmrp6: entered allmulticast mode [ 767.552183][T31393] netlink: 'syz.0.6669': attribute type 16 has an invalid length. [ 767.576221][T31393] netlink: 'syz.0.6669': attribute type 17 has an invalid length. [ 767.604059][T31393] gre0: left promiscuous mode [ 767.627588][T31393] gre0: left allmulticast mode [ 767.674894][T31393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 767.717893][T31404] IPVS: Unknown mcast interface: vcan0 [ 767.767304][T31403] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 768.348124][T31434] tipc: Enabled bearer , priority 0 [ 768.397539][T31438] netlink: 'syz.2.6686': attribute type 1 has an invalid length. [ 768.537777][T31445] openvswitch: netlink: IPv4 tun info is not correct [ 768.569017][T31447] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 768.762123][T31463] openvswitch: netlink: Duplicate or invalid key (type 0). [ 768.785230][T31463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.815951][T31471] openvswitch: netlink: Duplicate or invalid key (type 0). [ 768.885096][T31471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.225028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 769.233230][ C1] lec:lec_tx_timeout: lec0 [ 769.239211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 769.730803][T31523] netlink: 'syz.4.6712': attribute type 11 has an invalid length. [ 770.424967][T31561] __nla_validate_parse: 17 callbacks suppressed [ 770.443917][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6721'. [ 770.472369][T31561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6721'. [ 770.857537][T31589] netlink: 'syz.4.6730': attribute type 1 has an invalid length. [ 770.906713][T31589] bond3: (slave geneve2): making interface the new active one [ 770.915270][T31589] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 770.924074][T13669] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.933557][T13669] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.947921][T13669] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.958173][T31600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6731'. [ 770.968010][T13669] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 770.977917][T31600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6731'. [ 771.180632][T31613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6736'. [ 771.254330][T31613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6736'. [ 771.327593][T31618] : entered promiscuous mode [ 773.406235][T31560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.676514][T31630] bond2: option lp_interval: invalid value (0) [ 773.682835][T31630] bond2: option lp_interval: allowed values 1 - 2147483647 [ 773.692445][T31630] bond2 (unregistering): Released all slaves [ 773.759219][T31634] Bluetooth: MGMT ver 1.23 [ 773.914252][T31642] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6744'. [ 773.999038][T31651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6746'. [ 774.013018][T31649] sctp: [Deprecated]: syz.4.6743 (pid 31649) Use of int in max_burst socket option. [ 774.013018][T31649] Use struct sctp_assoc_value instead [ 774.041536][T31644] syzkaller0: entered promiscuous mode [ 774.049062][T31644] syzkaller0: entered allmulticast mode [ 774.067724][T31644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6745'. [ 774.106523][T31659] x_tables: duplicate underflow at hook 1 [ 774.249293][T31651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.265041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 774.273277][ C1] lec:lec_tx_timeout: lec0 [ 774.279168][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 774.475328][T31677] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6752'. [ 776.377141][T31682] 8021q: VLANs not supported on ip_vti0 [ 776.577747][T31708] ipt_REJECT: TCP_RESET invalid for non-tcp [ 776.652981][T31715] nbd: must specify a size in bytes for the device [ 776.692882][T31715] tipc: Enabling of bearer rejected, failed to enable media [ 776.752098][T31721] __nla_validate_parse: 4 callbacks suppressed [ 776.752122][T31721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6764'. [ 776.941666][T31721] syzkaller0: entered promiscuous mode [ 776.951314][T31721] syzkaller0: entered allmulticast mode [ 777.061272][T31744] x_tables: duplicate underflow at hook 1 [ 777.094846][T31733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.096283][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6770'. [ 777.106871][T31733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 777.126859][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6770'. [ 779.284781][T31733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.295258][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 779.295293][ C1] lec:lec_tx_timeout: lec0 [ 779.303915][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 779.318989][T31733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 779.471122][T31775] sock: sock_timestamping_bind_phc: sock not bind to device [ 779.508257][T31775] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6778'. [ 779.549462][T31775] openvswitch: netlink: Missing key (keys=40, expected=100) [ 779.578190][T31733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.625100][T31733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 779.734358][T31733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.762165][T31733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 779.788451][T31796] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6783'. [ 780.105870][ T6026] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 780.134776][ T6026] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 780.192401][ T6026] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 780.231165][ T6026] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 780.247840][T31822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6788'. [ 780.266603][ T6026] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 780.276689][ T6026] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 780.303379][ T6026] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 780.315285][ T6026] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 780.361225][T31824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6788'. [ 780.483198][T31822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.540756][T31833] openvswitch: netlink: Multiple metadata blocks provided [ 780.628230][T31822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.691737][T31838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6794'. [ 780.715597][T31839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6794'. [ 780.731678][T31822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.851863][T31822] bond0: (slave netdevsim0): Releasing backup interface [ 780.880789][T31822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.920617][T31769] udevd[31769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 780.941341][T31769] udevd[31769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 781.098308][ T405] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.130032][ T405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.157339][T13669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.162949][T31852] netlink: 'syz.1.6797': attribute type 1 has an invalid length. [ 781.182784][T13669] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.205932][T31854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6797'. [ 781.226383][ C1] vcan0: j1939_tp_rxtimer: 0xffff888078a83800: rx timeout, send abort [ 781.237867][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888078a83800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 781.310688][T31862] netlink: 'syz.4.6799': attribute type 24 has an invalid length. [ 781.560814][T31875] hsr_slave_0 (unregistering): left promiscuous mode [ 781.660243][T31889] bond2: entered promiscuous mode [ 781.669396][T31889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 781.700539][T31891] bridge1: entered promiscuous mode [ 781.707150][T31891] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 781.724631][T29532] IPVS: starting estimator thread 0... [ 781.768999][T31895] __nla_validate_parse: 3 callbacks suppressed [ 781.769028][T31895] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6807'. [ 781.817336][T31893] IPVS: using max 24 ests per chain, 57600 per kthread [ 781.914321][T31905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6810'. [ 781.933256][T31911] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6809'. [ 782.097846][T31916] syzkaller0: entered promiscuous mode [ 782.110203][T31916] syzkaller0: entered allmulticast mode [ 782.120109][T31918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6812'. [ 782.887297][T31954] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6824'. [ 783.115673][T31960] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6827'. [ 783.157703][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6828'. [ 783.533735][T31991] netlink: 'syz.1.6834': attribute type 1 has an invalid length. [ 783.542226][T31991] netlink: 'syz.1.6834': attribute type 3 has an invalid length. [ 783.550543][T31991] netlink: 'syz.1.6834': attribute type 7 has an invalid length. [ 783.560779][T31991] netlink: 'syz.1.6834': attribute type 8 has an invalid length. [ 783.569438][T31991] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6834'. [ 783.579141][T31991] NCSI netlink: No device for ifindex 131092 [ 784.308553][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 784.316634][ C1] lec:lec_tx_timeout: lec0 [ 784.321203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 785.438071][T31995] vcan0: entered allmulticast mode [ 785.477227][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 785.561652][T32007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6837'. [ 785.722479][T32016] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6841'. [ 785.942268][T32030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.331748][T32052] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 786.383563][T32060] erspan0: entered allmulticast mode [ 786.410067][T32060] netlink: 'syz.3.6857': attribute type 1 has an invalid length. [ 786.513705][T32066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.527527][T32060] hsr_slave_0 (unregistering): left promiscuous mode [ 786.707563][T32081] netlink: 'syz.1.6864': attribute type 1 has an invalid length. [ 786.922893][T32099] __nla_validate_parse: 3 callbacks suppressed [ 786.922914][T32099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6871'. [ 786.945210][T32099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6871'. [ 786.959589][T32102] IPv6: sit2: Disabled Multicast RS [ 786.969190][T32102] sit2: entered allmulticast mode [ 787.147487][T32113] netlink: 'syz.3.6875': attribute type 4 has an invalid length. [ 787.306226][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 788.118143][T32145] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 788.124028][T32144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6887'. [ 788.129199][T32145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 788.156329][T32143] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6888'. [ 788.574424][T32173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6893'. [ 788.731789][T32183] tipc: Started in network mode [ 788.738030][T32183] tipc: Node identity 024181ea70eb, cluster identity 4711 [ 788.745823][T32183] tipc: Enabled bearer , priority 0 [ 788.817302][T32190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6898'. [ 788.832849][T32183] syzkaller0: entered promiscuous mode [ 788.839258][T32183] syzkaller0: entered allmulticast mode [ 788.848185][T32183] tipc: Resetting bearer [ 788.862766][T32182] tipc: Resetting bearer [ 788.970368][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6898'. [ 789.335133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 789.343393][ C1] lec:lec_tx_timeout: lec0 [ 789.348044][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 791.036059][T32182] tipc: Disabling bearer [ 791.072398][ T7948] tipc: Node number set to 1923777002 [ 791.258125][T32223] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 791.262994][T32220] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6904'. [ 791.275135][T32223] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 791.327651][T32228] netlink: 'syz.1.6907': attribute type 1 has an invalid length. [ 791.577472][T32240] syzkaller0: entered promiscuous mode [ 791.583351][T32240] syzkaller0: entered allmulticast mode [ 791.703945][T32247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6914'. [ 791.880232][T32258] syzkaller0: entered promiscuous mode [ 791.888178][T32258] syzkaller0: entered allmulticast mode [ 791.960450][T32262] tipc: Resetting bearer [ 792.019315][T32267] netlink: 'syz.0.6920': attribute type 1 has an invalid length. [ 792.030929][T32267] netlink: 'syz.0.6920': attribute type 1 has an invalid length. [ 792.181040][T32272] __nla_validate_parse: 1 callbacks suppressed [ 792.181065][T32272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6923'. [ 792.749778][T32307] sctp: [Deprecated]: syz.4.6933 (pid 32307) Use of int in maxseg socket option. [ 792.749778][T32307] Use struct sctp_assoc_value instead [ 792.986091][T32314] netlink: 'syz.4.6934': attribute type 33 has an invalid length. [ 793.153396][T32320] netlink: 'syz.1.6936': attribute type 1 has an invalid length. [ 793.172148][T32320] netlink: 'syz.1.6936': attribute type 1 has an invalid length. [ 793.206897][T32320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6936'. [ 793.261947][T32320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6936'. [ 793.273788][T32323] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 793.301760][T32323] bond3 (unregistering): Released all slaves [ 793.371855][T32333] sit0: entered promiscuous mode [ 793.406378][T32333] netlink: 'syz.0.6940': attribute type 1 has an invalid length. [ 793.414946][T32333] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6940'. [ 793.488076][T32336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6941'. [ 793.606991][T32348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6943'. [ 793.643775][T32343] vxcan3: entered promiscuous mode [ 793.651201][T32343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 793.660381][T32343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6944'. [ 793.706622][T32352] netlink: 'syz.4.6942': attribute type 1 has an invalid length. [ 793.783719][T32349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6942'. [ 793.902958][T32359] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 793.920421][T32359] bond4 (unregistering): Released all slaves [ 793.975497][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.012062][T32369] netlink: 'syz.4.6952': attribute type 1 has an invalid length. [ 794.014423][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.059308][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.065396][T32369] bond4: (slave bridge4): making interface the new active one [ 794.078158][T32369] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 794.097113][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.147964][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.171096][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.182048][T32375] openvswitch: netlink: IP tunnel dst address not specified [ 794.185118][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 794.355123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 794.363240][ C1] lec:lec_tx_timeout: lec0 [ 794.368052][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 794.719378][T32388] netem: change failed [ 794.751360][T32390] netlink: 'syz.2.6959': attribute type 1 has an invalid length. [ 794.765095][T32390] netlink: 476 bytes leftover after parsing attributes in process `syz.2.6959'. [ 796.265061][T32366] net_ratelimit: 24653 callbacks suppressed [ 796.265085][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.281089][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.291873][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.301836][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.311863][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.322208][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.332201][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.342616][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.353012][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 796.362977][T32366] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 797.177366][T32406] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 797.206534][T32406] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 797.227622][T32406] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 797.246148][T32406] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 797.267540][T32406] netlink: 'syz.4.6965': attribute type 29 has an invalid length. [ 797.570901][T32437] __nla_validate_parse: 3 callbacks suppressed [ 797.570922][T32437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6972'. [ 797.684421][T32437] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6972'. [ 797.967850][T32464] netlink: 'syz.2.6978': attribute type 10 has an invalid length. [ 798.071601][T32464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.115676][T32464] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 798.340485][T32489] netlink: 'syz.2.6985': attribute type 21 has an invalid length. [ 798.358873][T32489] IPv6: NLM_F_CREATE should be specified when creating new route [ 798.380756][T32489] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 798.646976][T32503] bond5 (unregistering): Released all slaves [ 798.678601][T32500] tipc: Started in network mode [ 798.679950][T32501] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.6988'. [ 798.683634][T32500] tipc: Node identity ac14140f, cluster identity 4711 [ 798.704625][T32500] tipc: New replicast peer: 255.255.255.255 [ 798.720652][T32510] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6991'. [ 798.733419][T32500] tipc: Enabled bearer , priority 10 [ 798.748561][T32501] gtp0: entered promiscuous mode [ 798.754777][T32501] gtp0: entered allmulticast mode [ 798.952244][T32524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6996'. [ 799.006299][T32526] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.6997'. [ 799.034110][T32516] sctp: [Deprecated]: syz.3.6995 (pid 32516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.034110][T32516] Use struct sctp_sack_info instead [ 799.323198][T32547] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7003'. [ 799.344504][T32547] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7003'. [ 799.375121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 799.383168][ C1] lec:lec_tx_timeout: lec0 [ 799.387786][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 799.407861][T32547] tipc: Enabling of bearer rejected, failed to enable media [ 799.438588][T32549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7004'. [ 799.486909][T32555] netlink: 'syz.2.7007': attribute type 1 has an invalid length. [ 799.611329][ T7948] IPVS: starting estimator thread 0... [ 799.708882][T32565] IPVS: using max 31 ests per chain, 74400 per kthread [ 799.826357][ T7948] tipc: Node number set to 2886997007 [ 800.101845][T32587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7019'. [ 800.124719][T32590] macvtap1: entered allmulticast mode [ 800.130584][T32590] veth0_macvtap: entered allmulticast mode [ 800.747374][T32628] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 800.850045][T32628] bond1: (slave lo): Enslaving as an active interface with an up link [ 801.105152][T32651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.146926][T32649] netlink: 'syz.4.7037': attribute type 4 has an invalid length. [ 801.629819][T32670] tipc: Started in network mode [ 801.634754][T32670] tipc: Node identity 42b68092af1c, cluster identity 4711 [ 801.645350][T32670] tipc: Enabled bearer , priority 0 [ 801.688736][T32670] syzkaller0: MTU too low for tipc bearer [ 801.704873][T32670] tipc: Disabling bearer [ 801.919317][T32685] syzkaller0: entered promiscuous mode [ 801.924854][T32685] syzkaller0: entered allmulticast mode [ 802.146955][T32696] dvmrp0: entered allmulticast mode [ 802.192710][T32696] dvmrp8: entered allmulticast mode [ 802.224068][T32696] dvmrp8: left allmulticast mode [ 802.291778][T32701] syzkaller0: entered promiscuous mode [ 802.298430][T32701] syzkaller0: entered allmulticast mode [ 802.443843][T32717] sctp: [Deprecated]: syz.2.7057 (pid 32717) Use of int in max_burst socket option deprecated. [ 802.443843][T32717] Use struct sctp_assoc_value instead [ 802.535465][T32720] netlink: 'syz.2.7059': attribute type 10 has an invalid length. [ 804.707699][T32720] team0 (unregistering): Port device team_slave_0 removed [ 804.744656][T32720] team0 (unregistering): Port device team_slave_1 removed [ 804.767037][T32692] dvmrp0: left allmulticast mode [ 804.798840][T32740] __nla_validate_parse: 3 callbacks suppressed [ 804.798862][T32740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7063'. [ 805.018749][T32757] netlink: 'syz.1.7069': attribute type 4 has an invalid length. [ 805.155012][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 805.163103][ C1] lec:lec_tx_timeout: lec0 [ 805.168527][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 805.367258][ T306] netlink: 'syz.1.7070': attribute type 1 has an invalid length. [ 805.375287][ T306] netlink: 'syz.1.7070': attribute type 1 has an invalid length. [ 805.564202][ T320] netlink: 'syz.1.7075': attribute type 1 has an invalid length. [ 805.567187][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7076'. [ 805.572758][ T310] sctp: [Deprecated]: syz.0.7073 (pid 310) Use of int in maxseg socket option. [ 805.572758][ T310] Use struct sctp_assoc_value instead [ 805.594731][ T321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.624525][ T321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.638480][ T321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.646605][ T321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.677440][ T321] bond0: (slave batadv0): Releasing backup interface [ 805.749940][ T336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7075'. [ 805.788683][ T323] bond5: entered promiscuous mode [ 805.794044][ T323] bond5: entered allmulticast mode [ 805.802114][ T323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 805.856173][ T329] bridge6: entered promiscuous mode [ 805.905241][ T329] bridge6: entered allmulticast mode [ 805.905591][T13662] net_ratelimit: 8360 callbacks suppressed [ 805.905615][T13662] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 805.936105][ T329] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 805.961757][ T343] netlink: 'syz.3.7083': attribute type 5 has an invalid length. [ 805.990455][ T343] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 806.019166][ T349] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 806.026706][ T348] netlink: 'syz.3.7083': attribute type 5 has an invalid length. [ 806.095698][T13662] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 806.176728][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7085'. [ 806.327614][ T370] wg1 speed is unknown, defaulting to 1000 [ 808.308301][ T395] netlink: 'syz.3.7097': attribute type 4 has an invalid length. [ 808.327957][ T396] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7097'. [ 808.691512][ T409] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 808.981237][ T345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.365825][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7105'. [ 809.444743][ T428] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7106'. [ 809.636169][ T439] macvtap1: entered promiscuous mode [ 809.643028][ T436] x_tables: ip_tables: osf match: only valid for protocol 6 [ 809.645248][ T439] macvtap1: entered allmulticast mode [ 809.668342][ T439] veth1_vlan: entered allmulticast mode [ 809.709608][ T441] macvtap2: entered promiscuous mode [ 809.724465][ T441] macvtap2: entered allmulticast mode [ 809.742716][ T444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7113'. [ 809.803605][ T444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7113'. [ 809.826439][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.838808][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.847189][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.975208][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.012560][ T460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7115'. [ 810.195120][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 810.200196][ T467] openvswitch: netlink: IP tunnel dst address not specified [ 810.203196][ C1] lec:lec_tx_timeout: lec0 [ 810.215266][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 810.262619][ T470] netlink: 'syz.4.7120': attribute type 1 has an invalid length. [ 810.320348][ T476] bond5: entered promiscuous mode [ 810.345359][ T476] bond5: entered allmulticast mode [ 810.352406][ T476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.381680][ T470] bridge5: entered promiscuous mode [ 810.398825][ T470] bridge5: entered allmulticast mode [ 810.414413][ T470] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 810.441820][ T405] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 810.499871][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7120'. [ 810.518869][ T481] syzkaller0: entered promiscuous mode [ 810.538218][ T481] syzkaller0: entered allmulticast mode [ 810.586047][T16630] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 810.607842][ T495] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7125'. [ 810.675311][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.707485][ T498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.740259][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7126'. [ 810.904603][ T505] netlink: 'syz.0.7129': attribute type 1 has an invalid length. [ 810.956379][ T513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7129'. [ 810.977076][ T505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 811.022094][ T505] bond3: (slave veth0_to_bond): making interface the new active one [ 811.042329][ T505] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 811.077134][ T5833] Bluetooth: hci5: command 0x0405 tx timeout [ 811.225472][ T518] syzkaller0: entered promiscuous mode [ 811.235909][ T518] syzkaller0: entered allmulticast mode [ 811.550504][ T544] erspan1: entered allmulticast mode [ 811.687564][ T547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7140'. [ 811.884122][ T563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7144'. [ 812.053813][ T578] netlink: 'syz.2.7149': attribute type 15 has an invalid length. [ 812.364896][ T588] syzkaller1: entered promiscuous mode [ 812.376856][ T588] syzkaller1: entered allmulticast mode [ 812.714083][ T617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7159'. [ 812.726354][ T609] netlink: 'syz.2.7156': attribute type 24 has an invalid length. [ 812.865222][ T623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7161'. [ 812.896350][ T626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.920099][ T606] lo speed is unknown, defaulting to 1000 [ 812.929837][ T632] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 813.090314][ T642] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7166'. [ 813.349583][ T647] bond6 (unregistering): Released all slaves [ 813.428275][ T662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.716138][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.190242][ T717] netlink: 'syz.0.7184': attribute type 1 has an invalid length. [ 814.200464][ T717] netlink: 'syz.0.7184': attribute type 2 has an invalid length. [ 814.283763][ T717] bond0: (slave gre0): Error: Device type is different from other slaves [ 814.353472][ T724] gretap1: entered promiscuous mode [ 814.379599][ T724] gretap1: entered allmulticast mode [ 814.387511][ T719] bond0: (slave gre0): Error: Device type is different from other slaves [ 814.475884][ T724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.641061][ T745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.684542][ T752] netlink: 'syz.3.7191': attribute type 10 has an invalid length. [ 814.710974][ T749] syzkaller0: entered promiscuous mode [ 814.717073][ T749] syzkaller0: entered allmulticast mode [ 814.924233][ T760] pimreg3: entered allmulticast mode [ 815.225089][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 815.233216][ C1] lec:lec_tx_timeout: lec0 [ 815.238869][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 815.345977][ T796] openvswitch: netlink: Multiple metadata blocks provided [ 815.509111][ T798] __nla_validate_parse: 6 callbacks suppressed [ 815.509134][ T798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7203'. [ 815.960438][ T823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7209'. [ 816.000551][ T825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7210'. [ 816.011512][ T825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7210'. [ 816.027557][ T826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7210'. [ 816.120107][ T831] syzkaller0: entered promiscuous mode [ 816.126144][ T831] syzkaller0: entered allmulticast mode [ 816.262019][ T838] netlink: 'syz.0.7214': attribute type 12 has an invalid length. [ 816.328924][ T840] IPv6: sit2: Disabled Multicast RS [ 816.334875][ T840] sit2: entered allmulticast mode [ 816.377201][ T842] netlink: 'syz.1.7215': attribute type 9 has an invalid length. [ 816.512734][ T844] netlink: 'syz.1.7216': attribute type 4 has an invalid length. [ 816.523535][ T844] netlink: 'syz.1.7216': attribute type 4 has an invalid length. [ 816.531696][ T845] netlink: 'syz.1.7216': attribute type 4 has an invalid length. [ 816.566807][ T844] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 816.591663][ T844] bond5: left promiscuous mode [ 816.599884][ T844] bridge6: left promiscuous mode [ 816.606040][ T844] bond5: left allmulticast mode [ 816.611655][ T844] bridge6: left allmulticast mode [ 816.704641][ T851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 816.714203][ T852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 816.732815][T16630] tipc: Subscription rejected, illegal request [ 816.879156][ T860] veth0_to_team: entered allmulticast mode [ 816.983343][ T865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.227153][ T787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.415761][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7222'. [ 818.441833][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7222'. [ 818.462058][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7222'. [ 818.482750][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7222'. [ 818.497415][ T877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7222'. [ 818.508120][ T890] tipc: Enabling of bearer rejected, failed to enable media [ 818.527870][ T891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.553299][ T891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.690811][ T899] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.859701][ T910] netlink: 'syz.0.7231': attribute type 5 has an invalid length. [ 819.021984][ T916] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.125875][ T931] netlink: 'syz.4.7233': attribute type 8 has an invalid length. [ 819.238768][ T916] veth1_vlan: left allmulticast mode [ 819.261105][ T405] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.295117][ T405] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.317126][ T405] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.348499][T13663] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.910399][ T973] Cannot find del_set index 3 as target [ 819.920216][ T981] Cannot find del_set index 3 as target [ 820.039559][ T990] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 820.165499][ T992] netlink: 'syz.4.7247': attribute type 1 has an invalid length. [ 820.190900][ T996] tipc: Enabled bearer , priority 0 [ 820.207019][ T996] syzkaller0: entered promiscuous mode [ 820.216044][ T996] syzkaller0: entered allmulticast mode [ 820.255025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 820.263105][ C1] lec:lec_tx_timeout: lec0 [ 820.268039][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 820.363623][ T996] tipc: Resetting bearer [ 820.366918][ T1010] No such timeout policy "syz0" [ 820.399842][ T995] tipc: Resetting bearer [ 820.444662][ T995] tipc: Disabling bearer [ 820.553803][ T1014] syzkaller1: entered promiscuous mode [ 820.559853][ T1014] syzkaller1: entered allmulticast mode [ 820.732490][ T1036] __nla_validate_parse: 67 callbacks suppressed [ 820.732518][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7257'. [ 820.921738][ T1045] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7260'. [ 820.968652][ T1055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7262'. [ 821.020563][ T1064] netlink: 'syz.1.7264': attribute type 1 has an invalid length. [ 821.093703][ T1064] x_tables: duplicate underflow at hook 2 [ 821.202362][ T1069] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7265'. [ 821.218172][ T1073] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7265'. [ 821.353099][ T1075] wg1 speed is unknown, defaulting to 1000 [ 821.366916][ T1075] lo speed is unknown, defaulting to 1000 [ 821.706631][ T1101] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 822.110874][ T1117] netlink: 'syz.3.7274': attribute type 10 has an invalid length. [ 822.168164][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 822.199357][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 822.487359][ T1131] netlink: 'syz.2.7280': attribute type 1 has an invalid length. [ 822.649363][ T1139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 822.705488][ T1144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7285'. [ 822.809033][ T1151] netlink: 'syz.3.7286': attribute type 11 has an invalid length. [ 822.837062][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7286'. [ 822.875994][ T1151] netlink: 'syz.3.7286': attribute type 11 has an invalid length. [ 822.884046][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7286'. [ 822.899182][ T1152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7286'. [ 822.978565][ T1159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7286'. [ 823.028082][ T1166] netlink: 'syz.4.7291': attribute type 30 has an invalid length. [ 823.083889][ T1166] netlink: 'syz.4.7291': attribute type 30 has an invalid length. [ 823.117867][T13669] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.152992][T13669] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.177155][T13669] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.203681][T13669] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.293950][ T1173] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 823.908913][ T1183] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 823.926127][ T1183] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 824.138354][ T1215] netlink: 'syz.0.7302': attribute type 1 has an invalid length. [ 824.344568][ T1195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.366167][ T1210] netlink: 'syz.2.7301': attribute type 1 has an invalid length. [ 825.285195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 825.293404][ C1] lec:lec_tx_timeout: lec0 [ 825.973767][ T1217] bond4: (slave bridge3): making interface the new active one [ 825.982700][ T1217] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 826.135593][ T1228] x_tables: ip_tables: ipvs.0 match: invalid size 40 (kernel) != (user) 56 [ 826.470103][ T1245] netlink: 'syz.2.7311': attribute type 9 has an invalid length. [ 826.574329][ T1251] __nla_validate_parse: 3 callbacks suppressed [ 826.574433][ T1251] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7312'. [ 826.812362][ T1260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7317'. [ 826.866195][ T1263] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7316'. [ 826.897997][ T1263] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7316'. [ 826.968766][ T1269] netlink: 'syz.0.7319': attribute type 1 has an invalid length. [ 827.062990][ T1275] netlink: 'syz.2.7320': attribute type 13 has an invalid length. [ 827.198260][ T1283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7323'. [ 827.351687][ T1287] netlink: 'syz.1.7322': attribute type 13 has an invalid length. [ 827.493575][ T1302] syzkaller0: entered promiscuous mode [ 827.511960][ T1302] syzkaller0: entered allmulticast mode [ 827.606898][ T1301] syzkaller0: entered promiscuous mode [ 827.612480][ T1301] syzkaller0: entered allmulticast mode [ 827.793968][ T1315] netlink: 'syz.4.7328': attribute type 1 has an invalid length. [ 827.994022][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 828.087475][ T1318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7329'. [ 828.126876][ T1320] netlink: 'syz.3.7330': attribute type 4 has an invalid length. [ 828.246078][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.277221][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.525225][ T1339] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7335'. [ 828.644404][ T1349] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 828.934728][ T1359] wg1 speed is unknown, defaulting to 1000 [ 828.948754][ T1357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7340'. [ 828.987433][ T1359] lo speed is unknown, defaulting to 1000 [ 829.074477][ T1366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7344'. [ 829.118274][T27340] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 829.152957][ T1370] netlink: 'syz.2.7345': attribute type 1 has an invalid length. [ 829.185071][T27340] CPU: 0 UID: 0 PID: 27340 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 829.185103][T27340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.185117][T27340] Call Trace: [ 829.185127][T27340] [ 829.185137][T27340] dump_stack_lvl+0xe8/0x150 [ 829.185173][T27340] dump_header+0xd3/0x4c0 [ 829.185203][T27340] oom_kill_process+0x3ab/0x970 [ 829.185232][T27340] out_of_memory+0x106c/0x1410 [ 829.185254][T27340] ? percpu_ref_put+0x19/0x180 [ 829.185283][T27340] ? __pfx___mutex_lock+0x10/0x10 [ 829.185314][T27340] ? __pfx_out_of_memory+0x10/0x10 [ 829.185333][T27340] ? do_raw_spin_unlock+0xf5/0x210 [ 829.185367][T27340] try_charge_memcg+0xc53/0x1560 [ 829.185394][T27340] ? __lock_acquire+0x6b5/0x2cf0 [ 829.185437][T27340] ? __pfx_try_charge_memcg+0x10/0x10 [ 829.185458][T27340] ? xa_load+0x60/0x210 [ 829.185488][T27340] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 829.185517][T27340] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 829.185553][T27340] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 829.185578][T27340] __swap_cache_prepare_and_add+0x52a/0x700 [ 829.185624][T27340] swap_cache_alloc_folio+0xf1/0x240 [ 829.185653][T27340] swap_cluster_readahead+0x369/0x690 [ 829.185687][T27340] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 829.185726][T27340] ? get_vma_policy+0x27b/0x3c0 [ 829.185753][T27340] swapin_readahead+0x196/0xc50 [ 829.185790][T27340] ? __pfx_swapin_readahead+0x10/0x10 [ 829.185818][T27340] ? swap_table_get+0x1e/0x260 [ 829.185843][T27340] ? swap_table_get+0x1e/0x260 [ 829.185865][T27340] ? swap_table_get+0x1e/0x260 [ 829.185891][T27340] ? swap_table_get+0x216/0x260 [ 829.185917][T27340] ? swap_cache_get_folio+0x513/0x520 [ 829.185948][T27340] do_swap_page+0x54f/0x58d0 [ 829.185974][T27340] ? __lock_acquire+0x6b5/0x2cf0 [ 829.186018][T27340] ? do_swap_page+0x12c/0x58d0 [ 829.186042][T27340] ? __pfx_do_swap_page+0x10/0x10 [ 829.186066][T27340] ? __pte_offset_map+0x1ae/0x240 [ 829.186101][T27340] ? pte_offset_map_rw_nolock+0xea/0x160 [ 829.186133][T27340] handle_mm_fault+0x12d2/0x3310 [ 829.186172][T27340] ? handle_mm_fault+0xee/0x3310 [ 829.186203][T27340] ? __pfx_handle_mm_fault+0x10/0x10 [ 829.186226][T27340] ? lock_vma_under_rcu+0x45a/0x500 [ 829.186269][T27340] do_user_addr_fault+0xa73/0x1340 [ 829.186299][T27340] ? rcu_is_watching+0x15/0xb0 [ 829.186323][T27340] ? trace_page_fault_user+0x84/0x210 [ 829.186351][T27340] exc_page_fault+0x6a/0xc0 [ 829.186380][T27340] asm_exc_page_fault+0x26/0x30 [ 829.186399][T27340] RIP: 0033:0x7f348af5cfce [ 829.186420][T27340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 829.186435][T27340] RSP: 002b:00007ffcb5ebefe8 EFLAGS: 00010246 [ 829.186453][T27340] RAX: 0000000000000000 RBX: 000055559334f500 RCX: 00007f348af5cfce [ 829.186466][T27340] RDX: 00007ffcb5ebf040 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.186477][T27340] RBP: 00007ffcb5ebf0ac R08: 0000000000000000 R09: 0000000000000000 [ 829.186488][T27340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 829.186499][T27340] R13: 00000000000927c0 R14: 00000000000ca1fa R15: 00007ffcb5ebf100 [ 829.186542][T27340] [ 829.186551][T27340] memory: usage 307200kB, limit 307200kB, failcnt 431 [ 829.556436][T27340] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 829.585361][T27340] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 829.592935][T27340] Memory cgroup stats for /syz1: [ 829.593435][T27340] cache 0 [ 829.601888][T27340] rss 0 [ 829.604790][T27340] rss_huge 0 [ 829.609883][T27340] shmem 0 [ 829.612954][T27340] mapped_file 0 [ 829.620935][T27340] dirty 0 [ 829.626257][T27340] writeback 0 [ 829.629803][T27340] workingset_refault_anon 1 [ 829.634443][T27340] workingset_refault_file 0 [ 829.639700][T27340] swap 237568 [ 829.643190][T27340] swapcached 241664 [ 829.647389][T27340] pgpgin 137978 [ 829.650979][T27340] pgpgout 137977 [ 829.654553][T27340] pgfault 268713 [ 829.658775][T27340] pgmajfault 2 [ 829.662353][T27340] inactive_anon 0 [ 829.666275][T27340] active_anon 4096 [ 829.670125][T27340] inactive_file 0 [ 829.673863][T27340] active_file 0 [ 829.677697][T27340] unevictable 0 [ 829.681279][T27340] hierarchical_memory_limit 314572800 [ 829.686898][T27340] hierarchical_memsw_limit 9223372036854771712 [ 829.699184][T27340] total_cache 0 [ 829.702697][T27340] total_rss 0 [ 829.720320][T27340] total_rss_huge 0 [ 829.724181][T27340] total_shmem 0 [ 829.727924][T27340] total_mapped_file 0 [ 829.731934][T27340] total_dirty 0 [ 829.741318][T27340] total_writeback 0 [ 829.745482][T27340] total_workingset_refault_anon 1 [ 829.752828][T27340] total_workingset_refault_file 0 [ 829.759983][T27340] total_swap 237568 [ 829.765678][T27340] total_swapcached 241664 [ 829.770337][T27340] total_pgpgin 137978 [ 829.784262][T27340] total_pgpgout 137977 [ 829.789022][T27340] total_pgfault 268713 [ 829.793260][T27340] total_pgmajfault 2 [ 829.815081][T27340] total_inactive_anon 0 [ 829.888228][T27340] total_active_anon 4096 [ 829.926816][T27340] total_inactive_file 0 [ 829.939398][T27340] total_active_file 0 [ 829.993955][T27340] total_unevictable 0 [ 830.047492][T27340] anon_cost 0 [ 830.050930][T27340] file_cost 0 [ 830.054243][T27340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7322,pid=1277,uid=0 [ 830.097008][T27340] Memory cgroup out of memory: OOM victim 1277 (syz.1.7322) is already exiting. Skip killing the task [ 830.172708][ T1392] netlink: 'syz.0.7354': attribute type 11 has an invalid length. [ 830.196913][ T1392] netlink: 'syz.0.7354': attribute type 3 has an invalid length. [ 830.211627][ T1392] netlink: 'syz.0.7354': attribute type 2 has an invalid length. [ 830.561938][ T1414] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 830.838250][ T1435] netlink: 'syz.0.7365': attribute type 1 has an invalid length. [ 831.171503][ T1447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.277871][ T1455] openvswitch: netlink: Key type 9478 is out of range max 32 [ 831.565264][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 831.822947][ T1485] validate_nla: 1 callbacks suppressed [ 831.822972][ T1485] netlink: 'syz.1.7375': attribute type 1 has an invalid length. [ 831.864238][ T1481] __nla_validate_parse: 9 callbacks suppressed [ 831.864261][ T1481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7373'. [ 831.939804][ T1481] tc_dump_action: action bad kind [ 832.111600][ T1497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7377'. [ 832.163360][ T1502] batadv_slave_0: Caught tx_queue_len zero misconfig [ 832.261345][ T1500] bridge_slave_1: Caught tx_queue_len zero misconfig [ 832.440139][ T1510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7380'. [ 832.686500][ T1522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7383'. [ 832.776690][ T1522] siw: device registration error -23 [ 832.806669][ T1532] netlink: 'syz.3.7385': attribute type 9 has an invalid length. [ 832.847481][ T1532] netlink: 'syz.3.7385': attribute type 11 has an invalid length. [ 832.905706][ T1532] netlink: 'syz.3.7385': attribute type 12 has an invalid length. [ 832.922453][ T1532] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.7385'. [ 832.965631][ T1532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7385'. [ 833.197631][ T1547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7389'. [ 833.676947][ T1584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7394'. [ 833.764664][ T1585] syzkaller0: entered promiscuous mode [ 833.803963][ T1585] syzkaller0: entered allmulticast mode [ 834.194341][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7398'. [ 834.212228][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7399'. [ 834.272266][ T1603] netlink: 'syz.3.7398': attribute type 4 has an invalid length. [ 834.474119][ T1603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.267021][ T1677] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 835.290928][ T1677] netlink: zone id is out of range [ 835.296278][ T1677] netlink: zone id is out of range [ 835.301852][ T1677] netlink: zone id is out of range [ 835.307716][ T1677] netlink: zone id is out of range [ 835.312875][ T1677] netlink: zone id is out of range [ 835.319130][ T1677] netlink: zone id is out of range [ 835.324451][ T1677] netlink: zone id is out of range [ 835.330905][ T1677] netlink: zone id is out of range [ 835.337883][ T1677] netlink: zone id is out of range [ 835.486221][ T1689] netlink: 'syz.4.7419': attribute type 21 has an invalid length. [ 835.562008][ T1689] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 835.591846][ T1689] bond7 (unregistering): Released all slaves [ 835.831772][ T1704] wg1 speed is unknown, defaulting to 1000 [ 835.863529][ T1704] lo speed is unknown, defaulting to 1000 [ 836.472952][ T1746] netlink: 'syz.0.7436': attribute type 1 has an invalid length. [ 836.507259][ T1745] macsec0: entered promiscuous mode [ 836.512686][ T1745] macsec0: entered allmulticast mode [ 836.558779][ T1749] syzkaller0: entered promiscuous mode [ 836.564561][ T1749] syzkaller0: entered allmulticast mode [ 836.665470][ T1746] veth1_macvtap: entered allmulticast mode [ 836.681982][ T1746] macsec0: left promiscuous mode [ 836.698528][ T1746] macsec0: left allmulticast mode [ 836.734181][ T1746] veth1_macvtap: left allmulticast mode [ 837.460375][ T1790] __nla_validate_parse: 9 callbacks suppressed [ 837.460407][ T1790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 837.588864][ T1790] bridge10: port 1(veth5) entered blocking state [ 837.600144][ T1790] bridge10: port 1(veth5) entered disabled state [ 837.617668][ T1790] veth5: entered allmulticast mode [ 837.630453][ T1790] veth5: entered promiscuous mode [ 837.915309][ T1807] xt_hashlimit: size too large, truncated to 1048576 [ 838.346776][ T1823] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.7460'. [ 838.375145][ T1823] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.7460'. [ 838.632840][ T1834] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 838.657437][ T1832] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7461'. [ 838.703502][ T1834] bond4: (slave lo): Enslaving as an active interface with an up link [ 838.730561][ T7948] lo speed is unknown, defaulting to 1000 [ 838.736484][ T5959] lo speed is unknown, defaulting to 1000 [ 838.742391][T29532] lo speed is unknown, defaulting to 1000 [ 838.908274][ T1848] netlink: 'syz.0.7465': attribute type 1 has an invalid length. [ 838.918240][ T1848] nbd: error processing sock list [ 839.106880][ T1857] netlink: 'syz.2.7467': attribute type 10 has an invalid length. [ 839.307507][ T1866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 839.490890][ T1879] netlink: 4724 bytes leftover after parsing attributes in process `syz.1.7474'. [ 839.763915][ T1903] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7481'. [ 839.877688][ T1910] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7483'. [ 840.034265][ T1927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7490'. [ 840.097027][ T1933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7488'. [ 840.407163][ T1949] netlink: 'syz.4.7497': attribute type 1 has an invalid length. [ 840.675743][ T1962] bond2: (slave gre0): Device is not bonding slave [ 840.715899][ T1962] bond2: option active_slave: invalid value (gre0) [ 840.737021][ T1962] bond2 (unregistering): Released all slaves [ 841.077758][ T1986] netlink: 'syz.1.7507': attribute type 1 has an invalid length. [ 841.172245][ T1992] gretap0: left allmulticast mode [ 841.185646][ T1992] bridge0: port 3(gretap0) entered disabled state [ 841.242646][ T1992] bridge_slave_1: left allmulticast mode [ 841.255111][ T1992] bridge_slave_1: left promiscuous mode [ 841.260962][ T1992] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.310468][ T1992] bridge_slave_0: left allmulticast mode [ 841.328024][ T1992] bridge_slave_0: left promiscuous mode [ 841.333959][ T1992] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.534163][ T2010] net_ratelimit: 52 callbacks suppressed [ 841.534189][ T2010] openvswitch: netlink: Missing valid actions attribute. [ 841.559697][ T2010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.796199][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 842.283051][ T29] audit: type=1800 audit(1772966572.347:12): pid=2056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7524" name="memory.events" dev="tmpfs" ino=1299 res=0 errno=0 [ 842.536755][ T2068] __nla_validate_parse: 10 callbacks suppressed [ 842.536779][ T2068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7526'. [ 842.716036][ T2082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7530'. [ 842.941779][ T2082] 8021q: adding VLAN 0 to HW filter on device bond7 [ 843.029499][ T2097] netlink: 'syz.4.7535': attribute type 4 has an invalid length. [ 843.067254][ T2098] netlink: 'syz.4.7535': attribute type 4 has an invalid length. [ 843.172471][ T2090] syzkaller0: entered promiscuous mode [ 843.188578][ T2090] syzkaller0: entered allmulticast mode [ 843.280421][ T2109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7537'. [ 843.299664][ T2120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7540'. [ 843.310693][ T2109] lo: Caught tx_queue_len zero misconfig [ 843.331605][T24075] lec:lec_start_xmit: lec0:No lecd attached [ 843.390987][ T2124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7540'. [ 843.418937][ T2109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7537'. [ 843.490777][ T2132] Cannot find add_set index 46338 as target [ 843.507049][ T2132] netlink: 'syz.4.7543': attribute type 32 has an invalid length. [ 843.527962][ T2132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7543'. [ 843.692754][ T2132] bond8: option coupled_control: invalid value (52) [ 843.718328][ T2132] bond8 (unregistering): Released all slaves [ 843.800796][ T2144] gre0: entered promiscuous mode [ 843.896477][ T2153] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.987745][ T2153] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.054041][ T2153] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.160107][ T2153] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.179752][ T2166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7552'. [ 844.350271][T13662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.392502][T13662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.469762][T13662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.532587][ T6028] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.780987][ T2186] sctp: [Deprecated]: syz.0.7558 (pid 2186) Use of int in max_burst socket option. [ 844.780987][ T2186] Use struct sctp_assoc_value instead [ 844.896502][ T2183] wg1 speed is unknown, defaulting to 1000 [ 844.919972][ T2183] lo speed is unknown, defaulting to 1000 [ 844.945277][ T2193] netlink: 'syz.0.7560': attribute type 1 has an invalid length. [ 845.090453][ T2196] bond5: (slave bridge5): making interface the new active one [ 845.103313][ T2196] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 845.176855][ T2201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7562'. [ 845.295866][ T2209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7564'. [ 845.526324][ T2221] tunl0: Caught tx_queue_len zero misconfig [ 845.598075][ T2225] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 845.606049][ T2225] netlink: 'syz.0.7570': attribute type 2 has an invalid length. [ 845.613835][ T2225] netlink: 'syz.0.7570': attribute type 1 has an invalid length. [ 845.622456][ T2225] netlink: 'syz.0.7570': attribute type 3 has an invalid length. [ 845.713627][ T2232] sctp: [Deprecated]: syz.0.7573 (pid 2232) Use of int in max_burst socket option. [ 845.713627][ T2232] Use struct sctp_assoc_value instead [ 846.233037][ T2264] netlink: 'syz.1.7581': attribute type 21 has an invalid length. [ 846.242256][ T2264] netlink: 'syz.1.7581': attribute type 22 has an invalid length. [ 846.253230][ T2264] netlink: 'syz.1.7581': attribute type 23 has an invalid length. [ 846.266267][ T2264] netlink: 'syz.1.7581': attribute type 25 has an invalid length. [ 846.276587][ T2264] netlink: 'syz.1.7581': attribute type 26 has an invalid length. [ 846.556774][ T2285] syzkaller0: entered promiscuous mode [ 846.574299][ T2285] syzkaller0: entered allmulticast mode [ 846.797778][ T2296] syzkaller0: entered promiscuous mode [ 846.803337][ T2296] syzkaller0: entered allmulticast mode [ 846.845520][ T2296] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 847.107592][ T2308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.199230][ T2312] syzkaller0: entered promiscuous mode [ 847.205656][ T2312] syzkaller0: entered allmulticast mode [ 847.213013][ T2315] tipc: Enabled bearer , priority 0 [ 847.291799][ T2314] tipc: Disabling bearer [ 847.493966][ T2330] tipc: Enabled bearer , priority 0 [ 847.513711][ T2330] syzkaller0: entered promiscuous mode [ 847.525537][ T2330] syzkaller0: entered allmulticast mode [ 847.553551][ T2330] tipc: Resetting bearer [ 847.612449][ T2329] tipc: Resetting bearer [ 847.798461][ T2354] __nla_validate_parse: 8 callbacks suppressed [ 847.798483][ T2354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7606'. [ 848.209562][ T2329] tipc: Disabling bearer [ 848.345981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 848.368637][ C1] lec:lec_tx_timeout: lec0 [ 848.498354][ T2366] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 848.612614][ T2375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7611'. [ 848.732756][ T2382] 8021q: VLANs not supported on ip_vti0 [ 848.742994][ T2380] xt_policy: output policy not valid in PREROUTING and INPUT [ 848.826716][ T2386] IPv6: sit2: Disabled Multicast RS [ 848.833420][ T2386] sit2: entered allmulticast mode [ 849.122974][ T2417] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:57088 [ 849.376265][ T2430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7625'. [ 849.454082][ T2435] openvswitch: netlink: IPv4 tun info is not correct [ 849.525348][ T2442] netlink: 5180 bytes leftover after parsing attributes in process `syz.1.7628'. [ 849.547799][ T2442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7628'. [ 850.108067][ T2474] tipc: Enabled bearer , priority 0 [ 850.126730][ T2478] syzkaller0: entered promiscuous mode [ 850.132271][ T2478] syzkaller0: entered allmulticast mode [ 850.183468][ T2483] bond8: (slave bond_slave_1): Device is not our slave [ 850.190777][ T2483] bond8: option active_slave: invalid value (bond_slave_1) [ 850.200711][ T2482] validate_nla: 2 callbacks suppressed [ 850.200733][ T2482] netlink: 'syz.3.7636': attribute type 1 has an invalid length. [ 850.250423][ T2483] bond8 (unregistering): Released all slaves [ 850.430587][ T2499] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 850.444477][ T2499] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 850.457974][ T2499] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 850.486745][ T2478] tipc: Resetting bearer [ 850.528501][ T2478] tipc: Disabling bearer [ 850.581382][ T2499] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 850.601232][ T2499] bond5: (slave vcan0): making interface the new active one [ 850.610643][ T2499] bond5: (slave vcan0): Enslaving as an active interface with an up link [ 850.762549][ T2515] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7640'. [ 853.307513][ T2503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.524123][ T2533] netlink: 'syz.2.7645': attribute type 9 has an invalid length. [ 853.545297][ T2533] netlink: 'syz.2.7645': attribute type 11 has an invalid length. [ 853.553204][ T2533] netlink: 'syz.2.7645': attribute type 12 has an invalid length. [ 853.572422][ T2534] xt_TCPMSS: Only works on TCP SYN packets [ 853.595587][ T2533] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.7645'. [ 853.705939][ T2545] syzkaller0: entered promiscuous mode [ 853.711775][ T2545] syzkaller0: entered allmulticast mode [ 854.196490][ T2579] delete_channel: no stack [ 854.304339][ T2567] syzkaller0: entered promiscuous mode [ 854.326251][ T2567] syzkaller0: entered allmulticast mode [ 854.383646][ T2592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7655'. [ 854.411071][ T2600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7657'. [ 854.422509][ T2600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7657'. [ 854.434230][ T2600] netlink: 'syz.4.7657': attribute type 14 has an invalid length. [ 854.450735][ T2600] netlink: 'syz.4.7657': attribute type 13 has an invalid length. [ 854.587730][ T2610] netlink: 25 bytes leftover after parsing attributes in process `syz.2.7658'. [ 854.636222][ T2610] netlink: 'syz.2.7658': attribute type 4 has an invalid length. [ 854.766045][ T2627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7662'. [ 855.309822][ T2672] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7676'. [ 855.322451][ T2672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7676'. [ 855.364337][ T2672] veth0_macvtap: left promiscuous mode [ 855.902431][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7687'. [ 855.927916][ T2720] netlink: 268 bytes leftover after parsing attributes in process `syz.3.7688'. [ 855.946187][ T2720] openvswitch: netlink: Flow key attr not present in new flow. [ 855.978297][ T2720] openvswitch: netlink: Flow key attr not present in new flow. [ 856.158649][ T2738] netlink: 'syz.4.7695': attribute type 1 has an invalid length. [ 856.190241][ T2741] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 856.201692][ T2738] netlink: 'syz.4.7695': attribute type 1 has an invalid length. [ 856.213397][ T2741] netlink: 'syz.1.7694': attribute type 33 has an invalid length. [ 856.234357][ T2738] netlink: 'syz.4.7695': attribute type 8 has an invalid length. [ 856.310566][ T2741] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 856.419482][ T2741] bond6 (unregistering): Released all slaves [ 856.552633][ T2762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.870670][ T2792] netlink: 'syz.4.7704': attribute type 1 has an invalid length. [ 856.925276][ T2792] netlink: 'syz.4.7704': attribute type 3 has an invalid length. [ 856.942804][ T2792] netlink: 'syz.4.7704': attribute type 7 has an invalid length. [ 856.951684][ T2792] netlink: 'syz.4.7704': attribute type 8 has an invalid length. [ 856.997834][ T2792] NCSI netlink: No device for ifindex 131092 [ 857.019555][ T2794] netlink: 'syz.4.7704': attribute type 1 has an invalid length. [ 857.032897][ T2794] netlink: 'syz.4.7704': attribute type 3 has an invalid length. [ 857.044791][ T2794] NCSI netlink: No device for ifindex 131092 [ 857.070608][ T2800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.071232][ T2804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.260171][ T2813] x_tables: unsorted entry at hook 3 [ 857.800620][ T2843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.825941][ T2843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.841013][ T2843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.917117][ T2842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.942729][ T2867] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:0 [ 857.983005][ T2865] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:0 [ 858.615904][ T2917] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 858.927616][ T2937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.345127][ T2973] __nla_validate_parse: 11 callbacks suppressed [ 859.345149][ T2973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7751'. [ 859.507511][ T2978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7753'. [ 859.534560][ T2982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7754'. [ 859.622204][ T2986] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7756'. [ 859.742602][ T2991] syzkaller0: entered promiscuous mode [ 859.748448][ T2991] syzkaller0: entered allmulticast mode [ 860.029243][ T3002] tunl0: entered promiscuous mode [ 860.057082][ T3002] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7762'. [ 860.279219][ T3016] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.619308][ T3042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7775'. [ 860.672015][ T3042] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7775'. [ 860.944765][T13662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.982933][T13662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.039129][ T3068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7781'. [ 861.153840][ T3073] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7782'. [ 861.199182][ T3078] validate_nla: 11 callbacks suppressed [ 861.199203][ T3078] netlink: 'syz.4.7784': attribute type 2 has an invalid length. [ 861.478361][T29532] net_ratelimit: 9 callbacks suppressed [ 861.478385][T29532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.499218][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7786'. [ 861.547079][ T3097] netlink: 'syz.2.7787': attribute type 1 has an invalid length. [ 861.809112][ T3097] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 861.833945][ T3097] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 861.862235][ T3097] bond2: (slave gre1): making interface the new active one [ 861.885961][ T3097] bond2: (slave gre1): Enslaving as an active interface with an up link [ 861.946741][ T3121] syzkaller0: entered promiscuous mode [ 861.952706][ T3121] syzkaller0: entered allmulticast mode [ 861.965244][ T3125] netlink: 'syz.4.7795': attribute type 16 has an invalid length. [ 861.973107][ T3125] netlink: 'syz.4.7795': attribute type 17 has an invalid length. [ 861.982809][ T3123] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 862.074768][ T3125] tipc: Resetting bearer [ 862.080788][ T3125] tipc: Resetting bearer [ 862.147000][ T3125] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.171757][ T3125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.253613][ T3143] netlink: 'syz.3.7801': attribute type 1 has an invalid length. [ 862.372410][ T3143] bond6: entered promiscuous mode [ 862.380551][ T3143] 8021q: adding VLAN 0 to HW filter on device bond6 [ 862.397501][ T3148] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 862.399274][ T3152] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 862.518633][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.564741][ T3155] bond6: (slave bridge5): making interface the new active one [ 862.610403][ T3155] bridge5: entered promiscuous mode [ 862.653385][ T3155] bridge5: left promiscuous mode [ 862.754044][ T3171] syzkaller1: entered promiscuous mode [ 862.760081][ T3171] syzkaller1: entered allmulticast mode [ 863.047704][ T3204] openvswitch: netlink: Invalid VLAN frame [ 863.381727][ T3230] mac80211_hwsim hwsim54 wlan1: Caught tx_queue_len zero misconfig [ 863.406621][T16630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.416961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.555642][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.733466][ T3250] netlink: 'syz.3.7825': attribute type 1 has an invalid length. [ 863.892954][ T3257] sctp: [Deprecated]: syz.1.7829 (pid 3257) Use of int in maxseg socket option. [ 863.892954][ T3257] Use struct sctp_assoc_value instead [ 863.930920][ T3259] sctp: [Deprecated]: syz.1.7829 (pid 3259) Use of int in maxseg socket option. [ 863.930920][ T3259] Use struct sctp_assoc_value instead [ 863.962746][ T3262] netlink: 'syz.3.7830': attribute type 1 has an invalid length. [ 864.047280][ T3269] tipc: Enabling of bearer rejected, failed to enable media [ 864.199258][ T3282] netlink: 'syz.1.7836': attribute type 10 has an invalid length. [ 864.234339][ T3280] vlan3: entered allmulticast mode [ 864.240368][ T3280] bridge7: entered allmulticast mode [ 864.247193][ T3282] dummy0: entered promiscuous mode [ 864.253380][ T3282] bridge0: port 4(dummy0) entered blocking state [ 864.264461][ T3282] bridge0: port 4(dummy0) entered disabled state [ 864.283027][ T3282] dummy0: entered allmulticast mode [ 864.347994][ T3280] bridge7: port 1(veth3) entered blocking state [ 864.360428][ T3280] bridge7: port 1(veth3) entered disabled state [ 864.381714][ T3280] veth3: entered allmulticast mode [ 864.405501][ T3280] veth3: entered promiscuous mode [ 864.596785][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.700466][ T3312] __nla_validate_parse: 12 callbacks suppressed [ 864.700492][ T3312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7842'. [ 864.780080][T16630] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.802128][T16630] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.813619][T16630] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.836387][T16630] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 865.009358][ T3334] syzkaller0: entered promiscuous mode [ 865.017241][ T3334] syzkaller0: entered allmulticast mode [ 865.111378][ T3285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 865.635429][T29532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.961156][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.679443][ T5959] net_ratelimit: 1 callbacks suppressed [ 866.679467][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.336382][ T3350] syzkaller0: entered promiscuous mode [ 867.342006][ T3350] syzkaller0: entered allmulticast mode [ 867.383765][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.393360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.423354][ T3361] netlink: 'syz.1.7856': attribute type 9 has an invalid length. [ 867.728298][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.755404][ T3378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7861'. [ 867.759299][ T3379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7861'. [ 867.999024][ T3401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7869'. [ 868.078311][ T3408] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 868.146726][ T3415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7872'. [ 868.168551][ T6031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 868.186868][ T6031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 868.206134][ T6031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 868.224686][ T6031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 868.290667][ T3425] openvswitch: netlink: Key type 203 is out of range max 32 [ 868.307455][ T3425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7877'. [ 868.450279][ T3435] netlink: 'syz.1.7878': attribute type 1 has an invalid length. [ 868.456974][ T3434] netlink: 'syz.2.7880': attribute type 11 has an invalid length. [ 868.476821][ T3434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7880'. [ 868.510004][ T3434] netlink: 'syz.2.7880': attribute type 11 has an invalid length. [ 868.524422][ T3434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7880'. [ 868.549430][ T3435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 868.583843][ T3441] bond6: (slave geneve2): making interface the new active one [ 868.593450][ T3441] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 868.609180][T13663] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 868.627704][T13663] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 868.660383][ T3448] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7883'. [ 868.674718][ T3447] pim6reg527: entered allmulticast mode [ 868.712393][T13663] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 868.756310][ T6031] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 868.764828][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.951208][ T3470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.960321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.159946][T13663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.190574][ T3486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7889'. [ 870.450046][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 871.550892][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 871.560802][ T3494] netlink: 'syz.4.7892': attribute type 1 has an invalid length. [ 871.569402][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 871.581348][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 871.590740][ T3494] netlink: 'syz.4.7892': attribute type 1 has an invalid length. [ 871.598979][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7892'. [ 871.790776][ T3506] netlink: 'syz.2.7895': attribute type 39 has an invalid length. [ 871.842363][ T3465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.137801][ T3517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7898'. [ 872.167342][ T3521] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7898'. [ 872.214893][ T3525] vlan2: entered promiscuous mode [ 872.225458][ T3517] xt_ecn: cannot match TCP bits for non-tcp packets [ 872.245558][ T3525] bond0: entered promiscuous mode [ 872.251421][ T3525] bond_slave_0: entered promiscuous mode [ 872.265489][ T3525] bond_slave_1: entered promiscuous mode [ 872.331117][ T3527] pim6reg1: entered promiscuous mode [ 872.337052][ T3527] pim6reg1: entered allmulticast mode [ 872.351366][ T3532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7901'. [ 872.516057][ T7948] net_ratelimit: 4 callbacks suppressed [ 872.516078][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.606871][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7904'. [ 872.625296][ T3546] openvswitch: netlink: Flow actions attr not present in new flow. [ 872.705557][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7906'. [ 872.815362][ T3560] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7909'. [ 872.926374][ T3561] syzkaller0: entered promiscuous mode [ 872.932092][ T3561] syzkaller0: entered allmulticast mode [ 873.147959][ T3573] netlink: 'syz.0.7916': attribute type 1 has an invalid length. [ 873.165392][ T3573] NCSI netlink: No device for ifindex 0 [ 873.544424][ T3595] bridge5: entered promiscuous mode [ 873.551231][ T3595] bridge5: entered allmulticast mode [ 873.557117][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.197998][ T3646] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 874.205978][ T3646] syzkaller1: linktype set to 823 [ 874.276522][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.284868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.490709][ T3660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.492562][ T3661] sctp: [Deprecated]: syz.2.7939 (pid 3661) Use of int in max_burst socket option. [ 874.492562][ T3661] Use struct sctp_assoc_value instead [ 874.567066][ T3664] block nbd2: Unsupported socket: should be TCP or UNIX. [ 874.585736][ T3665] block nbd2: Unsupported socket: should be TCP or UNIX. [ 874.599244][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.641939][ T3668] syz_tun: entered allmulticast mode [ 874.824528][ T3681] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 875.026438][ T3694] syzkaller0: entered promiscuous mode [ 875.032510][ T3694] syzkaller0: entered allmulticast mode [ 875.301321][ T3704] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 875.558791][ T604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.567455][T16630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.630101][ T3733] veth0: entered promiscuous mode [ 876.195489][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 876.203705][ C1] lec:lec_tx_timeout: lec0 [ 876.458229][ T3732] veth0: left promiscuous mode [ 876.596816][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.680340][ T3749] __nla_validate_parse: 15 callbacks suppressed [ 876.680357][ T3749] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7967'. [ 877.635840][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.418610][ T3712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.639096][ T3754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.681166][ T3756] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 878.691493][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.724116][ T3754] sit0: Caught tx_queue_len zero misconfig [ 878.747740][ T3754] ip6tnl0: Caught tx_queue_len zero misconfig [ 878.828775][ T3761] wg1 speed is unknown, defaulting to 1000 [ 878.840774][ T3761] lo speed is unknown, defaulting to 1000 [ 879.273676][ T3797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7982'. [ 879.355097][ T3807] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.7983'. [ 879.588624][ T3803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7982'. [ 879.615014][ T3803] nbd: device at index 64 is going down [ 879.673865][ T3807] syzkaller0: entered promiscuous mode [ 879.681165][ T3807] syzkaller0: entered allmulticast mode [ 879.715306][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.782885][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7985'. [ 879.814290][ T3290] udevd[3290]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 879.851046][ T3512] udevd[3512]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 880.035686][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.044223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.050906][ T3834] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7990'. [ 880.053358][T13662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.070281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.082398][ T3832] syzkaller0: entered promiscuous mode [ 880.088044][ T3832] syzkaller0: entered allmulticast mode [ 880.295955][ T3854] netlink: 'syz.4.7993': attribute type 33 has an invalid length. [ 880.348046][ T3854] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 880.368785][ T3859] netlink: 616 bytes leftover after parsing attributes in process `syz.4.7993'. [ 880.389578][ T3854] bond9 (unregistering): Released all slaves [ 880.532393][ T3866] wg1 speed is unknown, defaulting to 1000 [ 880.541534][ T3866] lo speed is unknown, defaulting to 1000 [ 880.670272][ T3825] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 880.682303][ T3825] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 880.684959][ T3870] syzkaller1: entered promiscuous mode [ 880.690740][ T3825] CPU: 1 UID: 0 PID: 3825 Comm: syz.0.7986 Not tainted syzkaller #0 PREEMPT(full) [ 880.705496][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.715852][ T3825] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 880.721779][ T3825] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 880.741587][ T3825] RSP: 0018:ffffc900112878e8 EFLAGS: 00010207 [ 880.747695][ T3825] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802cc31e80 [ 880.755682][ T3825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888020ec8a00 [ 880.763658][ T3825] RBP: ffff888020ec8a00 R08: ffff88802cc31e80 R09: 0000000000000008 [ 880.771805][ T3825] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 880.779909][ T3825] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92002250f3c [ 880.787917][ T3825] FS: 00007ffba4dd56c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 880.796867][ T3825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.803460][ T3825] CR2: 00007f3057e17dac CR3: 00000000342d2000 CR4: 00000000003526f0 [ 880.811527][ T3825] Call Trace: [ 880.814905][ T3825] [ 880.817847][ T3825] ? __alloc_skb+0x4e5/0x7d0 [ 880.822790][ T3825] ? skb_put+0x11b/0x210 [ 880.827049][ T3825] rose_write_internal+0x1256/0x1b60 [ 880.832603][ T3825] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.837838][ T3825] ? __pfx_rose_write_internal+0x10/0x10 [ 880.843559][ T3825] ? timer_delete+0x245/0x340 [ 880.848249][ T3825] rose_release+0x25b/0x510 [ 880.852761][ T3825] sock_close+0xc3/0x240 [ 880.857019][ T3825] ? __pfx_sock_close+0x10/0x10 [ 880.861885][ T3825] __fput+0x44f/0xa70 [ 880.865899][ T3825] task_work_run+0x1d9/0x270 [ 880.870499][ T3825] ? __pfx_task_work_run+0x10/0x10 [ 880.875621][ T3825] ? task_work_add+0x395/0x440 [ 880.880393][ T3825] ? __pfx_task_work_add+0x10/0x10 [ 880.885520][ T3825] get_signal+0x11eb/0x1330 [ 880.890160][ T3825] arch_do_signal_or_restart+0xbc/0x830 [ 880.895895][ T3825] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 880.902326][ T3825] exit_to_user_mode_loop+0x86/0x480 [ 880.907630][ T3825] ? rcu_is_watching+0x15/0xb0 [ 880.912427][ T3825] do_syscall_64+0x32d/0xf80 [ 880.917034][ T3825] ? trace_irq_disable+0x3b/0x150 [ 880.922075][ T3825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.928236][ T3825] ? clear_bhb_loop+0x40/0x90 [ 880.932920][ T3825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.938819][ T3825] RIP: 0033:0x7ffba6b9c799 [ 880.943242][ T3825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.962850][ T3825] RSP: 002b:00007ffba4dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 880.971358][ T3825] RAX: 0000000000000000 RBX: 00007ffba6e16090 RCX: 00007ffba6b9c799 [ 880.979333][ T3825] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 880.987306][ T3825] RBP: 00007ffba6c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 880.995365][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.003512][ T3825] R13: 00007ffba6e16128 R14: 00007ffba6e16090 R15: 00007ffea104a0e8 [ 881.011714][ T3825] [ 881.014735][ T3825] Modules linked in: [ 881.020800][ T3825] ---[ end trace 0000000000000000 ]--- [ 881.032103][ T3870] syzkaller1: entered allmulticast mode [ 881.039161][ T7948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.046939][ T3825] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 881.053386][ T3825] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 e9 db 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 881.077875][ T3825] RSP: 0018:ffffc900112878e8 EFLAGS: 00010207 [ 881.105096][ T3825] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88802cc31e80 [ 881.113267][ T3825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888020ec8a00 [ 881.122200][ T3825] RBP: ffff888020ec8a00 R08: ffff88802cc31e80 R09: 0000000000000008 [ 881.132572][ T3825] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 881.145795][ T3825] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92002250f3c [ 881.153979][ T3825] FS: 00007ffba4dd56c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 881.174559][ T3825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.181408][ T3825] CR2: 00007fcee5d29ff8 CR3: 00000000342d2000 CR4: 00000000003526f0 [ 881.189926][ T3825] Kernel panic - not syncing: Fatal exception [ 881.196380][ T3825] Kernel Offset: disabled [ 881.200793][ T3825] Rebooting in 86400 seconds..