last executing test programs: 4.136695497s ago: executing program 0 (id=4423): socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.746112676s ago: executing program 0 (id=4428): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.745736088s ago: executing program 4 (id=4429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000000700)="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", 0x142}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b0370", 0x62}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8ce7baf0c81a6ec2102ae1ad97d2faf7", 0x3e}], 0x6}, 0x8bb3a301eb080b) 2.94449871s ago: executing program 0 (id=4431): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESOCT, @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.802696699s ago: executing program 2 (id=4432): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x800) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000300)) 2.573030343s ago: executing program 2 (id=4433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.412483785s ago: executing program 3 (id=4434): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004086) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) 2.408324465s ago: executing program 4 (id=4435): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.177343096s ago: executing program 0 (id=4437): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56ea3b2222d70fbf31db5e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x103, 0x0) 2.112320798s ago: executing program 2 (id=4438): socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.681826073s ago: executing program 3 (id=4440): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.136649211s ago: executing program 1 (id=4441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) bind$xdp(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.096123136s ago: executing program 1 (id=4442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000200)=r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 988.154945ms ago: executing program 0 (id=4443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 948.027245ms ago: executing program 2 (id=4444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f0000000140)=0x18) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 763.963624ms ago: executing program 4 (id=4445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000000700)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f000084e2f8141a5fc6ef0b49bf7a6cb6faab2a777dde5ec5aeec4f08c05857a3e40e0dc84a3426f6653076d9363564fbac526825599f05ff7cafbfa0ae50fd967f8c0a3617a7d8358b3b021fa8900d72c4361e5d98668e21990b3adc0a94e6fe7bfdc4d638614beed88362e29940d22f565b5be2e8b6de526a0982670fef930eabb1189d32c4c038f76dc01f460163f90da0ebe427dd03e8fbf5e77920b6d16d", 0x142}, {&(0x7f0000000880)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6d67734e44835fcd6d23a0d7e00b73ac7", 0xe0}, {&(0x7f0000000500)="1cd2cf486bb5a90a257eaca10edd9b4dcc13b0dbd20235a98d552ebee1ac91839173dfc5f022ad537cc60d1fc4ff85bed2d5e46cc0d63d47961969cc34c20ba95b9725e125b645dc47237efd9a6e4364a7b74190e664459b62b388a83180797b0370", 0x62}, {&(0x7f0000000980)="2a4ae9592dde05637fe851abd378a2061c4aaa35178cd1429038a4020f7c215e54928a5bb10dc587198d3610a58a8ce7baf0c81a6ec2102ae1ad97d2faf7", 0x3e}], 0x6}, 0x8bb3a301eb080b) 759.226354ms ago: executing program 3 (id=4446): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc05, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2b4, 0x9, 0x1ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 753.956564ms ago: executing program 1 (id=4447): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESOCT, @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 665.539773ms ago: executing program 2 (id=4448): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 543.317993ms ago: executing program 1 (id=4449): socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x22, 0x2, 0x3) socket$inet6(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 531.228604ms ago: executing program 4 (id=4450): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="cfc850defd27f31e2d20223673feacf3b5421387e6f3b0e4740a", 0x1a, 0x3b00, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 369.658102ms ago: executing program 3 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="200028bd7000fedbdf2504000000056790001b004e220000050012000d00000006001c00ff01fe0d0500210001000000060002000100000008000b0002000000050001000000000000000000e3ea715cdd7ebb8e701a878451dfeee27a063be402b51937bb516b403cdc8236c1a34413eac125a6aba7264c5afd492b5dcab0c4cb869e7b72b50cc8b14f975eaab64b69049d5e76a7f67c1e80b66a5a27dbc0d4037e349c217316f72d760de87e16adb03069c6"], 0x5c}, 0x1, 0x0, 0x0, 0x84040}, 0x44801) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$mptcp(0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r4, 0x0, 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0, 0x40000000}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7f}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 369.46911ms ago: executing program 4 (id=4452): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {0x3, 0xfff9}, {0xfffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x26004800}, 0x0) close(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r6}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 369.318861ms ago: executing program 1 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x41) r3 = socket$alg(0x26, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 339.16297ms ago: executing program 3 (id=4454): socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 263.69382ms ago: executing program 2 (id=4455): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 128.22181ms ago: executing program 3 (id=4456): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000008) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200480a1}, 0x2000c880) 58.914084ms ago: executing program 1 (id=4457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xa, 0x1, 0x7, 0xd988, 0x3, 0x8000, 0xa08b, 0x1, 0x3fb, 0x5, 0x5, 0x6, 0xde02, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0x1000e13, 0x5, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000000, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xb, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x4, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x801, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x7, 0x5, 0x6, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x2, 0x14, 0x7, 0x6, 0x10000, 0x2, 0x7ff, 0x1000fd, 0x203, 0x7, 0xffffffff, 0xd, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x205, 0x8000, 0x8, 0x6, 0x8, 0xfa, 0x3, 0x0, 0x9, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x5, 0xee, 0x2, 0x401, 0xa955, 0x5000, 0x3, 0x7fffffff, 0x2, 0x9, 0x6e4, 0x1, 0x80005, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x5, 0x99b, 0x9c4, 0x7f, 0xd, 0x5, 0xff800, 0x10, 0x7, 0x6, 0xff, 0x7, 0x6, 0xfff, 0x800, 0x7, 0x5, 0xff, 0x80000000, 0xd, 0x7, 0x8, 0xff, 0x0, 0x0, 0xff, 0x10, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x7, 0x3, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7fc, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0x44, 0x5, 0x4, 0x8, 0x8008, 0x1000, 0x8, 0x7, 0xa37f, 0x5, 0x9, 0x10003, 0x6, 0x42b, 0x1, 0x10000, 0xb, 0xcf9, 0x6, 0xfc, 0x9c, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x725, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x84, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0xff, 0xfffffff7, 0xfffffb98, 0xfffffffb, 0x0, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8004, 0xffffffffeffffff8, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x7d, 0x6572, 0x3}, {0x2, 0x2, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x4}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 58.296609ms ago: executing program 4 (id=4458): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) epoll_create(0x3ff) epoll_create1(0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000740)) r1 = socket(0x14, 0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x810) 0s ago: executing program 0 (id=4459): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYRESOCT, @ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0xfffffd9b, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, 0x0, 0xf34, &(0x7f0000000640)='ipvlan1\x00', 0xbdbd, 0x1, 0x2}) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): 16128 on prog (id 82) dev lo, expect packet loss! [ 130.400197][ T8368] netlink: 'syz.2.1146': attribute type 9 has an invalid length. [ 131.641703][ T8425] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1175'. [ 131.673527][ T8427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1174'. [ 131.682731][ T8425] openvswitch: netlink: Message has 5 unknown bytes. [ 132.253211][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 132.291314][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1187'. [ 132.315861][ T8457] netlink: 'syz.0.1189': attribute type 2 has an invalid length. [ 132.341893][ T8457] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1189'. [ 132.812255][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821502][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.001205][ T8495] netlink: 'syz.4.1207': attribute type 2 has an invalid length. [ 133.064888][ T8498] tipc: Started in network mode [ 133.078004][ T8498] tipc: Node identity ac14140f, cluster identity 4711 [ 133.095722][ T8498] tipc: New replicast peer: 255.255.255.255 [ 133.111632][ T8498] tipc: Enabled bearer , priority 10 [ 134.227360][ T24] tipc: Node number set to 2886997007 [ 134.565820][ T8570] syz.4.1240 uses obsolete (PF_INET,SOCK_PACKET) [ 135.521494][ T8622] __nla_validate_parse: 1 callbacks suppressed [ 135.521512][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'. [ 135.996416][ T8649] syzkaller1: entered promiscuous mode [ 136.004174][ T8649] syzkaller1: entered allmulticast mode [ 136.988260][ T8696] syzkaller1: entered promiscuous mode [ 136.993809][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880324c0c00: rx timeout, send abort [ 137.006808][ T8696] syzkaller1: entered allmulticast mode [ 137.343304][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 137.343958][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 137.363922][ T8712] gtp0: entered promiscuous mode [ 137.372126][ T8712] gtp0: entered allmulticast mode [ 137.377372][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'. [ 137.492331][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880324c3800: rx timeout, send abort [ 137.502148][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880324c0c00: abort rx timeout. Force session deactivation [ 137.565338][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 137.599895][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 137.611464][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.625792][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 137.655592][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1308'. [ 137.930878][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.001794][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880324c3800: abort rx timeout. Force session deactivation [ 138.573359][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.582708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.650778][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.695809][ T8775] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1334'. [ 138.989545][ T8791] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1341'. [ 139.034704][ T8794] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 139.205660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.224139][ T796] IPVS: starting estimator thread 0... [ 139.238778][ T8801] syzkaller1: entered promiscuous mode [ 139.248352][ T8801] syzkaller1: entered allmulticast mode [ 139.335687][ T8808] IPVS: using max 32 ests per chain, 76800 per kthread [ 139.419791][ T8815] macvlan0: entered promiscuous mode [ 139.689313][ T8825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.721606][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.923480][ T8837] netlink: 'syz.0.1363': attribute type 11 has an invalid length. [ 140.051897][ T8844] block nbd4: NBD_DISCONNECT [ 140.670737][ T5931] IPVS: starting estimator thread 0... [ 140.765797][ T8882] IPVS: using max 33 ests per chain, 79200 per kthread [ 141.292833][ T8915] __nla_validate_parse: 5 callbacks suppressed [ 141.292850][ T8915] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1400'. [ 141.992191][ T8951] sctp: [Deprecated]: syz.1.1415 (pid 8951) Use of int in max_burst socket option. [ 141.992191][ T8951] Use struct sctp_assoc_value instead [ 142.035079][ T8957] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 142.132844][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1420'. [ 142.299380][ T8967] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1424'. [ 143.004437][ T9009] sock: sock_set_timeout: `syz.2.1444' (pid 9009) tries to set negative timeout [ 143.499068][ T9031] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1455'. [ 143.700993][ T9045] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 143.733447][ T9045] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 143.767452][ T9045] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1462'. [ 143.824337][ T9049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1464'. [ 143.881496][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1464'. [ 143.996612][ T9058] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1468'. [ 144.177835][ T9066] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1472'. [ 144.463982][ T9079] syzkaller1: entered promiscuous mode [ 144.476454][ T9079] syzkaller1: entered allmulticast mode [ 144.809027][ T9098] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1488'. [ 145.121282][ T9115] netlink: 'syz.3.1496': attribute type 9 has an invalid length. [ 145.327177][ T9127] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 146.133876][ T9172] netlink: 'syz.1.1521': attribute type 7 has an invalid length. [ 146.362529][ T9182] __nla_validate_parse: 5 callbacks suppressed [ 146.362549][ T9182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1525'. [ 146.485014][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 146.612000][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 146.630732][ T9192] nbd: device at index 64 is going down [ 146.804540][ T5837] udevd[5837]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.127830][ T9218] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 147.528224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.592302][ T9244] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1553'. [ 147.717755][ T9249] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1555'. [ 147.739836][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 147.926313][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.271902][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 148.324783][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 148.983395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.620373][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 149.840959][ T9340] sctp: [Deprecated]: syz.3.1587 (pid 9340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.840959][ T9340] Use struct sctp_sack_info instead [ 150.005999][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.455990][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 150.569568][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.726629][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.977146][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.050438][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.269878][ T9413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.280364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.351971][ T9422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.018222][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.419046][ T9473] syzkaller1: entered promiscuous mode [ 152.424377][ T9480] __nla_validate_parse: 6 callbacks suppressed [ 152.424394][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1647'. [ 152.430778][ T9473] syzkaller1: entered allmulticast mode [ 152.445773][ T9480] netlink: 'syz.1.1647': attribute type 7 has an invalid length. [ 152.454650][ T9480] netlink: 'syz.1.1647': attribute type 8 has an invalid length. [ 152.462781][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1647'. [ 152.551948][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1649'. [ 152.722548][ T30] audit: type=1800 audit(1776748397.972:2): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1652" name="memory.events" dev="tmpfs" ino=1659 res=0 errno=0 [ 153.124029][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 153.138611][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 153.179806][ T9516] syzkaller1: entered promiscuous mode [ 153.194699][ T9516] syzkaller1: entered allmulticast mode [ 153.341488][ T9524] netlink: 'syz.1.1668': attribute type 63 has an invalid length. [ 153.364136][ T9524] netlink: 'syz.1.1668': attribute type 63 has an invalid length. [ 153.452483][ T9528] netlink: 'syz.4.1670': attribute type 17 has an invalid length. [ 153.481095][ T9528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 153.502152][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1670'. [ 153.527102][ T9528] gretap0: entered promiscuous mode [ 153.536111][ T9528] gretap0: left promiscuous mode [ 153.553938][ T9534] veth0: entered promiscuous mode [ 153.564224][ T9533] veth0: left promiscuous mode [ 154.021847][ T9560] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1685'. [ 154.092421][ T5822] net_ratelimit: 11 callbacks suppressed [ 154.092437][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.168786][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.251483][ T9573] syzkaller1: entered promiscuous mode [ 154.262178][ T9573] syzkaller1: entered allmulticast mode [ 154.466438][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.476025][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.484215][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.492436][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.500646][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.508859][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.517053][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.525368][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.609885][ T9589] netlink: 'syz.4.1697': attribute type 4 has an invalid length. [ 154.659853][ T9592] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1700'. [ 155.014084][ T9608] syzkaller1: entered promiscuous mode [ 155.022875][ T9608] syzkaller1: entered allmulticast mode [ 155.668032][ T9632] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.728229][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 155.772890][ T9634] netlink: 'syz.2.1718': attribute type 30 has an invalid length. [ 155.826255][ T9641] netlink: 'syz.2.1718': attribute type 30 has an invalid length. [ 155.918553][ T3579] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.941858][ T3579] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.978375][ T3579] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.018056][ T3579] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.977153][ T9703] Bluetooth: MGMT ver 1.23 [ 157.638746][ T9739] __nla_validate_parse: 4 callbacks suppressed [ 157.638918][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 157.747138][ T9746] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 157.859166][ T9746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.958297][ T9753] bond1: (slave geneve2): making interface the new active one [ 157.971411][ T9753] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 158.040356][ T9757] syzkaller1: entered promiscuous mode [ 158.056974][ T9757] syzkaller1: entered allmulticast mode [ 158.243139][ T9778] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 158.393217][ T9785] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1782'. [ 158.463351][ T980] IPVS: starting estimator thread 0... [ 158.543641][ T9794] netlink: 'syz.0.1787': attribute type 14 has an invalid length. [ 158.568275][ T9790] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.572020][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 158.667234][ T9794] netlink: 'syz.0.1787': attribute type 14 has an invalid length. [ 158.689848][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 158.693988][ T128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.740548][ T128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.784994][ T9806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'. [ 158.802058][ T128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.828711][ T128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.045590][ T5144] Bluetooth: hci2: command 0x0401 tx timeout [ 159.046829][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 159.102274][ T9820] netlink: 'syz.0.1798': attribute type 4 has an invalid length. [ 159.108019][ T9821] net_ratelimit: 3346 callbacks suppressed [ 159.108035][ T9821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.125937][ T9821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.138224][ T9821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.147470][ T9821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.154487][ T9820] netlink: 'syz.0.1798': attribute type 4 has an invalid length. [ 159.288472][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.294941][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.329058][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.366064][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.375303][ T9830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.384843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.817998][ T9853] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 159.860147][ T9856] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 159.979269][ T9856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.999864][ T9860] bond1: (slave geneve2): making interface the new active one [ 160.010285][ T9860] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 160.357594][ T9877] ip6tnl1: entered promiscuous mode [ 160.374024][ T9881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1827'. [ 160.719478][ T9900] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 160.884746][ T9900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.960542][ T9903] bond1: (slave geneve2): making interface the new active one [ 160.981515][ T9903] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 161.152934][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 161.463923][ T9930] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1849'. [ 161.576398][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 161.615114][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 161.752026][ T9944] syzkaller1: entered promiscuous mode [ 161.773039][ T9944] syzkaller1: entered allmulticast mode [ 161.919580][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1860'. [ 162.534084][ T9967] vlan0 (unregistering): left allmulticast mode [ 162.544545][ T9967] veth0_vlan (unregistering): left allmulticast mode [ 162.553873][ T9967] vlan0 (unregistering): left promiscuous mode [ 162.628341][ T9986] atomic_op ffff8880566b2998 conn xmit_atomic 0000000000000000 [ 162.674163][ T9988] __nla_validate_parse: 1 callbacks suppressed [ 162.674181][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1875'. [ 163.427231][T10012] veth0: entered promiscuous mode [ 163.455614][T10012] veth0: left promiscuous mode [ 163.555167][T10023] netlink: 'syz.4.1889': attribute type 11 has an invalid length. [ 163.781384][T10035] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1894'. [ 163.966677][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'. [ 163.991332][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'. [ 164.175734][T10057] veth0: entered promiscuous mode [ 164.183236][T10056] veth0: left promiscuous mode [ 164.294840][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 164.415814][ T3579] net_ratelimit: 50 callbacks suppressed [ 164.415831][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.503755][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.537812][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.565738][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.647116][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.806074][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.814397][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.209854][T10105] netlink: 'syz.0.1927': attribute type 21 has an invalid length. [ 165.229257][T10105] netlink: 'syz.0.1927': attribute type 22 has an invalid length. [ 165.247658][T10105] netlink: 'syz.0.1927': attribute type 23 has an invalid length. [ 165.256412][T10105] netlink: 'syz.0.1927': attribute type 25 has an invalid length. [ 165.264326][T10105] netlink: 'syz.0.1927': attribute type 26 has an invalid length. [ 165.272674][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1927'. [ 165.285794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.295633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.445670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.677645][T10118] syzkaller1: entered promiscuous mode [ 165.684113][T10118] syzkaller1: entered allmulticast mode [ 166.091508][T10142] syzkaller1: entered promiscuous mode [ 166.136330][T10142] syzkaller1: entered allmulticast mode [ 166.667774][T10182] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 166.968014][T10182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.069436][T10203] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1948'. [ 167.090666][T10191] bond2: (slave ip6erspan0): making interface the new active one [ 167.134002][T10191] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 167.139878][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 167.176339][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 167.213623][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 167.259715][T10199] syzkaller1: entered promiscuous mode [ 167.268878][T10199] syzkaller1: entered allmulticast mode [ 167.439561][T10219] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 167.624643][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 167.660900][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 167.810732][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 167.966691][T10243] netlink: 'syz.3.1963': attribute type 13 has an invalid length. [ 167.994049][T10243] __nla_validate_parse: 6 callbacks suppressed [ 167.994066][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 168.089090][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.089716][T10243] netlink: 'syz.3.1963': attribute type 13 has an invalid length. [ 168.113411][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.155393][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.165548][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 168.178504][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.382033][T10254] netlink: 'syz.1.1967': attribute type 7 has an invalid length. [ 168.451710][ T1156] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.481158][ T1156] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.522078][ T1156] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.548809][ T1156] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.710245][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 168.754830][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 168.901381][ T5963] vxcan1 speed is unknown, defaulting to 1000 [ 168.913202][T10223] infiniband syz2: set active [ 168.929794][T10223] infiniband syz2: added vxcan1 [ 169.063296][T10223] RDS/IB: syz2: added [ 169.067865][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 169.087138][T10223] smc: adding ib device syz2 with port count 1 [ 169.090848][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 169.102382][T10223] smc: ib device syz2 port 1 has no pnetid [ 169.117952][T10282] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 169.124217][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 169.128889][T10282] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 169.139781][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 169.157773][T10282] bond1: (slave ip6gre1): making interface the new active one [ 169.177974][T10282] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 169.211125][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 169.218997][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 169.262092][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 169.716313][T10308] batman_adv: batadv0: Adding interface: dummy0 [ 169.737513][T10308] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.771308][ T24] net_ratelimit: 26 callbacks suppressed [ 169.771326][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.785424][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.815059][T10308] batman_adv: batadv0: Interface activated: dummy0 [ 169.926375][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.926400][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.005588][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.017137][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 170.025953][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.154959][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1990'. [ 170.168258][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.230372][T10324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.405627][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.625622][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 170.805859][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.223156][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 171.241331][T10366] validate_nla: 4 callbacks suppressed [ 171.241348][T10366] netlink: 'syz.1.2007': attribute type 20 has an invalid length. [ 171.288689][T10366] netlink: 'syz.1.2007': attribute type 20 has an invalid length. [ 171.918906][T10223] vxcan1 speed is unknown, defaulting to 1000 [ 171.918931][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.965662][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.983096][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.011352][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.089169][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.104773][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.127091][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.163434][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.986816][T10435] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 172.999742][T10435] syzkaller1: Refused to change device type [ 173.962612][T10475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.992927][T10475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.304176][T10475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.328932][T10475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.517119][T10475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.553417][T10475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.740999][T10475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.746100][T10502] __nla_validate_parse: 4 callbacks suppressed [ 174.746116][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2059'. [ 174.752224][T10475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.887164][ T5963] net_ratelimit: 25 callbacks suppressed [ 174.887180][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.902083][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.975053][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.984004][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.075386][T10509] IPVS: Scheduler module ip_vs_sip not found [ 175.205439][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.446041][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.599735][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.692936][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.715782][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.725912][T10174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.035038][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.044383][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.060621][ T1156] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.087690][ T1156] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.181760][T10174] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.212527][T10174] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.260384][T10174] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.289721][T10174] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.512951][T10541] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2070'. [ 176.529866][T10542] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 176.549741][T10542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2071'. [ 176.752420][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 176.774958][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 178.493811][T10601] trusted_key: syz.4.2096 sent an empty control message without MSG_MORE. [ 178.931869][T10613] bridge_slave_0: invalid flags given to default FDB implementation [ 179.381997][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 179.454529][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 179.464291][T10638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.027539][ T36] net_ratelimit: 22 callbacks suppressed [ 180.027555][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.047950][T10675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.155582][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.182629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.191029][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.405894][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.965828][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.974674][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.976921][ T30] audit: type=1800 audit(1776748426.222:3): pid=10713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2135" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2291 res=0 errno=0 [ 181.165974][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.206891][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.297799][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2141'. [ 181.497792][T10731] netlink: 'syz.3.2144': attribute type 22 has an invalid length. [ 181.528864][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 181.561554][T10731] netlink: 'syz.3.2144': attribute type 22 has an invalid length. [ 181.592858][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 182.403486][T10756] netlink: 'syz.3.2151': attribute type 1 has an invalid length. [ 182.528446][T10756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.607546][T10759] bond2: (slave geneve3): making interface the new active one [ 182.632263][T10759] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 183.421974][T10781] netlink: 'syz.0.2162': attribute type 12 has an invalid length. [ 183.453670][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 183.476324][T10781] netlink: 'syz.0.2162': attribute type 12 has an invalid length. [ 183.495571][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 183.952249][T10801] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2169'. [ 184.102120][T10806] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2170'. [ 184.460325][T10821] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 184.633883][T10821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.789661][T10825] bond2: (slave gretap2): making interface the new active one [ 184.832296][T10825] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 184.848884][T10828] bridge0: entered allmulticast mode [ 185.057806][T10848] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2177'. [ 185.068306][T10846] syzkaller1: entered promiscuous mode [ 185.088249][T10846] syzkaller1: entered allmulticast mode [ 185.247546][T10858] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 185.260273][T10858] bond3 (unregistering): Released all slaves [ 185.372908][ T796] net_ratelimit: 36 callbacks suppressed [ 185.372926][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.439895][T10866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2184'. [ 185.481455][T10866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2184'. [ 185.606062][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.658958][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.766151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.774681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.783194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.791707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.800255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.808784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.817337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.020318][T10893] syzkaller1: entered promiscuous mode [ 186.028022][T10893] syzkaller1: entered allmulticast mode [ 186.707550][T10919] __nla_validate_parse: 2 callbacks suppressed [ 186.707567][T10919] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2208'. [ 187.203330][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 187.238786][T10941] netlink: 'syz.0.2216': attribute type 29 has an invalid length. [ 187.254490][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 187.320297][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 187.340050][T10944] netlink: 'syz.0.2216': attribute type 29 has an invalid length. [ 187.360254][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'. [ 187.532406][T10956] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2224'. [ 187.735440][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 187.941395][T10971] veth0: entered promiscuous mode [ 187.983955][T10971] veth0: left promiscuous mode [ 188.785627][T11001] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 188.924827][T11009] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2247'. [ 188.987853][T11015] sctp: [Deprecated]: syz.0.2249 (pid 11015) Use of int in maxseg socket option. [ 188.987853][T11015] Use struct sctp_assoc_value instead [ 189.257572][T11028] netlink: 'syz.2.2255': attribute type 3 has an invalid length. [ 189.378977][T11034] syzkaller1: entered promiscuous mode [ 189.389996][T11034] syzkaller1: entered allmulticast mode [ 189.618455][T11049] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2264'. [ 190.118019][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 190.806051][ T796] net_ratelimit: 14 callbacks suppressed [ 190.806067][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.902741][T11104] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 190.979238][T11104] bond3: (slave gretap3): making interface the new active one [ 190.988880][T11104] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 191.103441][T11111] syzkaller1: entered promiscuous mode [ 191.109599][T11111] syzkaller1: entered allmulticast mode [ 191.559915][T11136] netlink: 'syz.4.2301': attribute type 7 has an invalid length. [ 191.568140][T11136] netlink: 'syz.4.2301': attribute type 8 has an invalid length. [ 191.740944][T11146] __nla_validate_parse: 2 callbacks suppressed [ 191.740977][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 191.847724][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.871162][T11151] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2308'. [ 192.168434][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.320115][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2319'. [ 192.387363][T11185] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 192.396835][T11185] netlink: 'syz.1.2321': attribute type 4 has an invalid length. [ 192.404605][T11185] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.2321'. [ 192.537911][T11043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.645785][T11193] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 192.805033][T11193] bond3: entered promiscuous mode [ 192.830698][T11193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.888578][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.905176][T11204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.913621][T11204] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 192.928889][T11204] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 192.944899][T11204] bond3: (slave ip6gre2): making interface the new active one [ 192.952924][T11204] ip6gre2: entered promiscuous mode [ 192.961765][T11204] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 193.009462][T11209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2328'. [ 193.756941][T11253] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 193.842801][T11253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.254390][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.267717][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.522734][T11297] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 194.791719][T11302] bond4: (slave bridge2): making interface the new active one [ 194.828237][T11302] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 195.592122][T11360] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 195.619750][T11360] netlink: 'syz.2.2355': attribute type 4 has an invalid length. [ 195.646730][T11360] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.2355'. [ 195.731923][T11366] gretap0: entered promiscuous mode [ 195.910551][T11372] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2361'. [ 196.000695][T11378] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2364'. [ 196.161749][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2368'. [ 196.187309][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2368'. [ 196.234831][T11346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.337422][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 196.345538][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 196.351726][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 197.019076][T11429] xt_hashlimit: size too large, truncated to 1048576 [ 197.317344][T11441] __nla_validate_parse: 1 callbacks suppressed [ 197.317362][T11441] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2392'. [ 197.320918][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 197.754642][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 197.772602][T11462] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 197.794640][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 197.931881][T11467] bond5: (slave geneve3): making interface the new active one [ 197.944577][T11467] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 198.039106][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.068640][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.088284][ T1104] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.097573][ T1104] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 198.830708][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 198.850090][T11502] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 198.865612][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 198.941671][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 198.978498][T11505] netlink: 'syz.3.2416': attribute type 1 has an invalid length. [ 198.986565][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 199.190701][T11520] netlink: 'syz.1.2423': attribute type 26 has an invalid length. [ 199.212757][T11523] syzkaller1: entered promiscuous mode [ 199.213770][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 199.225340][T11523] syzkaller1: entered allmulticast mode [ 199.272964][T11520] netlink: 'syz.1.2423': attribute type 26 has an invalid length. [ 199.284388][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 199.552506][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.562555][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.580364][T11540] netlink: 'syz.2.2429': attribute type 16 has an invalid length. [ 199.601317][T11540] netlink: 'syz.2.2429': attribute type 17 has an invalid length. [ 199.626078][ T796] vxcan1 speed is unknown, defaulting to 1000 [ 199.663859][T11540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.107776][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.116833][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.275125][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.289735][T11557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.488312][ T128] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.506923][ T128] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.528008][ T128] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.537412][ T128] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.620188][T11577] syzkaller0: entered promiscuous mode [ 200.627384][T11577] syzkaller0: entered allmulticast mode [ 200.635992][ T128] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.655452][ T128] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.681559][ T128] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.703261][ T128] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.181185][T10183] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 202.396995][T11593] batman_adv: batadv0: Adding interface: dummy0 [ 202.423981][T11593] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.480201][T11593] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 202.946851][T11638] __nla_validate_parse: 1 callbacks suppressed [ 202.946868][T11638] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2464'. [ 203.054683][T11641] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 203.110737][T11641] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 203.142494][T11648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2468'. [ 203.178771][T11648] bridge: RTM_NEWNEIGH with invalid ether address [ 203.217524][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2468'. [ 203.242065][T11650] bridge: RTM_NEWNEIGH with invalid ether address [ 203.343077][T11654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2469'. [ 203.452143][T11656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.802360][T11672] netlink: 'syz.2.2476': attribute type 21 has an invalid length. [ 203.862730][T11672] netlink: 'syz.2.2476': attribute type 22 has an invalid length. [ 203.899404][T11672] netlink: 'syz.2.2476': attribute type 23 has an invalid length. [ 203.939713][T11672] netlink: 'syz.2.2476': attribute type 25 has an invalid length. [ 203.973883][T11672] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2476'. [ 204.124934][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 204.134922][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 205.148745][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 205.171855][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2500'. [ 205.196901][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 206.228768][T11786] netlink: 'syz.0.2525': attribute type 1 has an invalid length. [ 206.473331][T11792] bond2: (slave gretap1): making interface the new active one [ 206.496208][T11792] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 206.849587][T11805] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1343367946/1343367948 [ 206.885482][T11805] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1343367946/1343367948 [ 207.337886][T11822] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 207.368786][T11822] bond4: entered promiscuous mode [ 207.374348][T11822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.474019][T11822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.497872][T11822] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 207.534404][T11822] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 207.582722][T11822] bond4: (slave vti0): making interface the new active one [ 207.602396][T11822] vti0: entered promiscuous mode [ 207.612164][T11822] bond4: (slave vti0): Enslaving as an active interface with an up link [ 208.136719][T11858] __nla_validate_parse: 8 callbacks suppressed [ 208.136737][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2554'. [ 208.382410][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2557'. [ 210.459196][T11944] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 210.607683][T11944] bond2: entered promiscuous mode [ 210.613383][T11944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.744302][T11950] bond2: (slave bridge3): making interface the new active one [ 210.775726][T11950] bridge3: entered promiscuous mode [ 211.396246][T11950] bridge3: left promiscuous mode [ 211.664033][T11973] syzkaller0: entered promiscuous mode [ 211.681199][T11973] syzkaller0: entered allmulticast mode [ 212.179392][T11995] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 213.529563][T11995] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 213.546517][T12002] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 213.888041][T12006] syz.4.2602 (12006) used greatest stack depth: 16992 bytes left [ 213.968238][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 214.500749][T12042] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2613'. [ 214.538297][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.547641][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.086269][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2620'. [ 215.367366][T12065] syzkaller0: entered promiscuous mode [ 215.379479][T12065] syzkaller0: entered allmulticast mode [ 216.161317][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2628'. [ 217.678406][T12088] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2628'. [ 218.199481][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2641'. [ 218.235996][T12124] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 218.243859][T12124] netlink: 'syz.2.2643': attribute type 4 has an invalid length. [ 218.255976][T12124] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2643'. [ 218.479280][T12129] netlink: 'syz.2.2645': attribute type 4 has an invalid length. [ 218.896194][T12154] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.2653:12154 [ 220.106217][T12195] vxcan1 speed is unknown, defaulting to 1000 [ 220.617875][T12217] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2669'. [ 220.812664][T12216] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2670'. [ 220.842205][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'. [ 221.127539][T12237] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2672'. [ 221.608561][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2678'. [ 221.618288][T12143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.658844][T12254] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2679'. [ 221.854344][T12264] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2681'. [ 221.992987][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2687'. [ 222.006786][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 222.023617][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'. [ 222.056622][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 222.213602][T12286] netlink: 'syz.0.2691': attribute type 1 has an invalid length. [ 222.361684][T12286] bond3: entered promiscuous mode [ 222.370506][T12286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.397348][T12290] bond3: (slave bridge1): making interface the new active one [ 222.405094][T12290] bridge1: entered promiscuous mode [ 222.411803][T12290] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 222.427822][T12281] vxcan1 speed is unknown, defaulting to 1000 [ 222.430773][T12297] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.446859][T12297] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 223.437691][T12320] netlink: 'syz.1.2699': attribute type 30 has an invalid length. [ 223.493226][T12320] netlink: 'syz.1.2699': attribute type 30 has an invalid length. [ 223.804195][T12333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.812386][T12333] batadv_slave_0: entered promiscuous mode [ 224.934297][T12268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.361878][T12381] syzkaller1: entered promiscuous mode [ 225.378990][T12381] syzkaller1: entered allmulticast mode [ 225.441863][T12385] syzkaller1: entered promiscuous mode [ 225.447700][T12385] syzkaller1: entered allmulticast mode [ 226.994775][T12434] __nla_validate_parse: 7 callbacks suppressed [ 226.994795][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2740'. [ 227.337976][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'. [ 227.413366][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2747'. [ 228.398268][T10183] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 230.636964][T12522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.668590][T12522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.691681][T12522] bond0: (slave batadv0): Releasing backup interface [ 230.906979][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 230.932948][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.946011][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 230.948162][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.995307][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.016844][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.016944][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2778'. [ 231.264041][T12470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.519748][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 231.537549][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 231.547800][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 231.562284][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 231.636224][T12557] bridge4: port 1(vlan3) entered blocking state [ 231.656654][T12557] bridge4: port 1(vlan3) entered disabled state [ 231.675873][T12557] vlan3: entered allmulticast mode [ 231.686207][T12557] bridge4: entered allmulticast mode [ 231.724226][T12557] vlan3: left allmulticast mode [ 231.742940][T12557] bridge4: left allmulticast mode [ 232.150362][T12577] __nla_validate_parse: 1 callbacks suppressed [ 232.150381][T12577] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2795'. [ 232.410845][T12583] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 232.492188][T12583] bond6 (unregistering): Released all slaves [ 232.697685][T12595] vxcan1 speed is unknown, defaulting to 1000 [ 233.401348][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 235.179321][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'. [ 235.472346][T12587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.120320][T12553] Set syz1 is full, maxelem 65536 reached [ 236.687171][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 236.750196][T12698] ip6erspan0: entered promiscuous mode [ 237.032413][T12708] netlink: 'syz.0.2842': attribute type 4 has an invalid length. [ 237.044133][T12708] netlink: 'syz.0.2842': attribute type 4 has an invalid length. [ 237.144089][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 237.153932][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2844'. [ 237.249252][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2845'. [ 237.539937][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 238.292361][T12765] tipc: Enabled bearer , priority 0 [ 238.312643][T12765] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 238.333784][T12765] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 238.352086][T12765] tipc: Resetting bearer [ 238.521069][T12772] netlink: 'syz.2.2867': attribute type 8 has an invalid length. [ 238.536479][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'. [ 238.571045][T12772] bond0: entered promiscuous mode [ 238.581540][T12772] bond_slave_0: entered promiscuous mode [ 238.600117][T12772] bond_slave_1: entered promiscuous mode [ 238.626075][T12772] gretap0: entered promiscuous mode [ 238.634501][T12772] ip6gretap0: entered promiscuous mode [ 238.651827][T12772] hsr1: entered promiscuous mode [ 238.734748][T12777] netlink: 'syz.4.2869': attribute type 1 has an invalid length. [ 239.247101][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2874'. [ 239.376205][T12807] netlink: 'syz.2.2878': attribute type 1 has an invalid length. [ 239.540816][T12813] netlink: 'syz.4.2882': attribute type 4 has an invalid length. [ 239.568111][T12813] netlink: 'syz.4.2882': attribute type 4 has an invalid length. [ 239.844511][T12822] bond5: entered allmulticast mode [ 239.875815][T12827] bridge2: entered promiscuous mode [ 239.881158][T12827] bridge2: entered allmulticast mode [ 239.898769][T12827] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 239.921321][T12825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.999050][T12825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.084194][T12825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.104508][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 240.436148][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 240.762806][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2901'. [ 241.395403][T12877] bridge1: entered allmulticast mode [ 241.743654][T12891] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2911'. [ 242.143027][T12904] : entered promiscuous mode [ 242.209202][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2918'. [ 242.221001][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2919'. [ 242.364194][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2923'. [ 242.394171][T12926] sch_tbf: burst 12 is lower than device bridge6 mtu (1514) ! [ 242.425078][T12923] tipc: Enabled bearer , priority 0 [ 242.552032][T12928] syzkaller0: entered promiscuous mode [ 242.558290][T12928] syzkaller0: entered allmulticast mode [ 242.564690][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 242.574408][T12928] tipc: Resetting bearer [ 242.598348][T12921] tipc: Resetting bearer [ 244.552991][T12921] tipc: Disabling bearer [ 246.967652][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 247.313535][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2952'. [ 247.408159][T13026] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 247.435108][T13029] netlink: 'syz.0.2955': attribute type 1 has an invalid length. [ 247.462273][T13026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.470264][T13020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2952'. [ 247.480067][T13021] tipc: Started in network mode [ 247.486479][T13021] tipc: Node identity ba1f57946cd1, cluster identity 4711 [ 247.494155][T13021] tipc: Enabled bearer , priority 0 [ 247.554161][T13029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.579053][T13032] bond5: (slave bridge0): making interface the new active one [ 247.590821][T13032] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 247.674575][T13027] syzkaller0: entered promiscuous mode [ 247.685050][T13027] syzkaller0: entered allmulticast mode [ 247.693155][T13027] tipc: Resetting bearer [ 247.704819][T13033] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 247.724838][T13029] macvlan2: entered promiscuous mode [ 247.730697][T13029] macvlan2: entered allmulticast mode [ 247.737128][T13029] bond4: entered promiscuous mode [ 247.742941][T13029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 247.751051][T13029] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 247.768481][T13029] bond4: left promiscuous mode [ 247.783150][T13018] tipc: Resetting bearer [ 248.489666][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'. [ 249.628912][T13018] tipc: Disabling bearer [ 249.658136][T13040] syzkaller0: entered promiscuous mode [ 249.663651][T13040] syzkaller0: entered allmulticast mode [ 249.673930][ T980] tipc: Node number set to 3603847060 [ 251.610551][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2964'. [ 251.899876][T13086] syzkaller0: entered promiscuous mode [ 251.915976][T13086] syzkaller0: entered allmulticast mode [ 253.804120][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2974'. [ 253.845882][ T24] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 254.022238][T13119] syzkaller0: entered promiscuous mode [ 254.028702][T13119] syzkaller0: entered allmulticast mode [ 254.567040][ T12] bond5: (slave bridge0): link status definitely down, disabling slave [ 254.638929][ T12] bond5: now running without any active interface! [ 254.814854][T13158] tipc: Failed to remove unknown binding: 66,0,0/0:2024387116/2024387118 [ 254.829866][T13158] tipc: Failed to remove unknown binding: 66,0,0/0:2024387116/2024387117 [ 254.850828][T13158] tipc: Failed to remove unknown binding: 66,0,0/0:2024387116/2024387118 [ 254.868362][T13158] tipc: Failed to remove unknown binding: 66,0,0/0:2024387116/2024387117 [ 255.114795][T13168] tipc: Enabling of bearer rejected, already enabled [ 255.352644][T13179] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 255.432851][T13182] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.443527][T13182] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 255.472350][T13182] bond6: (slave vxcan3): making interface the new active one [ 255.498806][T13182] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 255.539487][T13186] syzkaller0: entered promiscuous mode [ 255.545512][T13186] syzkaller0: entered allmulticast mode [ 255.554513][T13188] syz_tun: entered allmulticast mode [ 255.561708][T13188] syz_tun: left allmulticast mode [ 255.655653][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3007'. [ 255.690262][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698040][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.500008][T13234] syzkaller0: entered promiscuous mode [ 256.506166][T13234] syzkaller0: entered allmulticast mode [ 256.844995][T13243] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 256.870207][T13243] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.886450][T13243] vlan2: entered allmulticast mode [ 256.891619][T13243] bond7: entered allmulticast mode [ 256.906437][T13243] bond7: (slave geneve2): making interface the new active one [ 256.913930][T13243] geneve2: entered allmulticast mode [ 256.922184][T13243] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 257.020286][T13246] netlink: 'syz.4.3026': attribute type 3 has an invalid length. [ 257.028430][T13246] netlink: 'syz.4.3026': attribute type 3 has an invalid length. [ 257.228215][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 257.285184][T13257] netlink: 'syz.4.3029': attribute type 5 has an invalid length. [ 257.306214][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 257.440876][T13136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.910755][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'. [ 258.313244][T13306] tipc: Started in network mode [ 258.321108][T13306] tipc: Node identity c2dc919c2834, cluster identity 4711 [ 258.336116][T13306] tipc: Enabled bearer , priority 0 [ 258.392779][T13306] syzkaller0: entered promiscuous mode [ 258.399362][T13306] syzkaller0: entered allmulticast mode [ 258.409515][T13306] tipc: Resetting bearer [ 258.415755][T13308] netlink: 'syz.3.3047': attribute type 5 has an invalid length. [ 258.443966][T13305] tipc: Resetting bearer [ 258.523773][T13317] xt_hashlimit: size too large, truncated to 1048576 [ 259.321942][T13223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.605645][T13305] tipc: Disabling bearer [ 260.631140][ T5931] tipc: Node number set to 3941110172 [ 260.815838][T13346] syzkaller0: entered promiscuous mode [ 260.836276][T13346] syzkaller0: entered allmulticast mode [ 260.910367][T13358] syzkaller0: entered promiscuous mode [ 260.936009][T13358] syzkaller0: entered allmulticast mode [ 263.164215][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 263.380179][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 263.405875][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'. [ 263.431808][T13392] syzkaller0: entered promiscuous mode [ 263.439399][T13392] syzkaller0: entered allmulticast mode [ 263.606606][T13410] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 263.864178][T13418] bond8: (slave bridge6): Enslaving as a backup interface with an up link [ 263.896402][T13430] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3078'. [ 263.914292][T13410] veth5: entered promiscuous mode [ 263.920349][T13410] veth5: entered allmulticast mode [ 263.929185][T13410] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 263.948430][T13430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3078'. [ 263.971838][T13427] syzkaller0: entered promiscuous mode [ 263.999830][T13427] syzkaller0: entered allmulticast mode [ 264.074994][T13430] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3078'. [ 264.289907][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3085'. [ 264.312434][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3084'. [ 264.422005][T13446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.438427][T13446] bond5: (slave bond6): Enslaving as an active interface with an up link [ 264.447406][T13444] syzkaller0: entered promiscuous mode [ 264.467769][T13444] syzkaller0: entered allmulticast mode [ 264.495724][T13453] tipc: Started in network mode [ 264.502359][T13453] tipc: Node identity b2b7bfceb3bf, cluster identity 4711 [ 264.510121][T13453] tipc: Enabled bearer , priority 0 [ 264.566713][T13458] syzkaller0: entered promiscuous mode [ 264.572515][T13458] syzkaller0: entered allmulticast mode [ 264.579321][T13458] tipc: Resetting bearer [ 264.634398][T13452] tipc: Resetting bearer [ 264.814901][T13468] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 264.834426][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 264.871724][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'. [ 266.511930][T13452] tipc: Disabling bearer [ 266.529383][T13468] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 266.540241][T13470] team1: entered promiscuous mode [ 266.554719][T13470] team1: entered allmulticast mode [ 266.561140][T13471] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 266.794271][ T980] tipc: Node number set to 17350606 [ 266.831717][T13481] syzkaller0: entered promiscuous mode [ 266.845319][T13481] syzkaller0: entered allmulticast mode [ 266.853142][T13484] syzkaller0: entered promiscuous mode [ 266.870227][T13484] syzkaller0: entered allmulticast mode [ 266.877840][T13485] syzkaller0: entered promiscuous mode [ 266.888199][T13485] syzkaller0: entered allmulticast mode [ 268.228886][T13543] syzkaller0: entered promiscuous mode [ 268.237054][T13543] syzkaller0: entered allmulticast mode [ 268.297403][T13546] netlink: 'syz.3.3111': attribute type 1 has an invalid length. [ 268.334119][T13546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.356570][T13546] bond7: (slave veth0_to_bond): making interface the new active one [ 268.367216][T13546] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 268.382005][T13511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.392412][T13511] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 268.413249][T13546] bond7: entered promiscuous mode [ 268.423561][T13546] veth0_to_bond: entered promiscuous mode [ 268.435008][T13511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.436241][T13546] bond7: entered allmulticast mode [ 268.441434][T13511] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 268.478788][T13546] veth0_to_bond: entered allmulticast mode [ 268.493916][T13511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 268.502443][T13511] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 268.511905][T13551] __nla_validate_parse: 2 callbacks suppressed [ 268.511920][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3111'. [ 268.544030][T13511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.554117][T13511] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 268.557857][T13551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.874101][T13511] tipc: Resetting bearer [ 269.164344][T13577] syzkaller0: entered promiscuous mode [ 269.184455][T13577] syzkaller0: entered allmulticast mode [ 269.470643][T13584] syzkaller1: entered promiscuous mode [ 269.481917][T13584] syzkaller1: entered allmulticast mode [ 269.528178][T13595] syzkaller0: entered promiscuous mode [ 269.542294][T13595] syzkaller0: entered allmulticast mode [ 269.655592][T13600] netlink: 'syz.2.3121': attribute type 9 has an invalid length. [ 269.857835][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 270.069401][T13618] bond3: entered promiscuous mode [ 270.112982][T13618] bond3: entered allmulticast mode [ 270.213696][T13626] syzkaller0: entered promiscuous mode [ 270.230010][T13626] syzkaller0: entered allmulticast mode [ 270.343149][T13632] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 270.418093][T13635] netlink: 'syz.2.3128': attribute type 83 has an invalid length. [ 270.449747][T13632] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.514393][T13638] macvlan2: entered promiscuous mode [ 270.546816][T13638] macvlan2: entered allmulticast mode [ 270.618461][T13632] bond7: (slave ip6gretap1): making interface the new active one [ 270.653537][T13632] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 270.708292][T13649] syzkaller0: entered promiscuous mode [ 270.721722][T13649] syzkaller0: entered allmulticast mode [ 270.897773][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 271.379575][T13668] block nbd3: not configured, cannot reconfigure [ 271.644873][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 271.865747][T13688] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 271.943411][T13691] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 271.954054][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 272.000996][T13703] team0 (unregistering): Port device team_slave_0 removed [ 272.021971][T13703] team0 (unregistering): Port device team_slave_1 removed [ 272.068667][T13693] syzkaller0: entered promiscuous mode [ 272.074339][T13693] syzkaller0: entered allmulticast mode [ 272.285794][T13694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.403945][T13723] syzkaller0: entered promiscuous mode [ 272.417574][T13723] syzkaller0: entered allmulticast mode [ 272.489616][T13727] syzkaller0: entered promiscuous mode [ 272.495440][T13727] syzkaller0: entered allmulticast mode [ 272.694860][T13735] syzkaller0: entered promiscuous mode [ 272.709095][T13735] syzkaller0: entered allmulticast mode [ 273.026866][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 273.061255][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 273.247413][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 273.481660][T13737] lec:lec_atm_close: lec0: Shut down! [ 273.553237][T13763] gretap0: left promiscuous mode [ 273.584204][T13763] erspan0: left promiscuous mode [ 273.946483][T13783] netlink: 'syz.0.3159': attribute type 1 has an invalid length. [ 274.053187][T13788] syzkaller0: entered promiscuous mode [ 274.077401][T13788] syzkaller0: entered allmulticast mode [ 274.102364][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.112239][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.120472][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.128646][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.967257][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 275.174536][ T24] IPVS: starting estimator thread 0... [ 275.239128][T13834] IPVS: sh: FWM 3 0x00000003 - no destination available [ 275.276129][T13832] IPVS: using max 29 ests per chain, 69600 per kthread [ 275.382109][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3173'. [ 275.589231][T13850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.616499][T13850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.644531][T13850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.676809][T13850] batman_adv: batadv0: Interface deactivated: dummy0 [ 275.701107][T13850] batman_adv: batadv0: Removing interface: dummy0 [ 276.110875][T13867] netlink: 'syz.4.3182': attribute type 1 has an invalid length. [ 276.252897][T13867] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.361381][T13872] bond9: (slave veth0_to_bond): making interface the new active one [ 276.379136][T13872] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 276.516778][T13867] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.537492][T13867] bond9: (slave bond10): Enslaving as an active interface with a down link [ 276.769028][T13900] syzkaller0: entered promiscuous mode [ 276.799805][T13900] 0: reclassify loop, rule prio 0, protocol 800 [ 277.137164][T13913] syzkaller0: entered promiscuous mode [ 277.150546][T13913] syzkaller0: entered allmulticast mode [ 277.169211][T13915] syzkaller0: entered promiscuous mode [ 277.175042][T13915] syzkaller0: entered allmulticast mode [ 277.226286][T13918] syzkaller0: entered promiscuous mode [ 277.231835][T13918] syzkaller0: entered allmulticast mode [ 277.396609][T13925] syzkaller0: entered promiscuous mode [ 277.402494][T13925] syzkaller0: entered allmulticast mode [ 277.411885][T13927] syzkaller0: entered promiscuous mode [ 277.422012][T13927] syzkaller0: entered allmulticast mode [ 277.689302][T13939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.696678][T13939] IPv6: NLM_F_CREATE should be set when creating new route [ 277.730819][T13939] lo: entered allmulticast mode [ 277.754020][T13939] tunl0: entered allmulticast mode [ 277.782286][T13939] gre0: entered allmulticast mode [ 277.832468][T13939] gretap0: entered allmulticast mode [ 277.860623][T13939] erspan0: entered allmulticast mode [ 277.881270][T13939] ip_vti0: entered allmulticast mode [ 277.910622][T13939] ip6_vti0: entered allmulticast mode [ 277.939254][T13939] sit0: entered allmulticast mode [ 277.958543][T13939] ip6tnl0: entered allmulticast mode [ 277.981161][T13939] ip6gre0: entered allmulticast mode [ 278.003000][T13939] syz_tun: entered allmulticast mode [ 278.032076][T13939] ip6gretap0: entered allmulticast mode [ 278.053759][T13939] vcan0: entered allmulticast mode [ 278.080244][T13939] bond0: entered allmulticast mode [ 278.101094][T13939] bond_slave_0: entered allmulticast mode [ 278.125457][T13939] bond_slave_1: entered allmulticast mode [ 278.143788][T13939] team0: entered allmulticast mode [ 278.163625][T13939] team_slave_0: entered allmulticast mode [ 278.171643][T13939] team_slave_1: entered allmulticast mode [ 278.188605][T13939] dummy0: entered allmulticast mode [ 278.211754][T13939] nlmon0: entered allmulticast mode [ 278.225083][T13939] caif0: entered allmulticast mode [ 278.231584][T13939] batadv0: entered allmulticast mode [ 278.240752][T13939] veth0: entered allmulticast mode [ 278.249820][T13939] veth1: entered allmulticast mode [ 278.261680][T13939] wg0: entered allmulticast mode [ 278.283241][T13939] wg1: entered allmulticast mode [ 278.292503][T13939] wg2: entered allmulticast mode [ 278.303290][T13939] veth1_to_bridge: entered allmulticast mode [ 278.318476][T13939] bridge_slave_1: entered allmulticast mode [ 278.340788][T13939] veth1_to_bond: entered allmulticast mode [ 278.357443][T13939] veth0_to_team: entered allmulticast mode [ 278.370753][T13939] veth1_to_team: entered allmulticast mode [ 278.390937][T13939] veth0_to_batadv: entered allmulticast mode [ 278.421863][T13939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.449402][T13939] batadv_slave_0: entered allmulticast mode [ 278.469293][T13939] veth1_to_batadv: entered allmulticast mode [ 278.491541][T13939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.517387][T13939] batadv_slave_1: entered allmulticast mode [ 278.549404][T13939] xfrm0: entered allmulticast mode [ 278.568487][T13939] veth0_to_hsr: entered allmulticast mode [ 278.590810][T13939] hsr_slave_0: entered allmulticast mode [ 278.608316][T13939] veth1_to_hsr: entered allmulticast mode [ 278.616227][T13939] hsr_slave_1: entered allmulticast mode [ 278.623720][T13939] hsr0: entered allmulticast mode [ 278.631460][T13939] veth1_virt_wifi: entered allmulticast mode [ 278.639665][T13939] veth0_virt_wifi: entered allmulticast mode [ 278.649929][T13939] veth1_vlan: entered allmulticast mode [ 278.659879][T13939] veth0_vlan: entered allmulticast mode [ 278.675064][T13939] vlan0: entered allmulticast mode [ 278.680635][T13939] vlan1: entered allmulticast mode [ 278.688922][T13939] macvlan0: entered allmulticast mode [ 278.697916][T13939] macvlan1: entered allmulticast mode [ 278.707161][T13939] ipvlan0: entered allmulticast mode [ 278.712808][T13939] ipvlan1: entered allmulticast mode [ 278.719112][T13939] veth1_macvtap: entered allmulticast mode [ 278.730303][T13939] veth0_macvtap: entered allmulticast mode [ 278.742556][T13939] macvtap0: entered allmulticast mode [ 278.753309][T13939] macsec0: entered allmulticast mode [ 278.762648][T13939] geneve0: entered allmulticast mode [ 278.771879][T13939] geneve1: entered allmulticast mode [ 278.780880][T13939] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 278.794160][T13939] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 278.807221][T13939] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 278.817946][T13939] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 278.827565][T13939] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 278.834761][T13939] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 278.842598][T13939] macsec1: entered allmulticast mode [ 278.850145][T13939] tun0: entered allmulticast mode [ 278.855412][T13939] mac80211_hwsim hwsim4 t: entered allmulticast mode [ 278.862671][T13939] macsec2: entered allmulticast mode [ 278.870254][T13939] vlan2: entered allmulticast mode [ 278.875921][T13939] gtp0: left promiscuous mode [ 278.882118][T13939] bond1: entered allmulticast mode [ 278.888349][T13939] geneve2: entered allmulticast mode [ 278.896500][T13939] ip6tnl1: left promiscuous mode [ 278.901490][T13939] ip6tnl1: entered allmulticast mode [ 278.908688][T13939] ip6erspan0: entered allmulticast mode [ 278.917683][T13939] @: entered allmulticast mode [ 278.923656][T13939] gre1: entered allmulticast mode [ 278.929952][T13939] ip6tnl2: entered allmulticast mode [ 278.936019][T13939] bond2: entered allmulticast mode [ 278.941277][T13939] geneve3: entered allmulticast mode [ 278.949345][T13939] gtp1: entered allmulticast mode [ 278.956891][T13939] bond3: entered allmulticast mode [ 278.962739][T13939] macvlan2: entered allmulticast mode [ 278.969204][T13939] macvlan3: entered allmulticast mode [ 278.974710][T13939] vxlan0: entered allmulticast mode [ 278.980888][T13939] gtp2: entered allmulticast mode [ 278.987239][T13939] veth2: entered allmulticast mode [ 278.992529][T13939] veth3: entered allmulticast mode [ 278.998379][T13939] bond4: left promiscuous mode [ 279.003178][T13939] vti0: left promiscuous mode [ 279.008234][T13939] bond4: entered allmulticast mode [ 279.013393][T13939] vti0: entered allmulticast mode [ 279.020220][T13939] gre2: entered allmulticast mode [ 279.043058][T13939] gre3: entered allmulticast mode [ 279.065183][T13939] gtp3: entered allmulticast mode [ 279.070545][T13939] gretap1: entered allmulticast mode [ 279.078019][T13939] bond5: entered allmulticast mode [ 279.084519][T13939] bridge0: entered allmulticast mode [ 279.090177][T13939] veth4: entered allmulticast mode [ 279.095960][T13939] veth5: entered allmulticast mode [ 279.101264][T13939] bond6: entered allmulticast mode [ 279.107645][T13939] gre4: entered allmulticast mode [ 279.128590][T13939] bridge1: entered allmulticast mode [ 279.135705][T13939] ipip0: entered allmulticast mode [ 279.142816][T13939] team1: left promiscuous mode [ 279.148806][T13939] bond7: left promiscuous mode [ 279.153611][T13939] veth0_to_bond: left promiscuous mode [ 279.160919][T13939] ip6gre1: entered allmulticast mode [ 279.198868][T13950] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 279.258464][T13953] veth7: entered allmulticast mode [ 279.308790][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 279.318986][ T1104] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.331410][ T1104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.409899][ T1104] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.450469][ T1104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.497878][ T1104] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.538748][ T1104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.578524][ T1104] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.597422][ T1104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.660659][T14005] syzkaller0: entered promiscuous mode [ 279.743525][T13998] syzkaller0: entered promiscuous mode [ 283.788501][T14007] syzkaller0: entered promiscuous mode [ 283.793999][T14007] syzkaller0: entered allmulticast mode [ 283.801187][T14018] syzkaller0: entered promiscuous mode [ 283.806877][T14018] syzkaller0: entered allmulticast mode [ 284.806437][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 284.816400][ C1] lec:lec_tx_timeout: lec0 [ 284.821248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.068168][T14066] bridge5: entered promiscuous mode [ 286.086834][T14066] bridge5: entered allmulticast mode [ 286.317993][T14073] syzkaller1: entered promiscuous mode [ 286.330895][T14073] syzkaller1: entered allmulticast mode [ 286.339964][T14079] syzkaller0: entered promiscuous mode [ 286.353627][T14079] syzkaller0: entered allmulticast mode [ 286.465031][T14086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3224'. [ 286.798644][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3230'. [ 287.705109][T14137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3236'. [ 289.252028][T14139] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3238'. [ 289.349688][T14139] batman_adv: batadv0: Removing interface: dummy0 [ 289.451016][T14149] veth1_macvtap: renamed from vlan1 [ 289.463282][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 289.477781][T14155] block nbd0: reconnected socket [ 289.520031][ T5144] block nbd0: Receive control failed (result -32) [ 289.524132][T14152] tipc: Enabling of bearer rejected, already enabled [ 289.640983][T14150] syzkaller0: entered promiscuous mode [ 289.647111][T14150] syzkaller0: entered allmulticast mode [ 289.660374][T14152] tipc: Resetting bearer [ 289.768869][T14160] syzkaller0: entered promiscuous mode [ 289.784648][T14160] syzkaller0: entered allmulticast mode [ 289.854933][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 289.863109][ C1] lec:lec_tx_timeout: lec0 [ 289.868647][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 291.840125][T14164] syzkaller0: entered promiscuous mode [ 291.845996][T14164] syzkaller0: entered allmulticast mode [ 291.890950][T14184] tipc: Enabling of bearer rejected, failed to enable media [ 292.128372][T14200] syzkaller0: entered promiscuous mode [ 292.143166][T14200] syzkaller0: entered allmulticast mode [ 292.166517][T14202] syzkaller0: entered promiscuous mode [ 292.181863][T14202] syzkaller0: entered allmulticast mode [ 292.689881][T14229] syzkaller0: entered promiscuous mode [ 292.705463][T14229] syzkaller0: entered allmulticast mode [ 292.726713][T14233] syzkaller0: entered promiscuous mode [ 292.743489][T14233] syzkaller0: entered allmulticast mode [ 293.320310][T14259] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3266'. [ 293.391731][T14261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 293.794272][T14283] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 293.963280][T14283] bond8: entered promiscuous mode [ 293.976568][T14283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.015023][T14287] bond8: (slave bridge2): making interface the new active one [ 294.028907][T14287] bridge2: entered promiscuous mode [ 294.034752][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3279'. [ 294.044703][T14287] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 294.045025][T14292] lo: Caught tx_queue_len zero misconfig [ 294.204978][T14288] syzkaller0: entered promiscuous mode [ 294.211518][T14288] syzkaller0: entered allmulticast mode [ 294.220066][T14303] IPVS: Scheduler module ip_vs_sip not found [ 294.885315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.893418][ C1] lec:lec_tx_timeout: lec0 [ 294.898558][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.201532][T14309] syzkaller0: entered promiscuous mode [ 296.215385][T14309] syzkaller0: entered allmulticast mode [ 296.417523][T14330] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 296.580965][T14330] bond6: entered promiscuous mode [ 296.597408][T14330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.640094][T14335] bond6: (slave bridge8): making interface the new active one [ 296.647852][T14335] bridge8: entered promiscuous mode [ 296.654251][T14335] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 296.674271][T14338] netlink: 'syz.0.3292': attribute type 2 has an invalid length. [ 296.848919][T14338] syzkaller1: entered promiscuous mode [ 296.867560][T14338] syzkaller1: entered allmulticast mode [ 297.213467][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 297.288211][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 297.290183][T14370] syzkaller0: entered promiscuous mode [ 298.118645][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 298.178552][T14407] syzkaller0: entered promiscuous mode [ 298.317374][T14414] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3321'. [ 298.319590][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'. [ 298.511245][T14414] bond8 (unregistering): Released all slaves [ 298.664344][T14422] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3323'. [ 299.188321][T14461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.217458][T14441] syzkaller0: entered promiscuous mode [ 299.244466][T14441] syzkaller0: entered allmulticast mode [ 299.905517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 299.914212][ C1] lec:lec_tx_timeout: lec0 [ 299.919194][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.352913][T14535] netlink: 'syz.2.3343': attribute type 1 has an invalid length. [ 302.365465][T14535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3343'. [ 302.720443][T14544] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.788255][T14544] bond4: (slave lo): Enslaving as an active interface with an up link [ 302.798659][T14544] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 303.142731][T14567] vxcan1 speed is unknown, defaulting to 1000 [ 303.178016][T14574] tipc: Enabled bearer , priority 0 [ 303.201982][T14574] syzkaller0: entered promiscuous mode [ 303.219628][T14574] syzkaller0: entered allmulticast mode [ 303.330762][T14574] tipc: Resetting bearer [ 303.353013][T14573] tipc: Resetting bearer [ 303.425976][T14573] tipc: Disabling bearer [ 303.451764][T14585] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.651093][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 303.681522][T14597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3363'. [ 303.697125][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 303.722524][T14594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3362'. [ 304.494175][T14621] syzkaller0: entered promiscuous mode [ 304.500195][T14621] syzkaller0: entered allmulticast mode [ 304.935275][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.943441][ C1] lec:lec_tx_timeout: lec0 [ 304.950784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.978609][T14658] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 305.000009][T14658] Cannot find set identified by id 1 to match [ 307.010518][T14648] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3383'. [ 307.439961][T14705] xt_l2tp: v2 sid > 0xffff: 1114112 [ 307.628778][T14713] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3402'. [ 308.370507][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3424'. [ 308.497797][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 308.501657][T14760] syzkaller0: entered promiscuous mode [ 308.702921][T14772] vcan0: tx address claim with dest, not broadcast [ 308.817852][T14777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3435'. [ 308.877141][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 309.030036][T14792] netem: unknown loss type 0 [ 309.065928][T14792] netem: change failed [ 309.393538][T14810] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 309.534996][T14810] bond8: entered promiscuous mode [ 309.580010][T14810] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.637694][T14825] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3454'. [ 309.661869][T14816] bond8: (slave bridge4): making interface the new active one [ 309.671429][T14816] bridge4: entered promiscuous mode [ 309.680208][T14816] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 309.840647][T14829] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3458'. [ 309.965270][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 309.973445][ C1] lec:lec_tx_timeout: lec0 [ 309.978423][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.451459][T14861] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3473'. [ 310.455667][T14860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 311.046351][T14892] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3487'. [ 311.154057][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 311.530766][T14919] vcan0: tx address claim with dlc 0 [ 311.649173][T14923] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3501'. [ 312.563262][T14973] xt_hashlimit: size too large, truncated to 1048576 [ 312.707633][T14960] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 312.839233][T14986] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 312.920734][T14986] bond9: entered promiscuous mode [ 312.926732][T14986] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.934314][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3529'. [ 313.032896][T14986] bond9: (slave bridge5): making interface the new active one [ 313.040740][T14986] bridge5: entered promiscuous mode [ 313.049732][T14986] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 313.775107][T15030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.804632][T15030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.949558][T15042] __nla_validate_parse: 2 callbacks suppressed [ 313.949576][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'. [ 314.120100][T15048] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 314.717455][T15084] netlink: 'syz.3.3570': attribute type 4 has an invalid length. [ 314.788433][T15086] syzkaller0: entered promiscuous mode [ 314.794204][T15086] syzkaller0: entered allmulticast mode [ 314.818873][T15090] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3572'. [ 314.985489][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 314.993630][ C1] lec:lec_tx_timeout: lec0 [ 314.998462][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.011245][T15094] syzkaller1: entered promiscuous mode [ 315.021854][T15094] syzkaller1: entered allmulticast mode [ 315.561739][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'. [ 316.918972][T15185] syzkaller0: entered promiscuous mode [ 316.932674][T15185] syzkaller0: entered allmulticast mode [ 317.129945][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221071][T15200] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 317.297184][T15200] bond11: entered promiscuous mode [ 317.302932][T15200] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.310636][T15202] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3625'. [ 317.418329][T15200] bond11: (slave bridge7): making interface the new active one [ 317.428725][T15200] bridge7: entered promiscuous mode [ 317.437465][T15200] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 317.671298][T15221] tipc: Enabling of bearer rejected, already enabled [ 317.882416][T15227] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3635'. [ 317.981771][T15233] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3638'. [ 318.014983][T15238] netlink: 'syz.3.3640': attribute type 1 has an invalid length. [ 318.074639][T15238] bond9: entered promiscuous mode [ 318.082749][T15238] 8021q: adding VLAN 0 to HW filter on device bond9 [ 318.120861][T15238] bond9: (slave bridge3): making interface the new active one [ 318.129781][T15238] bridge3: entered promiscuous mode [ 318.138004][T15238] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 318.202868][T15247] xt_hashlimit: size too large, truncated to 1048576 [ 318.274342][T15244] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 318.283051][T15248] netlink: 'syz.0.3642': attribute type 29 has an invalid length. [ 318.293542][T15244] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3642'. [ 318.926995][T15283] syzkaller1: entered promiscuous mode [ 318.940581][T15283] syzkaller1: entered allmulticast mode [ 319.394379][T15305] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3667'. [ 319.807095][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3675'. [ 319.893087][T15327] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 319.903992][T15327] bridge_slave_1: left allmulticast mode [ 319.921095][T15327] bridge_slave_1: left promiscuous mode [ 319.931449][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.967716][T15327] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 320.003123][T15331] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3680'. [ 320.015513][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 320.023615][ C1] lec:lec_tx_timeout: lec0 [ 320.031434][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.123170][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3681'. [ 320.293425][T15336] team0: Port device team_slave_0 removed [ 320.310840][T15332] syzkaller1: entered promiscuous mode [ 320.320316][T15332] syzkaller1: entered allmulticast mode [ 320.327541][T15345] xt_hashlimit: size too large, truncated to 1048576 [ 320.349334][T15347] netlink: 'syz.0.3686': attribute type 24 has an invalid length. [ 320.602615][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 320.684765][T15361] netlink: 'syz.0.3692': attribute type 16 has an invalid length. [ 320.703477][T15361] netlink: 'syz.0.3692': attribute type 17 has an invalid length. [ 320.814943][T15361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.843316][T15361] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.890012][T15361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.907902][T15365] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3694'. [ 321.110657][T15379] netlink: 'syz.3.3699': attribute type 25 has an invalid length. [ 321.161139][T15381] bond4: (slave lo): Releasing backup interface [ 321.178578][T15381] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 321.201451][T15381] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 321.764482][T15406] xt_hashlimit: size too large, truncated to 1048576 [ 322.783464][T15447] syzkaller1: entered promiscuous mode [ 322.789479][T15447] syzkaller1: entered allmulticast mode [ 322.806236][T15447] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 323.719101][T15487] syzkaller0: entered promiscuous mode [ 323.737808][T15487] syzkaller0: entered allmulticast mode [ 324.542606][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3753'. [ 324.586364][T15530] syzkaller1: entered promiscuous mode [ 324.602101][T15530] syzkaller1: entered allmulticast mode [ 324.838526][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3759'. [ 324.855794][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3759'. [ 324.974217][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3761'. [ 325.126625][T15553] netlink: 'syz.0.3764': attribute type 12 has an invalid length. [ 325.514562][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3770'. [ 325.641485][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 325.845229][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 325.853296][ C1] lec:lec_tx_timeout: lec0 [ 325.859979][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.000440][T15595] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3777'. [ 326.074146][T15598] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.3779'. [ 326.490890][T15614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.902257][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 327.231861][T15644] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 327.611102][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 327.626673][T15658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.694393][T15663] netlink: 'syz.0.3804': attribute type 1 has an invalid length. [ 327.944065][T15663] bond10: entered promiscuous mode [ 327.970802][T15663] 8021q: adding VLAN 0 to HW filter on device bond10 [ 328.073073][T15664] ipvlan3: entered allmulticast mode [ 328.112980][T15664] bond10: entered allmulticast mode [ 328.202702][T15665] bond10: (slave bridge6): making interface the new active one [ 328.225572][T15665] bridge6: entered promiscuous mode [ 328.234641][T15665] bridge6: entered allmulticast mode [ 328.269592][T15665] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 328.881141][T15722] syzkaller1: entered promiscuous mode [ 328.887105][T15722] syzkaller1: entered allmulticast mode [ 330.040535][T15754] __nla_validate_parse: 1 callbacks suppressed [ 330.040555][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 330.288959][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ab9400: rx timeout, send abort [ 330.794697][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad56400: rx timeout, send abort [ 330.803203][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ab9400: abort rx timeout. Force session deactivation [ 330.881100][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 330.889262][ C1] lec:lec_tx_timeout: lec0 [ 330.894135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.303013][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad56400: abort rx timeout. Force session deactivation [ 332.555165][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3843'. [ 332.941441][T15810] raw_sendmsg: syz.3.3847 forgot to set AF_INET. Fix it! [ 333.117781][T15814] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3850'. [ 333.338984][T15822] syzkaller1: entered promiscuous mode [ 333.353712][T15822] syzkaller1: entered allmulticast mode [ 333.587871][T15834] tipc: Enabled bearer , priority 0 [ 333.651622][T15833] tipc: Resetting bearer [ 333.707162][T15830] tipc: Disabling bearer [ 333.750555][T15847] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3863'. [ 335.042619][T15882] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3875'. [ 335.053379][T15889] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3877'. [ 335.072840][T15890] tipc: Enabled bearer , priority 0 [ 335.084466][T15890] tipc: Resetting bearer [ 335.195100][T15888] tipc: Disabling bearer [ 335.273635][T15897] syzkaller0: entered promiscuous mode [ 335.302919][T15897] syzkaller0: entered allmulticast mode [ 335.441633][T15909] netlink: 'syz.0.3884': attribute type 25 has an invalid length. [ 335.801031][T15922] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3890'. [ 335.905244][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.913334][ C1] lec:lec_tx_timeout: lec0 [ 335.918442][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 336.144317][T10183] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.193317][T10183] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.202888][T15942] netlink: 'syz.3.3896': attribute type 25 has an invalid length. [ 336.243895][T10183] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.276469][T10183] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.389178][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3898'. [ 336.610380][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3900'. [ 337.223372][T15960] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3902'. [ 338.093937][T15998] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3916'. [ 338.141300][T16001] netlink: 'syz.3.3915': attribute type 39 has an invalid length. [ 339.472381][T16035] syzkaller0: entered promiscuous mode [ 339.504983][T16035] syzkaller0: entered allmulticast mode [ 339.642168][T16039] bond0: (slave bridge_slave_1): Releasing backup interface [ 339.700355][T16039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.745354][T16041] team0: No ports can be present during mode change [ 339.809766][T16043] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3929'. [ 340.106832][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3932'. [ 340.321286][T16052] 8021q: adding VLAN 0 to HW filter on device bond12 [ 340.397356][T16052] bond12 (unregistering): Released all slaves [ 340.711143][T16046] lec:lec_atm_close: lec0: Shut down! [ 340.722403][T16065] vxcan1 speed is unknown, defaulting to 1000 [ 340.769684][T16071] tipc: Enabled bearer , priority 0 [ 340.934464][T16071] syzkaller0: entered promiscuous mode [ 340.951434][T16071] syzkaller0: entered allmulticast mode [ 340.967272][T16071] tipc: Resetting bearer [ 341.433032][T16070] tipc: Resetting bearer [ 343.393614][T16070] tipc: Disabling bearer [ 343.410029][T16084] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3941'. [ 343.601321][T16090] syz_tun: entered allmulticast mode [ 343.608777][T16086] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 343.616613][T16090] syz_tun: left allmulticast mode [ 343.655497][T16086] 8021q: adding VLAN 0 to HW filter on device bond10 [ 343.857194][T16098] bond10: (slave veth9): Enslaving as an active interface with a down link [ 343.898701][T16086] bond7: (slave veth0_to_bond): Releasing active interface [ 343.911578][T16086] veth0_to_bond: left allmulticast mode [ 343.936154][T16086] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 344.057087][T16104] bond10: (slave veth11): Enslaving as an active interface with a down link [ 344.076971][T16104] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 344.095288][T16104] netlink: 'syz.3.3943': attribute type 2 has an invalid length. [ 344.460406][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 344.642822][T16130] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3954'. [ 344.837701][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3955'. [ 344.986761][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'. [ 345.280108][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3959'. [ 345.324416][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3960'. [ 345.414037][T16147] bond5: entered promiscuous mode [ 345.420172][T16147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.479821][T16147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.488599][T16147] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 345.500440][T16147] bond5: (slave sit2): Error -95 calling set_mac_address [ 345.821497][T16162] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3965'. [ 345.845247][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 345.853461][ C1] lec:lec_tx_timeout: lec0 [ 345.858706][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.053524][T16174] syzkaller0: entered promiscuous mode [ 346.073690][T16174] syzkaller0: entered allmulticast mode [ 346.117036][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 346.137129][T16178] block nbd3: not configured, cannot reconfigure [ 346.723868][T16186] syzkaller0: entered promiscuous mode [ 346.736970][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'. [ 346.751172][T16198] netlink: 'syz.2.3973': attribute type 24 has an invalid length. [ 346.763447][T16186] syzkaller0: entered allmulticast mode [ 348.826424][T16201] tipc: Enabled bearer , priority 0 [ 348.903832][T16207] syzkaller0: entered promiscuous mode [ 348.911000][T16207] syzkaller0: entered allmulticast mode [ 348.918129][T16207] tipc: Resetting bearer [ 349.027150][T16195] tipc: Resetting bearer [ 349.193234][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 350.866374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.874437][ C1] lec:lec_tx_timeout: lec0 [ 350.879387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.093415][T16195] tipc: Disabling bearer [ 351.109794][T16229] tipc: New replicast peer: 172.20.20.50 [ 351.208619][T16252] netlink: 'syz.2.3984': attribute type 1 has an invalid length. [ 351.322244][T16259] netlink: 'syz.4.3986': attribute type 24 has an invalid length. [ 351.340334][T16252] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.354507][T16258] vlan1: entered promiscuous mode [ 351.360095][T16258] bond6: entered promiscuous mode [ 351.366633][T16258] vlan1: entered allmulticast mode [ 351.374315][T16258] bond6: entered allmulticast mode [ 351.408791][T16263] bond6: (slave bridge6): making interface the new active one [ 351.428108][T16263] bridge6: entered promiscuous mode [ 351.444892][T16263] bridge6: entered allmulticast mode [ 351.454423][T16263] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 351.548280][T16271] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3988'. [ 351.620899][T16273] batadv_slave_0: left promiscuous mode [ 351.636716][T16273] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 351.871361][T16285] syzkaller0: entered promiscuous mode [ 351.877465][T16285] syzkaller0: entered allmulticast mode [ 352.008757][T16293] syzkaller0: entered promiscuous mode [ 352.018964][T16290] 0: reclassify loop, rule prio 0, protocol 800 [ 352.264157][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 352.344482][T16302] syzkaller0: entered promiscuous mode [ 352.350453][T16302] syzkaller0: entered allmulticast mode [ 352.363934][T16302] tc action pedit offset 128 out of bounds [ 352.458603][T16304] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 352.473633][T16306] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4002'. [ 352.660334][T16311] syzkaller0: entered promiscuous mode [ 352.682397][T16311] syzkaller0: entered allmulticast mode [ 352.809792][T16316] syzkaller0: entered promiscuous mode [ 352.817999][T16316] syzkaller0: entered allmulticast mode [ 352.826403][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'. [ 352.848323][T16317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.910360][T16322] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 353.061395][T16322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.116703][T16323] vlan2: entered promiscuous mode [ 353.121892][T16323] bond7: entered promiscuous mode [ 353.134348][T16323] vlan2: entered allmulticast mode [ 353.139712][T16323] bond7: entered allmulticast mode [ 353.179190][T16327] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 353.209573][T16327] bond7: (slave batadv1): making interface the new active one [ 353.224929][T16327] batadv1: entered promiscuous mode [ 353.245860][T16327] batadv1: entered allmulticast mode [ 353.253921][T16327] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 353.299846][T16336] syzkaller0: entered promiscuous mode [ 353.326010][T16336] syzkaller0: entered allmulticast mode [ 353.737204][T16356] tipc: Enabled bearer , priority 0 [ 353.805014][T16356] syzkaller0: entered promiscuous mode [ 353.811064][T16356] syzkaller0: entered allmulticast mode [ 353.817651][T16356] tipc: Resetting bearer [ 353.826075][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 353.852421][T16355] tipc: Resetting bearer [ 354.081723][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 354.118126][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 355.905532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.913799][ C1] lec:lec_tx_timeout: lec0 [ 355.918730][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.124135][T16355] tipc: Disabling bearer [ 356.148495][T16383] tipc: Enabling of bearer rejected, failed to enable media [ 357.443833][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 357.590818][T16457] syzkaller0: entered promiscuous mode [ 357.596627][T16457] syzkaller0: entered allmulticast mode [ 357.651380][T16444] syzkaller0: entered promiscuous mode [ 357.657074][T16444] syzkaller0: entered allmulticast mode [ 357.681956][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 360.935529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.943608][ C1] lec:lec_tx_timeout: lec0 [ 360.948537][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.463413][ T5489] veth0_vlan: left promiscuous mode [ 361.482365][ T5489] veth0_vlan: entered promiscuous mode [ 361.581274][T16488] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 361.588599][T16488] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 361.708040][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4036'. [ 362.705148][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 363.460233][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 363.494440][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4066'. [ 363.499181][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4065'. [ 363.544372][T16607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4065'. [ 363.594781][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'. [ 363.617255][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 363.797565][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4072'. [ 363.819435][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'. [ 363.891457][T16628] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 364.358415][T16649] bond5: (slave bridge0): Releasing active interface [ 364.418691][T16654] netlink: 'syz.3.4081': attribute type 2 has an invalid length. [ 364.497691][T16649] syzkaller1: entered promiscuous mode [ 364.503356][T16649] syzkaller1: entered allmulticast mode [ 364.579129][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 364.976567][T16677] syzkaller0: entered promiscuous mode [ 365.957469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.965526][ C1] lec:lec_tx_timeout: lec0 [ 365.970245][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.540073][T16725] vlan3: entered promiscuous mode [ 367.545844][T16725] bridge0: entered promiscuous mode [ 367.579019][T16727] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 367.598793][T16727] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 368.253196][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4120'. [ 368.307794][T16762] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 368.332552][T16762] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 368.994929][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'. [ 369.289249][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 369.806899][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 369.890398][T16845] syzkaller0: entered promiscuous mode [ 369.901906][T16845] syzkaller0: entered allmulticast mode [ 370.019688][T16853] team0: Cannot enslave team device to itself [ 370.249770][T16868] netlink: 'syz.1.4160': attribute type 2 has an invalid length. [ 370.460313][T16878] tipc: New replicast peer: 255.255.255.255 [ 370.480047][T16878] tipc: Enabled bearer , priority 10 [ 370.809646][T16898] xt_hashlimit: size too large, truncated to 1048576 [ 370.934774][T16908] netlink: 'syz.1.4174': attribute type 4 has an invalid length. [ 370.985261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.993369][ C1] lec:lec_tx_timeout: lec0 [ 370.999836][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.306356][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4181'. [ 371.493003][T16935] syzkaller0: entered promiscuous mode [ 371.508198][T16935] syzkaller0: entered allmulticast mode [ 372.031816][T16964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4195'. [ 372.299245][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 372.395640][T16984] netlink: 'syz.0.4204': attribute type 12 has an invalid length. [ 372.413952][T16985] netlink: 'syz.1.4203': attribute type 1 has an invalid length. [ 372.435873][T16984] netlink: 'syz.0.4204': attribute type 29 has an invalid length. [ 372.451593][T16984] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4204'. [ 372.461371][T16984] netlink: 'syz.0.4204': attribute type 1 has an invalid length. [ 372.470417][T16984] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4204'. [ 372.839012][T17002] syzkaller1: entered promiscuous mode [ 372.855698][T17002] syzkaller1: entered allmulticast mode [ 372.982194][T17020] netlink: 'syz.4.4216': attribute type 10 has an invalid length. [ 373.027425][T17020] bridge_slave_1: left allmulticast mode [ 373.045096][T17020] bridge_slave_1: left promiscuous mode [ 373.063941][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.102103][T17020] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 373.173775][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4217'. [ 374.236091][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 374.258894][T17090] syzkaller0: entered promiscuous mode [ 374.273630][T17090] syzkaller0: entered allmulticast mode [ 374.854471][T17125] netlink: 'syz.4.4247': attribute type 25 has an invalid length. [ 375.176134][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 375.305928][T17146] syzkaller0: entered promiscuous mode [ 375.324901][T17146] syzkaller0: entered allmulticast mode [ 375.782728][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069f59400: rx timeout, send abort [ 376.015548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.023665][ C1] lec:lec_tx_timeout: lec0 [ 376.029981][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.187999][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 376.249544][T17199] syzkaller0: entered promiscuous mode [ 376.255324][T17199] syzkaller0: entered allmulticast mode [ 376.291098][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069f59400: abort rx timeout. Force session deactivation [ 376.614532][T17213] syzkaller1: entered promiscuous mode [ 376.628732][T17213] syzkaller1: entered allmulticast mode [ 376.641749][T17215] team_slave_1: Caught tx_queue_len zero misconfig [ 376.772362][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 377.349726][T17250] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 377.591172][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4294'. [ 378.067487][T17273] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4300'. [ 378.121978][T17273] syzkaller0: entered promiscuous mode [ 378.135394][T17273] syzkaller0: entered allmulticast mode [ 378.436531][T17283] syzkaller0: entered promiscuous mode [ 378.580385][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.637401][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 379.391862][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'. [ 380.339663][T17365] xt_hashlimit: size too large, truncated to 1048576 [ 381.909594][T17415] lec:lec_atm_close: lec0: Shut down! [ 382.282249][T17454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4359'. [ 382.516277][T17460] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4361'. [ 383.474397][T17507] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 383.825481][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4386'. [ 384.158390][T17534] syzkaller0: entered promiscuous mode [ 384.165045][T17534] syzkaller0: entered allmulticast mode [ 385.347559][T17583] bond3: entered allmulticast mode [ 385.371831][T17583] ip6gre2: entered allmulticast mode [ 385.394306][T17581] bond3: left allmulticast mode [ 385.416899][T17581] ip6gre2: left allmulticast mode [ 385.789078][T17601] netlink: 'syz.1.4414': attribute type 25 has an invalid length. [ 386.075146][T17610] netlink: 'syz.2.4417': attribute type 4 has an invalid length. [ 386.128475][T17610] netlink: 'syz.2.4417': attribute type 4 has an invalid length. [ 386.292278][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4418'. [ 386.309633][T17624] syzkaller0: entered promiscuous mode [ 386.317027][T17624] syzkaller0: entered allmulticast mode [ 386.343442][T17624] tipc: Enabled bearer , priority 0 [ 386.352397][T17623] tipc: Resetting bearer [ 386.402416][T17623] tipc: Disabling bearer [ 386.799411][T17639] netlink: 'syz.1.4425': attribute type 25 has an invalid length. [ 386.915248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.923452][ C1] lec:lec_tx_timeout: lec0 [ 386.928390][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.942586][T17642] syzkaller0: entered promiscuous mode [ 386.976965][T17642] syzkaller0: entered allmulticast mode [ 387.163307][T17654] netlink: 'syz.3.4430': attribute type 1 has an invalid length. [ 387.829653][T17654] 8021q: adding VLAN 0 to HW filter on device bond11 [ 387.984510][T17655] bond11: (slave veth13): Enslaving as an active interface with a down link [ 387.996692][T17656] dummy0: left allmulticast mode [ 388.013625][T17656] bond11: (slave dummy0): making interface the new active one [ 388.023464][T17656] dummy0: entered promiscuous mode [ 388.030297][T17656] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 388.064590][T17657] bond11: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 388.359401][T17670] syzkaller0: entered promiscuous mode [ 388.383215][T17670] syzkaller0: entered allmulticast mode [ 389.714838][T17698] syzkaller0: entered promiscuous mode [ 389.733026][T17698] syzkaller0: entered allmulticast mode [ 390.092854][T17716] syzkaller0: entered promiscuous mode [ 390.099269][T17716] syzkaller0: entered allmulticast mode [ 390.124790][T17714] syzkaller0: entered promiscuous mode [ 390.131469][T17714] syzkaller0: entered allmulticast mode [ 390.391137][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4452'. [ 390.504838][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4453'. [ 390.757653][T17743] syzkaller0: entered promiscuous mode [ 390.777313][T17743] syzkaller0: entered allmulticast mode [ 391.243872][T17740] ------------[ cut here ]------------ [ 391.249878][T17740] ODEBUG: init active (active state 0) object: ffff888094d5cf38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 391.263137][T17740] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#0: syz.3.4456/17740 [ 391.273696][T17740] Modules linked in: [ 391.278190][T17740] CPU: 0 UID: 0 PID: 17740 Comm: syz.3.4456 Not tainted syzkaller #0 PREEMPT(full) [ 391.287648][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.297965][T17740] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 391.304446][T17740] Code: 3c 38 00 74 08 4c 89 ef e8 5e 73 77 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 f7 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 ae 90 78 0b 83 fd 03 75 3f 4c 8b [ 391.324620][T17740] RSP: 0018:ffffc9000570f8f8 EFLAGS: 00010246 [ 391.331101][T17740] RAX: 1ffffffff179e854 RBX: ffff888094d5cf38 RCX: 0000000000000000 [ 391.339242][T17740] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f7c0 RDI: ffffffff903cdfd0 [ 391.347831][T17740] RBP: 0000000000000003 R08: ffff888094d5cf38 R09: ffffffff8bcf5600 [ 391.355972][T17740] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffffffff8c27fbc0 [ 391.364069][T17740] R13: ffffffff8bcf42a0 R14: ffffffff903cdfd0 R15: dffffc0000000000 [ 391.372875][T17740] FS: 00007f57391976c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 391.381964][T17740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.390087][T17740] CR2: 00007f148c7bde9c CR3: 0000000035f56000 CR4: 00000000003526f0 [ 391.398261][T17740] Call Trace: [ 391.401568][T17740] [ 391.404518][T17740] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 391.410348][T17740] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 391.416264][T17740] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 391.422103][T17740] timer_init_key+0x41/0x2c0 [ 391.426766][T17740] lane_ioctl+0x1579/0x2220 [ 391.431287][T17740] ? __pfx_clip_ioctl+0x10/0x10 [ 391.436267][T17740] ? br2684_ioctl+0x110/0x6b0 [ 391.440964][T17740] ? __pfx_lane_ioctl+0x10/0x10 [ 391.445971][T17740] ? atmtcp_ioctl+0x1ce/0xdf0 [ 391.450670][T17740] do_vcc_ioctl+0x36d/0x9d0 [ 391.455180][T17740] svc_ioctl+0x1f6/0x7d0 [ 391.459522][T17740] ? kasan_quarantine_put+0xbb/0x1f0 [ 391.464827][T17740] ? __pfx_svc_ioctl+0x10/0x10 [ 391.469747][T17740] ? tomoyo_path_number_perm+0x219/0x630 [ 391.475497][T17740] ? tomoyo_path_number_perm+0x219/0x630 [ 391.481138][T17740] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 391.486346][T17740] sock_do_ioctl+0x101/0x320 [ 391.490951][T17740] ? __pfx_sock_do_ioctl+0x10/0x10 [ 391.496164][T17740] ? do_futex+0x333/0x420 [ 391.500539][T17740] sock_ioctl+0x5c6/0x7f0 [ 391.504898][T17740] ? __pfx_sock_ioctl+0x10/0x10 [ 391.509838][T17740] ? __fget_files+0x2a/0x420 [ 391.514449][T17740] ? __fget_files+0x3a0/0x420 [ 391.519226][T17740] ? __fget_files+0x2a/0x420 [ 391.523847][T17740] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.529004][T17740] ? __pfx_sock_ioctl+0x10/0x10 [ 391.533880][T17740] __se_sys_ioctl+0xfc/0x170 [ 391.538557][T17740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.544644][T17740] do_syscall_64+0x15f/0xf80 [ 391.549340][T17740] ? trace_irq_disable+0x3b/0x140 [ 391.554395][T17740] ? clear_bhb_loop+0x40/0x90 [ 391.559157][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.565105][T17740] RIP: 0033:0x7f573839c819 [ 391.569621][T17740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.589290][T17740] RSP: 002b:00007f5739197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.597775][T17740] RAX: ffffffffffffffda RBX: 00007f5738615fa0 RCX: 00007f573839c819 [ 391.605819][T17740] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000008 [ 391.613820][T17740] RBP: 00007f5738432c91 R08: 0000000000000000 R09: 0000000000000000 [ 391.622033][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.630090][T17740] R13: 00007f5738616038 R14: 00007f5738615fa0 R15: 00007ffda360a418 [ 391.638184][T17740] [ 391.641235][T17740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.648519][T17740] CPU: 0 UID: 0 PID: 17740 Comm: syz.3.4456 Not tainted syzkaller #0 PREEMPT(full) [ 391.657893][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.667949][T17740] Call Trace: [ 391.671222][T17740] [ 391.674140][T17740] vpanic+0x56c/0xa60 [ 391.678136][T17740] ? __pfx__printk+0x10/0x10 [ 391.682715][T17740] ? __pfx_vpanic+0x10/0x10 [ 391.687215][T17740] ? is_bpf_text_address+0x292/0x2b0 [ 391.692498][T17740] ? is_bpf_text_address+0x26/0x2b0 [ 391.697699][T17740] panic+0xc5/0xd0 [ 391.701422][T17740] ? __pfx_panic+0x10/0x10 [ 391.705846][T17740] __warn+0x315/0x4c0 [ 391.709910][T17740] ? __debug_object_init+0x2b1/0x4e0 [ 391.715273][T17740] ? __debug_object_init+0x2b1/0x4e0 [ 391.720552][T17740] __report_bug+0x29a/0x540 [ 391.725095][T17740] ? __debug_object_init+0x2b1/0x4e0 [ 391.730384][T17740] ? __pfx___report_bug+0x10/0x10 [ 391.735488][T17740] ? __lock_acquire+0x6b5/0x2cf0 [ 391.740426][T17740] ? rcu_is_watching+0x15/0xb0 [ 391.745189][T17740] report_bug_entry+0x19a/0x290 [ 391.750061][T17740] ? __debug_object_init+0x30f/0x4e0 [ 391.755351][T17740] ? __debug_object_init+0x314/0x4e0 [ 391.760657][T17740] handle_bug+0xce/0x200 [ 391.764898][T17740] exc_invalid_op+0x1a/0x50 [ 391.769401][T17740] asm_exc_invalid_op+0x1a/0x20 [ 391.774237][T17740] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 391.780211][T17740] Code: 3c 38 00 74 08 4c 89 ef e8 5e 73 77 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 f7 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 ae 90 78 0b 83 fd 03 75 3f 4c 8b [ 391.799810][T17740] RSP: 0018:ffffc9000570f8f8 EFLAGS: 00010246 [ 391.805871][T17740] RAX: 1ffffffff179e854 RBX: ffff888094d5cf38 RCX: 0000000000000000 [ 391.813835][T17740] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f7c0 RDI: ffffffff903cdfd0 [ 391.821797][T17740] RBP: 0000000000000003 R08: ffff888094d5cf38 R09: ffffffff8bcf5600 [ 391.829756][T17740] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffffffff8c27fbc0 [ 391.837718][T17740] R13: ffffffff8bcf42a0 R14: ffffffff903cdfd0 R15: dffffc0000000000 [ 391.845688][T17740] ? __pfx_timer_debug_hint+0x10/0x10 [ 391.851071][T17740] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 391.856789][T17740] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 391.862596][T17740] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 391.868432][T17740] timer_init_key+0x41/0x2c0 [ 391.873022][T17740] lane_ioctl+0x1579/0x2220 [ 391.878056][T17740] ? __pfx_clip_ioctl+0x10/0x10 [ 391.882900][T17740] ? br2684_ioctl+0x110/0x6b0 [ 391.887570][T17740] ? __pfx_lane_ioctl+0x10/0x10 [ 391.892426][T17740] ? atmtcp_ioctl+0x1ce/0xdf0 [ 391.897103][T17740] do_vcc_ioctl+0x36d/0x9d0 [ 391.901611][T17740] svc_ioctl+0x1f6/0x7d0 [ 391.905847][T17740] ? kasan_quarantine_put+0xbb/0x1f0 [ 391.911133][T17740] ? __pfx_svc_ioctl+0x10/0x10 [ 391.915996][T17740] ? tomoyo_path_number_perm+0x219/0x630 [ 391.921628][T17740] ? tomoyo_path_number_perm+0x219/0x630 [ 391.927274][T17740] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 391.932319][T17740] sock_do_ioctl+0x101/0x320 [ 391.936926][T17740] ? __pfx_sock_do_ioctl+0x10/0x10 [ 391.942039][T17740] ? do_futex+0x333/0x420 [ 391.946384][T17740] sock_ioctl+0x5c6/0x7f0 [ 391.950720][T17740] ? __pfx_sock_ioctl+0x10/0x10 [ 391.955565][T17740] ? __fget_files+0x2a/0x420 [ 391.960151][T17740] ? __fget_files+0x3a0/0x420 [ 391.964823][T17740] ? __fget_files+0x2a/0x420 [ 391.969426][T17740] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.974378][T17740] ? __pfx_sock_ioctl+0x10/0x10 [ 391.979243][T17740] __se_sys_ioctl+0xfc/0x170 [ 391.983833][T17740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.989907][T17740] do_syscall_64+0x15f/0xf80 [ 391.994573][T17740] ? trace_irq_disable+0x3b/0x140 [ 391.999599][T17740] ? clear_bhb_loop+0x40/0x90 [ 392.004286][T17740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.010173][T17740] RIP: 0033:0x7f573839c819 [ 392.014583][T17740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.034289][T17740] RSP: 002b:00007f5739197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.042713][T17740] RAX: ffffffffffffffda RBX: 00007f5738615fa0 RCX: 00007f573839c819 [ 392.050679][T17740] RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000008 [ 392.058644][T17740] RBP: 00007f5738432c91 R08: 0000000000000000 R09: 0000000000000000 [ 392.066612][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.074574][T17740] R13: 00007f5738616038 R14: 00007f5738615fa0 R15: 00007ffda360a418 [ 392.082553][T17740] [ 392.085978][T17740] Kernel Offset: disabled [ 392.090293][T17740] Rebooting in 86400 seconds..