last executing test programs: 8.145264547s ago: executing program 4 (id=1947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4(r2, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x80, 0x100000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x9, 0x8, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x2, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r11, &(0x7f0000001040)={0x27, r13, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x3c}}, 0x20000071) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r18, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x8001}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0xfffffffffffffda0, &(0x7f00000000c0)="178d008604bf0f305030cb13f84c", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x19}, 0x50) 7.779988518s ago: executing program 0 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x10, 0x1c4}]}, 0x10) 4.961314784s ago: executing program 0 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000009010100000000000000000000000010009a66a91056d881910003040000000c000280050001000000000014000280080001000000000008000200ac14140008010073797a3100"/88], 0x58}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x15e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4844) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x2}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) write$nci(r8, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000a9500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 4.954229924s ago: executing program 4 (id=1982): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (rerun: 32) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r4, 0x0, 0x1a, 0x1000, &(0x7f0000000280)="e301c2eda1dd7f74d9827dfcca0ddbb89f9a859788743f41304d", &(0x7f00000008c0)=""/4096, 0x1, 0x0, 0xe4, 0x7d, &(0x7f00000018c0)="07bb3847572dfaada25ae65628048211dd8b27f847055832334055cab565fe7d021589456c9b169b614c724b595043a1d3cacc3adfaac70d4c4386eca7fab1ddde5e826c30931bc2e13884f34777198879dda921546ff6d4cc8dec1ea36de6fb0a060a9e7c829fa0fca4147fd639215c77b30d37841c96ee8e5103d41980838898392b96d1c9d451f78210bd35345d6e9f6f188101fd66fc722fe4b49dbab46ea7d6cee5804ad86f3f28b2f73063541d460b8f3971633a94dae08e8bd07b7b0075ca42daeb352142e5ec46cd150671997c1ce20948746ccdb822cb9c69315f6dfbfc224c", &(0x7f00000019c0)="ab2357b3ba25ffbd0e8d67a64100e369e11ea5d3bfb6f06fb48120ef81e34bfaf1cbdac288ee7289484d48dc5e31fb60199fce0056e0df4ab3732ffcf349cabb5f03d7a2ae38610d9d41924302857f54547c4661121fcb367e495a0f5bc5d84bb028ea904af3fd6a83bb6133743c037958aa936b0e1a8a7e3d47852f4a", 0x2, 0x0, 0x1}, 0x50) 4.561758689s ago: executing program 1 (id=1986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@owner={{0x38}, {0xee01, 0x0, 0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=ANY=[@ANYRESDEC=r2], 0x1bc}], 0x1, 0x0, 0x0, 0x400c445}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000003ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003e80)={&(0x7f0000002d40)={0x1104, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1070, 0x8, 0x0, 0x1, [{0x840, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x698, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "145978d2ce69e7260319d117df0ffe6aa8aab53fbcc23d666c69ee6bc60543a0"}]}, {0x190, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x620, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @empty, 0x130}}, @WGPEER_A_ALLOWEDIPS={0x53c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @local, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0xfffffff9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x1104}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008080) 4.550082865s ago: executing program 4 (id=1987): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7105090c02010101040e872742d359f01c6aed1a4d9ed9c02f300b"], 0x128) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.174605023s ago: executing program 3 (id=1990): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0xc0000001, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x22e}, 0x48) 4.058234157s ago: executing program 3 (id=1991): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="690000220cb797ac00040000000800000d9b94cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0}, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f00000026c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "43bf5b", 0x0, 0x67, 0x1, @mcast1, @loopback}}}}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000040000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000710000000400000000"], &(0x7f0000000d40)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 1.870260025s ago: executing program 1 (id=1992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000440)="0b0000000980ffff", 0x8) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@phonet={0x23, 0xf8, 0x1, 0x6}, 0x80, 0x0}}], 0x2, 0x9200000000000000) sendmsg$tipc(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8051}, 0x0) r4 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) 1.806821659s ago: executing program 3 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000a6"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.753966813s ago: executing program 4 (id=1994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0x140, 0xb88}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000080)=""/33, &(0x7f0000000140)=0x21) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.752865765s ago: executing program 2 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x558}, 0x1, 0x0, 0x0, 0x44}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(0x3) 1.749967855s ago: executing program 1 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/60, 0x328000, 0x800, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000001c0)=0x120a0a5, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x5, 0x2bb3, 0xe3, 0x94b, 0x7fff}, &(0x7f0000000c00)=0x14) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$unix(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780683a050086dd6018232500182c00fe1bc38651bafd8c1904ab10800000000000000000000000000000000000000000000000000000000000aa0802020900001c00fe880000f3"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaac99eaaaa1780c206050e86dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa010202010000000020010000000000000000000000000002"], 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r9, &(0x7f0000000280)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x48) close(0x4) sendto$inet(r8, 0x0, 0x0, 0x4050, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYRESHEX=r10], 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000002540)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138a}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) 1.744005025s ago: executing program 0 (id=1997): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.556943309s ago: executing program 3 (id=1998): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0x2, 0x10, 0x10, 0x3, 0xfe, 0x3, 0xff, 0xb, 0x400}, [@RTA_DST={0x8, 0x1, @multicast2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008052}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x6, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @const={0xf}, @enum={0x3, 0x9, 0x0, 0x6, 0x4, [{0x9, 0x7}, {0x0, 0x9}, {0x9, 0x2}, {0xb, 0x6}, {0x3, 0x18}, {0xd}, {0x0, 0x10}, {0x9, 0x41d2}, {0xa, 0x3}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @struct={0xf, 0x6, 0x0, 0x4, 0x0, 0x65ca3ead, [{0x1, 0x4, 0x800}, {0xd, 0x0, 0x4}, {0x4, 0x1, 0x9}, {0xd, 0x0, 0xd}, {0x3, 0x2, 0x2}, {0x0, 0x0, 0x3}]}]}, {0x0, [0x0, 0x61, 0x61, 0x0]}}, &(0x7f0000000240)=""/67, 0xf6, 0x43, 0x5, 0x7, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/29, 0x1d, 0x0, &(0x7f0000000340)=""/189, 0xbd}}, 0x10) (async, rerun: 64) r2 = accept4$x25(r0, &(0x7f0000000480)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x80000) (async, rerun: 64) recvmsg$can_j1939(r1, &(0x7f0000000840)={&(0x7f0000000500)=@rc={0x1f, @none}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/113, 0x71}], 0x3, &(0x7f0000000800)=""/3, 0x3}, 0x0) close(r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) getsockname$packet(r0, &(0x7f0000000c00)={0x11, 0x0, 0x0}, &(0x7f0000000c40)=0x14) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000c80)={@empty, @initdev, 0x0}, &(0x7f0000000cc0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d00)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x8, 0x0, {{0x20, 0x4, 0x1, 0x10, 0x80, 0x64, 0x0, 0xf5, 0x4, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x47, 0x3, 0xd, [{@multicast2, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x7481}, {@multicast1, 0xfffeffff}, {@multicast1, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @end, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x1b, [@broadcast, @multicast1, @rand_addr=0x64010101, @local]}, @ssrr={0x89, 0xb, 0x7a, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp={0x44, 0x18, 0xe6, 0x0, 0x8, [0x5, 0x40, 0xfff, 0xfffffc00, 0x4]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e00)={'vxcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000e40)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x0, 0x9, {{0x2c, 0x4, 0x2, 0x2, 0xb0, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, {[@lsrr={0x83, 0x23, 0x84, [@multicast2, @empty, @empty, @multicast2, @broadcast, @multicast1, @remote, @broadcast]}, @noop, @generic={0x88, 0x10, "0ba2b9dddd6d3ce183c0b970e492"}, @timestamp_addr={0x44, 0x34, 0x2a, 0x1, 0xb, [{@broadcast, 0x6}, {@broadcast, 0x2c}, {@remote, 0x7}, {@empty, 0x9}, {@private=0xa010100, 0x1}, {@multicast2, 0xaac6}]}, @lsrr={0x83, 0x17, 0x5f, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @ssrr={0x89, 0x7, 0x58, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x14, 0xb1, 0x0, 0xb, [0xfffffe00, 0x4, 0x10, 0x9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000f80)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000000fc0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x0, 0x53, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x65, 0x0, 0xd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@end, @ssrr={0x89, 0x1b, 0xac, [@local, @multicast1, @multicast1, @multicast2, @remote, @empty]}, @noop, @generic={0x7, 0xf, "e615c2943d85e05fa77afaeaca"}, @timestamp={0x44, 0xc, 0x74, 0x0, 0xb, [0xfffffffb, 0x6]}, @timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @generic={0x0, 0x3, "f2"}, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0x2, [{@remote, 0x90}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001100)={@private1, 0x0}, &(0x7f0000001140)=0x14) (async) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001180)={@initdev, @rand_addr, 0x0}, &(0x7f00000011c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000014c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001480)={&(0x7f0000001240)={0x208, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4040001}, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) bind$can_j1939(r0, &(0x7f0000001500)={0x1d, r6, 0x3, {0x2, 0x1, 0xb0640b625314c01b}, 0x1}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000002600)={&(0x7f0000001540)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002580)=[{&(0x7f0000001580)="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", 0x1000}], 0x1, &(0x7f00000025c0)=[@prinfo={0x18, 0x84, 0x5, {0x7401e7cf471cc874, 0x3a}}], 0x18, 0x1}, 0x10) (async, rerun: 64) r16 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x5f9}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) (async) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000002780)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10000000}, @l2tp={0x2, 0x0, @broadcast, 0x3}, @isdn={0x22, 0x23, 0x3, 0x8, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x4751, &(0x7f0000002740)='ip6gretap0\x00', 0x1, 0x0, 0x6}) (async, rerun: 32) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r16) (rerun: 32) sendmsg$NL80211_CMD_DEL_STATION(r16, &(0x7f0000002a00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x128, r17, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8002}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x2, 0x7fff, 0xfc01]}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc8, 0xbe, "834ff798ad160417add7ecdfb1067a7e647dddaa6f6a5216c00880ee07758258839ae12559b9e80a6106192cbb80e98cb02da778facfad68a756900d2d2deaa26374550566c5698ef25afd935be020d9a84588f85c66e2f6b2569afee65be95339025a34b6c85d13650c312f8fce4f06d19348ea3d6f0e98a594416dd0565d33ccd293ec64101a62cac1593c12a0f38fa7369394679a4c44ddcf1fecfa58ef5da88e42ca5cc153208309a0b80abbd047dedae9ba3986cdee45427b046851542b38d8a51e"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x45}, 0x4048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a40)={'wlan1\x00'}) 1.543571548s ago: executing program 0 (id=1999): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x8}, 0x2) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1ffc}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x9, @local, 0x80000001}, @in6={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xaa7}, @in={0x2, 0x4e23, @multicast1}], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd28}, 0x14}}, 0x4000080) sendmmsg$inet(r2, &(0x7f0000001c40)=[{{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}}], 0x1, 0x20048040) 1.45114617s ago: executing program 2 (id=2000): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xffff, 0x6, [0xfffe, 0x3, 0x9, 0x6, 0x9, 0x8]}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x7, 0x2, 0x8, 0x5, r2}, &(0x7f0000000100)=0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x29, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x552, 0xa, 0x4, 0xe1, r3}, &(0x7f0000000180)=0x10) 1.305693005s ago: executing program 3 (id=2001): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}}, 0x4810) 1.305002799s ago: executing program 2 (id=2002): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x88, 0x0, 0x9, 0x600, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc62b}}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0x20000004) 1.286097954s ago: executing program 4 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfff9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.223075358s ago: executing program 0 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0)='M', 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000090601020000000000000000010000080900020073797a3000000000600007801800148014000240000000000000000000000000000000010900120073797a3100000000060004404e2400001800018014000240fe8800000000000000000000000000010800084000000020060004404e24000008001c4000000fba4000078008000b40000000090c00028008000140e0000002080006400000000718002009000000000000000000000000000008000940c62f04de0500010007000000086e9631066f4f05defc01570bcdb32517cf3ca2982faaa678dc00000000000000000000000000000000000000000000512f1f9a1f5fa69d95177bc056dc7a6a8e851d7d648971eaea"], 0xd0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '4'}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300)='M', &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f00000001c0)='M', 0x0}, 0x20) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) (async) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '4'}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 1.109386653s ago: executing program 2 (id=2005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff04, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001200feffffffc721c41d83339ef2de575abe6ac03f9f135ad865dc2a00ef68061afe5f9cd16386ac5112738f5ba59f1396f48c48cd1570210cdbea9536219f5a7566a59368831d664f8326069e4f4e12f11f9fab510cae2127a4d3fd453a09ddd6636904ae253b36a2a9c319ee95e86e9e962ec1dbbc904de6f448f4ae7cb28776468dda8761619f4998c2e804df62b911111b"], 0x3c}}, 0x0) 1.108887265s ago: executing program 4 (id=2006): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000180), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x200480a1}, 0x2000c880) 1.069807923s ago: executing program 3 (id=2007): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f00000001c0)) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000180), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYBLOB, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x200480a1}, 0x2000c880) (fail_nth: 1) 885.909188ms ago: executing program 0 (id=2008): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(0x0) r3 = socket(0x14, 0x2, 0x4) accept$nfc_llcp(r3, 0x0, 0x0) 714.005655ms ago: executing program 1 (id=2009): socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000feff001f00000200009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000feff001f00000200009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x40000004}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x2}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'ipvlan0\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000201bbbbbbbbbbbbaaaaaaaaaabb86dd6d00200000b311ff00000000000000000000ffffe0000002ff0200000000000000000000000000014f194e2000b39078c243"], 0x14c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0xfed6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 623.470479ms ago: executing program 2 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, @multicast2, 0x5, 0x10}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 369.433052ms ago: executing program 1 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = epoll_create1(0x80000) ioctl$FICLONE(r1, 0x40049409, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x22000000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x10, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 306.114235ms ago: executing program 2 (id=2012): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x68, 0x0, &(0x7f0000000080)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x7) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4005014c"], 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f00000001c0)=0x9) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe8000000000000000000000000000bbac1414bb000000040000000000193795cc5e387ea12400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESHEX=r5], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c250000000000202020630af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd00f5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_udp_int(r4, 0x11, 0x68, 0x0, &(0x7f0000000080)) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) (async) write$nci(r0, 0x0, 0x7) (async) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4005014c"], 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f00000001c0)=0x9) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, 0x0, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500100001000130400000000fbdbdf25fe8000000000000000000000000000bbac1414bb000000040000000000193795cc5e387ea12400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESHEX=r5], 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) 0s ago: executing program 1 (id=2013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.162807][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.172593][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.202501][ T5830] veth0_macvtap: entered promiscuous mode [ 89.212902][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.222961][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243947][ T5830] veth1_macvtap: entered promiscuous mode [ 89.253393][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.285957][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300350][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.325089][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338212][ T50] Bluetooth: hci0: command tx timeout [ 89.347523][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.418420][ T50] Bluetooth: hci1: command tx timeout [ 89.418473][ T5840] Bluetooth: hci2: command tx timeout [ 89.424299][ T50] Bluetooth: hci3: command tx timeout [ 89.431256][ T5828] Bluetooth: hci4: command tx timeout [ 89.442550][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.492610][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.553341][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.563049][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.603242][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.622800][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.639819][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.655573][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.687499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.696418][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.728007][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.733983][ T5826] veth0_vlan: entered promiscuous mode [ 89.744545][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.795755][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.811725][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.841321][ T5826] veth1_vlan: entered promiscuous mode [ 89.924437][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.964278][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.970805][ T5838] veth0_vlan: entered promiscuous mode [ 89.992396][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.120135][ T5838] veth1_vlan: entered promiscuous mode [ 90.150971][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.176553][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.237727][ T5826] veth0_macvtap: entered promiscuous mode [ 90.299690][ T5826] veth1_macvtap: entered promiscuous mode [ 90.429610][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.479030][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.507096][ T5838] veth0_macvtap: entered promiscuous mode [ 90.530312][ T5962] netlink: 'syz.0.1': attribute type 39 has an invalid length. [ 90.544901][ T5838] veth1_macvtap: entered promiscuous mode [ 90.599496][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.614431][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.642341][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.656433][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.732211][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.758737][ T5948] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 90.783184][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 90.790716][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.794898][ T5948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.994602][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.014317][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.085489][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.101841][ T5973] netlink: 'syz.2.10': attribute type 12 has an invalid length. [ 91.116485][ T5973] netlink: 'syz.2.10': attribute type 29 has an invalid length. [ 91.138950][ T5973] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10'. [ 91.149211][ T5973] netlink: 59 bytes leftover after parsing attributes in process `syz.2.10'. [ 91.182585][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.219458][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.243084][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.418031][ T5828] Bluetooth: hci0: command tx timeout [ 91.498464][ T5828] Bluetooth: hci3: command tx timeout [ 91.505082][ T5840] Bluetooth: hci1: command tx timeout [ 91.505125][ T5834] Bluetooth: hci2: command tx timeout [ 91.517003][ T50] Bluetooth: hci4: command tx timeout [ 91.595448][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.641331][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.657629][ T5994] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.737360][ T6001] xt_addrtype: ipv6 does not support BROADCAST matching [ 91.742626][ T5998] Zero length message leads to an empty skb [ 91.813463][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.846080][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.994941][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.022555][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.152481][ T795] cfg80211: failed to load regulatory.db [ 92.486350][ T6018] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 92.503616][ T6018] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 92.532269][ T6018] netlink: 'syz.3.21': attribute type 32 has an invalid length. [ 92.573335][ T6018] netlink: 500 bytes leftover after parsing attributes in process `syz.3.21'. [ 92.578105][ T6021] trusted_key: syz.0.22 sent an empty control message without MSG_MORE. [ 92.632952][ T6021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 92.834357][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.297551][ T6051] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 93.399018][ T6053] netlink: zone id is out of range [ 93.417205][ T6053] netlink: zone id is out of range [ 93.436551][ T6053] netlink: zone id is out of range [ 93.463063][ T6053] netlink: zone id is out of range [ 93.495601][ T6059] veth0: entered promiscuous mode [ 93.496445][ T6053] netlink: del zone limit has 4 unknown bytes [ 93.615499][ T6061] veth0: left promiscuous mode [ 93.728329][ T6067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 93.975386][ T6071] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 94.074779][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 94.098067][ T6082] block nbd0: not configured, cannot reconfigure [ 94.130653][ T6082] sctp: [Deprecated]: syz.0.42 (pid 6082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.130653][ T6082] Use struct sctp_sack_info instead [ 94.500607][ T6101] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 94.528645][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.938484][ T50] Bluetooth: hci4: command tx timeout [ 95.286344][ T6139] hsr_slave_0: left promiscuous mode [ 95.312585][ T6139] hsr_slave_1: left promiscuous mode [ 95.431764][ T6141] netlink: 'syz.1.61': attribute type 30 has an invalid length. [ 95.477078][ T1037] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.564537][ T1037] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.580519][ T6147] batadv_slave_1: entered promiscuous mode [ 95.595165][ T1037] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.630570][ T6147] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.642754][ T1037] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.649902][ T6148] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.711576][ T6146] batadv_slave_1: left promiscuous mode [ 95.823824][ T6162] __nla_validate_parse: 8 callbacks suppressed [ 95.823846][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.150282][ T6174] validate_nla: 1 callbacks suppressed [ 96.150304][ T6174] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 96.167928][ T6176] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 96.281365][ T6174] bond1: entered promiscuous mode [ 96.307607][ T6174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.323407][ T6176] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 96.341360][ T6185] netlink: 244 bytes leftover after parsing attributes in process `syz.0.76'. [ 96.415248][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 96.745663][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 97.039611][ T6220] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 97.092777][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 97.095325][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.354402][ T6227] vlan2: entered allmulticast mode [ 97.743356][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.92'. [ 97.760354][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 97.817440][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 98.092706][ T6247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 98.202127][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 98.234610][ T6252] netlink: Conntrack attr has 4 unknown bytes [ 98.280622][ T6252] netlink: Conntrack attr has 4 unknown bytes [ 98.884979][ T6272] veth3: entered allmulticast mode [ 99.031902][ T6284] netlink: 'syz.4.107': attribute type 61 has an invalid length. [ 99.413040][ T6306] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 99.778327][ T6328] netlink: 'syz.4.114': attribute type 5 has an invalid length. [ 99.911750][ T1164] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 100.040538][ T6312] geneve2: entered promiscuous mode [ 100.051298][ T6312] geneve2: entered allmulticast mode [ 100.065044][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 100.104352][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 100.121153][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 100.134465][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 100.432381][ T6343] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.445425][ T6343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.316296][ T6297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.823574][ T6354] syzkaller0: entered promiscuous mode [ 102.834547][ T6354] syzkaller0: entered allmulticast mode [ 102.884944][ T6363] __nla_validate_parse: 10 callbacks suppressed [ 102.884963][ T6363] netlink: 27 bytes leftover after parsing attributes in process `syz.1.125'. [ 103.082394][ T6376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.100752][ T6375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.112368][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 105.030945][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 105.632239][ T6435] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 105.756742][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 105.920983][ T6446] netlink: 'syz.2.146': attribute type 2 has an invalid length. [ 105.951758][ T6446] netlink: 'syz.2.146': attribute type 11 has an invalid length. [ 105.985752][ T6446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.146'. [ 106.081333][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.091171][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.239782][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.255712][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.496115][ T1164] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.517558][ T1164] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.540636][ T1164] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.575902][ T1164] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.609575][ T6466] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 106.725728][ T6470] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 106.771118][ T6469] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 106.795456][ T6469] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 106.817211][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.846047][ T6469] bond1: (slave ip6gre1): making interface the new active one [ 106.891255][ T6469] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 106.916232][ T6470] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 107.238732][ T6507] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.158'. [ 107.552944][ T6519] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 107.583915][ T6519] bond1 (unregistering): Released all slaves [ 107.603227][ T6529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.636134][ T6525] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.757485][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 108.133039][ T6551] netlink: 'syz.3.170': attribute type 1 has an invalid length. [ 108.595598][ T6568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.175'. [ 108.632525][ T6570] lec0: mtu less than device minimum [ 108.665555][ T6570] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 108.771014][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.179'. [ 108.847550][ T6577] geneve2: entered promiscuous mode [ 108.913927][ T1037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.935237][ T6541] lec:lec_atm_close: lec0: Shut down! [ 108.976510][ T1037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.001476][ T1037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.048149][ T1037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.065450][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 109.428878][ T6603] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 109.459851][ T6603] netlink: 236 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.493923][ T6602] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 109.525169][ T6603] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 109.543157][ T6602] netlink: 236 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.775024][ T50] block nbd1: Receive control failed (result -32) [ 109.778584][ T5834] block nbd2: Receive control failed (result -32) [ 109.977276][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.985192][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.311055][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.370130][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.497677][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 111.216014][ T6686] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.250892][ T6686] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.323906][ T6686] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.349857][ T6686] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.369337][ T6686] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.391238][ T6686] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.415143][ T6720] netlink: 'syz.0.204': attribute type 4 has an invalid length. [ 111.425146][ T6686] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.430372][ T6720] netlink: 152 bytes leftover after parsing attributes in process `syz.0.204'. [ 111.435506][ T6686] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.480113][ T6706] syzkaller1: entered promiscuous mode [ 111.485960][ T6706] syzkaller1: entered allmulticast mode [ 111.532345][ T6720] .`: renamed from bond0 (while UP) [ 112.243213][ T6763] x_tables: duplicate underflow at hook 1 [ 112.641143][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 112.794984][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 112.844934][ T6791] netlink: 104 bytes leftover after parsing attributes in process `syz.0.219'. [ 113.045463][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.054620][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.267641][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.281222][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.382314][ T1337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.421784][ T1337] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.486572][ T1337] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.592001][ T1337] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.685331][ T6822] netlink: 'syz.3.226': attribute type 58 has an invalid length. [ 113.703899][ T6822] __nla_validate_parse: 3 callbacks suppressed [ 113.703920][ T6822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 113.867605][ T6838] netlink: 165 bytes leftover after parsing attributes in process `syz.2.231'. [ 114.169089][ T6848] syzkaller0: entered promiscuous mode [ 114.176846][ T6852] netlink: 'syz.4.235': attribute type 2 has an invalid length. [ 114.190291][ T6848] syzkaller0: entered allmulticast mode [ 114.221560][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.242448][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.268579][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.278296][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 114.801677][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 115.253601][ T5490] lec:lec_start_xmit: lec0:No lecd attached [ 115.308072][ T6908] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.250'. [ 115.613364][ T6913] ip6t_srh: unknown srh match flags 5F28 [ 115.639663][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 115.737481][ T6920] netlink: 'syz.0.252': attribute type 1 has an invalid length. [ 115.754330][ T6921] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 115.771145][ T6921] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 115.779689][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 115.926327][ T6924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.000230][ T6930] h: entered promiscuous mode [ 116.237146][ T6936] veth0: entered promiscuous mode [ 116.280635][ T6936] veth0 (unregistering): left promiscuous mode [ 116.895053][ T6949] "syz.0.264" (6949) uses obsolete ecb(arc4) skcipher [ 117.319315][ T6969] syz.3.271 (6969) used greatest stack depth: 17560 bytes left [ 117.672106][ T7008] netlink: 'syz.3.282': attribute type 3 has an invalid length. [ 118.241730][ T7037] xt_hashlimit: size too large, truncated to 1048576 [ 118.649431][ T7062] gretap0: entered promiscuous mode [ 118.684966][ T7062] gretap0: left promiscuous mode [ 119.210261][ T7088] __nla_validate_parse: 6 callbacks suppressed [ 119.210282][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 119.469938][ T7100] netlink: 284 bytes leftover after parsing attributes in process `syz.4.305'. [ 119.607530][ T7112] lec0: mtu less than device minimum [ 119.621461][ T7112] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 119.646514][ T7111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 119.695679][ T7070] lec:lec_atm_close: lec0: Shut down! [ 119.885401][ T7117] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 119.910427][ T7117] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 119.922977][ T7117] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.309'. [ 119.955379][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 120.219097][ T7125] netlink: 'syz.3.312': attribute type 51 has an invalid length. [ 120.256673][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.274777][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.314'. [ 120.290767][ T7125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.620576][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.318'. [ 120.825791][ T7154] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.917661][ T7167] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 120.955390][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'. [ 121.475201][ T7181] syzkaller1: entered promiscuous mode [ 121.526773][ T7181] syzkaller1: entered allmulticast mode [ 121.535887][ T7186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.329'. [ 121.556651][ T7187] xt_recent: Unsupported userspace flags (000000b1) [ 121.585328][ T7190] netlink: 'syz.0.330': attribute type 23 has an invalid length. [ 121.832009][ T7204] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 122.023175][ T7204] bond0: entered promiscuous mode [ 122.043562][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.065132][ T7221] Bluetooth: MGMT ver 1.23 [ 122.190548][ T7220] bond0: (slave bridge2): making interface the new active one [ 122.222004][ T7220] bridge2: entered promiscuous mode [ 122.252286][ T7220] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 122.303749][ T7232] openvswitch: netlink: Message has 57 unknown bytes. [ 122.367105][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 122.369973][ T7232] tap0: tun_chr_ioctl cmd 1074025672 [ 122.395756][ T7232] tap0: ignored: set checksum disabled [ 122.460742][ T1318] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.497300][ T1318] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.586229][ T5901] IPVS: starting estimator thread 0... [ 122.597066][ T7246] netlink: 'syz.4.340': attribute type 63 has an invalid length. [ 122.651082][ T1318] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.666196][ T7253] netlink: 'syz.4.340': attribute type 63 has an invalid length. [ 122.671865][ T1318] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.717943][ T7248] IPVS: using max 28 ests per chain, 67200 per kthread [ 122.753222][ T7255] H: renamed from dummy0 (while UP) [ 123.035521][ T7262] syz.0.344 uses old SIOCAX25GETINFO [ 123.110027][ T7263] bond2: option xmit_hash_policy: invalid value (64) [ 123.125211][ T7263] bond2 (unregistering): Released all slaves [ 123.170614][ T7269] bond0: left promiscuous mode [ 123.195976][ T7269] bridge2: left promiscuous mode [ 123.415547][ T7273] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 123.446957][ T7273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.481224][ T7285] netlink: 'syz.0.350': attribute type 4 has an invalid length. [ 123.517561][ T7280] netlink: 'syz.0.350': attribute type 4 has an invalid length. [ 123.879835][ T7297] team0 (unregistering): Port device team_slave_0 removed [ 123.973920][ T7297] team0 (unregistering): Port device team_slave_1 removed [ 124.112352][ T7292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.334567][ T7320] __nla_validate_parse: 6 callbacks suppressed [ 124.334591][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 124.462367][ T7320] netlink: 'syz.0.361': attribute type 83 has an invalid length. [ 124.505234][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 124.732036][ T68] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.764216][ T68] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.788571][ T68] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.825480][ T68] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.178224][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 125.188467][ C0] lec:lec_tx_timeout: lec0 [ 125.193774][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 125.213797][ T7358] netlink: 168 bytes leftover after parsing attributes in process `syz.1.371'. [ 125.245639][ T7357] netlink: 168 bytes leftover after parsing attributes in process `syz.1.371'. [ 125.769785][ T7381] netlink: 'syz.1.380': attribute type 16 has an invalid length. [ 125.769905][ T50] block nbd3: Receive control failed (result -32) [ 125.787836][ T7381] netlink: 'syz.1.380': attribute type 17 has an invalid length. [ 125.797605][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 125.925671][ T7393] netlink: 14 bytes leftover after parsing attributes in process `syz.2.385'. [ 125.965480][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.976072][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.995495][ T7381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.014364][ T7386] ±ÿ: renamed from team_slave_1 [ 126.065014][ T7392] vlan2: entered allmulticast mode [ 126.072174][ T7392] bond0: entered allmulticast mode [ 126.088200][ T7392] bond_slave_0: entered allmulticast mode [ 126.099381][ T7392] bond_slave_1: entered allmulticast mode [ 126.192520][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.213882][ T7393] bond_slave_0: left allmulticast mode [ 126.252502][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.288880][ T7414] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 126.290660][ T7393] bond_slave_1: left allmulticast mode [ 126.346739][ T7393] bond0 (unregistering): Released all slaves [ 126.620651][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.893744][ T7441] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 127.053806][ T7454] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 127.154005][ T7441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.465316][ T7476] netlink: 186400 bytes leftover after parsing attributes in process `syz.4.400'. [ 127.611718][ T7481] ªªªªª#: renamed from bridge_slave_0 [ 127.630784][ T7482] lo: entered promiscuous mode [ 127.648908][ T7482] tunl0: entered promiscuous mode [ 127.666388][ T7482] gre0: entered promiscuous mode [ 127.689975][ T7482] gretap0: entered promiscuous mode [ 127.721053][ T7482] erspan0: entered promiscuous mode [ 127.752759][ T7482] ip_vti0: entered promiscuous mode [ 128.123807][ T7512] x_tables: duplicate underflow at hook 1 [ 128.627373][ T7512] gtp1: entered promiscuous mode [ 128.650308][ T7512] gtp1: entered allmulticast mode [ 128.733096][ T7527] netlink: 'syz.4.408': attribute type 8 has an invalid length. [ 128.938172][ T7532] tls_set_device_offload: netdev not found [ 128.955824][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 128.983484][ T7532] bridge0: port 3(syz_tun) entered blocking state [ 129.010625][ T7532] bridge0: port 3(syz_tun) entered disabled state [ 129.024151][ T7532] syz_tun: entered allmulticast mode [ 129.063868][ T7532] syz_tun: entered promiscuous mode [ 129.117219][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 129.275379][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 129.297667][ T7557] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.351156][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 129.416484][ T7564] netlink: 'syz.4.418': attribute type 10 has an invalid length. [ 129.472915][ T7564] batman_adv: batadv0: Adding interface: netdevsim0 [ 129.504917][ T7564] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.586175][ T7564] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 130.207767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 130.215894][ C0] lec:lec_tx_timeout: lec0 [ 130.221750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 130.256912][ T7608] macsec1: entered promiscuous mode [ 130.273837][ T7608] batadv0: entered promiscuous mode [ 130.293753][ T7608] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 130.318191][ T7608] batadv0: left promiscuous mode [ 130.510718][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 130.772382][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 130.884713][ T7636] bridge0: port 3(vlan2) entered blocking state [ 130.893460][ T7636] bridge0: port 3(vlan2) entered disabled state [ 130.900664][ T7636] vlan2: entered allmulticast mode [ 130.906092][ T7636] geneve0: entered allmulticast mode [ 130.914873][ T7636] vlan2: entered promiscuous mode [ 130.923089][ T7636] geneve0: entered promiscuous mode [ 131.022976][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.435'. [ 131.077227][ T7645] team0 (unregistering): Port device team_slave_0 removed [ 131.089447][ T7645] team0 (unregistering): Port device 26±ÿ removed [ 131.130558][ T7646] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 131.729608][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 132.271193][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 132.289849][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 132.333300][ T7666] lec:lec_atm_close: lec0: Shut down! [ 132.875354][ T7682] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 132.924565][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 132.951935][ T7723] netlink: 'syz.2.457': attribute type 7 has an invalid length. [ 132.993393][ T7723] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 133.044208][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 133.089572][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.105735][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113552][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.125239][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.375289][ T7744] netlink: 116 bytes leftover after parsing attributes in process `syz.2.462'. [ 134.070306][ T50] Bluetooth: hci1: command 0x0401 tx timeout [ 134.082012][ T7782] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 134.527770][ T7800] __nla_validate_parse: 4 callbacks suppressed [ 134.527790][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 134.630711][ T7800] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 134.634764][ T7809] netlink: 'syz.1.481': attribute type 16 has an invalid length. [ 134.718526][ T7809] netlink: 'syz.1.481': attribute type 17 has an invalid length. [ 134.758234][ T7811] netlink: 68 bytes leftover after parsing attributes in process `syz.4.482'. [ 134.800099][ T7811] nbd: illegal input index -8454144 [ 134.814538][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 134.854315][ T7809] lo: left promiscuous mode [ 134.860769][ T7809] tunl0: left promiscuous mode [ 134.866378][ T7809] gre0: left promiscuous mode [ 134.872953][ T7809] gretap0: left promiscuous mode [ 134.890563][ T7809] erspan0: left promiscuous mode [ 134.896214][ T7823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.483'. [ 134.912979][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 134.928736][ T7809] ip_vti0: left promiscuous mode [ 134.943113][ T7809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.039602][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 135.071856][ T7809] netlink: 104 bytes leftover after parsing attributes in process `syz.1.481'. [ 135.480359][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 135.736932][ T7856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.776894][ T7862] netlink: 52 bytes leftover after parsing attributes in process `syz.3.491'. [ 135.799736][ T7862] netlink: 52 bytes leftover after parsing attributes in process `syz.3.491'. [ 136.498410][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.939140][ T7913] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 137.119517][ T7927] netlink: 'syz.4.507': attribute type 19 has an invalid length. [ 137.206049][ T7927] syzkaller0: entered promiscuous mode [ 137.214092][ T7927] syzkaller0: entered allmulticast mode [ 137.338632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 137.346763][ C0] lec:lec_tx_timeout: lec0 [ 137.349828][ T7945] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 137.351851][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 140.116484][ T7927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.145676][ T7977] netlink: 'syz.2.520': attribute type 3 has an invalid length. [ 140.172502][ T7977] __nla_validate_parse: 8 callbacks suppressed [ 140.172524][ T7977] netlink: 244 bytes leftover after parsing attributes in process `syz.2.520'. [ 140.340662][ T7982] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 140.370464][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.388822][ T7988] netlink: 216 bytes leftover after parsing attributes in process `syz.4.524'. [ 140.555654][ T7991] netlink: 60 bytes leftover after parsing attributes in process `syz.4.525'. [ 140.576165][ T7994] tipc: Started in network mode [ 140.583048][ T7994] tipc: Node identity 6eabd73fb567, cluster identity 4711 [ 140.590915][ T7994] tipc: Enabled bearer , priority 0 [ 140.600273][ T7991] sch_fq: defrate 5 ignored. [ 140.620337][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.528'. [ 140.650063][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 140.715476][ T7995] tipc: Disabling bearer [ 140.893615][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 140.987302][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 141.053648][ T10] IPVS: starting estimator thread 0... [ 141.159851][ T8020] IPVS: using max 26 ests per chain, 62400 per kthread [ 141.230831][ T8034] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 141.336149][ T8037] netlink: 'syz.4.538': attribute type 32 has an invalid length. [ 141.345778][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 141.362719][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 141.376332][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 141.580014][ T8052] netlink: 'syz.2.540': attribute type 58 has an invalid length. [ 141.640360][ T8037] bond2: option coupled_control: invalid value (192) [ 141.650829][ T8037] bond2 (unregistering): Released all slaves [ 141.741974][ T8039] wireguard0: entered promiscuous mode [ 141.748203][ T8039] wireguard0: entered allmulticast mode [ 143.177855][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 143.185980][ C0] lec:lec_tx_timeout: lec0 [ 143.191280][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 143.978533][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.989650][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.999957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.202858][ T8034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.513290][ T8096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.846585][ T8102] syzkaller0: entered promiscuous mode [ 144.860549][ T8102] syzkaller0: entered allmulticast mode [ 144.919521][ T8112] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.997549][ T8112] syzkaller0: entered promiscuous mode [ 145.026876][ T8112] syzkaller0: entered allmulticast mode [ 145.281719][ T8140] __nla_validate_parse: 5 callbacks suppressed [ 145.281740][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 146.540307][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.550131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.560257][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.577290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.302703][ T8164] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 147.362299][ T8165] xt_hashlimit: size too large, truncated to 1048576 [ 147.662722][ T8181] netlink: 72 bytes leftover after parsing attributes in process `syz.0.574'. [ 147.712102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.197784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 148.200065][ T8206] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 148.205981][ C0] lec:lec_tx_timeout: lec0 [ 148.219601][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 148.266731][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.538942][ T8223] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 148.571101][ T8223] netlink: 96 bytes leftover after parsing attributes in process `syz.3.588'. [ 148.761163][ T8231] netlink: 'syz.0.591': attribute type 12 has an invalid length. [ 151.172417][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 151.222576][ T8274] netlink: 176 bytes leftover after parsing attributes in process `syz.3.601'. [ 151.242377][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 151.813263][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 152.259968][ T8336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.618'. [ 152.299099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.363337][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 152.513188][ T8344] syzkaller0: entered promiscuous mode [ 152.530909][ T8344] syzkaller0: entered allmulticast mode [ 152.548550][ T8348] Bluetooth: MGMT ver 1.23 [ 152.614405][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'. [ 153.227768][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 153.236145][ C0] lec:lec_tx_timeout: lec0 [ 153.241173][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 153.319456][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 153.330681][ T8371] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 153.339241][ T8371] netlink: 'syz.2.629': attribute type 2 has an invalid length. [ 153.579023][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.587666][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.596096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.630867][ T8379] raw_sendmsg: syz.4.630 forgot to set AF_INET. Fix it! [ 153.774656][ T8382] netlink: 248 bytes leftover after parsing attributes in process `syz.0.631'. [ 153.921752][ T8359] Cannot find add_set index 0 as target [ 153.964769][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.4.635'. [ 154.165131][ T8412] ip6t_srh: unknown srh invflags 4000 [ 154.315062][ T8418] netlink: 'syz.0.640': attribute type 14 has an invalid length. [ 154.344830][ T137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.355341][ T8418] netlink: 'syz.0.640': attribute type 14 has an invalid length. [ 154.369027][ T137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.387037][ T137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.405423][ T137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.879845][ T8431] syzkaller0: entered promiscuous mode [ 154.885782][ T8431] syzkaller0: entered allmulticast mode [ 155.424912][ T8347] Set syz1 is full, maxelem 65536 reached [ 157.078130][ T8402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.332773][ T8448] atomic_op ffff8880467e2998 conn xmit_atomic 0000000000000000 [ 157.531993][ T8460] __nla_validate_parse: 6 callbacks suppressed [ 157.532014][ T8460] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.654'. [ 157.751713][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 157.927203][ T8489] netlink: 'syz.2.662': attribute type 9 has an invalid length. [ 157.995998][ T8486] netlink: 48 bytes leftover after parsing attributes in process `syz.2.662'. [ 158.132094][ T8493] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.148259][ C0] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 158.258018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 158.266313][ C0] lec:lec_tx_timeout: lec0 [ 158.271033][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 159.429824][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 160.732411][ T8471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.005186][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 161.178523][ T8534] netlink: 'syz.0.677': attribute type 62 has an invalid length. [ 161.394232][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.680'. [ 161.421757][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.680'. [ 161.434034][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.680'. [ 161.612460][ T8555] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.642196][ T8556] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.682'. [ 161.646043][ T8564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.692698][ T8556] netlink: 'syz.2.682': attribute type 4 has an invalid length. [ 162.025586][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.687'. [ 162.050306][ T8584] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 163.277805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 163.286106][ C0] lec:lec_tx_timeout: lec0 [ 163.290932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 164.624379][ T8559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.826606][ T8604] tipc: Can't bind to reserved service type 1 [ 165.023353][ T8615] __nla_validate_parse: 2 callbacks suppressed [ 165.023372][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'. [ 165.097162][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 165.098018][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'. [ 165.128779][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 165.197625][ T8614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 165.217683][ T8614] netlink: 44 bytes leftover after parsing attributes in process `syz.2.698'. [ 165.488950][ T8647] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 165.510878][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 165.584399][ T8651] xt_hashlimit: size too large, truncated to 1048576 [ 168.298640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 168.306976][ C0] lec:lec_tx_timeout: lec0 [ 168.311720][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 168.399953][ T8639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.622117][ T8679] gtp0: entered promiscuous mode [ 168.796654][ T8688] netlink: 'syz.0.719': attribute type 21 has an invalid length. [ 168.825389][ T8688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.719'. [ 168.915952][ T8700] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 168.955513][ T8700] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 168.994659][ T5908] IPVS: starting estimator thread 0... [ 169.025749][ T8709] IPVS: set_ctl: invalid protocol: 0 100.1.1.4:20000 [ 169.133507][ T8721] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 169.144133][ T8706] IPVS: using max 26 ests per chain, 62400 per kthread [ 169.197392][ T8723] Bluetooth: MGMT ver 1.23 [ 170.007306][ T8750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.040372][ T8715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.068616][ T8751] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 172.114816][ T8751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.196410][ T8751] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 172.205602][ T8750] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 172.297581][ T8750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.339685][ T8750] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 172.387016][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 172.572480][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 172.670940][ T8779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.741'. [ 172.744080][ T8787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.745'. [ 172.829439][ T8792] netlink: 'syz.0.746': attribute type 9 has an invalid length. [ 173.017936][ T8798] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 173.031689][ T8798] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 173.194602][ T8805] syzkaller0: entered promiscuous mode [ 173.200271][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 173.200854][ T8788] x_tables: duplicate underflow at hook 1 [ 173.251867][ T8805] syzkaller0: entered allmulticast mode [ 173.327957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 173.336066][ C0] lec:lec_tx_timeout: lec0 [ 173.341149][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 173.832872][ T8831] netdevsim netdevsim0 : renamed from netdevsim0 [ 173.970311][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 175.989781][ T8800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.226069][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.762'. [ 176.633937][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 176.663868][ T8884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.861138][ T8893] veth1_to_bond: entered allmulticast mode [ 176.873777][ T8893] veth1_to_bond: left allmulticast mode [ 177.170670][ T8913] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 177.476047][ T8927] __nla_validate_parse: 1 callbacks suppressed [ 177.476068][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 178.264103][ T8961] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 178.321793][ T8972] netlink: 68 bytes leftover after parsing attributes in process `syz.1.787'. [ 178.347757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 178.355832][ C0] lec:lec_tx_timeout: lec0 [ 178.362290][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 178.490025][ T8978] syzkaller0: entered promiscuous mode [ 178.495894][ T8978] syzkaller0: entered allmulticast mode [ 179.919728][ T8896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.207528][ T8995] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.789'. [ 180.404660][ T8994] netlink: 'syz.0.793': attribute type 5 has an invalid length. [ 180.705883][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.804'. [ 180.804720][ T9033] 8021q: VLANs not supported on wg0 [ 180.818976][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 180.828514][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 180.856207][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 180.865957][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 181.019482][ T9042] netlink: 'syz.2.810': attribute type 11 has an invalid length. [ 181.413005][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 181.540461][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 181.550058][ T9076] netlink: 'syz.3.817': attribute type 4 has an invalid length. [ 181.760482][ T9085] netlink: 'syz.3.820': attribute type 16 has an invalid length. [ 182.157476][ T9097] sctp: [Deprecated]: syz.2.823 (pid 9097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.157476][ T9097] Use struct sctp_sack_info instead [ 183.654067][ T9021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.050125][ T9120] netlink: 92 bytes leftover after parsing attributes in process `syz.3.831'. [ 184.070067][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 184.081161][ T9121] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.297747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 184.305988][ C0] lec:lec_tx_timeout: lec0 [ 184.314034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 184.789749][ T9157] netlink: 'syz.4.842': attribute type 10 has an invalid length. [ 185.107650][ T9174] netlink: 'syz.0.847': attribute type 39 has an invalid length. [ 185.171054][ T9174] syzkaller0: entered promiscuous mode [ 185.178268][ T9174] syzkaller0: entered allmulticast mode [ 187.420602][ T9136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.436391][ T9183] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 187.736484][ T9203] netlink: 52 bytes leftover after parsing attributes in process `syz.4.855'. [ 187.803671][ T9206] netlink: 294 bytes leftover after parsing attributes in process `syz.4.855'. [ 187.817095][ T9206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.829023][ T9203] netlink: 52 bytes leftover after parsing attributes in process `syz.4.855'. [ 188.001468][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 189.217248][ T9250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 189.328089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 189.336359][ C0] lec:lec_tx_timeout: lec0 [ 189.339087][ T9254] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 189.341117][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 189.377111][ T9254] bond5: (slave bridge2): making interface the new active one [ 189.385516][ T9254] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 191.052338][ T9217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.254716][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 191.429462][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 191.828386][ T1164] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.844119][ T1164] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.854931][ T1164] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.881642][ T1164] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.895686][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 192.163892][ T9305] netlink: 'syz.4.885': attribute type 10 has an invalid length. [ 192.188237][ T9305] bridge_slave_1: left allmulticast mode [ 192.194117][ T9305] bridge_slave_1: left promiscuous mode [ 192.202155][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.219392][ T9305] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.254965][ T30] audit: type=1800 audit(1776605333.117:2): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.885" name="memory.events" dev="tmpfs" ino=894 res=0 errno=0 [ 192.363576][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 192.555180][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 192.612149][ T9329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.891'. [ 192.724824][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 192.734348][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 192.743284][ T9332] netlink: 'syz.4.892': attribute type 14 has an invalid length. [ 192.751077][ T9332] netlink: 'syz.4.892': attribute type 13 has an invalid length. [ 194.475435][ T9281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.501320][ T9331] netlink: 'syz.4.892': attribute type 23 has an invalid length. [ 194.552521][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.690284][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.696101][ T9334] gretap2: entered promiscuous mode [ 194.731033][ T9334] batman_adv: batadv0: Adding interface: gretap2 [ 194.748801][ T9334] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 194.803428][ T9334] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 195.012460][ T9355] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 195.036326][ T9355] netlink: 224 bytes leftover after parsing attributes in process `syz.4.900'. [ 195.058519][ T9355] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 195.177793][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 195.186068][ C0] lec:lec_tx_timeout: lec0 [ 195.191757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 195.233726][ T9369] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 195.529290][ T9382] erspan0: entered allmulticast mode [ 196.034691][ T9405] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.135043][ T9411] netlink: 'syz.4.909': attribute type 3 has an invalid length. [ 196.143456][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 196.154671][ T9411] netlink: 766 bytes leftover after parsing attributes in process `syz.4.909'. [ 198.244624][ T9373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.253687][ T9391] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 198.264547][ T9391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.907'. [ 198.392005][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.917'. [ 198.499871][ T9429] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 198.656753][ T9440] can: request_module (can-proto-0) failed. [ 199.200501][ T9472] netlink: 404 bytes leftover after parsing attributes in process `syz.4.928'. [ 199.218063][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'. [ 199.229041][ T9472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'. [ 199.248725][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.928'. [ 200.207981][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 200.216290][ C0] lec:lec_tx_timeout: lec0 [ 200.221158][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 201.951832][ T9460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.418221][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'. [ 202.619495][ T9519] IPv6: sit1: Disabled Multicast RS [ 202.645164][ T9519] sit1: entered allmulticast mode [ 203.015627][ T9555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.948'. [ 203.771445][ T9554] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 203.780045][ T9554] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 205.237931][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 205.246407][ C0] lec:lec_tx_timeout: lec0 [ 205.251264][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 205.740933][ T9532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.981512][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 206.117324][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'. [ 206.242169][ T9579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.961'. [ 206.505520][ T9599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.969'. [ 206.745220][ T9614] netlink: 288 bytes leftover after parsing attributes in process `syz.4.974'. [ 206.772682][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 206.799229][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 206.818439][ T9622] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.827321][ T9622] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 206.859750][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 206.868842][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 206.868874][ T5834] Bluetooth: hci1: command 0x0401 tx timeout [ 206.875911][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 207.086417][ T9631] netlink: 'syz.2.980': attribute type 8 has an invalid length. [ 207.137042][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.980'. [ 207.495045][ T9650] syzkaller0: entered promiscuous mode [ 207.511533][ T9650] syzkaller0: entered allmulticast mode [ 207.622948][ T9663] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 207.646464][ T9663] __nla_validate_parse: 1 callbacks suppressed [ 207.646485][ T9663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.989'. [ 207.684068][ T9663] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 207.702542][ T9663] netlink: 'syz.0.989': attribute type 8 has an invalid length. [ 207.717175][ T9663] netlink: 582 bytes leftover after parsing attributes in process `syz.0.989'. [ 207.730402][ T9663] netlink: 1 bytes leftover after parsing attributes in process `syz.0.989'. [ 207.902180][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 208.443593][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.999'. [ 209.830781][ T9672] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 209.848955][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 210.204279][ T9720] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 210.232066][ T9720] netlink: 'syz.2.1003': attribute type 2 has an invalid length. [ 210.242244][ T9720] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 210.252669][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 210.262063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 210.262096][ C0] lec:lec_tx_timeout: lec0 [ 210.270611][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 210.297844][ T30] audit: type=1107 audit(1776605351.157:3): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 210.333902][ T9726] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1006'. [ 210.541592][ T9735] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1008'. [ 210.611504][ T9740] netlink: 'syz.1.1011': attribute type 3 has an invalid length. [ 210.649023][ T9744] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1012'. [ 210.985508][ T9758] netlink: 'syz.0.1016': attribute type 29 has an invalid length. [ 211.041805][ T9758] netlink: 'syz.0.1016': attribute type 29 has an invalid length. [ 211.128804][ T9766] netlink: 'syz.4.1017': attribute type 11 has an invalid length. [ 211.524228][ T9791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.533435][ T9791] IPv6: NLM_F_CREATE should be set when creating new route [ 211.816079][ T9812] tipc: Started in network mode [ 211.832544][ T9812] tipc: Node identity , cluster identity 4711 [ 212.219245][ T9819] syzkaller0: entered promiscuous mode [ 212.243809][ T9819] syzkaller0: entered allmulticast mode [ 212.563576][ T9860] validate_nla: 1 callbacks suppressed [ 212.563595][ T9860] netlink: 'syz.1.1042': attribute type 9 has an invalid length. [ 214.626519][ T9886] __nla_validate_parse: 134 callbacks suppressed [ 214.626543][ T9886] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1049'. [ 215.253068][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 215.277768][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 215.285983][ C0] lec:lec_tx_timeout: lec0 [ 215.291122][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 215.311436][ T9921] bond0: ARP target 8.4.0.0 is already present [ 215.327768][ T9925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1058'. [ 215.337152][ T9921] bond0: option arp_ip_target: invalid value (1032) [ 215.362963][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'. [ 215.396198][ T9925] gretap1: entered promiscuous mode [ 215.416067][ T9925] gretap1: entered allmulticast mode [ 215.452751][ T9921] bond0: ARP target 8.4.0.0 is already present [ 215.468208][ T9921] bond0: option arp_ip_target: invalid value (1032) [ 215.698138][ T9938] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 215.722367][ T9931] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 215.739524][ T9938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1062'. [ 215.764608][ T9938] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1062'. [ 215.885272][ T9948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1062'. [ 215.922099][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 215.954639][ T9948] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1062'. [ 215.987001][ T9948] netlink: 'syz.0.1062': attribute type 3 has an invalid length. [ 216.029657][ T9948] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 216.064742][ T9948] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1062'. [ 216.117196][ T9959] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 216.285199][ T9964] bond6: (slave geneve2): making interface the new active one [ 216.313957][ T9964] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 216.326899][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.352881][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.401758][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.413372][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.801465][ T9997] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 217.089608][T10002] bridge4: port 1(veth7) entered blocking state [ 217.113300][T10002] bridge4: port 1(veth7) entered disabled state [ 217.132518][T10002] veth7: entered allmulticast mode [ 217.148520][T10002] veth7: entered promiscuous mode [ 217.220180][T10014] bridge4: port 2(veth9) entered blocking state [ 217.236471][T10014] bridge4: port 2(veth9) entered disabled state [ 217.248156][T10014] veth9: entered allmulticast mode [ 217.269012][T10014] veth9: entered promiscuous mode [ 218.115695][T10055] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 218.150426][T10055] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 218.201121][T10063] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 218.564112][T10063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.660721][T10067] netlink: 'syz.1.1089': attribute type 2 has an invalid length. [ 219.478465][T10122] openvswitch: netlink: Multiple metadata blocks provided [ 219.715937][T10130] ipt_ECN: cannot use operation on non-tcp rule [ 220.002622][T10142] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 220.036045][T10141] syzkaller0: entered promiscuous mode [ 220.073816][T10141] syzkaller0: entered allmulticast mode [ 220.118987][T10136] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 220.165448][T10142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.193134][T10149] macvlan3: entered promiscuous mode [ 220.199207][T10149] macvlan3: entered allmulticast mode [ 220.200942][T10158] __nla_validate_parse: 13 callbacks suppressed [ 220.200976][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 220.223405][T10158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1114'. [ 220.244656][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 220.282637][T10152] bond4: (slave ip6gretap1): making interface the new active one [ 220.298292][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 220.306572][ C0] lec:lec_tx_timeout: lec0 [ 220.311253][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 220.333144][T10152] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 220.544284][T10176] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 220.556542][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 220.625301][T10178] netlink: 'syz.3.1121': attribute type 4 has an invalid length. [ 220.643060][T10178] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1121'. [ 220.810352][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 220.828931][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 220.922495][T10198] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 220.932124][T10198] netlink: 'syz.1.1128': attribute type 2 has an invalid length. [ 220.940303][T10198] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 220.949898][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1128'. [ 221.123642][T10207] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1132'. [ 221.294583][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 221.316226][T10211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.876343][T10250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.486834][T10223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.691531][T10281] openvswitch: netlink: IP tunnel dst address not specified [ 224.805018][T10293] netlink: 'syz.1.1152': attribute type 10 has an invalid length. [ 224.840870][T10293] bridge_slave_1: left allmulticast mode [ 224.855996][T10293] bridge_slave_1: left promiscuous mode [ 224.875701][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.894567][T10293] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 224.906586][T10295] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 225.317852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 225.326077][ C0] lec:lec_tx_timeout: lec0 [ 225.330723][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 225.521767][T10284] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 226.009698][T10356] __nla_validate_parse: 2 callbacks suppressed [ 226.009720][T10356] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1165'. [ 226.777917][ T5145] Bluetooth: hci1: command 0x0401 tx timeout [ 228.122190][T10316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.353966][T10378] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1168'. [ 228.356925][T10380] tipc: Invalid UDP bearer configuration [ 228.368300][T10378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.378536][T10380] tipc: Enabling of bearer rejected, failed to enable media [ 228.400424][T10376] xt_l2tp: invalid flags combination: 8 [ 228.487040][T10384] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1172'. [ 230.347842][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 230.356030][ C0] lec:lec_tx_timeout: lec0 [ 230.361041][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 231.779919][T10400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.995638][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 232.538373][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 232.558849][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 233.072896][T10498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1208'. [ 233.084136][T10499] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 233.213549][T10500] bond3: (slave bridge14): making interface the new active one [ 233.222602][T10500] bond3: (slave bridge14): Enslaving as an active interface with an up link [ 233.453239][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 233.508634][T10516] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 233.542477][T10520] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1213'. [ 233.772241][T10529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1215'. [ 233.935854][T10532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1214'. [ 233.951067][T10532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1214'. [ 233.955139][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 234.340425][T10538] netlink: 'syz.3.1218': attribute type 21 has an invalid length. [ 234.350336][T10538] netlink: 'syz.3.1218': attribute type 4 has an invalid length. [ 234.359682][T10538] netlink: 'syz.3.1218': attribute type 5 has an invalid length. [ 234.369366][T10538] netlink: 'syz.3.1218': attribute type 21 has an invalid length. [ 234.377521][T10538] netlink: 'syz.3.1218': attribute type 4 has an invalid length. [ 234.387174][T10538] netlink: 'syz.3.1218': attribute type 5 has an invalid length. [ 234.468881][T10551] veth3: entered allmulticast mode [ 234.569855][T10559] tipc: Started in network mode [ 234.585476][T10559] tipc: Node identity , cluster identity 4711 [ 234.595612][T10559] tipc: Failed to set node id, please configure manually [ 234.609860][T10559] tipc: Enabling of bearer rejected, failed to enable media [ 234.984799][T10581] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 235.724625][T10618] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 236.030883][T10631] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 236.123318][ T30] audit: type=1107 audit(1776605376.977:4): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 236.137731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 236.238529][ C0] lec:lec_tx_timeout: lec0 [ 236.244889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 236.530680][T10647] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 236.542885][T10647] bond2 (unregistering): Released all slaves [ 236.739260][T10656] bond3 (unregistering): Released all slaves [ 236.812551][T10667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.075054][T10682] __nla_validate_parse: 16 callbacks suppressed [ 237.075074][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 237.094659][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 237.104940][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 237.204797][T10688] sctp: [Deprecated]: syz.0.1260 (pid 10688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.204797][T10688] Use struct sctp_sack_info instead [ 237.225657][T10688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1260'. [ 237.639197][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1266'. [ 237.681385][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 237.704135][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 237.734467][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 237.763631][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 237.820699][T10716] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.876739][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 237.893227][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 238.058892][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 238.104904][T10729] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 238.129141][T10729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1274'. [ 238.266194][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 238.496680][T10750] validate_nla: 3 callbacks suppressed [ 238.496699][T10750] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 238.554080][T10753] netlink: 'syz.4.1281': attribute type 3 has an invalid length. [ 239.182139][T10791] netlink: 'syz.3.1289': attribute type 9 has an invalid length. [ 239.354920][T10791] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.625566][ T137] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 239.750547][T10818] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 239.763947][T10821] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 239.809029][T10821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.840303][T10830] openvswitch: netlink: IPv4 tun info is not correct [ 241.257750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 241.265843][ C0] lec:lec_tx_timeout: lec0 [ 241.270599][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 241.974419][T10783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.190929][T10868] netlink: 'syz.2.1309': attribute type 23 has an invalid length. [ 242.801433][T10898] __nla_validate_parse: 10 callbacks suppressed [ 242.801454][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 242.855082][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 242.890310][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 243.193874][T10915] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 243.620017][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 243.687039][T10934] : entered promiscuous mode [ 243.709203][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 244.546723][T10987] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 244.573622][T10987] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 244.589714][T10987] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 244.603991][T10987] netlink: 'syz.3.1343': attribute type 2 has an invalid length. [ 244.623317][T10987] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1343'. [ 246.278054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 246.286216][ C0] lec:lec_tx_timeout: lec0 [ 246.291015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 247.141481][T10967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.287241][T11012] ieee80211 phy25: Failed to add default virtual iface [ 247.452203][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 247.472906][T11026] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 247.491201][T11026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1355'. [ 247.842074][T11042] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1358'. [ 247.880459][T11042] netlink: 'syz.4.1358': attribute type 9 has an invalid length. [ 248.210479][T11059] syzkaller0: entered promiscuous mode [ 248.222431][T11059] syzkaller0: entered allmulticast mode [ 248.273890][T11059] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1362'. [ 249.047840][T11101] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1371'. [ 249.071123][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 249.156621][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 249.271686][T11117] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1377'. [ 249.275500][T11104] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 249.671108][T11131] openvswitch: netlink: EtherType 0 is less than min 600 [ 250.231185][T11161] netlink: 'syz.0.1388': attribute type 4 has an invalid length. [ 250.248523][T11161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1388'. [ 250.302956][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 250.557149][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 251.297717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 251.306089][ C0] lec:lec_tx_timeout: lec0 [ 251.311203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 251.752525][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 252.209303][T11251] syzkaller0: entered promiscuous mode [ 252.226116][T11251] syzkaller0: entered allmulticast mode [ 252.281932][T11256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.309295][T11251] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 252.417575][T11260] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 252.474860][T11264] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 252.545430][T11272] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 252.779036][T11280] netlink: 'syz.0.1420': attribute type 29 has an invalid length. [ 252.839950][T11276] netlink: 'syz.0.1420': attribute type 29 has an invalid length. [ 252.867321][T11281] syzkaller0: entered promiscuous mode [ 252.881624][T11285] xt_l2tp: missing protocol rule (udp|l2tpip) [ 252.888373][T11281] syzkaller0: entered allmulticast mode [ 253.016193][T11294] __nla_validate_parse: 2 callbacks suppressed [ 253.016213][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1425'. [ 253.218375][T11304] netlink: 'syz.2.1424': attribute type 3 has an invalid length. [ 253.235820][T11304] netlink: 'syz.2.1424': attribute type 3 has an invalid length. [ 253.529610][T11315] bond4: Unable to set up delay as MII monitoring is disabled [ 253.551285][T11315] bond4 (unregistering): Released all slaves [ 253.613030][T11322] netlink: 'syz.1.1433': attribute type 2 has an invalid length. [ 253.643535][T11322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1433'. [ 253.775600][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 253.914335][T11338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.979510][T11341] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 254.181414][T11358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1443'. [ 254.294022][T11354] wireguard0: entered promiscuous mode [ 254.305899][T11354] wireguard0: entered allmulticast mode [ 254.503027][T11373] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1447'. [ 254.512335][T11373] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 254.521600][T11373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1447'. [ 254.670350][ T5908] IPVS: starting estimator thread 0... [ 254.767885][T11382] IPVS: using max 27 ests per chain, 64800 per kthread [ 255.152513][T11394] lec0: mtu less than device minimum [ 255.158603][T11394] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 255.180170][T11379] lec:lec_atm_close: lec0: Shut down! [ 255.275439][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 255.436541][T11406] netlink: 'syz.0.1453': attribute type 4 has an invalid length. [ 255.456098][T11408] xt_hashlimit: size too large, truncated to 1048576 [ 255.511711][T11406] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1453'. [ 255.563309][T11413] SET target dimension over the limit! [ 255.613111][T11415] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 255.721553][T11411] ªªªªª# (unregistering): left allmulticast mode [ 255.749032][T11411] ªªªªª# (unregistering): left promiscuous mode [ 255.783444][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1458'. [ 255.793501][T11411] bridge0: port 1(ªªªªª#) entered disabled state [ 255.935475][T11415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.984858][T11419] vlan2: entered allmulticast mode [ 256.006525][T11419] bond4: entered allmulticast mode [ 256.050916][T11436] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 256.104589][T11423] bond4: (slave geneve3): making interface the new active one [ 256.124032][T11423] geneve3: entered allmulticast mode [ 256.141982][T11423] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 256.636753][T11465] bond5: entered allmulticast mode [ 256.739276][T11465] bridge17: entered promiscuous mode [ 256.756842][T11465] bridge17: entered allmulticast mode [ 256.783077][T11465] bond5: (slave bridge17): Enslaving as an active interface with an up link [ 256.809461][T11486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.822642][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1473'. [ 256.865673][T11486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.884672][T11486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.895642][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.912195][T11475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.038262][T11495] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 257.092094][T11495] bond3: entered promiscuous mode [ 257.100537][T11495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.143890][T11497] bond3: (slave bridge5): making interface the new active one [ 257.151739][T11497] bridge5: entered promiscuous mode [ 257.158534][T11497] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 257.525242][T11473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.674410][T11523] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 257.695648][T11523] wlan1: mtu less than device minimum [ 257.704845][T11523] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 259.692585][T11475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.917922][T11526] vlan2: entered promiscuous mode [ 259.930777][T11526] bridge0: entered promiscuous mode [ 260.197982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 260.206340][ C0] lec:lec_tx_timeout: lec0 [ 260.211273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 260.227028][T11548] ip6gre1: entered promiscuous mode [ 260.235968][T11548] ip6gre1: entered allmulticast mode [ 260.282911][ T6694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.295864][T11555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.303536][ T6694] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.309472][T11554] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 260.314071][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.467312][T11554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.481279][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.513040][T11558] vlan4: entered promiscuous mode [ 260.519086][T11558] bond4: entered promiscuous mode [ 260.527245][T11558] vlan4: entered allmulticast mode [ 260.533219][T11558] bond4: entered allmulticast mode [ 260.847278][T11573] syzkaller0: entered promiscuous mode [ 260.874425][T11573] syzkaller0: entered allmulticast mode [ 260.890372][T11576] sctp: [Deprecated]: syz.2.1498 (pid 11576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.890372][T11576] Use struct sctp_sack_info instead [ 260.904224][T11573] netlink: 'syz.4.1497': attribute type 3 has an invalid length. [ 260.920142][T11573] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 260.927830][T11577] sctp: [Deprecated]: syz.2.1498 (pid 11577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.927830][T11577] Use struct sctp_sack_info instead [ 260.929099][T11573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1497'. [ 260.966525][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 261.111752][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.336353][T11597] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 261.466221][T11597] bond5: entered promiscuous mode [ 261.490229][T11597] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.543154][T11610] ipvlan0: entered promiscuous mode [ 261.624705][T11602] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 261.634730][T11597] bond5: (slave bridge6): making interface the new active one [ 261.656997][T11597] bridge6: entered promiscuous mode [ 261.680886][T11597] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 261.875347][T11620] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 261.940356][T11622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.198300][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 262.526354][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.578400][T11658] syzkaller0: entered promiscuous mode [ 262.584607][T11658] syzkaller0: entered allmulticast mode [ 262.595015][T11656] tipc: Started in network mode [ 262.600959][T11656] tipc: Node identity 8678b89cec63, cluster identity 4711 [ 262.613951][T11656] tipc: Enabled bearer , priority 0 [ 262.630923][T11665] Cannot find map_set index 65533 as target [ 262.678716][T11662] syzkaller0: entered promiscuous mode [ 262.685200][T11662] syzkaller0: entered allmulticast mode [ 262.692527][T11662] tipc: Resetting bearer [ 263.539248][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 263.566262][T11683] block nbd4: Unsupported socket: should be TCP or UNIX. [ 264.787990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.906312][T11654] tipc: Resetting bearer [ 265.041938][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 265.224314][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 265.232431][ C0] lec:lec_tx_timeout: lec0 [ 265.237181][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 265.350227][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 266.899890][T11654] tipc: Disabling bearer [ 266.911119][T11678] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 266.914890][ T5900] tipc: Node number set to 1780201628 [ 267.156045][T11708] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 267.181198][T11704] openvswitch: netlink: IP tunnel dst address not specified [ 267.321347][T11707] netlink: 352 bytes leftover after parsing attributes in process `syz.2.1532'. [ 267.356665][T11707] openvswitch: netlink: Message has 186 unknown bytes. [ 267.369822][T11708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.403907][T11712] bond6: (slave geneve4): making interface the new active one [ 267.413854][T11712] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 267.496813][ T6694] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.533543][ T6694] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.567388][ T6694] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.623268][ T6694] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 267.776042][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1539'. [ 267.786351][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1539'. [ 267.968260][T11753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1542'. [ 267.986183][T11754] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 267.992463][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 268.053752][T11753] bond6: Invalid ad_actor_system MAC address. [ 268.073974][T11753] bond6: option ad_actor_system: invalid value (1) [ 268.093109][T11753] bond6 (unregistering): Released all slaves [ 268.273080][T11757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.280185][T11772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.481264][T11785] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 268.554361][T11790] netlink: 'syz.4.1553': attribute type 1 has an invalid length. [ 268.581159][T11790] bond2: entered promiscuous mode [ 268.586439][T11790] bond2: entered allmulticast mode [ 268.592399][T11790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.609108][T11790] macvlan2: entered promiscuous mode [ 268.614729][T11790] macvlan2: entered allmulticast mode [ 268.622585][T11790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.015296][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 269.564411][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 269.657364][T11838] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 269.682527][T11838] xt_hashlimit: size too large, truncated to 1048576 [ 269.729261][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1564'. [ 269.924991][T11849] netlink: 'syz.0.1565': attribute type 11 has an invalid length. [ 269.933718][T11849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1565'. [ 270.068324][T11856] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1567'. [ 270.129509][T11856] netlink: 'syz.0.1567': attribute type 1 has an invalid length. [ 270.248058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 270.256553][ C0] lec:lec_tx_timeout: lec0 [ 270.261227][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 270.989614][T11759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.277901][T11888] netlink: 'syz.4.1575': attribute type 12 has an invalid length. [ 271.286995][T11873] sit0: entered promiscuous mode [ 271.305545][T11873] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 271.339425][T11883] tipc: Enabling of bearer rejected, failed to enable media [ 271.622223][T11900] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 271.641240][T11902] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 271.665413][T11902] nbd: error processing sock list [ 271.782403][T11900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.835141][T11908] bond6: (slave veth0_to_bond): making interface the new active one [ 271.871148][T11908] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 271.876440][T11918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.942684][T11921] netlink: 'syz.0.1578': attribute type 2 has an invalid length. [ 272.005279][T11912] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.024990][T11912] bond6: (slave bond7): Enslaving as an active interface with a down link [ 272.212596][T11930] netlink: 'syz.2.1585': attribute type 1 has an invalid length. [ 272.219997][T11934] netlink: 'syz.3.1587': attribute type 7 has an invalid length. [ 272.247036][T11934] erspan0: entered promiscuous mode [ 272.255221][T11934] gretap0: entered promiscuous mode [ 272.475721][T11952] __nla_validate_parse: 4 callbacks suppressed [ 272.475752][T11952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 272.519573][T11958] xt_nat: multiple ranges no longer supported [ 272.545415][T11958] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1594'. [ 273.907909][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.225860][T11936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.267985][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 275.276110][ C0] lec:lec_tx_timeout: lec0 [ 275.281368][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 275.510700][T11977] xt_l2tp: invalid flags combination: 8 [ 275.751479][T11990] netlink: 'syz.4.1602': attribute type 29 has an invalid length. [ 275.763565][T11990] netlink: 'syz.4.1602': attribute type 29 has an invalid length. [ 276.223076][T12013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 276.507438][T12039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1617'. [ 276.542935][T12043] lo: entered promiscuous mode [ 276.548915][T12043] tunl0: entered promiscuous mode [ 276.557153][T12043] gre0: entered promiscuous mode [ 276.582619][T12045] netlink: 'syz.2.1616': attribute type 32 has an invalid length. [ 276.591134][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 276.651110][T12043] gretap0: entered promiscuous mode [ 276.662726][T12043] erspan0: entered promiscuous mode [ 276.669993][T12043] erspan0: left allmulticast mode [ 276.675793][T12043] ip_vti0: entered promiscuous mode [ 276.707864][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 276.833555][T12045] bond6: Setting coupled_control to off (0) [ 276.934492][T12062] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 276.944897][T12062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1622'. [ 277.520778][T12086] syzkaller0: entered promiscuous mode [ 277.527313][T12086] syzkaller0: entered allmulticast mode [ 277.553837][T12086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1629'. [ 277.777262][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 278.365495][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 278.396966][T12136] netlink: 'syz.2.1644': attribute type 10 has an invalid length. [ 278.420171][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 279.011496][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 279.028743][T12161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'. [ 279.070703][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 279.107433][T12161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'. [ 279.163245][T12175] syzkaller0: entered promiscuous mode [ 279.175860][T12168] IPVS: set_ctl: invalid protocol: 0 0.32.0.0:14336 [ 279.198116][T12175] syzkaller0: entered allmulticast mode [ 279.205154][T12167] IPVS: set_ctl: invalid protocol: 16 4.0.0.0:0 [ 279.230029][T12178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.248773][T12178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.276580][T12175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.949572][T12209] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 279.969370][T12218] netlink: 'syz.0.1674': attribute type 21 has an invalid length. [ 279.984870][T12218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1674'. [ 280.006968][T12218] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1674'. [ 280.288377][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 280.296619][ C0] lec:lec_tx_timeout: lec0 [ 280.303390][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 280.948754][T12259] ip6erspan0: entered promiscuous mode [ 281.365720][T12280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.632202][T12293] netlink: 'syz.4.1694': attribute type 1 has an invalid length. [ 281.926175][T12300] bridge0: port 1(vlan2) entered blocking state [ 281.956055][T12300] bridge0: port 1(vlan2) entered disabled state [ 281.974073][T12305] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 281.998178][T12300] vlan2: entered allmulticast mode [ 282.007912][T12300] geneve0: entered allmulticast mode [ 282.020704][T12300] vlan2: entered promiscuous mode [ 282.037802][T12300] geneve0: entered promiscuous mode [ 282.104590][T12305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.408028][T12314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.418563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.636822][T12328] __nla_validate_parse: 9 callbacks suppressed [ 282.636845][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 282.692415][T12330] xt_connbytes: Forcing CT accounting to be enabled [ 282.766278][T12336] tipc: Enabling of bearer rejected, failed to enable media [ 283.014860][T12348] xt_l2tp: missing protocol rule (udp|l2tpip) [ 283.364349][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 283.523230][T12374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 283.755222][T12387] bridge0: port 3(syz_tun) entered blocking state [ 283.774385][T12387] bridge0: port 3(syz_tun) entered disabled state [ 283.790538][T12387] syz_tun: entered allmulticast mode [ 283.809791][T12387] syz_tun: entered promiscuous mode [ 283.828772][T12387] bridge0: port 3(syz_tun) entered blocking state [ 283.836783][T12387] bridge0: port 3(syz_tun) entered forwarding state [ 284.074444][T12400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.087317][T12400] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1719'. [ 284.168316][T12375] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 284.197503][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 284.434229][T12413] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 284.471947][T12413] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1723'. [ 284.510444][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 284.550491][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 284.591003][T12415] macvlan0: entered allmulticast mode [ 284.612808][T12415] hsr0: entered allmulticast mode [ 284.620029][T12415] hsr_slave_0: entered allmulticast mode [ 284.637258][T12415] hsr_slave_1: entered allmulticast mode [ 284.776768][T12430] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 284.824727][T12436] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 284.860954][T12427] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 284.922882][T12436] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.932056][T12427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.943411][T12427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 284.973451][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 285.313780][T12469] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1740'. [ 285.323143][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 285.323172][ C0] lec:lec_tx_timeout: lec0 [ 285.331541][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.434409][T12470] syzkaller0: entered promiscuous mode [ 285.440554][T12470] syzkaller0: entered allmulticast mode [ 287.633226][T12468] syzkaller0: entered promiscuous mode [ 287.639176][T12468] syzkaller0: entered allmulticast mode [ 290.337968][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 290.346179][ C0] lec:lec_tx_timeout: lec0 [ 290.351447][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.353940][T12525] netlink: 'syz.3.1755': attribute type 58 has an invalid length. [ 290.365971][T12525] __nla_validate_parse: 4 callbacks suppressed [ 290.365989][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1755'. [ 290.410457][T12526] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 290.615491][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 290.664181][T12532] team0 (unregistering): Port device team_slave_0 removed [ 290.681493][T12532] team0 (unregistering): Port device team_slave_1 removed [ 290.748082][T12542] IPv6: sit2: Disabled Multicast RS [ 290.759467][T12542] sit2: entered allmulticast mode [ 290.800480][T12531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.840975][T12548] netlink: 'syz.0.1762': attribute type 30 has an invalid length. [ 290.969141][T12554] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1763'. [ 291.103879][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.113920][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.126427][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.135221][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.148781][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.177185][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 291.187992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.196476][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.205531][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.241888][T12566] xfrm1: entered promiscuous mode [ 291.248347][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.262632][T12566] xfrm1: entered allmulticast mode [ 291.282094][T12572] netlink: 'syz.0.1770': attribute type 2 has an invalid length. [ 291.291248][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.291501][T12569] sctp: [Deprecated]: syz.2.1769 (pid 12569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.291501][T12569] Use struct sctp_sack_info instead [ 291.300744][T12563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.625824][T12589] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1774'. [ 291.634112][T12592] syzkaller0: entered promiscuous mode [ 291.642123][T12592] syzkaller0: entered allmulticast mode [ 291.747178][T12594] netlink: 'syz.2.1777': attribute type 1 has an invalid length. [ 291.896110][T12602] veth5: entered allmulticast mode [ 291.930128][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 292.021180][T12609] tipc: Started in network mode [ 292.052370][T12609] tipc: Node identity , cluster identity 4711 [ 292.084883][T12609] tipc: Failed to set node id, please configure manually [ 292.111474][T12609] tipc: Enabling of bearer rejected, failed to enable media [ 292.722062][T12648] x_tables: duplicate underflow at hook 3 [ 292.761814][T12650] syzkaller0: entered promiscuous mode [ 292.767639][T12650] syzkaller0: entered allmulticast mode [ 293.415279][T12693] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 293.502227][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1805'. [ 294.285152][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1816'. [ 294.341064][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 294.369323][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 294.460634][T12759] syzkaller0: entered promiscuous mode [ 294.466369][T12759] syzkaller0: entered allmulticast mode [ 294.890981][T12783] syzkaller0: entered promiscuous mode [ 294.924968][T12783] syzkaller0: entered allmulticast mode [ 294.947447][T12798] --map-set only usable from mangle table [ 295.272565][T12820] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 295.381326][T12823] __nla_validate_parse: 13 callbacks suppressed [ 295.381348][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.459977][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.529172][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.552459][T12840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1843'. [ 295.563723][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.583983][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.602543][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.621940][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.641879][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.688625][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 295.738203][T12849] netlink: 'syz.2.1846': attribute type 11 has an invalid length. [ 295.756491][T12847] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 295.796090][T12847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.872419][T12853] netlink: 'syz.3.1847': attribute type 21 has an invalid length. [ 296.137715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 296.138105][ T137] net_ratelimit: 39 callbacks suppressed [ 296.138122][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.146007][ C0] lec:lec_tx_timeout: lec0 [ 296.146321][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.240545][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.253552][T12875] xt_time: unknown flags 0xf4 [ 296.315521][T12874] syzkaller0: entered promiscuous mode [ 296.322885][T12874] syzkaller0: entered allmulticast mode [ 296.575013][T12897] netlink: 'syz.0.1857': attribute type 11 has an invalid length. [ 296.628055][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.792890][T12904] s5ÿÿø: renamed from vlan1 [ 297.063872][T12927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.106916][T12925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.286442][ T30] audit: type=1800 audit(1776605438.147:5): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1869" name="memory.events" dev="tmpfs" ino=1966 res=0 errno=0 [ 297.371464][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.398964][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.491798][T12954] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.579544][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.589662][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.110583][T12996] bridge0: port 3(syz_tun) entered disabled state [ 299.118863][T12996] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.126100][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.183793][T12936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.382250][T13020] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 300.532198][T13025] __nla_validate_parse: 47 callbacks suppressed [ 300.532220][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 300.537773][T13035] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 300.546983][T13033] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 300.574192][T13035] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 300.714079][T13042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1897'. [ 300.735081][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 300.745606][T13042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1897'. [ 300.789045][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 300.830579][T13042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1897'. [ 300.965700][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 301.177781][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 301.186151][ C0] lec:lec_tx_timeout: lec0 [ 301.191153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.506012][T13081] netlink: 126 bytes leftover after parsing attributes in process `syz.0.1907'. [ 301.510020][T13083] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1908'. [ 301.589966][T13088] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1910'. [ 301.694979][T13092] netlink: 'syz.0.1912': attribute type 2 has an invalid length. [ 301.706238][T13092] netlink: 'syz.0.1912': attribute type 3 has an invalid length. [ 301.722249][T13094] netlink: 'syz.0.1912': attribute type 2 has an invalid length. [ 301.735118][T13094] netlink: 'syz.0.1912': attribute type 3 has an invalid length. [ 301.821489][ T5901] net_ratelimit: 14 callbacks suppressed [ 301.821511][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.912191][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.923866][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.960538][T13108] vlan0: entered allmulticast mode [ 302.290313][T13116] syzkaller0: entered promiscuous mode [ 302.296837][T13116] syzkaller0: entered allmulticast mode [ 302.581762][T13133] netlink: 'syz.1.1923': attribute type 83 has an invalid length. [ 302.791743][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.861095][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.051116][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.062525][ T6686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.761354][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.900391][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.208075][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.217035][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.404397][T13161] netlink: 'syz.2.1931': attribute type 12 has an invalid length. [ 305.443761][T13161] netlink: 'syz.2.1931': attribute type 29 has an invalid length. [ 305.626364][T13179] __nla_validate_parse: 7 callbacks suppressed [ 305.626388][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1937'. [ 305.650173][T13179] netlink: 'syz.3.1937': attribute type 7 has an invalid length. [ 305.702230][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1937'. [ 305.730766][T13182] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 305.738994][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1937'. [ 305.782464][T13182] bond8 (unregistering): Released all slaves [ 306.053425][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 306.077196][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 306.197956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.206116][ C0] lec:lec_tx_timeout: lec0 [ 306.211060][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.346062][T13228] IPVS: set_ctl: invalid protocol: 25486 0.0.0.0:20001 [ 306.674135][T13248] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 306.761283][T13248] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.967617][T13260] IPv6: sit1: Disabled Multicast RS [ 307.019680][ T5901] net_ratelimit: 10 callbacks suppressed [ 307.019702][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.166359][T13271] netlink: 'syz.2.1963': attribute type 21 has an invalid length. [ 307.179662][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.189790][T13271] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.202498][T13271] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 307.212746][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 307.223087][T13268] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1963'. [ 307.241970][T13275] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1966'. [ 307.336500][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 307.588024][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.596572][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.055886][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 308.067124][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.718497][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.727130][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.859627][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.101206][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.193377][T13211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.386468][T13321] netlink: 'syz.0.1979': attribute type 29 has an invalid length. [ 309.411803][T13321] netlink: 'syz.0.1979': attribute type 29 has an invalid length. [ 309.431027][T13321] netlink: 'syz.0.1979': attribute type 32 has an invalid length. [ 309.631382][T13338] sctp: [Deprecated]: syz.1.1983 (pid 13338) Use of int in max_burst socket option deprecated. [ 309.631382][T13338] Use struct sctp_assoc_value instead [ 309.694797][T13348] sctp: [Deprecated]: syz.2.1984 (pid 13348) Use of int in max_burst socket option. [ 309.694797][T13348] Use struct sctp_assoc_value instead [ 309.838279][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.945774][T13368] netlink: 'syz.3.1989': attribute type 10 has an invalid length. [ 309.968114][T13368] bridge_slave_1: left allmulticast mode [ 309.973802][T13368] bridge_slave_1: left promiscuous mode [ 309.987902][T13368] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.035269][T13368] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 311.217953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.226826][ C0] lec:lec_tx_timeout: lec0 [ 311.231569][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 312.068262][ T137] net_ratelimit: 6 callbacks suppressed [ 312.068286][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.083571][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.220462][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.300214][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.310911][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.321559][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.360266][T13321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.443093][T13378] bond0: (slave gre0): refused to change device type [ 312.613994][T13384] netlink: 'syz.2.1995': attribute type 29 has an invalid length. [ 312.619927][T13391] netlink: 'syz.0.1997': attribute type 10 has an invalid length. [ 312.633809][T13384] netlink: 'syz.2.1995': attribute type 29 has an invalid length. [ 312.640948][T13391] __nla_validate_parse: 4 callbacks suppressed [ 312.640966][T13391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1997'. [ 312.668982][T13384] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1995'. [ 312.679762][T13387] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 312.701933][T13387] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1994'. [ 312.793715][T13393] xt_connbytes: Forcing CT accounting to be enabled [ 313.064079][T13414] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 313.064079][T13414] Please contact the netfilter-devel mailing list or update your nftables rules. [ 313.209368][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.233052][ T1037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.261224][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.283298][T13421] bond8: option min_links: invalid value (18446744073709551614) [ 313.321525][T13421] bond8: option min_links: allowed values 0 - 2147483647 [ 313.369716][T13421] bond8 (unregistering): Released all slaves [ 313.704808][T13438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.712249][T13438] IPv6: NLM_F_CREATE should be set when creating new route [ 313.750172][T13437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.971838][T13431] FAULT_INJECTION: forcing a failure. [ 313.971838][T13431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 314.025322][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.3.2007 Not tainted syzkaller #0 PREEMPT(full) [ 314.025352][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.025364][T13431] Call Trace: [ 314.025372][T13431] [ 314.025380][T13431] dump_stack_lvl+0xe8/0x150 [ 314.025415][T13431] should_fail_ex+0x412/0x560 [ 314.025448][T13431] _copy_from_user+0x2d/0xb0 [ 314.025471][T13431] ___sys_sendmsg+0x1c6/0x360 [ 314.025501][T13431] ? __lock_acquire+0x6b5/0x2cf0 [ 314.025532][T13431] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.025586][T13431] ? __fget_files+0x2a/0x420 [ 314.025605][T13431] ? __fget_files+0x3a0/0x420 [ 314.025637][T13431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.025670][T13431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.025710][T13431] ? __pfx_ksys_write+0x10/0x10 [ 314.025750][T13431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.025778][T13431] do_syscall_64+0x15f/0xf80 [ 314.025802][T13431] ? trace_irq_disable+0x3b/0x140 [ 314.025824][T13431] ? clear_bhb_loop+0x40/0x90 [ 314.025849][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.025867][T13431] RIP: 0033:0x7f6a4d79c819 [ 314.025887][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.025905][T13431] RSP: 002b:00007f6a4e634028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.025930][T13431] RAX: ffffffffffffffda RBX: 00007f6a4da16090 RCX: 00007f6a4d79c819 [ 314.025945][T13431] RDX: 000000002000c880 RSI: 00002000000000c0 RDI: 0000000000000008 [ 314.025958][T13431] RBP: 00007f6a4e634090 R08: 0000000000000000 R09: 0000000000000000 [ 314.025970][T13431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.025990][T13431] R13: 00007f6a4da16128 R14: 00007f6a4da16090 R15: 00007ffcd98a9958 [ 314.026022][T13431] [ 314.232679][T13446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 314.276598][T13420] ------------[ cut here ]------------ [ 314.294338][T13420] ODEBUG: init active (active state 0) object: ffff88801f280f38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 [ 314.308053][T13420] WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0, CPU#1: syz.4.2006/13420 [ 314.318684][T13420] Modules linked in: [ 314.322919][T13420] CPU: 1 UID: 0 PID: 13420 Comm: syz.4.2006 Not tainted syzkaller #0 PREEMPT(full) [ 314.333138][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.343730][T13420] RIP: 0010:__debug_object_init+0x30f/0x4e0 [ 314.350894][T13420] Code: 3c 38 00 74 08 4c 89 ef e8 5e 73 77 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 f7 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 ae 90 78 0b 83 fd 03 75 3f 4c 8b [ 314.371033][T13420] RSP: 0018:ffffc9000d83f8f8 EFLAGS: 00010246 [ 314.377151][T13420] RAX: 1ffffffff179e854 RBX: ffff88801f280f38 RCX: 0000000000000000 [ 314.385767][T13420] RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f7c0 RDI: ffffffff903cdfd0 [ 314.394105][T13420] RBP: 0000000000000003 R08: ffff88801f280f38 R09: ffffffff8bcf5600 [ 314.402930][T13420] R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffffffff8c27fbc0 [ 314.411366][T13420] R13: ffffffff8bcf42a0 R14: ffffffff903cdfd0 R15: dffffc0000000000 [ 314.419535][T13420] FS: 00007fa91bfdf6c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 314.428954][T13420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.435576][T13420] CR2: 00007ffedf261e10 CR3: 00000000326c8000 CR4: 00000000003526f0 [ 314.443766][T13420] Call Trace: [ 314.447231][T13420] [ 314.450247][T13420] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 314.456117][T13420] ? __pfx_lec_arp_check_expire+0x10/0x10 [ 314.462613][T13420] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 314.468810][T13420] timer_init_key+0x41/0x2c0 [ 314.473466][T13420] lane_ioctl+0x1579/0x2220 [ 314.478281][T13420] ? __pfx_clip_ioctl+0x10/0x10 [ 314.483259][T13420] ? br2684_ioctl+0x110/0x6b0 [ 314.488641][T13420] ? __pfx_lane_ioctl+0x10/0x10 [ 314.493687][T13420] ? atmtcp_ioctl+0x1ce/0xdf0 [ 314.498673][T13420] do_vcc_ioctl+0x36d/0x9d0 [ 314.503331][T13420] svc_ioctl+0x1f6/0x7d0 [ 314.507719][T13420] ? kasan_quarantine_put+0xbb/0x1f0 [ 314.513093][T13420] ? __pfx_svc_ioctl+0x10/0x10 [ 314.518104][T13420] ? tomoyo_path_number_perm+0x219/0x630 [ 314.523840][T13420] ? tomoyo_path_number_perm+0x219/0x630 [ 314.528544][T13427] ------------[ cut here ]------------ [ 314.529746][T13420] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 314.535237][T13427] !work_pending(work) [ 314.535247][T13427] WARNING: kernel/workqueue.c:791 at __cancel_work+0x1c1/0x230, CPU#0: syz.3.2007/13427 [ 314.540447][T13420] sock_do_ioctl+0x101/0x320 [ 314.544331][T13427] Modules linked in: [ 314.554404][T13420] ? __pfx_sock_do_ioctl+0x10/0x10 [ 314.558991][T13427] CPU: 0 UID: 0 PID: 13427 Comm: syz.3.2007 Not tainted syzkaller #0 PREEMPT(full) [ 314.559018][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.559032][T13427] RIP: 0010:__cancel_work+0x1c1/0x230 [ 314.563034][T13420] ? do_futex+0x333/0x420 [ 314.568228][T13427] Code: 02 00 00 75 2d e8 3f d9 37 00 48 85 db 75 32 e8 35 d9 37 00 eb 31 e8 2e d9 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 20 d9 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 12 d9 37 00 e8 4d 80 25 0a 48 85 db 74 [ 314.568249][T13427] RSP: 0018:ffffc90006da7bb0 EFLAGS: 00010093 [ 314.568272][T13427] RAX: ffffffff818d84d0 RBX: 001fffffffc00000 RCX: ffff88802d7a0000 [ 314.568289][T13427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.577914][T13420] sock_ioctl+0x5c6/0x7f0 [ 314.587795][T13427] RBP: 0000000000000000 R08: ffff88801f280ef7 R09: 1ffff11003e501de [ 314.587816][T13427] R10: dffffc0000000000 R11: ffffed1003e501df R12: dffffc0000000000 [ 314.587833][T13427] R13: 1ffff11003e501de R14: ffff88801f280ef0 R15: 0000000000000040 [ 314.587848][T13427] FS: 0000555564d7d500(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 314.587866][T13427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.587881][T13427] CR2: 0000001b319f0000 CR3: 000000004490c000 CR4: 00000000003526f0 [ 314.587901][T13427] Call Trace: [ 314.587910][T13427] [ 314.587927][T13427] __cancel_work_sync+0x1f/0x110 [ 314.587961][T13427] lec_atm_close+0x171/0x9e0 [ 314.587991][T13427] ? __local_bh_enable_ip+0xd0/0x130 [ 314.588020][T13427] ? __pfx_lec_atm_close+0x10/0x10 [ 314.593421][T13420] ? __pfx_sock_ioctl+0x10/0x10 [ 314.597945][T13427] vcc_release+0x10f/0x580 [ 314.597988][T13427] svc_release+0x6c/0xd0 [ 314.598015][T13427] sock_close+0xc3/0x240 [ 314.598039][T13427] ? __pfx_sock_close+0x10/0x10 [ 314.598062][T13427] __fput+0x44f/0xa60 [ 314.598100][T13427] task_work_run+0x1d9/0x270 [ 314.618309][T13420] ? __fget_files+0x2a/0x420 [ 314.624263][T13427] ? __pfx_task_work_run+0x10/0x10 [ 314.632289][T13420] ? __fget_files+0x3a0/0x420 [ 314.640385][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.640413][T13427] exit_to_user_mode_loop+0xed/0x480 [ 314.640440][T13427] ? rcu_is_watching+0x15/0xb0 [ 314.640470][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.644798][T13420] ? __fget_files+0x2a/0x420 [ 314.652994][T13427] do_syscall_64+0x33e/0xf80 [ 314.653024][T13427] ? trace_irq_disable+0x3b/0x140 [ 314.653047][T13427] ? clear_bhb_loop+0x40/0x90 [ 314.653072][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.653093][T13427] RIP: 0033:0x7f6a4d79c819 [ 314.653115][T13427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.653133][T13427] RSP: 002b:00007ffcd98a9ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 314.653156][T13427] RAX: 0000000000000000 RBX: 00007f6a4da17da0 RCX: 00007f6a4d79c819 [ 314.653171][T13427] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 314.653183][T13427] RBP: 00007f6a4da17da0 R08: 0000000000000006 R09: 0000000000000000 [ 314.653196][T13427] R10: 000000000003fd60 R11: 0000000000000246 R12: 000000000004cbaf [ 314.653209][T13427] R13: 00007f6a4da1609c R14: 000000000004caa0 R15: 00007ffcd98a9bc0 [ 314.653242][T13427] [ 314.653261][T13427] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.653279][T13427] CPU: 0 UID: 0 PID: 13427 Comm: syz.3.2007 Not tainted syzkaller #0 PREEMPT(full) [ 314.653302][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.653314][T13427] Call Trace: [ 314.653323][T13427] [ 314.653332][T13427] vpanic+0x56c/0xa60 [ 314.653359][T13427] ? __pfx__printk+0x10/0x10 [ 314.653378][T13427] ? __pfx_vpanic+0x10/0x10 [ 314.653401][T13427] ? is_bpf_text_address+0x292/0x2b0 [ 314.653424][T13427] ? is_bpf_text_address+0x26/0x2b0 [ 314.653454][T13427] panic+0xc5/0xd0 [ 314.653498][T13427] ? __pfx_panic+0x10/0x10 [ 314.653541][T13427] __warn+0x315/0x4c0 [ 314.653564][T13427] ? __cancel_work+0x1c1/0x230 [ 314.653594][T13427] ? __cancel_work+0x1c1/0x230 [ 314.653622][T13427] __report_bug+0x29a/0x540 [ 314.653651][T13427] ? __cancel_work+0x1c1/0x230 [ 314.653679][T13427] ? __pfx___report_bug+0x10/0x10 [ 314.653699][T13427] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.653737][T13427] ? __cancel_work+0x1c1/0x230 [ 314.653764][T13427] report_bug+0x16a/0x220 [ 314.653786][T13427] ? __cancel_work+0x1c1/0x230 [ 314.653811][T13427] ? __cancel_work+0x1c3/0x230 [ 314.653837][T13427] handle_bug+0x9c/0x200 [ 314.653864][T13427] exc_invalid_op+0x1a/0x50 [ 314.653889][T13427] asm_exc_invalid_op+0x1a/0x20 [ 314.653908][T13427] RIP: 0010:__cancel_work+0x1c1/0x230 [ 314.653936][T13427] Code: 02 00 00 75 2d e8 3f d9 37 00 48 85 db 75 32 e8 35 d9 37 00 eb 31 e8 2e d9 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 20 d9 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 12 d9 37 00 e8 4d 80 25 0a 48 85 db 74 [ 314.653952][T13427] RSP: 0018:ffffc90006da7bb0 EFLAGS: 00010093 [ 314.653969][T13427] RAX: ffffffff818d84d0 RBX: 001fffffffc00000 RCX: ffff88802d7a0000 [ 314.653984][T13427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.653996][T13427] RBP: 0000000000000000 R08: ffff88801f280ef7 R09: 1ffff11003e501de [ 314.654009][T13427] R10: dffffc0000000000 R11: ffffed1003e501df R12: dffffc0000000000 [ 314.654023][T13427] R13: 1ffff11003e501de R14: ffff88801f280ef0 R15: 0000000000000040 [ 314.654045][T13427] ? __cancel_work+0x1c0/0x230 [ 314.654086][T13427] __cancel_work_sync+0x1f/0x110 [ 314.654107][T13427] lec_atm_close+0x171/0x9e0 [ 314.654133][T13427] ? __local_bh_enable_ip+0xd0/0x130 [ 314.654160][T13427] ? __pfx_lec_atm_close+0x10/0x10 [ 314.654184][T13427] vcc_release+0x10f/0x580 [ 314.654215][T13427] svc_release+0x6c/0xd0 [ 314.654239][T13427] sock_close+0xc3/0x240 [ 314.654268][T13427] ? __pfx_sock_close+0x10/0x10 [ 314.654290][T13427] __fput+0x44f/0xa60 [ 314.654324][T13427] task_work_run+0x1d9/0x270 [ 314.654349][T13427] ? __pfx_task_work_run+0x10/0x10 [ 314.654377][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.654398][T13427] exit_to_user_mode_loop+0xed/0x480 [ 314.654420][T13427] ? rcu_is_watching+0x15/0xb0 [ 314.654447][T13427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.654467][T13427] do_syscall_64+0x33e/0xf80 [ 314.654489][T13427] ? trace_irq_disable+0x3b/0x140 [ 314.654508][T13427] ? clear_bhb_loop+0x40/0x90 [ 314.654532][T13427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.654551][T13427] RIP: 0033:0x7f6a4d79c819 [ 314.654567][T13427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.654583][T13427] RSP: 002b:00007ffcd98a9ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 314.654602][T13427] RAX: 0000000000000000 RBX: 00007f6a4da17da0 RCX: 00007f6a4d79c819 [ 314.654615][T13427] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 314.654627][T13427] RBP: 00007f6a4da17da0 R08: 0000000000000006 R09: 0000000000000000 [ 314.654639][T13427] R10: 000000000003fd60 R11: 0000000000000246 R12: 000000000004cbaf [ 314.654651][T13427] R13: 00007f6a4da1609c R14: 000000000004caa0 R15: 00007ffcd98a9bc0 [ 314.654683][T13427] [ 314.661487][T13427] Kernel Offset: disabled