last executing test programs: 14.343756046s ago: executing program 3 (id=2074): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1004, 0x3a, 0x1002, 0x3a, 0x0, 0xfffffffe}, 0x1c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000440)={@val={0xa, 0x8917}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, 0x0, 0x4000080) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2908004500002800000000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200009078000085596dcc61e3f24d33b487f0c2d98f47c7a0e1e4872ac5549e6f8fea9295"], 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x71, 0x1, 0x1, 0x4c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 12.803171892s ago: executing program 3 (id=2083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000061120c0000000000950000000000000035c57c41822d22a28d1009206e859eb47f2722f38c37e20635d055a152f0e19842ef603c1a57f88f8221585c947f1960779aea3da55291c3cbbe12712efe760025bea7ff1f93de140998c1f79f03738055d0ce25ea4d579aebc624b1eec633e742ea25a9a07b1fe5618f49636b732dab6d37c22b58575b7a5416253be0fa9a53fd0280b2a067f9b7ea7f4db96f076bdbd4be6924977256de2d174ce15ff21d61e21aafdd9cacd06ca648"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0xfffffffffffffe44) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010002000000fcdbdf258200000008000300", @ANYRES32=0x0, @ANYBLOB="a6ddf42f4d7f009900437b49513b000000", @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000980)=""/33, 0x21}], 0x2}, 0x1f20) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="60892b81eab0000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000380008803400008006000500010000000400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x20000010) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) close(r9) (async) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r8, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000780)="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", 0x121}, {&(0x7f00000008c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de28e20f47aec0449a2829b655b6e3eb8bffb002868e9a161efdcbecd94cb68f62857bc4d4b1ab0700edeb73f7d06c0084c12ffa26cd0a1a5093b42c03e5204178d90e2420b6a5595451573e1864b0438316b1df486896e13d90285c3d059636d72fae910a60e6f0b26abbf0ce5be3adcc446824d3c916be553100"/172, 0xac}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x4}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000d00)="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", 0x153}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 6.327820711s ago: executing program 4 (id=2137): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000a000000000200000000000000bbc73ca8f4ab0a9f2c", @ANYRES32=0x0, @ANYBLOB="04010000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x54}}, 0x0) 5.973428701s ago: executing program 4 (id=2140): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xf}, {0xfff2, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 5.702006674s ago: executing program 4 (id=2144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x400c840}, 0x40) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f00000001c0), 0x2, 0x200480d4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x40000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = epoll_create1(0x80000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r5 = socket$igmp6(0xa, 0x3, 0x2) write(r3, &(0x7f0000000000)="05000000010001", 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010000", 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRESDEC=r7, @ANYRESDEC=r5], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x28000) 5.202710833s ago: executing program 1 (id=2149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb72}, {{&(0x7f0000000080)=@nfc, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000b80)=""/107}, 0x6}, {{&(0x7f0000000580)=@l2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)}], 0x0, &(0x7f0000000680)=""/105}, 0xfffffffe}, {{&(0x7f0000000700)=@in={0x2, 0x0, @initdev}, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c00)=""/179}, {&(0x7f0000000840)=""/227}, {&(0x7f0000000940)=""/206}]}, 0x4}], 0x28, 0x40000020, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xb72}, {{&(0x7f0000000080)=@nfc, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000b80)=""/107}, 0x6}, {{&(0x7f0000000580)=@l2, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)}], 0x0, &(0x7f0000000680)=""/105}, 0xfffffffe}, {{&(0x7f0000000700)=@in={0x2, 0x0, @initdev}, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000c00)=""/179}, {&(0x7f0000000840)=""/227}, {&(0x7f0000000940)=""/206}]}, 0x4}], 0x28, 0x40000020, 0x0) (async) 5.087691785s ago: executing program 1 (id=2150): unshare(0x26020480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000280)=ANY=[], 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind(r10, &(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000240)="0ac8458e597cbc5769cc47b9972a3b2807b91993c3ff39aaa41ff2a323e5d30abb40ca34db51c24a298636797ae4804496422fe1a9033005095a36a3fc750a0a26ee661d240ddea5ce9597f30d3198d75abc1ffde17adb9b6b666f2b849408ecc130dea54db9987a99e7ee2061dd05f7d988a281db3c507fb6fb64c306374587b737815063b5087a3b402487f21371f0b8afc1c666eec5a42baa04127306386a9976b02d830be453d7f163cb9e7b79a13e8a7676dad35b91b4151c6338f2ac8bc7e5254faef47d431a3f45", &(0x7f0000000040)=""/63, &(0x7f0000000100)="808f51e02570b4200661b26eb5187d53c03fc3a3080b90c65fb85cc5211a123f0de8ef3d299321af1d2e1375703db678649e58140e9a35a42ed7ac1ca4a258175a98c9261834327edfe16f9cb9872cd0d9ee628920343cf1603654f0ae60782bf058f8a971c87c45f522c9c659141c057b01d8e118aa82121db2d97391987d18b1313ad764647091dd0257ef540cca3b0dd562", &(0x7f0000000400)="ebb20cb3ce0a30fbdb18c86a724393af2991023575a53742b4c2175261b95105a3f41ef29da47e99455b5583f0af24798a63b2e608ab1431253fc0bf5717f6ee7e8841621ca6e14a0119366c891e0ece8785d60c283cfb57e0dee46ba912a98fc091f346bb1a", 0x0, r5, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 4.965082737s ago: executing program 4 (id=2151): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x7, 0x4) (async) ioctl$SIOCSIFHWADDR(r2, 0xff01, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000011000100000000000000000007000000ef36531347ba8ca2093ec8ad8f4c2b6b44f70706d5fccd87cf65860066e9ff506124bb4b2d9559a9dc8ed7dd312f70d46803e2813234875d6d2e3baa3bc1922e9bf948e8fc2f0b79df", @ANYRES32=0x0, @ANYBLOB="0084000000000400080020000100000008001c00", @ANYRES32=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) 4.90407981s ago: executing program 1 (id=2152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8000, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)}, 0x4840) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001e40)={0xbf, 0x99, 0x14, 0x5, 0xfe, 0x5, 0xfb, 0x8, 0x3, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 4.695876401s ago: executing program 0 (id=2153): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x6cb634ce, 0x7, 0x1, 0x2, 0x2, 0x5af1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000100)=[{r0, 0x100}, {r0, 0x4300}, {r0, 0x4}, {r0, 0x8000}, {r0}, {r1, 0x44}, {r0, 0x1042}, {r0, 0x400}, {r0, 0x6040}], 0x9, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000180), 0x8) getsockopt$inet_mptcp_buf(r1, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) unshare(0x64000600) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) 4.26980241s ago: executing program 1 (id=2155): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@private=0xa010101, @multicast2, 0x0, "093189e195c87d021cf844fce2b799b28842967c7456dfded874719573935d62", 0x661f, 0x3, 0x10, 0x10001}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x23, 0xa, 0x6551d02a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x200, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$SIOCNRDECOBS(r3, 0x89e2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1407, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) connect$bt_rfcomm(r3, &(0x7f0000000300)={0x1f, @any, 0x5}, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r6, 0x80000000}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000400)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "156a0d50c8fe18a95052be69c354b3e5452b6fb0b66a1f40e0c494e34cc3196e", 0x8, 0x6, 0x4, 0x5}, 0x3c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r7, &(0x7f0000000500)="24f1072fa1f471b60e1201dd0a2a5802067d84521907e9e85b8a1cc3eda469cf6622a5b211246f483da1b122bb0fb2e8c42d160b3a9c65f3dd729be7f34e1ee1837c10897ae2c2c4f56953483aac68f1fbc5d0b61be299ee29cadf571b70950c96d431cf7c70afcd3dc0c7b1c80fdd718dbaae4088955288c47ecf318c013d914eb7b5d747427580048de30042dbbef507d9c813fbfad14d7f1d8839257b59e20647fa2890bf038b4d5ef43ac50c1e65b9a349564707168c762a6b4aec293d70ad1ce4af216e72f4a03ad7633ba13fa0542a3d66f391df89fc40ef8289458865e653c4f38b978ec4252703b56d82c43d47", &(0x7f0000000600)=""/96, 0x4}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4}, 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000840)={r8, &(0x7f0000000740)='syz0\x00', 0x200000, &(0x7f0000000780)={@align=0x2d7, {0x5a5, 0x0, 0xa, 0x4}}, 0x5, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0xe}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x9, 0x1d, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa5}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ldst={0x2, 0x3, 0x6, 0x6, 0x0, 0x40, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xf}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0xf4, &(0x7f00000009c0)=""/244, 0x41000, 0x20, '\x00', r5, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x0, 0x10, 0xb09, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000b40)=[{0x3, 0x3, 0x6, 0xa}, {0x5, 0x2, 0xf, 0x7}, {0x5, 0x4, 0x3, 0x3}, {0x1, 0x5, 0x9, 0x8}], 0x10, 0x80000000}, 0x94) socket(0x2a, 0x5, 0x2) r11 = socket$inet(0x2, 0x5, 0x200) getsockopt$IPT_SO_GET_ENTRIES(r11, 0x0, 0x41, &(0x7f0000000c40)={'filter\x00', 0x25, "0b04b198be14b80fc47bf1cf6212a9246e635ab2c1d8bb0c8839c71850b5e51eaf00faf2f8"}, &(0x7f0000000cc0)=0x49) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000d00)=0x9) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000d40)) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001100)={0xffffffffffffffff, &(0x7f0000001000)='wg1\x00', 0x840, &(0x7f0000001040)={@align=0xf, {0x2, 0x5, 0x4, 0x8}}, 0x4, &(0x7f0000001080)={@_ha_fsid}, &(0x7f00000010c0)=0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0x14, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='syzkaller\x00', 0x5, 0xd0, &(0x7f0000000e80)=""/208, 0x41000, 0x2e, '\x00', r5, @fallback=0x1d, r10, 0x8, &(0x7f0000000f80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x4, 0x6, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r10, 0x1, &(0x7f0000001140)=[r9, r13, r7, r7, r7], &(0x7f0000001180)=[{0x5, 0x5, 0xd, 0xc}], 0x10, 0x26}, 0x94) 4.252070914s ago: executing program 3 (id=2156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x6020480) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f0000001000)=[@mark={{0x14, 0x7ffffffe, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001040)={0xffffffffffffffff}) accept4$ax25(r4, &(0x7f0000001280)={{0x3, @null}, [@netrom, @rose, @netrom, @bcast, @default, @null, @rose, @netrom]}, &(0x7f00000010c0)=0x48, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0x94) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) sendmsg$IPSET_CMD_RENAME(r7, 0x0, 0x110) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f0000000000)={{r6}, "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"}) close(r6) r9 = socket(0xd, 0x1, 0x204) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.003876926s ago: executing program 4 (id=2157): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900010073797adf2b0000000900020073797a310000000008000340000000010800084000000000080004"], 0x6c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3574}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3.866354824s ago: executing program 1 (id=2159): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x3aac913) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000040000104004e200023b0"], 0x0) 3.663598444s ago: executing program 1 (id=2160): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80"], 0x58}, 0x1, 0x2}, 0x80) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'pimreg1\x00'}) shutdown(r0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="91103a00000000009560"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 3.381845688s ago: executing program 4 (id=2162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) recvmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) 2.187298039s ago: executing program 0 (id=2164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x8000) 1.895562286s ago: executing program 0 (id=2166): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8000, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)}, 0x4840) socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1.535923369s ago: executing program 0 (id=2169): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073797a300000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000300500020007000000240001800a000100726564697200000014000280080001400000000c080002400000000a0900010073797a30"], 0xf8}}, 0x0) read(r0, &(0x7f0000000140)=""/166, 0xa6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}], &(0x7f00000004c0)='syzkaller\x00', 0x40, 0x6, &(0x7f0000000500)=""/6, 0x40f00, 0x33, '\x00', r4, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x1}, 0x10, 0x0, r0, 0x7, 0x0, &(0x7f0000000580)=[{0x2, 0x4, 0x7}, {0x4, 0x5, 0x9, 0xa}, {0x0, 0x2, 0x6, 0xb}, {0x1, 0x4, 0x7, 0xb}, {0x1, 0x2, 0xd, 0x2}, {0x3, 0x5, 0xb, 0x5}, {0x4, 0x4, 0x4, 0x5}], 0x10, 0x5}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf250c0000002000058000000100756470000800010075647000000001800000048000000780000004008000000000000100190000000000030007000000000003000100000000000200080000000000010073797a300000000000000780000003000000000000000200900000000000030002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x54, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) 1.387733015s ago: executing program 2 (id=2170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0x10, [0x0, 0x0, 0x65, 0x4, 0x80000000, 0x70000, 0x300000, 0x0, 0x9, 0xb, 0x9, 0x1000000, 0x7, 0x4, 0xb1, 0x6, 0x1, 0x1, 0x7fffffff, 0x401, 0xa, 0x3, 0x7fff, 0xd22, 0x3f0b, 0x800, 0xfffffffd, 0xfff, 0x4, 0xb5, 0x8, 0xfffff000, 0x0, 0x1, 0x8, 0x8, 0x41, 0x6, 0x6, 0x7, 0x86, 0xbb, 0x1, 0x3, 0x10001, 0x6, 0x0, 0x97100000, 0xe935, 0x2, 0x1, 0x5, 0xbc, 0x3, 0xd, 0x3, 0x7, 0x2, 0x8, 0x200, 0x7, 0x6, 0xf4, 0x2, 0xb, 0x5, 0x4, 0x62e, 0x8, 0xa, 0x6, 0x1, 0x3, 0x6, 0x200, 0x0, 0x1, 0x7, 0x876, 0x6, 0x6, 0x9ad7, 0x7f, 0xffb, 0x68, 0x4cc, 0x6, 0x7fff, 0x3, 0x6a2, 0x2, 0x2, 0x83, 0x6, 0x800, 0x81, 0x7, 0x1, 0xc7c, 0x10, 0x3643, 0x612, 0x8, 0x0, 0x2, 0x3, 0x1, 0xb55, 0x53f, 0x0, 0xffff184f, 0x9, 0x9, 0x3ff, 0x1, 0x80000000, 0x7, 0x0, 0x4, 0x9, 0x9, 0x5dc, 0x1, 0x3d4, 0x7fff, 0x2009, 0xd4b]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18ffff000000db0002c3ff94000000000000c3f4be21da898767370840e9597bbc8fe282d0ad3469473c4acf6d129fefb9a842de9b22c6000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) socket$inet6(0xa, 0x1, 0x89) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xff}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0x10, [0x0, 0x0, 0x65, 0x4, 0x80000000, 0x70000, 0x300000, 0x0, 0x9, 0xb, 0x9, 0x1000000, 0x7, 0x4, 0xb1, 0x6, 0x1, 0x1, 0x7fffffff, 0x401, 0xa, 0x3, 0x7fff, 0xd22, 0x3f0b, 0x800, 0xfffffffd, 0xfff, 0x4, 0xb5, 0x8, 0xfffff000, 0x0, 0x1, 0x8, 0x8, 0x41, 0x6, 0x6, 0x7, 0x86, 0xbb, 0x1, 0x3, 0x10001, 0x6, 0x0, 0x97100000, 0xe935, 0x2, 0x1, 0x5, 0xbc, 0x3, 0xd, 0x3, 0x7, 0x2, 0x8, 0x200, 0x7, 0x6, 0xf4, 0x2, 0xb, 0x5, 0x4, 0x62e, 0x8, 0xa, 0x6, 0x1, 0x3, 0x6, 0x200, 0x0, 0x1, 0x7, 0x876, 0x6, 0x6, 0x9ad7, 0x7f, 0xffb, 0x68, 0x4cc, 0x6, 0x7fff, 0x3, 0x6a2, 0x2, 0x2, 0x83, 0x6, 0x800, 0x81, 0x7, 0x1, 0xc7c, 0x10, 0x3643, 0x612, 0x8, 0x0, 0x2, 0x3, 0x1, 0xb55, 0x53f, 0x0, 0xffff184f, 0x9, 0x9, 0x3ff, 0x1, 0x80000000, 0x7, 0x0, 0x4, 0x9, 0x9, 0x5dc, 0x1, 0x3d4, 0x7fff, 0x2009, 0xd4b]}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18ffff000000db0002c3ff94000000000000c3f4be21da898767370840e9597bbc8fe282d0ad3469473c4acf6d129fefb9a842de9b22c6000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130, 0x41100, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) (async) socket$inet6(0xa, 0x1, 0x89) (async) 1.231473495s ago: executing program 2 (id=2171): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x2, 0x3, 0x4, 0x200, 0x2e86}, &(0x7f0000000100)=0x20) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000000000006000f001d00000020000600118c0768e0c99f7018892d17e2d3065ec79a8c49c87d066f97e5adce738283fb16b7462667fbff6571749955ed5bbf85e04d4a175c661242eb1c7f37949b8c74e88a23bbe26bd5c5d2794a809105425cdffc1df89b4c1c16cb0af97694ed44cdcf440979d34c1913ea9bab13c0e7cc4e8d27e7a079614300be0a43639af8e04a72774aa45302cac7bdedc8abf13e3bf8c581486b3ed1024d22d377dcdd6ace87a37c7ab0dafc39e8ddfa63e2ddf2c026b0d6a7ddfc55d0fd1ad21a1d"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r3, @ANYRESOCT], 0xfc}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.044398887s ago: executing program 0 (id=2172): socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r0 = socket(0x2, 0x3, 0xff) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x14840}, 0x0) unshare(0x4e040100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc3f37cc}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, 0x0, 0x1f00) (async) sendmsg$tipc(r6, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000280)=0x5, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', "010000000100"}, 0x38) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) socket(0x400000000010, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 824.043508ms ago: executing program 2 (id=2173): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd1f}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 697.223873ms ago: executing program 2 (id=2174): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x3aac913) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000b04004e200023b0"], 0x0) 618.337402ms ago: executing program 3 (id=2175): socket$inet6_icmp(0xa, 0x2, 0x3a) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000010c0), 0xfffffffffffffc1e) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x888}, 0x20000000) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000010400000000000000c60001002700000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000003200000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmmsg$alg(r6, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="961933", 0x3}, {&(0x7f0000000340)="f2119d5ede", 0x5}], 0x2, 0x0, 0x0, 0x8010}], 0x1, 0x4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/167, 0xa7}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ec", 0x7a}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001100), &(0x7f0000001140)=0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000001180)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x6}}, 0x3, 0xfffffffb, 0x401, 0x76, 0xff}, &(0x7f0000001240)=0x98) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000100)={{0x3, @default, 0x7}, [@null, @bcast, @bcast, @null, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 448.110771ms ago: executing program 2 (id=2176): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 256.677346ms ago: executing program 3 (id=2177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000140)) 168.11397ms ago: executing program 2 (id=2178): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000016c0)="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", 0x18b}], 0x1) 57.04067ms ago: executing program 3 (id=2179): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x8000, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000003c0)}, 0x4840) socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2180): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) pselect6(0x6f, &(0x7f0000000280)={0x4, 0x4, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x7fff, 0x7, 0x786, 0x5}, 0x0, 0x0, &(0x7f0000000440), 0x0) kernel console output (not intermixed with test programs): 7275] netlink: 'syz.0.342': attribute type 11 has an invalid length. [ 132.320636][ T6525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.424375][ T6525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.443227][ T6525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.513459][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 132.526564][ T6525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.536450][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 132.574790][ T7285] tipc: Started in network mode [ 132.580737][ T7285] tipc: Node identity 82dfabf26387, cluster identity 4711 [ 132.605926][ T7285] tipc: Enabled bearer , priority 0 [ 132.632421][ T7288] syzkaller0: entered promiscuous mode [ 132.639699][ T7288] syzkaller0: entered allmulticast mode [ 132.669928][ T7285] tipc: Resetting bearer [ 132.703321][ T7284] tipc: Resetting bearer [ 132.755499][ T7290] No such timeout policy "syz1" [ 132.800923][ T7284] tipc: Disabling bearer [ 132.897185][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.483370][ T7319] bond0: left promiscuous mode [ 133.500712][ T7319] bond_slave_0: left promiscuous mode [ 133.518508][ T7319] bond_slave_1: left promiscuous mode [ 133.548990][ T7319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.665911][ T7313] netlink: 'syz.4.357': attribute type 12 has an invalid length. [ 133.752380][ T7322] lo speed is unknown, defaulting to 1000 [ 133.774742][ T7322] wg1 speed is unknown, defaulting to 1000 [ 133.824157][ T7334] siw: device registration error -23 [ 133.952259][ T7340] wg1 speed is unknown, defaulting to 1000 [ 134.020040][ T7338] xt_CT: No such helper "syz1" [ 134.395426][ T7351] netlink: 'syz.4.365': attribute type 9 has an invalid length. [ 134.464754][ T7351] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 134.473490][ T7351] netlink: 'syz.4.365': attribute type 12 has an invalid length. [ 134.651128][ T7365] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 134.667482][ T7365] netlink: 'syz.4.368': attribute type 2 has an invalid length. [ 134.675186][ T7365] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 135.110982][ T7375] wg1 speed is unknown, defaulting to 1000 [ 135.245968][ T7371] __nla_validate_parse: 8 callbacks suppressed [ 135.245989][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.372'. [ 135.379015][ T7395] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 135.415821][ T7395] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.379'. [ 135.995029][ T7420] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 136.020393][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.386'. [ 136.628322][ T7437] Bluetooth: MGMT ver 1.23 [ 136.886718][ T7458] netlink: zone id is out of range [ 136.891902][ T7458] netlink: zone id is out of range [ 136.928577][ T7458] netlink: zone id is out of range [ 136.933775][ T7458] netlink: zone id is out of range [ 136.986632][ T7458] netlink: zone id is out of range [ 136.987630][ T7459] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 136.991818][ T7458] netlink: zone id is out of range [ 137.059378][ T7458] netlink: zone id is out of range [ 137.090292][ T7458] netlink: zone id is out of range [ 137.125536][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 137.250213][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 137.377717][ T7474] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 138.160590][ T7506] Cannot find set identified by id 65534 to match [ 138.198269][ T7503] geneve1: entered promiscuous mode [ 138.242417][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 138.635243][ T7533] validate_nla: 2 callbacks suppressed [ 138.635265][ T7533] netlink: 'syz.2.411': attribute type 49 has an invalid length. [ 138.940701][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 139.068266][ T7563] trusted_key: syz.1.417 sent an empty control message without MSG_MORE. [ 141.678498][ T7537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.707883][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 141.930524][ T7582] netlink: 3 bytes leftover after parsing attributes in process `syz.1.425'. [ 141.946005][ T7580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 141.950990][ T7582] 0X: renamed from caif0 [ 141.987618][ T7584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.426'. [ 142.013825][ T7582] 0X: entered allmulticast mode [ 142.026363][ T7582] net_ratelimit: 37 callbacks suppressed [ 142.026381][ T7582] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 142.349128][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 142.397318][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 142.428502][ T7607] netlink: 'syz.2.433': attribute type 29 has an invalid length. [ 142.441960][ T5141] Bluetooth: hci4: link tx timeout [ 142.454026][ T5141] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.464923][ T5839] Bluetooth: hci4: link tx timeout [ 142.470701][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.478576][ T5839] Bluetooth: hci4: link tx timeout [ 142.483765][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.527434][ T5839] Bluetooth: hci4: link tx timeout [ 142.532624][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.540481][ T5839] Bluetooth: hci4: link tx timeout [ 142.545624][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.554291][ T5839] Bluetooth: hci4: link tx timeout [ 142.559590][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.567742][ T5839] Bluetooth: hci4: link tx timeout [ 142.572966][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.596879][ T5839] Bluetooth: hci4: link tx timeout [ 142.602105][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.618030][ T7600] wg1 speed is unknown, defaulting to 1000 [ 142.804444][ T7613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.434'. [ 142.904126][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 143.263355][ T7623] wg1 speed is unknown, defaulting to 1000 [ 143.513511][ T7648] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 143.558269][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 143.599229][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 144.450428][ T7692] wg1: entered promiscuous mode [ 144.479980][ T7692] wg1: entered allmulticast mode [ 144.487913][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 145.154233][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.162063][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.196085][ T7710] 0X: left allmulticast mode [ 145.261401][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.275050][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.448303][ T6521] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.486499][ T6521] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.557699][ T6521] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.579438][ T6521] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.652215][ T7729] syzkaller0: entered promiscuous mode [ 145.675246][ T7729] syzkaller0: entered allmulticast mode [ 145.913410][ T7747] netlink: 'syz.3.469': attribute type 13 has an invalid length. [ 145.931779][ T7747] netlink: 'syz.3.469': attribute type 12 has an invalid length. [ 146.306754][ T7757] tipc: Enabled bearer , priority 0 [ 146.322567][ T7764] syzkaller0: entered promiscuous mode [ 146.340321][ T7764] syzkaller0: entered allmulticast mode [ 146.437980][ T7757] tipc: Resetting bearer [ 146.445829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.466342][ T7757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.509021][ T7754] tipc: Resetting bearer [ 146.561698][ T7754] tipc: Disabling bearer [ 146.882571][ T7791] __nla_validate_parse: 11 callbacks suppressed [ 146.882592][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 146.904095][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 146.944958][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 146.957302][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 147.099025][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 147.447718][ T7822] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 147.492946][ T7817] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 147.638479][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'. [ 148.967405][ T7839] netlink: 76 bytes leftover after parsing attributes in process `syz.2.485'. [ 148.988889][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 149.098368][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 149.451350][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 149.533166][ T7884] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 149.567446][ T7884] bond1: entered promiscuous mode [ 149.573119][ T7884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.610626][ T7884] bond1: (slave bridge1): making interface the new active one [ 149.628303][ T7884] bridge1: entered promiscuous mode [ 149.643891][ T7884] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 149.756202][ T7890] vlan3: entered promiscuous mode [ 149.762133][ T7890] macvtap0: entered promiscuous mode [ 150.426028][ T7933] tipc: Enabling of bearer rejected, failed to enable media [ 151.178337][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.205027][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.953965][ T7958] syzkaller0: entered promiscuous mode [ 151.964235][ T7958] syzkaller0: entered allmulticast mode [ 152.006692][ T6518] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.028253][ T6518] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.040926][ T6518] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.057802][ T7942] wg1 speed is unknown, defaulting to 1000 [ 152.064396][ T6518] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.400205][ T8000] __nla_validate_parse: 4 callbacks suppressed [ 152.400225][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 152.458146][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 152.660590][ T7986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.667934][ T7986] IPv6: NLM_F_CREATE should be set when creating new route [ 152.675208][ T7986] IPv6: NLM_F_CREATE should be set when creating new route [ 152.743951][ T7986] lec:lec_atm_send: lec0: Unknown message type -1 [ 152.763667][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.526'. [ 152.777823][ T7985] lec:lec_atm_close: lec0: Shut down! [ 152.804666][ T8014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 152.847172][ T8014] netlink: 104 bytes leftover after parsing attributes in process `syz.3.526'. [ 153.178008][ T8037] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 153.353869][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 153.400818][ T8045] ip6erspan1: entered allmulticast mode [ 153.485231][ T8052] sctp: [Deprecated]: syz.4.534 (pid 8052) Use of int in max_burst socket option. [ 153.485231][ T8052] Use struct sctp_assoc_value instead [ 153.549863][ T8052] sctp: [Deprecated]: syz.4.534 (pid 8052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.549863][ T8052] Use struct sctp_sack_info instead [ 153.696636][ T8059] hsr0: entered promiscuous mode [ 153.733094][ T8059] hsr0: left promiscuous mode [ 154.952591][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 154.993872][ T8119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.016968][ T8124] netlink: 'syz.1.551': attribute type 7 has an invalid length. [ 155.025261][ T8124] netlink: 'syz.1.551': attribute type 5 has an invalid length. [ 155.047923][ T8124] netlink: 17 bytes leftover after parsing attributes in process `syz.1.551'. [ 155.059457][ T8124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.551'. [ 155.090740][ T8124] netlink: 260 bytes leftover after parsing attributes in process `syz.1.551'. [ 155.374518][ T8135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.477444][ T8144] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 155.504331][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.512718][ T8139] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 155.533646][ T8135] bond2: (slave bond0): making interface the new active one [ 155.572114][ T8135] bond2: (slave bond0): Enslaving as an active interface with an up link [ 155.681166][ T8139] .`: renamed from bond0 (while UP) [ 155.847334][ T6523] bond2: (slave .`): link status definitely down, disabling slave [ 155.868826][ T6523] bond2: now running without any active interface! [ 156.285508][ T8183] team_slave_0: entered promiscuous mode [ 156.291539][ T8183] team_slave_1: entered promiscuous mode [ 156.303016][ T8183] vlan3: entered promiscuous mode [ 156.367217][ T8183] team0: entered promiscuous mode [ 156.926395][ T8209] macvtap1: entered promiscuous mode [ 156.931766][ T8209] veth1_to_hsr: entered promiscuous mode [ 156.969252][ T8209] macvtap1: entered allmulticast mode [ 156.990276][ T8209] veth1_to_hsr: entered allmulticast mode [ 157.162569][ T8222] pim6reg1: entered promiscuous mode [ 157.180414][ T8222] pim6reg1: entered allmulticast mode [ 157.255426][ T5485] lec:lec_start_xmit: lec0:No lecd attached [ 157.606311][ T8247] __nla_validate_parse: 6 callbacks suppressed [ 157.606332][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 157.897665][ T8260] blkio.reset_stats is deprecated [ 157.974992][ T8263] netlink: 164 bytes leftover after parsing attributes in process `syz.1.590'. [ 157.995299][ T8266] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 158.012104][ T8266] netlink: 'syz.4.591': attribute type 3 has an invalid length. [ 158.030529][ T8266] netlink: 172 bytes leftover after parsing attributes in process `syz.4.591'. [ 158.048916][ T8266] NCSI netlink: No device for ifindex 813332851 [ 158.101629][ T8266] set match dimension is over the limit! [ 158.673335][ T8300] netlink: 64 bytes leftover after parsing attributes in process `syz.2.596'. [ 158.715990][ T8302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.597'. [ 158.740778][ T8304] netlink: 348 bytes leftover after parsing attributes in process `syz.0.598'. [ 158.760555][ T8306] netlink: 'syz.0.598': attribute type 30 has an invalid length. [ 158.881739][ T8306] bond1: option arp_missed_max: invalid value (0) [ 158.889223][ T8306] bond1: option arp_missed_max: allowed values 1 - 255 [ 158.904471][ T8306] bond1 (unregistering): Released all slaves [ 159.124024][ T8316] sctp: [Deprecated]: syz.2.600 (pid 8316) Use of int in maxseg socket option. [ 159.124024][ T8316] Use struct sctp_assoc_value instead [ 159.244545][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 159.592037][ T8329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.663536][ T8335] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 159.761023][ T8339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.607'. [ 159.842854][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 159.943737][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 159.982185][ T8350] ip6gretap1: entered promiscuous mode [ 160.029538][ T8350] ip6gretap1: entered allmulticast mode [ 160.101673][ T8355] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.132788][ T8356] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.171653][ T29] audit: type=1107 audit(1772278229.948:5): pid=8401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s9|>AO҂<+(&;A [ 161.171653][ T29] &S6),, priority 10 [ 168.567373][ T8657] syzkaller1: entered promiscuous mode [ 168.578922][ T8657] syzkaller1: entered allmulticast mode [ 168.592878][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.687'. [ 168.602390][ T8663] netlink: 'syz.2.686': attribute type 17 has an invalid length. [ 168.613393][ T8663] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 168.628581][ T8663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.660061][ T8667] sctp: [Deprecated]: syz.3.688 (pid 8667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.660061][ T8667] Use struct sctp_sack_info instead [ 168.705510][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 168.743128][ T8669] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.687'. [ 168.786145][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.688'. [ 169.079185][ T8684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.691'. [ 169.341140][ T8702] syzkaller0: entered promiscuous mode [ 169.354653][ T8702] syzkaller0: entered allmulticast mode [ 169.420673][ T8702] tipc: Enabled bearer , priority 0 [ 169.533354][ T8702] tipc: Resetting bearer [ 169.591258][ T8702] tipc: Disabling bearer [ 169.913858][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 169.973923][ T8737] netlink: 'syz.1.702': attribute type 22 has an invalid length. [ 170.038939][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 170.193753][ T35] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.223355][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.252459][ T35] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.278706][ T35] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.373517][ T8757] tipc: Enabled bearer , priority 0 [ 170.384480][ T8757] syzkaller0: entered promiscuous mode [ 170.392371][ T8757] syzkaller0: entered allmulticast mode [ 170.471161][ T8757] tipc: Resetting bearer [ 170.665036][ T8756] tipc: Resetting bearer [ 170.710064][ T8756] tipc: Disabling bearer [ 170.985680][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 170.993867][ C1] lec:lec_tx_timeout: lec0 [ 170.998671][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 171.132698][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 171.461319][ T8778] vlan1: left allmulticast mode [ 171.471854][ T8778] veth0_vlan: left allmulticast mode [ 171.595360][ T8778] bond2: left allmulticast mode [ 171.640097][ T5951] tipc: Node number set to 3780684786 [ 171.731469][ T8802] netlink: 228 bytes leftover after parsing attributes in process `syz.1.711'. [ 171.763179][ T77] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.779119][ T8802] netlink: 228 bytes leftover after parsing attributes in process `syz.1.711'. [ 171.796264][ T77] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.804702][ T77] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.834733][ T77] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.907545][ T8793] syzkaller0: entered promiscuous mode [ 171.913429][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 171.923496][ T8793] syzkaller0: entered allmulticast mode [ 171.977154][ T8809] wg1 speed is unknown, defaulting to 1000 [ 173.376076][ T8821] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 173.382297][ T8821] syzkaller1: linktype set to 270 [ 173.608647][ T8832] syzkaller0: entered promiscuous mode [ 173.641500][ T8832] syzkaller0: entered allmulticast mode [ 173.858272][ T8841] __nla_validate_parse: 1 callbacks suppressed [ 173.858292][ T8841] netlink: 252 bytes leftover after parsing attributes in process `syz.3.720'. [ 174.331026][ T8879] xt_hashlimit: size too large, truncated to 1048576 [ 174.796094][ T8887] geneve2: entered promiscuous mode [ 175.183913][ T8909] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 175.344256][ T8915] netlink: 'syz.0.738': attribute type 33 has an invalid length. [ 175.362064][ T8918] netlink: 'syz.1.739': attribute type 9 has an invalid length. [ 175.379329][ T8915] netlink: 152 bytes leftover after parsing attributes in process `syz.0.738'. [ 175.498996][ T8915] `: renamed from team0 (while UP) [ 176.005686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.013799][ C1] lec:lec_tx_timeout: lec0 [ 176.018990][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.091192][ T8953] tipc: Enabling of bearer rejected, failed to enable media [ 176.179780][ T8953] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.734614][ T8975] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 177.181969][ T9000] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 177.471633][ T9013] batman_adv: batadv0: Adding interface: macsec1 [ 177.514636][ T9013] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.599432][ T9013] batman_adv: batadv0: Interface activated: macsec1 [ 177.899880][ T9036] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 178.053894][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 178.526301][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.535164][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.649537][ T9080] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 178.705003][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.722801][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.738343][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.748711][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 178.758713][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.765'. [ 179.262371][ T9119] syz_tun: entered allmulticast mode [ 179.297533][ T9118] syz_tun: left allmulticast mode [ 179.362589][ T9122] __nla_validate_parse: 1 callbacks suppressed [ 179.362609][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 179.427270][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 179.737268][ T9134] macsec1: entered allmulticast mode [ 179.745206][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 179.756562][ T9134] macsec0: entered allmulticast mode [ 180.009334][ T9152] geneve1: entered promiscuous mode [ 180.014614][ T9152] geneve1: entered allmulticast mode [ 180.074221][ T6521] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.104915][ T6521] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.143260][ T6521] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.171449][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.784'. [ 180.193370][ T6521] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.224683][ T9162] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 180.278082][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.783'. [ 180.634941][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 180.721464][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 180.751373][ T9185] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 180.890296][ T9185] bond2 (unregistering): Released all slaves [ 180.969864][ T9210] sctp: [Deprecated]: syz.4.792 (pid 9210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.969864][ T9210] Use struct sctp_sack_info instead [ 181.025686][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 181.033739][ C1] lec:lec_tx_timeout: lec0 [ 181.038489][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 181.871201][ T9256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.799'. [ 182.273054][ T9268] pim6reg1: entered promiscuous mode [ 182.309898][ T9268] pim6reg1: entered allmulticast mode [ 182.632084][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 182.813941][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 183.396883][ T9339] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 183.582856][ T9342] syzkaller0: entered promiscuous mode [ 183.619843][ T9342] syzkaller0: entered allmulticast mode [ 183.760698][ T9354] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.784837][ T9355] wg1 speed is unknown, defaulting to 1000 [ 185.486077][ T9334] syzkaller1: entered promiscuous mode [ 185.495903][ T9334] syzkaller1: entered allmulticast mode [ 185.832706][ T9419] __nla_validate_parse: 1 callbacks suppressed [ 185.832728][ T9419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.828'. [ 186.037176][ T9426] netlink: 136 bytes leftover after parsing attributes in process `syz.0.829'. [ 186.046390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 186.046463][ C1] lec:lec_tx_timeout: lec0 [ 186.059117][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.095912][ T9426] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 186.287044][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 186.335761][ T9439] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.832'. [ 186.423673][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.832'. [ 186.424979][ T9445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.835'. [ 187.411916][ T9498] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 187.462172][ T9504] SET target dimension over the limit! [ 187.803530][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 188.153123][ T9537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.852'. [ 189.710051][ T9462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.083994][ T9555] nbd: must specify at least one socket [ 190.173613][ T9564] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 190.311567][ T9562] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.331518][ T9562] syzkaller0: entered promiscuous mode [ 190.337505][ T9562] syzkaller0: entered allmulticast mode [ 190.372838][ T9564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.403519][ T9569] syz.2.860 uses old SIOCAX25GETINFO [ 190.413624][ T9576] bond3: (slave gretap1): making interface the new active one [ 190.425321][ T9576] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 190.667801][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 190.817609][ T9592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.866'. [ 190.830306][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.065693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 191.073775][ C1] lec:lec_tx_timeout: lec0 [ 191.078813][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 191.213325][ T9609] __nla_validate_parse: 1 callbacks suppressed [ 191.213345][ T9609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'. [ 191.247220][ T9609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.866534][ T9646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.878'. [ 192.037252][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'. [ 192.405841][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 192.511774][ T9673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.566023][ T9675] macvlan2: entered allmulticast mode [ 192.573582][ T9675] veth0_to_bond: entered allmulticast mode [ 192.585338][ T9675] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 193.310778][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:4061742768/4061742769 [ 193.320703][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:4061742768/4061742769 [ 193.933423][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 194.119077][ T9727] xt_ecn: cannot match TCP bits for non-tcp packets [ 194.338631][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571185][ T9740] bond4: entered allmulticast mode [ 194.731202][ T9727] team0: Port device netdevsim0 removed [ 194.818710][ T9744] bridge3: entered promiscuous mode [ 194.824706][ T9744] bridge3: entered allmulticast mode [ 194.862067][ T9744] bond4: (slave bridge3): making interface the new active one [ 194.917677][ T9744] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 195.098879][ T9757] netlink: 72 bytes leftover after parsing attributes in process `syz.0.911'. [ 195.159504][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 195.672933][ T9771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.914'. [ 195.706809][ T9774] syzkaller1: entered promiscuous mode [ 195.725854][ T9774] syzkaller1: entered allmulticast mode [ 196.085689][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 196.093816][ C1] lec:lec_tx_timeout: lec0 [ 196.098736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 196.195593][ T9786] FAULT_INJECTION: forcing a failure. [ 196.195593][ T9786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.265869][ T9786] CPU: 0 UID: 0 PID: 9786 Comm: syz.0.919 Not tainted syzkaller #0 PREEMPT(full) [ 196.265897][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.265911][ T9786] Call Trace: [ 196.265919][ T9786] [ 196.265927][ T9786] dump_stack_lvl+0xe8/0x150 [ 196.265980][ T9786] should_fail_ex+0x412/0x560 [ 196.266012][ T9786] _copy_to_user+0x31/0xb0 [ 196.266045][ T9786] simple_read_from_buffer+0xe1/0x170 [ 196.266078][ T9786] proc_fail_nth_read+0x1bb/0x230 [ 196.266111][ T9786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.266144][ T9786] ? rw_verify_area+0x2a6/0x4d0 [ 196.266165][ T9786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.266196][ T9786] vfs_read+0x20c/0xa70 [ 196.266215][ T9786] ? fdget_pos+0x246/0x320 [ 196.266243][ T9786] ? __pfx_ax25_connect+0x10/0x10 [ 196.266278][ T9786] ? __pfx___mutex_lock+0x10/0x10 [ 196.266308][ T9786] ? __pfx_vfs_read+0x10/0x10 [ 196.266330][ T9786] ? __fget_files+0x2a/0x420 [ 196.266363][ T9786] ? __fget_files+0x3a0/0x420 [ 196.266392][ T9786] ? __fget_files+0x2a/0x420 [ 196.266430][ T9786] ksys_read+0x150/0x270 [ 196.266453][ T9786] ? __pfx_ksys_read+0x10/0x10 [ 196.266485][ T9786] do_syscall_64+0x14d/0xf80 [ 196.266513][ T9786] ? trace_irq_disable+0x3b/0x150 [ 196.266542][ T9786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.266564][ T9786] ? clear_bhb_loop+0x40/0x90 [ 196.266590][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.266610][ T9786] RIP: 0033:0x7f99c3d5cfce [ 196.266641][ T9786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.266658][ T9786] RSP: 002b:00007f99c4be6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.266688][ T9786] RAX: ffffffffffffffda RBX: 00007f99c4be76c0 RCX: 00007f99c3d5cfce [ 196.266703][ T9786] RDX: 000000000000000f RSI: 00007f99c4be70a0 RDI: 0000000000000003 [ 196.266716][ T9786] RBP: 00007f99c4be7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.266728][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.266740][ T9786] R13: 00007f99c4016038 R14: 00007f99c4015fa0 R15: 00007ffe43b91228 [ 196.266773][ T9786] [ 196.582206][ T9795] x_tables: duplicate underflow at hook 2 [ 197.049161][ T9813] lo speed is unknown, defaulting to 1000 [ 197.085201][ T9813] lo speed is unknown, defaulting to 1000 [ 197.115438][ T9813] lo speed is unknown, defaulting to 1000 [ 197.195336][ T9813] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.217221][ T9822] netlink: 80 bytes leftover after parsing attributes in process `syz.0.933'. [ 197.288537][ T9813] lo speed is unknown, defaulting to 1000 [ 197.312263][ T9813] lo speed is unknown, defaulting to 1000 [ 197.324425][ T9825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.339321][ T9813] lo speed is unknown, defaulting to 1000 [ 197.344031][ T9825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.356870][ T9813] lo speed is unknown, defaulting to 1000 [ 197.378270][ T9813] lo speed is unknown, defaulting to 1000 [ 197.384466][ T9825] netlink: 52 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.657594][ T9835] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 197.676856][ T9835] bond5 (unregistering): Released all slaves [ 197.717696][ T9839] veth0_to_bond: left allmulticast mode [ 198.090593][ T9862] unsupported nlmsg_type 40 [ 198.098686][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 198.263089][ T9877] sit1: entered promiscuous mode [ 198.421940][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 198.547241][ T9887] netlink: 56 bytes leftover after parsing attributes in process `syz.4.953'. [ 198.884525][ T9908] netlink: 'syz.0.959': attribute type 22 has an invalid length. [ 198.894221][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 198.915428][ T9899] wg1 speed is unknown, defaulting to 1000 [ 198.926326][ T9899] lo speed is unknown, defaulting to 1000 [ 198.971179][ T9908] netlink: 'syz.0.959': attribute type 22 has an invalid length. [ 198.988070][ T9901] wg1 speed is unknown, defaulting to 1000 [ 198.995749][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.004105][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.023218][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 199.094702][ T9901] lo speed is unknown, defaulting to 1000 [ 199.105392][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.152226][ T6523] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.545572][ T9936] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 199.568704][ T9936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.966'. [ 199.583785][ T9936] netlink: 'syz.0.966': attribute type 24 has an invalid length. [ 199.665538][ T9936] bridge5: entered allmulticast mode [ 199.882037][ T9954] netlink: 'syz.3.973': attribute type 21 has an invalid length. [ 199.900808][ T9954] netlink: 'syz.3.973': attribute type 22 has an invalid length. [ 199.911346][ T9954] netlink: 'syz.3.973': attribute type 23 has an invalid length. [ 199.923576][ T9954] netlink: 'syz.3.973': attribute type 25 has an invalid length. [ 199.931765][ T9954] netlink: 'syz.3.973': attribute type 26 has an invalid length. [ 199.958121][ T9959] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 200.088472][ T9951] openvswitch: netlink: Multiple metadata blocks provided [ 200.746138][ T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.815989][ T6525] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.105670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 201.113061][ T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.113905][ C1] lec:lec_tx_timeout: lec0 [ 201.126635][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 201.532977][T10045] syzkaller0: entered promiscuous mode [ 201.545765][T10045] syzkaller0: entered allmulticast mode [ 201.758791][T10055] wg1 speed is unknown, defaulting to 1000 [ 201.787905][T10055] lo speed is unknown, defaulting to 1000 [ 201.847953][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.859240][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.650141][ T5951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.317339][T10046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.570796][T10104] validate_nla: 3 callbacks suppressed [ 204.570814][T10104] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 204.606455][T10104] !9: entered promiscuous mode [ 204.651418][T10110] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 204.782575][T10109] batman_adv: batadv0: Adding interface: macvlan3 [ 204.795790][T10109] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.822888][T10109] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 206.165961][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.135698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 207.143843][ C1] lec:lec_tx_timeout: lec0 [ 207.148482][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.852903][T10155] veth0: entered promiscuous mode [ 207.865302][T10153] x_tables: duplicate underflow at hook 2 [ 207.886930][T10155] bond2: option mode: unable to set because the bond device has slaves [ 207.961005][T10155] bond2: (slave ip6gretap1): making interface the new active one [ 207.969880][T10159] __nla_validate_parse: 11 callbacks suppressed [ 207.969900][T10159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1027'. [ 208.005234][T10155] ip6gretap1: entered promiscuous mode [ 208.017025][T10155] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 208.031273][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 208.090145][T10154] veth0: left promiscuous mode [ 208.110435][T10167] pim6reg: entered allmulticast mode [ 208.138561][T10167] pim6reg: left allmulticast mode [ 208.271717][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'. [ 208.292536][T10171] netem: change failed [ 208.346313][T10160] wg1 speed is unknown, defaulting to 1000 [ 208.380865][T10177] dummy0: entered allmulticast mode [ 208.411949][T10169] wg1 speed is unknown, defaulting to 1000 [ 208.431763][T10160] lo speed is unknown, defaulting to 1000 [ 208.440523][T10176] dummy0: left allmulticast mode [ 208.458404][T10169] lo speed is unknown, defaulting to 1000 [ 208.775248][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 208.848577][T10188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1037'. [ 209.137664][T10200] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 209.164864][T10200] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 209.289315][ T797] lo speed is unknown, defaulting to 1000 [ 209.295128][ T797] syz2: Port: 1 Link ACTIVE [ 209.410795][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 210.236019][T10231] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 210.358524][T10244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 210.388991][T10231] bond0: entered promiscuous mode [ 210.394688][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.518179][T10237] bond0: (slave veth3): making interface the new active one [ 210.550452][T10237] veth3: entered promiscuous mode [ 210.557884][T10237] bond0: (slave veth3): Enslaving as an active interface with an up link [ 210.823685][ T6092] udevd[6092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.040882][T10260] macvtap1: entered promiscuous mode [ 211.084772][T10260] batadv0: entered promiscuous mode [ 211.100995][T10260] macvtap1: entered allmulticast mode [ 211.140246][T10260] batadv0: entered allmulticast mode [ 211.157348][T10260] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 211.186032][T10260] batadv0: left allmulticast mode [ 211.191162][T10260] batadv0: left promiscuous mode [ 211.415504][T10243] syzkaller0: entered promiscuous mode [ 211.426416][T10243] syzkaller0: entered allmulticast mode [ 211.499921][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 211.776287][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 211.776324][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.782914][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 211.789102][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 212.201091][T10306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1069'. [ 212.221367][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1068'. [ 212.666528][T10296] Can't find ip_set type bitmap:ip [ 212.885662][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 212.893781][ C1] lec:lec_tx_timeout: lec0 [ 212.899972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 212.999732][T10330] __nla_validate_parse: 3 callbacks suppressed [ 212.999754][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 213.524301][T10359] tipc: Started in network mode [ 213.538655][T10359] tipc: Node identity 9654df241991, cluster identity 4711 [ 213.570677][T10359] tipc: Enabled bearer , priority 0 [ 213.599628][T10367] syzkaller0: entered promiscuous mode [ 213.620432][T10367] syzkaller0: entered allmulticast mode [ 213.778643][T10359] tipc: Resetting bearer [ 213.784741][T10359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.925846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.065694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.185007][T10387] netlink: 'syz.1.1089': attribute type 11 has an invalid length. [ 214.195062][T10357] tipc: Resetting bearer [ 214.275437][T10357] tipc: Disabling bearer [ 214.297636][T10392] nbd: must specify at least one socket [ 214.330099][T10394] netlink: 'syz.3.1090': attribute type 33 has an invalid length. [ 214.343468][T10394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1090'. [ 214.376033][T10393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1090'. [ 214.647952][T10407] xt_TCPMSS: Only works on TCP SYN packets [ 214.728385][T10410] netlink: 'syz.3.1094': attribute type 21 has an invalid length. [ 214.736680][T10410] netlink: 'syz.3.1094': attribute type 22 has an invalid length. [ 214.773267][T10411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.791920][T10410] netlink: 'syz.3.1094': attribute type 23 has an invalid length. [ 214.822101][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 214.861801][T10410] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1094'. [ 214.929108][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1094'. [ 215.445844][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.583963][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 215.698520][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 216.747026][T10501] syzkaller0: entered promiscuous mode [ 216.761460][T10501] syzkaller0: entered allmulticast mode [ 216.806493][T10501] macsec2: entered promiscuous mode [ 216.814684][T10501] syzkaller0: port 1(macsec2) entered blocking state [ 216.822589][T10501] syzkaller0: port 1(macsec2) entered disabled state [ 216.835454][T10501] macsec2: entered allmulticast mode [ 216.857722][T10501] macsec2: left allmulticast mode [ 217.306066][T10520] syzkaller0: entered promiscuous mode [ 217.328609][T10520] syzkaller0: entered allmulticast mode [ 217.463977][T10527] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 217.810952][T10538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.925702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 217.933841][ C1] lec:lec_tx_timeout: lec0 [ 217.938717][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 218.105736][T10555] x_tables: duplicate underflow at hook 1 [ 218.205942][T10554] wg1 speed is unknown, defaulting to 1000 [ 218.213552][T10554] lo speed is unknown, defaulting to 1000 [ 218.730295][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 218.773445][T10581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.147862][ T6518] ip6gretap1: left promiscuous mode [ 219.157404][T10594] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 219.173585][T10594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1138'. [ 219.649910][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 219.703645][T10610] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1143'. [ 219.712866][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1143'. [ 219.989763][T10638] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1146'. [ 220.011114][T10638] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1146'. [ 220.088861][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 222.783165][T10622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.945687][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 222.953792][ C1] lec:lec_tx_timeout: lec0 [ 222.958584][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 222.985308][T10656] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1154'. [ 223.030478][T10660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 223.698644][T10700] sctp: [Deprecated]: syz.3.1166 (pid 10700) Use of int in maxseg socket option. [ 223.698644][T10700] Use struct sctp_assoc_value instead [ 224.207404][T10724] Bluetooth: MGMT ver 1.23 [ 224.255497][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1174'. [ 224.388236][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 224.434524][T10730] batadv1: entered promiscuous mode [ 224.451147][T10730] batadv1: entered allmulticast mode [ 224.464981][T10730] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.509463][T10732] syzkaller0: entered promiscuous mode [ 224.517155][T10732] syzkaller0: entered allmulticast mode [ 224.591175][T10732] bond4: entered promiscuous mode [ 224.597513][T10732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.690058][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 224.854297][T10747] syz_tun: entered allmulticast mode [ 224.868627][T10746] syz_tun: left allmulticast mode [ 225.076679][T10757] tipc: Enabling not permitted [ 225.082511][T10757] tipc: Enabling of bearer rejected, failed to enable media [ 225.967885][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 226.032201][T10788] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1198'. [ 226.064725][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 227.253103][T10852] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 227.286501][T10852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1213'. [ 227.625314][ T5827] IPVS: starting estimator thread 0... [ 227.632094][T10859] IPVS: fo: FWM 3 0x00000003 - no destination available [ 227.735780][T10860] IPVS: using max 27 ests per chain, 64800 per kthread [ 227.759664][T10862] netlink: 'syz.1.1217': attribute type 32 has an invalid length. [ 227.975694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 227.983787][ C1] lec:lec_tx_timeout: lec0 [ 227.991292][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 228.116543][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 228.198534][T10898] veth0_vlan: entered allmulticast mode [ 228.267265][T10887] xt_l2tp: v2 doesn't support IP mode [ 228.776281][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 228.803891][T10925] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1234'. [ 228.959746][T10934] netlink: 'syz.3.1237': attribute type 5 has an invalid length. [ 228.979776][T10934] geneve2: entered promiscuous mode [ 228.985064][T10934] geneve2: entered allmulticast mode [ 228.996515][ T132] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 229.004697][ T132] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 229.132085][T10940] nbd: device at index 64 is going down [ 229.345080][ T8152] udevd[8152]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.379092][ T6092] udevd[6092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.430385][ T132] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 229.496019][ T132] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 229.840562][T10960] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 229.871860][ T797] wg1 speed is unknown, defaulting to 1000 [ 229.878694][ T797] syz0: Port: 1 Link ACTIVE [ 230.084929][T10965] __nla_validate_parse: 6 callbacks suppressed [ 230.084948][T10965] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1245'. [ 230.312020][T10974] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 230.338546][T10974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1249'. [ 230.426770][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 230.443696][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'. [ 230.460240][T10986] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 230.698628][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 230.801751][T10998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 230.905205][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 230.995877][T11006] netlink: 'syz.0.1258': attribute type 8 has an invalid length. [ 231.243699][T11022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1263'. [ 231.402306][T11032] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 231.411160][T11032] netlink: 'syz.4.1266': attribute type 2 has an invalid length. [ 231.430889][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1266'. [ 231.442114][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.450008][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.738427][ T84] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.755769][ T84] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.764202][ T84] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.799719][ T84] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.821427][T11036] xt_ecn: cannot match TCP bits for non-tcp packets [ 231.830057][ T84] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.896190][ T84] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.928281][ T84] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.959044][ T84] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.148805][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 232.342357][T11066] bridge0: entered allmulticast mode [ 232.696153][T11080] wg1 speed is unknown, defaulting to 1000 [ 232.707465][T11080] lo speed is unknown, defaulting to 1000 [ 232.800956][T11077] wg1 speed is unknown, defaulting to 1000 [ 232.862616][T11077] lo speed is unknown, defaulting to 1000 [ 233.005724][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 233.013799][ C1] lec:lec_tx_timeout: lec0 [ 233.018461][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 233.393077][T11117] unsupported nla_type 9294 [ 234.003733][T11151] wg1 speed is unknown, defaulting to 1000 [ 234.009902][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.027880][T11151] lo speed is unknown, defaulting to 1000 [ 234.052903][T11150] wg1 speed is unknown, defaulting to 1000 [ 234.093324][T11150] lo speed is unknown, defaulting to 1000 [ 234.226350][T11163] netlink: 'syz.4.1297': attribute type 32 has an invalid length. [ 234.343634][T11163] bond5: option coupled_control: invalid value (12) [ 234.362025][T11163] bond5 (unregistering): Released all slaves [ 234.529751][T11180] syzkaller0: left promiscuous mode [ 234.535118][T11180] syzkaller0: left allmulticast mode [ 237.088606][T11158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.485491][T11226] netlink: 'syz.3.1311': attribute type 9 has an invalid length. [ 237.493551][T11226] __nla_validate_parse: 12 callbacks suppressed [ 237.493570][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1311'. [ 237.515443][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 237.657292][T11232] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1314'. [ 237.679158][T11232] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.725510][T11234] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 237.751294][T11234] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 237.783433][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1315'. [ 237.806833][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1315'. [ 237.854948][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 237.887913][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 238.005300][T11244] wg1 speed is unknown, defaulting to 1000 [ 238.014128][T11244] lo speed is unknown, defaulting to 1000 [ 238.025676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 238.033768][ C1] lec:lec_tx_timeout: lec0 [ 238.039078][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.047071][T11248] bridge0: entered allmulticast mode [ 238.079593][T11248] bridge_slave_1: left allmulticast mode [ 238.085529][T11248] bridge_slave_1: left promiscuous mode [ 238.094566][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.113340][T11248] bridge_slave_0: left allmulticast mode [ 238.125696][T11248] bridge_slave_0: left promiscuous mode [ 238.136502][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.599469][T11270] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 240.363060][T11224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.772580][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1331'. [ 240.882973][T11293] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1331'. [ 240.946057][T11295] tipc: Enabling of bearer rejected, failed to enable media [ 241.441947][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 241.571048][T11345] Cannot find del_set index 49151 as target [ 241.810350][T11361] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 241.833060][T11357] bond5: entered promiscuous mode [ 241.838508][T11357] bond5: entered allmulticast mode [ 241.844693][T11357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.038483][T11369] wg1 speed is unknown, defaulting to 1000 [ 242.066475][T11369] lo speed is unknown, defaulting to 1000 [ 242.558206][T11400] FAULT_INJECTION: forcing a failure. [ 242.558206][T11400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.586989][T11404] pimreg: left allmulticast mode [ 242.599799][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.4.1356 Not tainted syzkaller #0 PREEMPT(full) [ 242.599825][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.599835][T11400] Call Trace: [ 242.599842][T11400] [ 242.599850][T11400] dump_stack_lvl+0xe8/0x150 [ 242.599881][T11400] should_fail_ex+0x412/0x560 [ 242.599906][T11400] _copy_to_user+0x31/0xb0 [ 242.599944][T11400] simple_read_from_buffer+0xe1/0x170 [ 242.599975][T11400] proc_fail_nth_read+0x1bb/0x230 [ 242.600003][T11400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.600031][T11400] ? rw_verify_area+0x2a6/0x4d0 [ 242.600049][T11400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.600075][T11400] vfs_read+0x20c/0xa70 [ 242.600091][T11400] ? fdget_pos+0x246/0x320 [ 242.600122][T11400] ? __pfx___mutex_lock+0x10/0x10 [ 242.600151][T11400] ? __pfx_vfs_read+0x10/0x10 [ 242.600170][T11400] ? __fget_files+0x2a/0x420 [ 242.600197][T11400] ? __fget_files+0x3a0/0x420 [ 242.600221][T11400] ? __fget_files+0x2a/0x420 [ 242.600253][T11400] ksys_read+0x150/0x270 [ 242.600274][T11400] ? __pfx_ksys_read+0x10/0x10 [ 242.600305][T11400] do_syscall_64+0x14d/0xf80 [ 242.600331][T11400] ? trace_irq_disable+0x3b/0x150 [ 242.600358][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.600376][T11400] ? clear_bhb_loop+0x40/0x90 [ 242.600399][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.600418][T11400] RIP: 0033:0x7fba9535cfce [ 242.600438][T11400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.600455][T11400] RSP: 002b:00007fba935d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.600478][T11400] RAX: ffffffffffffffda RBX: 00007fba935d56c0 RCX: 00007fba9535cfce [ 242.600493][T11400] RDX: 000000000000000f RSI: 00007fba935d50a0 RDI: 0000000000000004 [ 242.600506][T11400] RBP: 00007fba935d5090 R08: 0000000000000000 R09: 0000000000000000 [ 242.600518][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.600530][T11400] R13: 00007fba95616128 R14: 00007fba95616090 R15: 00007ffde6fadd08 [ 242.600565][T11400] [ 242.862195][T11410] __nla_validate_parse: 2 callbacks suppressed [ 242.862215][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 242.888566][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 243.045682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 243.053752][ C1] lec:lec_tx_timeout: lec0 [ 243.059600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.440447][T11432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1363'. [ 244.111736][T11327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.290648][T11443] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1366'. [ 244.310008][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 244.351642][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 244.361560][T11446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 244.414659][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 244.429894][T11446] netlink: 'syz.3.1368': attribute type 6 has an invalid length. [ 244.563827][T11462] netlink: 'syz.1.1372': attribute type 33 has an invalid length. [ 244.601351][T11462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1372'. [ 244.673163][T11462] `: renamed from team0 [ 244.723462][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 244.799100][T11473] bond3: entered promiscuous mode [ 244.804370][T11473] bond3: entered allmulticast mode [ 244.812227][T11467] netlink: 'syz.1.1372': attribute type 33 has an invalid length. [ 244.823803][T11473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.873882][T11462] pim6reg: entered allmulticast mode [ 245.328088][T11515] ipt_REJECT: ECHOREPLY no longer supported. [ 245.353721][ T6516] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.362628][ T6516] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.373832][ T6516] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.383419][ T6516] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.414779][T11517] wg1 speed is unknown, defaulting to 1000 [ 245.422937][T11517] lo speed is unknown, defaulting to 1000 [ 245.951428][T11531] vlan5: entered promiscuous mode [ 245.956769][T11531] bridge0: entered promiscuous mode [ 247.757821][T11476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.032275][T11546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.055515][T11548] __nla_validate_parse: 10 callbacks suppressed [ 248.055535][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1393'. [ 248.075677][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 248.083787][ C1] lec:lec_tx_timeout: lec0 [ 248.088804][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 248.136963][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1393'. [ 248.360646][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 248.386696][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 248.418688][T11565] wg1 speed is unknown, defaulting to 1000 [ 248.432817][T11565] lo speed is unknown, defaulting to 1000 [ 248.620695][T11577] netlink: 6176 bytes leftover after parsing attributes in process `syz.4.1400'. [ 248.635038][T11577] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1400'. [ 249.167257][T11603] syzkaller0: entered promiscuous mode [ 249.179452][T11603] syzkaller0: entered allmulticast mode [ 249.383168][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 249.461186][T11618] netlink: 'syz.4.1409': attribute type 32 has an invalid length. [ 249.470013][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 249.506847][T11618] bond5: option coupled_control: invalid value (12) [ 249.582886][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1408'. [ 249.795167][T11618] bond5 (unregistering): Released all slaves [ 250.258657][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 251.906670][T11594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.328678][T11670] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 252.368820][T11670] nbd: couldn't find device at index -427251215 [ 252.405399][T11675] : entered promiscuous mode [ 252.433436][T11679] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 252.456845][T11679] nbd: couldn't find device at index -427251215 [ 252.656572][T11683] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 252.679019][T11683] bond6 (unregistering): Released all slaves [ 252.811867][T11700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.095682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 253.103798][ C1] lec:lec_tx_timeout: lec0 [ 253.108617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.346148][T11709] __nla_validate_parse: 4 callbacks suppressed [ 253.346170][T11709] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1429'. [ 255.600040][T11687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.756197][T11727] FAULT_INJECTION: forcing a failure. [ 255.756197][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 255.774556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.815528][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.1.1434 Not tainted syzkaller #0 PREEMPT(full) [ 255.815558][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.815571][T11727] Call Trace: [ 255.815579][T11727] [ 255.815588][T11727] dump_stack_lvl+0xe8/0x150 [ 255.815634][T11727] should_fail_ex+0x412/0x560 [ 255.815667][T11727] should_failslab+0xa8/0x100 [ 255.815693][T11727] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 255.815729][T11727] ? __alloc_skb+0x1d0/0x7d0 [ 255.815754][T11727] ? __local_bh_enable_ip+0xd0/0x130 [ 255.815787][T11727] __alloc_skb+0x1d0/0x7d0 [ 255.815820][T11727] sock_wmalloc+0xb2/0x130 [ 255.815853][T11727] l2tp_ip_sendmsg+0x1bb/0x1620 [ 255.815884][T11727] ? sock_rps_record_flow+0x19/0x400 [ 255.815914][T11727] ? inet_sendmsg+0x2f4/0x370 [ 255.815942][T11727] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.815967][T11727] ____sys_sendmsg+0x894/0xad0 [ 255.815997][T11727] ? __lock_acquire+0x6b5/0x2cf0 [ 255.816031][T11727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.816070][T11727] ? import_iovec+0x73/0xa0 [ 255.816103][T11727] ___sys_sendmsg+0x2a5/0x360 [ 255.816159][T11727] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.816195][T11727] ? kstrtouint+0x6e/0xe0 [ 255.816246][T11727] ? __fget_files+0x2a/0x420 [ 255.816275][T11727] ? __fget_files+0x3a0/0x420 [ 255.816315][T11727] __sys_sendmmsg+0x27c/0x4e0 [ 255.816353][T11727] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.816382][T11727] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 255.816439][T11727] ? ksys_write+0x242/0x270 [ 255.816463][T11727] ? __pfx_ksys_write+0x10/0x10 [ 255.816492][T11727] __x64_sys_sendmmsg+0xa0/0xc0 [ 255.816527][T11727] do_syscall_64+0x14d/0xf80 [ 255.816556][T11727] ? trace_irq_disable+0x3b/0x150 [ 255.816586][T11727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.816608][T11727] ? clear_bhb_loop+0x40/0x90 [ 255.816635][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.816657][T11727] RIP: 0033:0x7f6a25d9c799 [ 255.816677][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.816696][T11727] RSP: 002b:00007f6a26ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.816719][T11727] RAX: ffffffffffffffda RBX: 00007f6a26015fa0 RCX: 00007f6a25d9c799 [ 255.816734][T11727] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 255.816748][T11727] RBP: 00007f6a26ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.816761][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.816774][T11727] R13: 00007f6a26016038 R14: 00007f6a26015fa0 R15: 00007fffd33b0d78 [ 255.816808][T11727] [ 256.107727][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1437'. [ 256.311475][T11745] bond2: invalid ARP target 0.0.0.0 specified for addition [ 256.318803][T11745] bond2: option arp_ip_target: invalid value (0) [ 256.369377][T11745] bond2 (unregistering): Released all slaves [ 256.426234][T11753] syzkaller0: entered promiscuous mode [ 256.431785][T11753] syzkaller0: entered allmulticast mode [ 256.453876][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1438'. [ 256.463395][T11756] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 256.602478][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 256.704603][T11771] macsec0: entered promiscuous mode [ 256.723030][T11771] macsec0: left promiscuous mode [ 256.877997][T11779] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1446'. [ 257.112742][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1449'. [ 257.210179][T11798] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 257.360701][T11807] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1455'. [ 257.392833][T11806] wg1 speed is unknown, defaulting to 1000 [ 257.404308][T11806] lo speed is unknown, defaulting to 1000 [ 257.857011][T11838] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1463'. [ 257.905791][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 257.928532][T11839] sctp: [Deprecated]: syz.4.1464 (pid 11839) Use of int in maxseg socket option. [ 257.928532][T11839] Use struct sctp_assoc_value instead [ 257.954235][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1460'. [ 258.311705][T11851] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.593132][T11857] netlink: 'syz.0.1466': attribute type 11 has an invalid length. [ 258.610215][T11857] netlink: 'syz.0.1466': attribute type 23 has an invalid length. [ 258.625804][T11857] __nla_validate_parse: 9 callbacks suppressed [ 258.625824][T11857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1466'. [ 258.854381][T11864] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1471'. [ 258.885646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 258.893789][ C1] lec:lec_tx_timeout: lec0 [ 258.905738][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.946246][T11867] netlink: 'syz.1.1472': attribute type 2 has an invalid length. [ 259.136737][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 260.246503][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 260.273572][T11899] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 260.370270][T11897] can: request_module (can-proto-3) failed. [ 260.419215][T11907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.519653][T11915] wg1 speed is unknown, defaulting to 1000 [ 260.527252][T11915] lo speed is unknown, defaulting to 1000 [ 260.840278][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1487'. [ 261.144591][T11940] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 261.189125][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'. [ 261.251695][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 261.696175][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 261.712886][T11966] netem: incorrect ge model size [ 261.720963][T11966] netem: change failed [ 261.769574][T11976] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 261.786236][T11976] bridge0: entered allmulticast mode [ 261.936656][T11979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1502'. [ 261.989566][T11988] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1504'. [ 262.804345][T12005] lo speed is unknown, defaulting to 1000 [ 263.080049][T12039] syzkaller0: entered promiscuous mode [ 263.102742][T12039] syzkaller0: entered allmulticast mode [ 263.673877][T12071] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 263.734431][T12070] bond6: entered promiscuous mode [ 263.748882][T12070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.878747][T12081] __nla_validate_parse: 4 callbacks suppressed [ 263.878770][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1527'. [ 263.925685][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 263.933794][ C1] lec:lec_tx_timeout: lec0 [ 263.939103][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.956840][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 264.026272][T12086] netlink: 'syz.4.1530': attribute type 39 has an invalid length. [ 264.408514][T12112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1538'. [ 264.705914][ T797] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.714881][T12125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1541'. [ 264.828751][ T5951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.922869][T12127] bond6 (unregistering): Released all slaves [ 264.959713][ T5951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.116033][T12142] xt_hashlimit: max too large, truncated to 1048576 [ 265.184269][T12147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.243964][T12150] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 265.274142][T12150] netlink: 'syz.1.1547': attribute type 2 has an invalid length. [ 265.288311][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 265.582898][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 265.640328][T12166] xt_nfacct: accounting object `syz0' does not exist [ 265.690632][T12159] Unsupported Adiantum instantiation: (essiv(cbc(aes),sha256),anubis) [ 265.737334][T12164] veth7: entered promiscuous mode [ 265.773594][T12174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1555'. [ 265.845816][T12175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1554'. [ 266.081729][T12185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1562'. [ 266.096411][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 266.109169][T12185] syzkaller0: entered promiscuous mode [ 266.114691][T12185] syzkaller0: entered allmulticast mode [ 266.384186][ T29] audit: type=1800 audit(1772278335.158:6): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1629 res=0 errno=0 [ 266.426455][ T797] lo speed is unknown, defaulting to 1000 [ 266.432277][ T797] syz2: Port: 1 Link DOWN [ 266.467782][T12195] lo speed is unknown, defaulting to 1000 [ 266.668575][T12207] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 266.686756][T12207] netlink: 'syz.2.1567': attribute type 1 has an invalid length. [ 266.983581][T12231] FAULT_INJECTION: forcing a failure. [ 266.983581][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.016526][T12231] CPU: 0 UID: 0 PID: 12231 Comm: syz.2.1572 Not tainted syzkaller #0 PREEMPT(full) [ 267.016558][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.016571][T12231] Call Trace: [ 267.016579][T12231] [ 267.016589][T12231] dump_stack_lvl+0xe8/0x150 [ 267.016624][T12231] should_fail_ex+0x412/0x560 [ 267.016654][T12231] _copy_from_user+0x2d/0xb0 [ 267.016686][T12231] __sys_bind+0x1c6/0x410 [ 267.016715][T12231] ? __pfx___sys_bind+0x10/0x10 [ 267.016752][T12231] ? __pfx_ksys_write+0x10/0x10 [ 267.016782][T12231] __x64_sys_bind+0x7a/0x90 [ 267.016809][T12231] do_syscall_64+0x14d/0xf80 [ 267.016838][T12231] ? trace_irq_disable+0x3b/0x150 [ 267.016868][T12231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.016890][T12231] ? clear_bhb_loop+0x40/0x90 [ 267.016916][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.016937][T12231] RIP: 0033:0x7f591b19c799 [ 267.016959][T12231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.016977][T12231] RSP: 002b:00007f591c088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 267.017001][T12231] RAX: ffffffffffffffda RBX: 00007f591b415fa0 RCX: 00007f591b19c799 [ 267.017017][T12231] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 267.017030][T12231] RBP: 00007f591c088090 R08: 0000000000000000 R09: 0000000000000000 [ 267.017043][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.017056][T12231] R13: 00007f591b416038 R14: 00007f591b415fa0 R15: 00007ffc0829bf48 [ 267.017089][T12231] [ 267.348351][T12220] bond3: Removing last ns target with arp_interval on [ 267.392146][T12234] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 267.573280][T12241] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 267.650552][T12241] bond2 (unregistering): Released all slaves [ 267.798639][T12225] syzkaller1: entered promiscuous mode [ 267.816843][T12225] syzkaller1: entered allmulticast mode [ 268.250345][T12274] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 268.345931][T12274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.452662][T12278] vlan2: entered promiscuous mode [ 268.482119][T12278] bond7: entered promiscuous mode [ 268.498240][T12278] vlan2: entered allmulticast mode [ 268.503431][T12278] bond7: entered allmulticast mode [ 268.565794][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.652914][T12295] ip6t_srh: unknown srh match flags 4000 [ 268.706415][T12298] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 268.754645][T12298] bond2: entered promiscuous mode [ 268.762033][T12298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.777853][T12305] bond2: entered allmulticast mode [ 268.810163][T12298] bond2: (slave bridge3): making interface the new active one [ 268.819833][T12298] bridge3: entered promiscuous mode [ 268.826254][T12298] bridge3: entered allmulticast mode [ 268.834565][T12298] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 268.898782][T12298] __nla_validate_parse: 16 callbacks suppressed [ 268.898807][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 268.955670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 268.963825][ C1] lec:lec_tx_timeout: lec0 [ 268.968895][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 269.120268][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 269.129913][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 269.216401][T12315] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 269.246899][T12315] bond8 (unregistering): Released all slaves [ 269.400717][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1598'. [ 269.696209][ T5829] Bluetooth: hci4: link tx timeout [ 269.702075][ T5829] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 270.089150][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 270.387947][T12377] x_tables: duplicate underflow at hook 3 [ 270.757683][T12397] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 270.789739][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1616'. [ 271.007802][T12408] tipc: Enabling of bearer rejected, already enabled [ 271.074484][T12410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.081821][T12410] IPv6: NLM_F_CREATE should be set when creating new route [ 271.089160][T12410] IPv6: NLM_F_CREATE should be set when creating new route [ 271.419094][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1627'. [ 271.450356][T12423] netlink: 'syz.3.1626': attribute type 11 has an invalid length. [ 271.576420][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'. [ 271.766917][ T5141] Bluetooth: hci4: command 0x0406 tx timeout [ 271.787729][T12438] siw: device registration error -23 [ 273.975668][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 273.983822][ C1] lec:lec_tx_timeout: lec0 [ 273.988763][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.139326][T12473] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 274.168345][T12473] netlink: 'syz.4.1637': attribute type 2 has an invalid length. [ 274.207525][T12473] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 274.217957][T12472] lo speed is unknown, defaulting to 1000 [ 274.228084][T12474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1638'. [ 274.236686][T12473] netlink: 'syz.4.1637': attribute type 3 has an invalid length. [ 274.252138][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 274.286485][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 274.680409][T12488] lo speed is unknown, defaulting to 1000 [ 274.884247][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 274.901790][T12502] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 274.912023][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'. [ 274.924022][T12502] bond8 (unregistering): Released all slaves [ 275.672174][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 275.708110][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1653'. [ 275.799202][T12534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1654'. [ 275.907387][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1654'. [ 275.943977][T12536] nbd: device at index 64 is going down [ 275.978410][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 276.089239][T12546] netlink: 'syz.0.1658': attribute type 2 has an invalid length. [ 276.103455][T12540] bridge4: entered promiscuous mode [ 276.111892][T12540] macsec2: entered promiscuous mode [ 276.156337][T12540] bridge4: port 1(macsec2) entered blocking state [ 276.163272][T12540] bridge4: port 1(macsec2) entered disabled state [ 276.188185][T12540] macsec2: entered allmulticast mode [ 276.209255][T12540] bridge4: entered allmulticast mode [ 276.257185][T12540] macsec2: left allmulticast mode [ 276.264692][ T6092] udevd[6092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 276.276803][T12540] bridge4: left allmulticast mode [ 276.314737][T12540] bridge4: left promiscuous mode [ 276.397938][T12550] lo speed is unknown, defaulting to 1000 [ 276.558389][T12562] veth3: entered promiscuous mode [ 277.107517][T12603] --map-set only usable from mangle table [ 277.450552][T12613] netlink: 'syz.4.1674': attribute type 2 has an invalid length. [ 277.568727][T12613] !9: entered promiscuous mode [ 277.752114][ T5829] block nbd2: Receive control failed (result -32) [ 277.802462][T12621] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 277.828345][T12621] bond3 (unregistering): Released all slaves [ 278.561153][T12671] dvmrp0: entered allmulticast mode [ 278.587105][T12667] lo speed is unknown, defaulting to 1000 [ 278.671617][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.735233][T12675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.755102][ T5878] udevd[5878]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 278.785140][ T6092] udevd[6092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 279.005674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 279.013783][ C1] lec:lec_tx_timeout: lec0 [ 279.018658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.053587][ T29] audit: type=1800 audit(1772278347.828:7): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1700" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1805 res=0 errno=0 [ 279.148942][T12705] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.466891][T12738] __nla_validate_parse: 9 callbacks suppressed [ 279.466914][T12738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 279.516229][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'. [ 279.603941][T12736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 279.910487][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 279.944183][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 280.229134][T12779] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 280.290746][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 280.369971][T12790] siw: device registration error -23 [ 280.392931][ T29] audit: type=1804 audit(1772278349.168:8): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1718" name="/newroot/335/memory.events" dev="tmpfs" ino=1725 res=1 errno=0 [ 280.420576][ T29] audit: type=1800 audit(1772278349.168:9): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1718" name="memory.events" dev="tmpfs" ino=1725 res=0 errno=0 [ 281.020872][T12815] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1721'. [ 281.361626][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 281.470455][T12850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1733'. [ 281.743385][T12858] netlink: 'syz.1.1738': attribute type 11 has an invalid length. [ 281.911663][T12874] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1742'. [ 282.163938][T12886] netlink: 'syz.2.1743': attribute type 4 has an invalid length. [ 282.247447][T12885] lo speed is unknown, defaulting to 1000 [ 282.351963][T12899] sit0: entered promiscuous mode [ 282.369239][T12899] sit0: entered allmulticast mode [ 282.945404][T12920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.299573][T12937] pimreg: left allmulticast mode [ 283.640681][T12965] xt_recent: Unsupported userspace flags (000000b1) [ 284.025788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 284.033888][ C1] lec:lec_tx_timeout: lec0 [ 284.038540][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 284.136730][T13005] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 284.298236][T13010] netlink: 'syz.0.1777': attribute type 3 has an invalid length. [ 286.902317][T12981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.925854][T13013] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 286.941320][T13013] __nla_validate_parse: 11 callbacks suppressed [ 286.941341][T13013] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1778'. [ 287.088226][T13020] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 287.098974][T13020] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1780'. [ 287.664590][T13053] netlink: 876 bytes leftover after parsing attributes in process `syz.4.1789'. [ 287.685470][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 287.991350][T13075] xt_HMARK: proto mask must be zero with L3 mode [ 288.038819][T13081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1797'. [ 288.190570][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 288.557436][T13111] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.045761][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 289.053923][ C1] lec:lec_tx_timeout: lec0 [ 289.058820][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.692921][T13056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.012745][T13138] syzkaller1: entered promiscuous mode [ 291.018788][T13138] syzkaller1: entered allmulticast mode [ 291.046009][T13141] dvmrp1: entered allmulticast mode [ 291.379386][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 291.399566][T13165] netlink: 'syz.1.1817': attribute type 20 has an invalid length. [ 291.439913][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 291.507566][T13171] netlink: 'syz.4.1819': attribute type 2 has an invalid length. [ 291.518775][T13157] tipc: Enabled bearer , priority 0 [ 291.526856][T13157] syzkaller0: entered promiscuous mode [ 291.532384][T13157] syzkaller0: entered allmulticast mode [ 291.593502][T13174] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 291.620021][T13174] bond6 (unregistering): Released all slaves [ 291.721883][T13157] tipc: Resetting bearer [ 291.782961][T13155] tipc: Resetting bearer [ 291.857484][T13189] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.864676][T13155] tipc: Disabling bearer [ 291.921493][T13189] syzkaller0: entered promiscuous mode [ 291.928109][T13189] syzkaller0: entered allmulticast mode [ 291.940089][T13189] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1823'. [ 292.226929][T13201] SET target dimension over the limit! [ 292.428005][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'. [ 292.781955][T13238] lo speed is unknown, defaulting to 1000 [ 293.189397][T13259] xt_hashlimit: size too large, truncated to 1048576 [ 293.381945][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 294.065658][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 294.073759][ C1] lec:lec_tx_timeout: lec0 [ 294.078428][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.386580][T13310] xt_hashlimit: size too large, truncated to 1048576 [ 294.446600][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 294.478329][T13316] bridge_slave_0 (unregistering): left allmulticast mode [ 294.485770][T13316] bridge_slave_0 (unregistering): left promiscuous mode [ 294.493472][T13316] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.544302][T13320] netlink: 'syz.2.1857': attribute type 2 has an invalid length. [ 294.616405][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 294.682392][T13320] !9: entered promiscuous mode [ 294.766405][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1857'. [ 295.036734][T13332] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1862'. [ 295.057849][ T6525] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.066801][ T6525] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.093313][ T6525] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.113089][ T6525] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.135244][ T6525] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.182433][ T6525] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.216393][ T6525] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.240860][T13347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1864'. [ 295.241397][ T6525] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.315017][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 295.327706][T13349] bridge0: entered allmulticast mode [ 295.334274][T13349] bridge_slave_1: left allmulticast mode [ 295.341216][T13349] bridge_slave_1: left promiscuous mode [ 295.347356][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.386565][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 297.301198][T13304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.568199][T13358] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 297.582041][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 297.591745][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 297.603628][T13358] bond8 (unregistering): Released all slaves [ 297.650816][T13374] netlink: 'syz.2.1871': attribute type 10 has an invalid length. [ 297.658992][T13374] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1871'. [ 297.774721][T13380] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 297.972528][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 298.176550][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.278309][ T5901] lo speed is unknown, defaulting to 1000 [ 298.366687][T13405] netlink: 202960 bytes leftover after parsing attributes in process `syz.2.1880'. [ 298.526105][T13410] geneve3: entered promiscuous mode [ 298.536178][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.544623][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.572828][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.589686][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.746630][T13419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1884'. [ 298.837252][T13421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1885'. [ 298.885930][ T5901] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.913126][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 299.085676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 299.093807][ C1] lec:lec_tx_timeout: lec0 [ 299.098592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.538277][T13462] tipc: Can't bind to reserved service type 0 [ 299.700998][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1898'. [ 299.782928][T13471] syzkaller1: entered promiscuous mode [ 299.789137][T13471] syzkaller1: entered allmulticast mode [ 300.126564][T13482] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1903'. [ 300.135940][T13482] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 300.394380][T13495] dvmrp0: entered allmulticast mode [ 300.427955][T13492] lo speed is unknown, defaulting to 1000 [ 300.461330][T13500] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.744844][T13519] x_tables: unsorted underflow at hook 3 [ 300.919608][T13513] delete_channel: no stack [ 301.079268][T13528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.611210][T13576] lo speed is unknown, defaulting to 1000 [ 303.377164][T13582] netlink: 'syz.2.1930': attribute type 21 has an invalid length. [ 303.385262][T13582] __nla_validate_parse: 9 callbacks suppressed [ 303.385276][T13582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1930'. [ 303.400967][T13582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1930'. [ 303.734075][T13517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.932842][T13586] x_tables: ip_tables: osf match: only valid for protocol 6 [ 304.105679][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.113757][ C1] lec:lec_tx_timeout: lec0 [ 304.118387][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.221732][T13597] lo speed is unknown, defaulting to 1000 [ 304.310474][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1937'. [ 304.528384][T13604] lo speed is unknown, defaulting to 1000 [ 305.652815][T13655] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.956186][T13664] lo speed is unknown, defaulting to 1000 [ 306.355029][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1965'. [ 306.383354][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1965'. [ 306.443242][T13706] netlink: 'syz.4.1966': attribute type 39 has an invalid length. [ 307.031542][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 307.281713][T13721] lo speed is unknown, defaulting to 1000 [ 308.005782][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 308.005789][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 308.881413][T13672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.226164][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 309.681476][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 309.999597][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 310.037811][T13771] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 310.048175][T13769] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 310.074964][T13769] netlink: 'syz.1.1981': attribute type 8 has an invalid length. [ 310.105832][T13769] netlink: 'syz.1.1981': attribute type 9 has an invalid length. [ 310.147179][T13769] netlink: 'syz.1.1981': attribute type 10 has an invalid length. [ 310.165644][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6060 ms [ 310.173724][ C1] lec:lec_tx_timeout: lec0 [ 310.178772][T13769] netlink: 'syz.1.1981': attribute type 11 has an invalid length. [ 310.180121][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.196158][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 310.267429][T13780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1983'. [ 310.295030][T13778] bond8: entered allmulticast mode [ 310.322771][T13780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.356223][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 310.365246][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 310.416536][T13780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.436762][T13780] bond0 (unregistering): Released all slaves [ 310.585116][T13787] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 310.637819][T13787] bond3 (unregistering): Released all slaves [ 310.673288][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 310.708345][T13805] netlink: 'syz.0.1987': attribute type 64 has an invalid length. [ 310.751970][T13805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 310.972292][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 311.029190][T13814] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 311.082013][T13814] netlink: 'syz.2.1992': attribute type 2 has an invalid length. [ 311.171758][T13830] syzkaller0: entered promiscuous mode [ 311.178270][T13830] syzkaller0: entered allmulticast mode [ 311.189603][T13829] tipc: Cannot configure node identity twice [ 311.537079][T13846] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 311.581817][T13846] bond0: entered promiscuous mode [ 311.588838][T13846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.700560][T13846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.712015][T13846] bond0: (slave bond6): making interface the new active one [ 311.732586][T13846] bond6: entered promiscuous mode [ 311.739441][T13846] bond0: (slave bond6): Enslaving as an active interface with an up link [ 311.899012][T13857] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 311.923269][T13857] bond5 (unregistering): Released all slaves [ 313.369169][T13909] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 313.375292][T13909] syzkaller1: linktype set to 778 [ 313.490558][T13909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.580160][T13913] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 313.612006][T13913] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 313.971874][T13921] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.119874][T13929] sit0: left promiscuous mode [ 314.127140][T13929] sit0: left allmulticast mode [ 314.141231][T13924] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 314.151931][T13929] veth0_vlan: left allmulticast mode [ 314.164339][T13929] ip6gretap1: left promiscuous mode [ 314.187136][T13929] ip6gretap1: left allmulticast mode [ 314.258107][T13929] geneve2: left promiscuous mode [ 314.264251][T13929] sit1: left promiscuous mode [ 314.269864][T13929] bridge5: left allmulticast mode [ 314.275480][T13929] bond4: left promiscuous mode [ 314.354516][T13929] bond5: left promiscuous mode [ 314.362230][T13929] bond5: left allmulticast mode [ 314.372840][T13929] geneve3: left promiscuous mode [ 314.407650][T13929] __nla_validate_parse: 7 callbacks suppressed [ 314.407670][T13929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2019'. [ 314.410319][T13930] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 314.435891][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2022'. [ 314.445862][T13930] bond7 (unregistering): Released all slaves [ 314.465952][T13947] netlink: 'syz.0.2019': attribute type 66 has an invalid length. [ 314.474094][ T132] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.483714][ T132] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.492622][T13927] lo speed is unknown, defaulting to 1000 [ 314.518711][ T132] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.527494][ T132] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.772305][T13961] lo speed is unknown, defaulting to 1000 [ 314.781760][T13961] lo speed is unknown, defaulting to 1000 [ 314.788632][T13961] lo speed is unknown, defaulting to 1000 [ 315.196629][T13969] syzkaller0: entered promiscuous mode [ 315.202168][T13969] syzkaller0: entered allmulticast mode [ 315.273438][T13976] veth1_vlan: left promiscuous mode [ 315.309404][T13961] infiniband sqz0: set down [ 315.316791][T13961] infiniband sqz0: added lo [ 315.328946][ T5901] lo speed is unknown, defaulting to 1000 [ 315.469487][T13961] RDS/IB: sqz0: added [ 315.474498][T13961] smc: adding ib device sqz0 with port count 1 [ 315.516611][T13961] smc: ib device sqz0 port 1 has no pnetid [ 315.737040][T14003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 315.856623][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 315.929579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 315.937671][ C1] lec:lec_tx_timeout: lec0 [ 315.943005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.973318][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2033'. [ 315.982708][T14008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2033'. [ 316.943335][ T5901] lo speed is unknown, defaulting to 1000 [ 316.955841][T14003] batman_adv: batadv0: Interface deactivated: macsec1 [ 316.976711][T14003] batman_adv: batadv0: Removing interface: macsec1 [ 317.020757][T13961] lo speed is unknown, defaulting to 1000 [ 317.099055][T14004] lo speed is unknown, defaulting to 1000 [ 317.192853][T14014] GUP no longer grows the stack in syz.4.2036 (14014): 200000003000-20000000a000 (200000001000) [ 317.204302][T14014] CPU: 1 UID: 0 PID: 14014 Comm: syz.4.2036 Not tainted syzkaller #0 PREEMPT(full) [ 317.204332][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.204360][T14014] Call Trace: [ 317.204370][T14014] [ 317.204379][T14014] dump_stack_lvl+0xe8/0x150 [ 317.204417][T14014] __get_user_pages+0x2453/0x29d0 [ 317.204449][T14014] ? __lock_acquire+0x6b5/0x2cf0 [ 317.204499][T14014] ? __gup_longterm_locked+0xc4e/0x1630 [ 317.204531][T14014] ? down_read_killable+0x1bb/0x340 [ 317.204572][T14014] __gup_longterm_locked+0xdcf/0x1630 [ 317.204633][T14014] gup_fast_fallback+0x1d82/0x22e0 [ 317.204701][T14014] ? __pfx_gup_fast_fallback+0x10/0x10 [ 317.204737][T14014] ? is_valid_gup_args+0x11f/0x200 [ 317.204771][T14014] ? get_user_pages_fast+0x4d/0xb0 [ 317.204821][T14014] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 317.204861][T14014] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 317.204901][T14014] iov_iter_get_pages2+0x5e/0xa0 [ 317.204942][T14014] __se_sys_vmsplice+0x7b3/0x1490 [ 317.204997][T14014] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 317.205035][T14014] ? __pfx_futex_wake+0x10/0x10 [ 317.205096][T14014] ? kmem_cache_free+0x187/0x630 [ 317.205127][T14014] ? do_sys_openat2+0x14c/0x200 [ 317.205204][T14014] do_syscall_64+0x14d/0xf80 [ 317.205234][T14014] ? trace_irq_disable+0x3b/0x150 [ 317.205267][T14014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.205290][T14014] ? clear_bhb_loop+0x40/0x90 [ 317.205318][T14014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.205340][T14014] RIP: 0033:0x7fba9539c799 [ 317.205362][T14014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.205382][T14014] RSP: 002b:00007fba935f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 317.205407][T14014] RAX: ffffffffffffffda RBX: 00007fba95615fa0 RCX: 00007fba9539c799 [ 317.205423][T14014] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 317.205437][T14014] RBP: 00007fba95432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 317.205451][T14014] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 317.205464][T14014] R13: 00007fba95616038 R14: 00007fba95615fa0 R15: 00007ffde6fadd08 [ 317.205500][T14014] [ 317.484047][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.704275][T14025] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.716748][T14025] bond9 (unregistering): Released all slaves [ 317.736641][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 317.750298][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'. [ 317.763849][T13961] lo speed is unknown, defaulting to 1000 [ 317.949165][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'. [ 317.965561][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 317.975302][T14037] netlink: 'syz.0.2041': attribute type 3 has an invalid length. [ 318.120448][T14004] lo speed is unknown, defaulting to 1000 [ 318.289896][T13961] lo speed is unknown, defaulting to 1000 [ 318.505173][T13961] lo speed is unknown, defaulting to 1000 [ 318.667058][T13961] lo speed is unknown, defaulting to 1000 [ 318.825701][T14016] lo speed is unknown, defaulting to 1000 [ 318.836941][T14016] lo speed is unknown, defaulting to 1000 [ 318.845508][T14016] lo speed is unknown, defaulting to 1000 [ 319.147851][T14056] netlink: 'syz.4.2044': attribute type 7 has an invalid length. [ 319.156207][T14056] netlink: 'syz.4.2044': attribute type 8 has an invalid length. [ 319.179963][T14056] erspan0: entered promiscuous mode [ 319.187460][T14056] gretap0: entered promiscuous mode [ 319.194736][T14056] erspan0: left promiscuous mode [ 319.213822][T14056] gretap0: left promiscuous mode [ 319.287263][T14016] infiniband syz0: set down [ 319.291860][ T5901] lo speed is unknown, defaulting to 1000 [ 319.302862][T14016] infiniband syz0: added lo [ 319.310020][T14016] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 319.314837][T14016] infiniband syz0: Couldn't open port 1 [ 319.360408][T14016] RDS/IB: syz0: added [ 319.364543][T14016] smc: adding ib device syz0 with port count 1 [ 319.372724][T14016] smc: ib device syz0 port 1 has no pnetid [ 319.379424][ T5901] lo speed is unknown, defaulting to 1000 [ 319.388004][T14016] lo speed is unknown, defaulting to 1000 [ 319.540384][T14064] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 319.549278][T14064] openvswitch: netlink: Message has 8 unknown bytes. [ 319.618113][T14068] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 319.772359][T14016] lo speed is unknown, defaulting to 1000 [ 319.969530][T14083] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 319.977859][T14082] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 319.997181][T14082] __nla_validate_parse: 2 callbacks suppressed [ 319.997200][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 320.013725][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 320.024764][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 320.034430][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 320.112927][T14016] lo speed is unknown, defaulting to 1000 [ 320.331211][T14090] veth1_to_hsr: left allmulticast mode [ 320.340254][T14090] veth1_to_hsr: left promiscuous mode [ 320.506002][T14016] lo speed is unknown, defaulting to 1000 [ 320.597520][T14099] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 320.609273][T14099] bond4 (unregistering): Released all slaves [ 320.628213][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 320.637606][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 320.818908][T14016] lo speed is unknown, defaulting to 1000 [ 320.955711][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 320.963825][ C1] lec:lec_tx_timeout: lec0 [ 320.968585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.037744][T14042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.304706][T14122] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.519434][T14130] syzkaller0: entered promiscuous mode [ 321.538583][T14130] syzkaller0: entered allmulticast mode [ 321.738798][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 321.748384][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 321.929055][T14142] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 321.997299][T14142] bond9 (unregistering): Released all slaves [ 322.157674][T14130] lo speed is unknown, defaulting to 1000 [ 322.165422][T14130] lo speed is unknown, defaulting to 1000 [ 322.297892][T14158] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 322.521115][T14161] vlan4: entered allmulticast mode [ 322.546472][T14161] bond9: entered allmulticast mode [ 322.871734][T14130] lo speed is unknown, defaulting to 1000 [ 322.996543][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 323.008406][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 323.225527][T14191] lo speed is unknown, defaulting to 1000 [ 323.234764][T14191] lo speed is unknown, defaulting to 1000 [ 323.352937][T14177] netlink: 'syz.4.2072': attribute type 62 has an invalid length. [ 323.364875][T14176] lec:lec_atm_close: lec0: Shut down! [ 323.862768][T14200] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 323.897878][T14200] bond10 (unregistering): Released all slaves [ 323.935407][T14191] lo speed is unknown, defaulting to 1000 [ 324.908182][T14238] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 325.370685][T14250] xt_policy: neither incoming nor outgoing policy selected [ 325.433774][T14259] __nla_validate_parse: 6 callbacks suppressed [ 325.433797][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 325.457609][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 325.566125][T14250] xt_CT: No such helper "snmp_trap" [ 325.621583][T14251] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 325.647505][T14251] bond4 (unregistering): Released all slaves [ 325.950808][T14276] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2096'. [ 325.973110][T14276] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2096'. [ 326.174458][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 326.233532][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 326.246756][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 326.257363][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 326.306279][T14290] xfrm0: entered promiscuous mode [ 326.311692][T14290] xfrm0: entered allmulticast mode [ 326.328047][T14289] bond2: option mode: unable to set because the bond device has slaves [ 326.339096][T14289] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.351199][T14289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.388211][T14292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.430144][T14292] tipc: Enabled bearer , priority 10 [ 326.603870][T14304] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 326.616644][T14304] bond5 (unregistering): Released all slaves [ 326.626851][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 326.637129][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 327.158749][T14339] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 327.501010][T14353] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.568255][T14353] bond6 (unregistering): Released all slaves [ 327.645934][ T5901] tipc: Node number set to 2412109604 [ 327.733838][T14363] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 327.782175][T14363] bond11 (unregistering): Released all slaves [ 328.308478][T14387] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 328.885665][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 328.893824][ C1] lec:lec_tx_timeout: lec0 [ 328.898676][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.898086][T14404] syzkaller0: entered promiscuous mode [ 329.903640][T14404] syzkaller0: entered allmulticast mode [ 331.042318][T14385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.244607][T14413] netlink: 'syz.4.2137': attribute type 1 has an invalid length. [ 331.288827][T14412] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 331.299223][T14420] __nla_validate_parse: 9 callbacks suppressed [ 331.299242][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 331.315988][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'. [ 331.330534][T14412] bond5 (unregistering): Released all slaves [ 331.386854][T14414] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 331.389820][T14413] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 331.434603][T14419] gretap2: entered allmulticast mode [ 331.476502][T14431] netlink: 'syz.2.2138': attribute type 6 has an invalid length. [ 331.500621][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 331.523252][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 331.541224][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 331.557259][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 331.566873][T14425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2139'. [ 331.849911][T14442] lo speed is unknown, defaulting to 1000 [ 331.861424][T14442] lo speed is unknown, defaulting to 1000 [ 331.943389][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 332.119398][T14442] lo speed is unknown, defaulting to 1000 [ 332.397722][T14463] netlink: 'syz.1.2150': attribute type 16 has an invalid length. [ 332.409212][T14463] netlink: 'syz.1.2150': attribute type 3 has an invalid length. [ 332.417564][T14463] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2150'. [ 332.428809][T14463] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2150'. [ 332.959926][T14470] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 332.989872][T14470] bond5 (unregistering): Released all slaves [ 333.177289][T14477] lo speed is unknown, defaulting to 1000 [ 333.201620][T14477] lo speed is unknown, defaulting to 1000 [ 333.537374][T14485] lo speed is unknown, defaulting to 1000 [ 333.601830][T14494] netlink: 'syz.2.2158': attribute type 16 has an invalid length. [ 333.610350][T14494] netlink: 'syz.2.2158': attribute type 17 has an invalid length. [ 333.679582][T14494] ip6tnl0: left promiscuous mode [ 333.737782][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.758652][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.792383][T14494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.925690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 333.932105][ T5829] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 333.933799][ C1] lec:lec_tx_timeout: lec0 [ 333.944692][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.002318][T14477] lo speed is unknown, defaulting to 1000 [ 334.017805][T14485] lo speed is unknown, defaulting to 1000 [ 334.096920][T14504] netlink: 'syz.2.2161': attribute type 1 has an invalid length. [ 334.221490][T14504] bond4: entered promiscuous mode [ 334.249265][T14504] bond4: entered allmulticast mode [ 334.254865][T14504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.389187][T14508] erspan2: entered allmulticast mode [ 334.434261][T14508] bond4: (slave erspan2): making interface the new active one [ 334.526242][T14508] erspan2: entered promiscuous mode [ 334.558244][T14508] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 334.577064][T14505] IPVS: length: 132 != 8 [ 335.287795][T14485] lo speed is unknown, defaulting to 1000 [ 335.723447][T14524] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 335.737432][T14524] bond6 (unregistering): Released all slaves [ 335.861851][T14530] veth0_to_team: entered promiscuous mode [ 335.896109][T14530] veth0_to_team: left promiscuous mode [ 336.380027][T14545] __nla_validate_parse: 12 callbacks suppressed [ 336.380047][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 337.062188][T14560] netlink: 'syz.2.2176': attribute type 16 has an invalid length. [ 337.095826][T14560] netlink: 'syz.2.2176': attribute type 17 has an invalid length. [ 337.138950][T14560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.529578][ T797] [ 337.531977][ T797] ============================================ [ 337.538153][ T797] WARNING: possible recursive locking detected [ 337.544341][ T797] syzkaller #0 Not tainted [ 337.548785][ T797] -------------------------------------------- [ 337.555038][ T797] kworker/1:2/797 is trying to acquire lock: [ 337.561038][ T797] ffff888034790d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 337.571028][ T797] [ 337.571028][ T797] but task is already holding lock: [ 337.578512][ T797] ffff88805ea4c958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 337.588406][ T797] [ 337.588406][ T797] other info that might help us debug this: [ 337.596608][ T797] Possible unsafe locking scenario: [ 337.596608][ T797] [ 337.604073][ T797] CPU0 [ 337.607368][ T797] ---- [ 337.610662][ T797] lock(&qdisc_xmit_lock_key#4); [ 337.615708][ T797] lock(&qdisc_xmit_lock_key#4); [ 337.620755][ T797] [ 337.620755][ T797] *** DEADLOCK *** [ 337.620755][ T797] [ 337.628916][ T797] May be due to missing lock nesting notation [ 337.628916][ T797] [ 337.637269][ T797] 15 locks held by kworker/1:2/797: [ 337.642500][ T797] #0: ffff888031ca4948 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 337.653278][ T797] #1: ffffc90003dd7c40 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 337.666443][ T797] #2: ffff8880584f3538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x3d/0x5b0 [ 337.675702][ T797] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 337.684956][ T797] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 337.694033][ T797] #5: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 337.704061][ T797] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 337.713569][ T797] #7: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 337.723602][ T797] #8: ffff88805459c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890 [ 337.736331][ T797] #9: ffff88805ea4c958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 337.746632][ T797] #10: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 337.755634][ T797] #11: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 337.765957][ T797] #12: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 337.774888][ T797] #13: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 337.784935][ T797] #14: ffff88805619f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890 [ 337.797676][ T797] [ 337.797676][ T797] stack backtrace: [ 337.803630][ T797] CPU: 1 UID: 0 PID: 797 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 337.803650][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.803664][ T797] Workqueue: mld mld_dad_work [ 337.803687][ T797] Call Trace: [ 337.803694][ T797] [ 337.803702][ T797] dump_stack_lvl+0xe8/0x150 [ 337.803727][ T797] print_deadlock_bug+0x279/0x290 [ 337.803755][ T797] __lock_acquire+0x253f/0x2cf0 [ 337.803779][ T797] ? skb_network_protocol+0x23d/0x3f0 [ 337.803806][ T797] ? netif_skb_features+0x9bc/0xe40 [ 337.803835][ T797] ? validate_xmit_skb+0xc5f/0x14a0 [ 337.803869][ T797] lock_acquire+0xf0/0x2e0 [ 337.803890][ T797] ? sch_direct_xmit+0x15f/0x4c0 [ 337.803913][ T797] _raw_spin_lock+0x2e/0x40 [ 337.803933][ T797] ? sch_direct_xmit+0x15f/0x4c0 [ 337.803950][ T797] sch_direct_xmit+0x15f/0x4c0 [ 337.803971][ T797] ? __pfx_sch_direct_xmit+0x10/0x10 [ 337.803989][ T797] ? arp_create+0x190/0xa00 [ 337.804010][ T797] ? arp_send_dst+0xa7/0x2a0 [ 337.804033][ T797] __dev_queue_xmit+0x1550/0x3890 [ 337.804052][ T797] ? __dev_queue_xmit+0x277/0x3890 [ 337.804071][ T797] ? arpt_do_table+0x261/0x1ec0 [ 337.804091][ T797] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.804110][ T797] ? __pfx_arpt_do_table+0x10/0x10 [ 337.804128][ T797] ? trace_kmem_cache_alloc+0x29/0xf0 [ 337.804162][ T797] ? NF_HOOK+0xa2/0x3c0 [ 337.804185][ T797] NF_HOOK+0x33a/0x3c0 [ 337.804207][ T797] ? __pfx_arp_xmit_finish+0x10/0x10 [ 337.804229][ T797] ? NF_HOOK+0xa2/0x3c0 [ 337.804250][ T797] ? __pfx_NF_HOOK+0x10/0x10 [ 337.804272][ T797] ? __pfx_arp_xmit_finish+0x10/0x10 [ 337.804298][ T797] arp_xmit+0x16c/0x270 [ 337.804318][ T797] ? arp_xmit+0x23/0x270 [ 337.804340][ T797] arp_solicit+0xbe0/0xe40 [ 337.804365][ T797] ? arp_solicit+0x119/0xe40 [ 337.804388][ T797] ? __pfx_arp_solicit+0x10/0x10 [ 337.804412][ T797] ? __neigh_event_send+0xe9d/0x1530 [ 337.804433][ T797] ? __pfx_arp_solicit+0x10/0x10 [ 337.804455][ T797] __neigh_event_send+0xf05/0x1530 [ 337.804480][ T797] neigh_resolve_output+0x198/0x750 [ 337.804502][ T797] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 337.804528][ T797] ? ip_finish_output2+0x3c2/0x1070 [ 337.804550][ T797] ip_finish_output2+0xca9/0x1070 [ 337.804572][ T797] ? ip_skb_dst_mtu+0x109/0xa50 [ 337.804594][ T797] ? ip_finish_output+0x33a/0x3f0 [ 337.804616][ T797] ip_output+0x29f/0x450 [ 337.804635][ T797] ? ip_output+0x5b/0x450 [ 337.804655][ T797] iptunnel_xmit+0x59f/0xa00 [ 337.804686][ T797] ip_tunnel_xmit+0x193a/0x1f20 [ 337.804717][ T797] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 337.804741][ T797] ? __pfx_gre_build_header+0x10/0x10 [ 337.804761][ T797] ? kfree+0x1c1/0x630 [ 337.804785][ T797] ? pskb_expand_head+0x560/0x1320 [ 337.804813][ T797] __gre_xmit+0x19e/0x240 [ 337.804833][ T797] ? __pfx___gre_xmit+0x10/0x10 [ 337.804861][ T797] erspan_xmit+0xa81/0x1670 [ 337.804888][ T797] ? __pfx_erspan_xmit+0x10/0x10 [ 337.804912][ T797] dev_hard_start_xmit+0x2d8/0x870 [ 337.804945][ T797] sch_direct_xmit+0x251/0x4c0 [ 337.804969][ T797] ? __pfx_sch_direct_xmit+0x10/0x10 [ 337.804988][ T797] ? __lock_acquire+0x650/0x2cf0 [ 337.805011][ T797] __dev_queue_xmit+0x1550/0x3890 [ 337.805030][ T797] ? __dev_queue_xmit+0x277/0x3890 [ 337.805051][ T797] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.805069][ T797] ? __lock_acquire+0x6b5/0x2cf0 [ 337.805098][ T797] ? bond_do_alb_xmit+0x600/0x820 [ 337.805123][ T797] ? bond_dev_queue_xmit+0x9c/0x150 [ 337.805148][ T797] bond_start_xmit+0x766/0x1900 [ 337.805170][ T797] ? bond_start_xmit+0xb4/0x1900 [ 337.805187][ T797] ? __pfx_bond_start_xmit+0x10/0x10 [ 337.805205][ T797] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 337.805222][ T797] ? skb_network_protocol+0x23d/0x3f0 [ 337.805249][ T797] ? __pfx_passthru_features_check+0x10/0x10 [ 337.805278][ T797] dev_hard_start_xmit+0x2d8/0x870 [ 337.805310][ T797] __dev_queue_xmit+0x16d1/0x3890 [ 337.805329][ T797] ? __dev_queue_xmit+0x277/0x3890 [ 337.805346][ T797] ? __pfx_mroute6_is_socket+0x10/0x10 [ 337.805368][ T797] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.805386][ T797] ? ip6_output+0x340/0x550 [ 337.805409][ T797] ? ip6_finish_output2+0xd39/0x13e0 [ 337.805434][ T797] ? ip6_output+0x126/0x550 [ 337.805452][ T797] ip6_output+0x340/0x550 [ 337.805472][ T797] NF_HOOK+0xa2/0x3a0 [ 337.805492][ T797] ? NF_HOOK+0xf9/0x3a0 [ 337.805511][ T797] ? __pfx_NF_HOOK+0x10/0x10 [ 337.805549][ T797] ? __pfx_dst_output+0x10/0x10 [ 337.805570][ T797] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.805596][ T797] ? __local_bh_enable_ip+0xd0/0x130 [ 337.805731][ T797] ? icmp6_dst_alloc+0x3a6/0x440 [ 337.805757][ T797] mld_sendpack+0x8b4/0xe40 [ 337.805781][ T797] ? __asan_memcpy+0x40/0x70 [ 337.805813][ T797] ? mld_sendpack+0x213/0xe40 [ 337.805834][ T797] ? __pfx_mld_sendpack+0x10/0x10 [ 337.805861][ T797] ? mld_send_initial_cr+0x352/0x550 [ 337.805878][ T797] ? process_scheduled_works+0xa25/0x1830 [ 337.805902][ T797] mld_dad_work+0x45/0x5b0 [ 337.805922][ T797] ? process_scheduled_works+0xa25/0x1830 [ 337.805944][ T797] process_scheduled_works+0xb02/0x1830 [ 337.805977][ T797] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.806003][ T797] ? assign_work+0x3d5/0x5e0 [ 337.806026][ T797] worker_thread+0xa50/0xfc0 [ 337.806059][ T797] kthread+0x388/0x470 [ 337.806075][ T797] ? __pfx_worker_thread+0x10/0x10 [ 337.806097][ T797] ? __pfx_kthread+0x10/0x10 [ 337.806113][ T797] ret_from_fork+0x51e/0xb90 [ 337.806136][ T797] ? __pfx_ret_from_fork+0x10/0x10 [ 337.806157][ T797] ? __switch_to+0xc7d/0x1450 [ 337.806176][ T797] ? __pfx_kthread+0x10/0x10 [ 337.806192][ T797] ret_from_fork_asm+0x1a/0x30 [ 337.806224][ T797] [ 338.955601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.963684][ C1] lec:lec_tx_timeout: lec0 [ 338.968283][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.071228][T14569] tipc: Resetting bearer [ 339.211140][T14569] wg1: left promiscuous mode [ 339.215952][T14569] wg1: left allmulticast mode [ 339.228565][T14569] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 339.238867][T14569] vlan2: left promiscuous mode [ 339.243666][T14569] bridge0: left promiscuous mode [ 339.249131][T14569] ip6gre1: left promiscuous mode [ 339.254326][T14569] bond1: left promiscuous mode [ 339.259250][T14569] bridge1: left promiscuous mode [ 339.264595][T14569] macvtap1: left promiscuous mode [ 339.269951][T14569] macvtap1: left allmulticast mode [ 339.275467][T14569] batadv1: left promiscuous mode [ 339.280888][T14569] batadv1: left allmulticast mode [ 339.286452][T14569] bond2: left promiscuous mode [ 339.291229][T14569] bridge3: left promiscuous mode [ 339.296388][T14569] bond2: left allmulticast mode [ 339.301507][T14569] bridge3: left allmulticast mode [ 339.307181][T14569] veth3: left promiscuous mode [ 339.313047][T14569] bond4: left promiscuous mode [ 339.317956][T14569] erspan2: left promiscuous mode [ 339.323128][T14569] bond4: left allmulticast mode [ 339.341683][T14569] erspan2: left allmulticast mode [ 339.354417][T14573] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 342.805816][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.975701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.983877][ C1] lec:lec_tx_timeout: lec0 [ 343.988583][ C1] lec:lec_start_xmit: lec0:No lecd attached