last executing test programs: 2.202381937s ago: executing program 3 (id=5478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 1.999337606s ago: executing program 3 (id=5483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='dvmrp1\x00', 0x10) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x5f085ce5a9604289}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c804}, 0x80) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r7, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 1.819245516s ago: executing program 2 (id=5487): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) connect$rxrpc(r4, &(0x7f0000000280)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x5, 0x7f, 0x88, r1, 0x10001, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r7}, 0x38) r8 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.561604484s ago: executing program 4 (id=5495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$kcm(0x29, 0x5, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYBLOB="2c24edaf67fafbd0b8eac28d2f2e65529a184bbffe6a239ebfb96cea5659c2da4487bb1996567b17530282f613", @ANYRESOCT=r1, @ANYBLOB="cb815e626284ca33ae7b81583fdd1611264f3d361b58f7e9e8112cde5a2ac85695f09e80867950bb825dd3139ad71385a6f7670cac0c3e438bee7d2a4d5aed6964279619f784f6f0e991ee5f957869fa0bd65faa8987c8c71682e591ad34fca5b84781af758bfc4469c1a171ccf9eb16e6a1d5ca77ce1fd5fb7746bd983fff05e0adc4d1f74a986df194bb1b6c11083b74dd8388461a6966540afb33353a1759114bbea63a04e7010c440d5d940533fb3382393e0b8b06676dff3c8aeada93539a6855869e5d7806cef1abcacaa80dd9376e", @ANYBLOB="27f5534337ef87e3e51886b50c51f0f486c3f8e50f76679a92522060eacfe638294ccb96522c8a96622132903079fbbf9295ee0ba290f8ac0dfc971b9f20387a43ae7f2104405d8e7e208c0c86d1d6c5265c7b54fa", @ANYBLOB="fdb89d1368766dc19807bf14414eddd46a5e8d5954a8640667a2e9f41bb90632fdc62702b70848a25db814e1e1f94ad1c8042cf26920aa018770177c69ae"], 0x10448) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1bc, 0x12, 0x20, 0x70bd25, 0x25dfdbfe, {0x1d, 0xfc, 0x1, 0x6, {0x4e23, 0x4e22, [0x200, 0x7, 0x7, 0x6], [0x6, 0x9, 0x1000, 0x6], r4, [0x80000001, 0x3]}, 0x9, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x51, 0x1, "20ccce6c959f78716fd84a45781c72929b1665ece5397e57f2c06451f6703c9680bd956991b87bbbcccae5109f3be76c5bd2bba23f82a776a5aa860abbd0941bd0674ab8ec62c75de9f6f9b60b"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "40b807142bd07c158a8c112968d631d388ddaad417e3a5437a41ec88ac7d599e013c4648d39ed918e02ab4ed55c4db353f4376fb"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "846a11"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "bcd385ce41128e6f59bff10ac1d08679d4aeb0fcfabb95aab08fcb8908af6b399953e0b18866341df0f7675b71338cc3f75d4a4a56fde84fb4532c4a1c0f970d1f2c3fd34fb9c2c3e36a170378b072535cbe0182ae7861fda55759805a064003025477629d00afcf39c6de25485090a8d82ade42d503877ad522555385115d9537901fd5d414fee7d2afc2362dc737de3efcf65e64dd62448e123071df122011bbbde2d95241b9314174fcb85d46d38a4b029b05ae6fbbbddb6766cd82b998d94fcdefbf6ee49ab272462e184ec2b42a477ea63910"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 1.438857469s ago: executing program 1 (id=5496): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x5, 0x8, 0x1, 0x100, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, &(0x7f00000001c0), 0x41100, 0x96, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x3, 0x40}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)=[r1], &(0x7f0000000340)=[{0x4, 0x1, 0xd}, {0x3, 0x3, 0xe, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.435732247s ago: executing program 2 (id=5497): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080), 0x0, 0x41) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES64=r1], 0x48}}, 0x0) 1.433275226s ago: executing program 0 (id=5498): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@newtaction={0x18, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x0) 1.417334168s ago: executing program 4 (id=5499): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r12 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.344977644s ago: executing program 1 (id=5500): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{}, [@netrom, @rose, @null, @bcast, @netrom, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x80800) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.26705906s ago: executing program 0 (id=5501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x50, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "97e6d77d25"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "d7d9647d490a7ba666106c56b7af"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000805) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8000}]}, 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x3a0000) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000300)={0x32, 0x2, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}]}, 0x18) listen(r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = accept4(r7, &(0x7f0000000140)=@ethernet={0x0, @local}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f00000001c0)=0xc53, 0x4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delchain={0x2c, 0x65, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xfff1, 0x2}, {0xfff1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) 1.266580289s ago: executing program 2 (id=5502): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='Z\x00W\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000ffdbdf250d00000005001d001d00000005001b00000000000500170005000000050017000600000005001d001600000005001a00e1000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000bc21586d7643343a507d59e3f30303bf5015f9e1d45174f2420fd1bb2e7be661869b262b16970e6c8eb8732f6d82623365e28451a3e8a29584d0a0f5a92bd018f73b7be7ef0e7eca1941fd44c37d7f38b763cff826d503ab207f59afe80d86eeb8b00650a9f513190d3a3403d6020a2937ff5cbb284774cbce3959ebc663afe81b53197687c163d68aed1e57e454a4e710d4c2963d297e38793be3b25a2ba158fc952497158e7c7d7ac75dad3bd99714ee2a77f3fa5b74f940f0fad4cfd385207b6ee4ce844e4165f88634a12c85a46d2eb290187c7a83c19e25c43314859c065214166ebfe88080a1f1c55cb731286381151fbd3d1edf", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000003c0), 0x4) r4 = socket(0x3, 0x800, 0x570) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000f184bf69cfe6697816d49f08e940bef0f1ef16e49085c82614b01be9ff28181c284fddbb3a78db420d571af5cfb4b6873e2cfcbf0870034c4f304856ac512efa271e556c9c558c85e00bb3de8f8e6a4a28f97576536dc352bbfa4662dfd1e4ef705a1331726fa8b3ee3e2e2560fc2174857925c0de64bd2f75404b2e44c8777bc4e5e7b19a37f2aff398fcdb4d6233c3a52087cdd6a15f6a8c1953fc0b0caedbb748f6d5fdcbac14b9a8f1fbb97240e4c73edfe421e2c51e985bf161cbbcf53cfd9a1a6dc4da41ae1bf7fb77a6dcff1f942d033509264408a704f494cad067345d4b7e", @ANYRES16=r5, @ANYBLOB="080026bd7000fedbdf25130000001800118004000200040005000400060004000500040003000a00bd00ff072dd8dbd200000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r8, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r8, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14001000", @ANYRES16=r10, @ANYBLOB="050327bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000080)=""/233, 0x32, 0x31, 0x1}, 0x20) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r11, 0xff08, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r12, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) ioctl(r9, 0x9bc, &(0x7f00000004c0)="cc7129d9d31c24067aa5f7f9be4bb3d05ef18fac2327f05035a0a1e06b55df22235fc06f4e2e9af14b43c0e0da2cf69cc6ebe9c66eccdea7611c91f736d5c08eb64be97599dcb594c35a4b213891f0e29cebb88ea2826a813fc180453461e249340f5a12830bad33afa10a4de3c2c8c352") (async) ioctl(r9, 0x9bc, &(0x7f00000004c0)="cc7129d9d31c24067aa5f7f9be4bb3d05ef18fac2327f05035a0a1e06b55df22235fc06f4e2e9af14b43c0e0da2cf69cc6ebe9c66eccdea7611c91f736d5c08eb64be97599dcb594c35a4b213891f0e29cebb88ea2826a813fc180453461e249340f5a12830bad33afa10a4de3c2c8c352") 1.247445014s ago: executing program 1 (id=5503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c000000", @ANYRESHEX=r2, @ANYRESHEX=r0], 0x9c}, 0x1, 0x0, 0x0, 0x2000a001}, 0x48048) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) 1.212583367s ago: executing program 4 (id=5504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000005400010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="010200006401010100000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 1.13155766s ago: executing program 1 (id=5505): socket$inet6(0xa, 0x2, 0x0) 1.106226711s ago: executing program 4 (id=5506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)={@private, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000140)=[{0x81, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c000000100001002dbd7000000000000000000084992fd47a0305860b94de35844b7bcd8ef8b6c3bcc23ed421eb0e486a67ee1a371c0571fe1860e60c2c65828fe7e11e0172adf99c6cdfe1c54d59a91a4915d97c733585f51dc53d843c0fbbbf9625091096f59b14461d1ca0edf53f234c1d452172e648b4e800722391048d7ab103aa90b2aced05ee40d9bc0d600c24d26c5de85c7b0ce7817502d69dc87c9fe57151c4941568efb2a95c8c78dd4f8703a52684fa7913bc42a538325565c4ed8d1d8ee2582dda37763350782aa7367dbf1ad33619ac91a6bebbc28781b61b6c16582ad6543d30d9d3e8418af7b41f27b938e4", @ANYRES32=r7, @ANYBLOB="28000100710701001c0016801800018014000b00210d0000000000000100000001000000"], 0x3c}}, 0x804) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r10, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x0, 0x401, 0x21, @empty, @remote, 0x0, 0x10, 0x4, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25150000005c00018008000300030000000800030003000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300010000001400020067656e6576653100000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f6272696467650040000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000180", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637365633000000000000000000020000180140002006272696467653000000000000000000008000300020000001400018008000100", @ANYRES32=r11, @ANYBLOB="0800030003000000"], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="9eb1d91a92dc7c8fff658bb539e2ffb332da224694fdccf0d42de77a0a87e914330c5422", 0x24}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) bind$netlink(r14, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r15, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r14, &(0x7f0000000c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="78060000", @ANYRES16=r16, @ANYBLOB="000826bd7000fcdbdf257a00000008000300", @ANYRES32=r17, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 1.103318857s ago: executing program 3 (id=5507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x24c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1d}]}}}, {0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x595}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffeffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb, 0x7, 0x1, 0x0, "eb523ae59e7f75"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x600}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x124, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x70000000000000}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x29}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xaa}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x18000000}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x79}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4040810}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) 983.027005ms ago: executing program 1 (id=5508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000000300260005000400ac350001140006007369743000000000000000000000000014000700000000000004000000000000008e140008000500ac141400"], 0x4c}, 0x8, 0x3000000000002}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = accept(r0, &(0x7f0000000300)=@un=@abs, &(0x7f0000000140)=0x80) write(r7, &(0x7f0000000400)="65cc8adfd5ce19582d162d47e0054271ee2e468fb370de20ed3a1092e89f99b721d6873a6a3b8e37f37d6b6073cb2e8b2eebd002e31ba8424c0b33ac18a902987a4961b6a294d87dffd85829e98d0725f28c064d97cef8cde7d2febc9d110904363edebeb62688d01ff2a78df6a09a42595e5ee9d694294b76f316a5f358208682", 0x81) 928.756788ms ago: executing program 3 (id=5509): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 851.79748ms ago: executing program 3 (id=5510): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="b94d755887a2047443ae352ed0df09c089d279c47c4897a4376e8ca120901a1f93c89f483e614f5a802048a7542f4c3073de1215b832dacf7eaeb482540435eeb996e84a8f83043dbb2158", 0x4b}, {&(0x7f0000000180)="a0abd743cfa94b8fe4e318ecafaa0121eedcfdf95937362185", 0x19}], 0x2, &(0x7f00000009c0)=[{0x68, 0x88, 0x10000, "12423021b33a616d4a00781743082006ccf7e886f62134c52fb899bb066cd9fc45f4288fc39a8452567af88d2ebf0b5c9efbc88dac2e707f39548ff2fd326d1a68d28199cf7e75ea643875c07fa8853fefbe"}, {0xd8, 0x0, 0xc11, "bde98534e03d56fac6c7684e5ff9cc42f70addb0eebfb7be0cc3f2bb1f0b55dbe3d484b4d77ae756b1d8ed16cb048594836ec755b9aa883e65298f99c8f66408b65d8bb7adcea1fa9c9948edcc2a21cfc634454b37d1c33047b5d2e48c26a11aee77df993a0fa2a35c81ba6d928e3c89644fad2e518ae3d6002d2e1a9b19437d16ee59d4a606dfadb3877f92cabec25b94a437abc4b7d3ca3cb5ff4178e304506bd39b39291b96ac0377c9c13dfe32afe36ab8e2e52d4abd31f6bd141c6041cab6637a21567e"}, {0xf8, 0x102, 0x8, "6ce7ddddd7c870c1d501addcd0755495ddff6ab7c017afcce46ee173f7614595f7238b1652eb800b8cc8ffaa599a72f3c673003ec1eabfb07b2765c4050a49f811e0fa61ed54901279a4f650c9b418aa35253369a407a65bd8db736a0a93c27c92aa6dbf007376f861cd27f4ce26cb8e0099ed6c3f129efc1db3b14fe7ef22cdea2cb87c8b01681ae52a67a0104e2d39692dcb27dc7061ef2b42982bba1a03243d098abd425d33c2884065c8709969132baafbee3fcf04f3274ce77b8ff3a1e6828a310809d5d6beb67411510b8e3b0af339dca53765d863e45b48c7e1c02165a0c653bb"}, {0x68, 0x10a, 0x2, "b66489b2e9679768824ff320af53fd67f0c4cef31e9b796c1d6ba5ea1e7ad20ca145c850ffc98c82ca91afb1ffa63607ac751acf9baf5a5c3459fc6bf9b015ff5697a83a53adca8c4ded558d4116ee61ba79"}, {0x38, 0x111, 0x200, "cb72e4453d05088a2588d8e369f49d847e89c0744830edc015d27725952d6a6668"}, {0x70, 0x11, 0x4, "9a43e77476ab0b7ebfb7a4636152e3b98af2eb49ceb6dfb76f6098b9e2fb2ee24e79c69adc91254447debae7942e6db31dfeb8360ff5e6f9c2bd613729b3e59a765731cdf62ded81f3ffb599c80e691cb6e6af72f4fc57430d42ded7aa"}, {0x18, 0x112, 0x5, '?'}, {0x50, 0x110, 0x1, "d4ed82db0fdd7f608ecb2475cc47b3a27d360fdb1ab336e13af17b3e837c213a4b6d40e406b328c8c5a25819d1f2257de838956836e9fffbc481604c0647aff3"}], 0x3b0}, 0x4040080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310300000000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 736.28837ms ago: executing program 0 (id=5511): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x808000}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000010c0)={r2, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 705.280887ms ago: executing program 0 (id=5512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf405}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000a001}, 0x48048) (fail_nth: 6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) 349.004544ms ago: executing program 2 (id=5513): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) 266.958984ms ago: executing program 2 (id=5514): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x1a, [0x11f1574c, 0x800, 0x55b, 0x0, 0x1, 0x3], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=""/26}, &(0x7f00000001c0)=0x78) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x12, 0xffffffffffffffff, 0x54e6000) 227.868156ms ago: executing program 4 (id=5515): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x7, [{0x3, 0x4}, {0x4}, {0x1, 0x6}, {0x80, 0x6}, {0x9, 0x1}, {0x7f, 0x5}, {0x8, 0x3}]}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0000000088a8", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_getroute={0x4c, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfc, {0xa, 0x10, 0x0, 0x1, 0xfd, 0x2, 0xff, 0x8, 0x2400}, [@RTA_UID={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_OIF={0x8, 0x4, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x400d411) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000006c0)={0x9, {{0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x9}, 0x4bc}}, 0x1, 0x4, [{{0xa, 0x4e24, 0x3, @private0, 0x5}}, {{0xa, 0x4e27, 0x81, @local, 0x2}}, {{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}, {{0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}]}, 0x290) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03000088"], 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mirred={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40) r12 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r13, 0x200, 0x70bd29, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x2000a001}, 0x48048) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) 192.797548ms ago: executing program 0 (id=5516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000005400010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="010200006401010100000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 72.856118ms ago: executing program 1 (id=5517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) 69.349083ms ago: executing program 3 (id=5518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x40091) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf250200000000000100", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150021000048791376f2eeb100040d0000000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x78, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7e}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x4}, {0x5, 0x3}, {0x9, 0x5}], "5922413b15a2018a"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{}, {0x3, 0x1}, {0x9, 0x1}, {0xcd, 0x3}, {0x8, 0x5}, {0xf, 0x2}, {0x4, 0x6}, {0xa8, 0x6}], "64b8a66c33833a1d"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ce44b9aad8297041"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c7995bfb17e4a84d"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x64, 0x3}, {0x5, 0x6}], "67e750a20b4f595e"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000005142106000d00000000000004000100000000000800030000000000"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3c, 0x10000, 0xfffffffa, 0x0, 0x1, 0x5, 0x5, 0x7fffffff, 0x7}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) openat$cgroup_ro(r10, &(0x7f0000000600)='cgroup.kill\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0x8000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r11, 0x1, 0x0, 0x3, {0x3}}, 0x14}}, 0x4090) 68.569733ms ago: executing program 0 (id=5519): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) shutdown(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30040040) (async) sendmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30040040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) (async) listen(r1, 0x6) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140), 0x4) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01030000000000000000050000009ca157aa4890c70cb91c6135761951c33cae9f77d4f3b0cbee527dae650436d849"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}}, 0x20004831) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 39.224875ms ago: executing program 2 (id=5520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xc4}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0x0, 0xfff0}, {0x8, 0x9}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 4 (id=5521): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) kernel console output (not intermixed with test programs): la_validate_parse: 9 callbacks suppressed [ 412.808804][T19894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3692'. [ 412.824291][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 412.837086][T19892] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 412.854166][T19889] bond1: (slave bridge1): making interface the new active one [ 412.861910][T19889] bridge1: entered promiscuous mode [ 412.868601][T19889] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 412.931169][T19892] bond2: entered promiscuous mode [ 412.981652][T19892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.996788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.004878][ C1] lec:lec_tx_timeout: lec0 [ 413.010728][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.079768][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 413.371252][T19921] s5ÿÿø: renamed from vlan1 (while UP) [ 413.412192][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 413.462016][T19927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.560984][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 415.040847][T19931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.083468][T19939] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 415.258507][T19950] syzkaller0: entered promiscuous mode [ 415.276780][T19950] syzkaller0: entered allmulticast mode [ 415.610565][T19976] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3716'. [ 415.651786][T19976] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 415.696451][T19976] netlink: 'syz.2.3716': attribute type 2 has an invalid length. [ 415.723627][T19995] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3720'. [ 415.748634][T19990] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3720'. [ 415.938418][T20013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3725'. [ 415.947649][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 416.084772][T20015] geneve2: entered promiscuous mode [ 416.264699][T20026] netlink: 'syz.0.3730': attribute type 13 has an invalid length. [ 416.386426][T20041] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 416.396579][T20045] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20004 [ 416.718961][T20069] netlink: 'syz.0.3743': attribute type 17 has an invalid length. [ 418.152614][T20127] tipc: Started in network mode [ 418.166953][T20127] tipc: Node identity ac14140f, cluster identity 4711 [ 418.174120][T20127] tipc: Enabling of bearer rejected, failed to enable media [ 418.249324][T20131] __nla_validate_parse: 9 callbacks suppressed [ 418.249341][T20131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3761'. [ 418.350053][T20136] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3761'. [ 418.392584][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 418.653383][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3768'. [ 418.663302][T20156] tipc: Enabled bearer , priority 0 [ 418.695975][T20155] tipc: Disabling bearer [ 418.765631][T20163] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 418.786634][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 418.794694][ C1] lec:lec_tx_timeout: lec0 [ 418.801028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.073727][T20179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 419.192953][T20181] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 419.214838][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 419.297841][T20190] sctp: [Deprecated]: syz.4.3782 (pid 20190) Use of int in maxseg socket option. [ 419.297841][T20190] Use struct sctp_assoc_value instead [ 419.554409][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 419.557313][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3788'. [ 419.940309][T20235] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 419.941509][T20237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3796'. [ 419.994064][T20235] netlink: 211792 bytes leftover after parsing attributes in process `syz.1.3795'. [ 420.005459][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.028984][T20239] batadv_slave_0: entered promiscuous mode [ 420.201499][T20238] batadv_slave_0: left promiscuous mode [ 420.493824][T11213] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.514204][T11213] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.542928][T11213] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.575081][T11213] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.108264][T20315] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 421.114749][T20315] syzkaller1: Linktype set failed because interface is up [ 421.127885][ T5895] syzkaller1: tun_net_xmit 90 [ 421.143148][T20318] netlink: 'syz.3.3819': attribute type 16 has an invalid length. [ 421.151820][T20318] netlink: 'syz.3.3819': attribute type 3 has an invalid length. [ 421.162351][T20320] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 421.233807][T20327] netlink: 'syz.4.3822': attribute type 1 has an invalid length. [ 421.308232][T20327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.331833][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.338194][T20324] tun0: persist disabled [ 421.342717][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.348960][T20324] tun0: persist disabled [ 421.365360][T20327] bond2: (slave geneve2): making interface the new active one [ 421.399731][T20327] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 421.435279][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.442073][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.448123][T20324] tun0: persist disabled [ 421.452753][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.458558][T20324] tun0: persist disabled [ 421.464110][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.470215][T20324] tun0: persist disabled [ 421.483837][T20332] team0: Device gtp1 is up. Set it down before adding it as a team port [ 421.522119][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.537541][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.545665][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.552348][T20324] tun0: persist disabled [ 421.563936][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.585238][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.591101][T20324] tun0: persist disabled [ 421.595594][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.602784][T20324] tun0: persist disabled [ 421.607805][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.627404][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.664155][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.672641][T20324] tun0: persist disabled [ 421.677513][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.683012][T20324] tun0: persist disabled [ 421.688457][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.717535][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.722992][T20324] tun0: persist disabled [ 421.728194][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.733688][T20324] tun0: persist disabled [ 421.738555][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.761646][T20340] netlink: 'syz.2.3827': attribute type 2 has an invalid length. [ 421.761646][T20341] netlink: 'syz.2.3827': attribute type 2 has an invalid length. [ 421.795278][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.801053][T20324] tun0: persist disabled [ 421.806399][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.835465][T20340] ‚#{6c: entered promiscuous mode [ 421.842036][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.848231][T20324] tun0: persist disabled [ 421.852581][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.876675][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.882026][T20324] tun0: persist disabled [ 421.886408][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.917566][T20324] tun0: persist disabled [ 421.921897][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.927394][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.932796][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 421.957220][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 421.962560][T20324] tun0: persist disabled [ 421.998549][T20350] netlink: 'syz.2.3831': attribute type 12 has an invalid length. [ 422.048692][T20323] tun0: tun_chr_ioctl cmd 1074025673 [ 422.152091][T20324] tun0: tun_chr_ioctl cmd 1074025675 [ 422.157600][T20324] tun0: persist disabled [ 422.677801][T20382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.702288][T20382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.754129][T20382] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 422.793869][T20382] bond0 (unregistering): Released all slaves [ 422.944152][T14858] IPVS: starting estimator thread 0... [ 423.024207][T20402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.057019][T20406] IPVS: using max 40 ests per chain, 96000 per kthread [ 423.515027][T20444] __nla_validate_parse: 7 callbacks suppressed [ 423.515047][T20444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3856'. [ 423.661378][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 423.791428][T20455] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3861'. [ 423.826693][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 423.834731][ C1] lec:lec_tx_timeout: lec0 [ 423.846782][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 423.920392][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'. [ 423.969555][T20459] ð: entered promiscuous mode [ 423.997842][ T5902] IPVS: starting estimator thread 0... [ 424.044948][T20468] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 424.068113][T20459] syzkaller0: entered promiscuous mode [ 424.073653][T20459] syzkaller0: entered allmulticast mode [ 424.086760][T20464] IPVS: using max 28 ests per chain, 67200 per kthread [ 424.138278][T20473] netlink: 'syz.0.3867': attribute type 1 has an invalid length. [ 424.165250][T20476] Cannot find set identified by id 65535 to match [ 424.335726][T20489] netlink: 'syz.1.3872': attribute type 3 has an invalid length. [ 424.345377][T20489] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3872'. [ 425.064912][T20531] netlink: 'syz.1.3887': attribute type 4 has an invalid length. [ 425.113943][T20533] netlink: 'syz.3.3883': attribute type 5 has an invalid length. [ 425.132976][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3883'. [ 425.339339][T20547] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 425.412669][T20559] bond0: (slave gre0): Error: Device type is different from other slaves [ 425.624159][T20565] syzkaller0: entered promiscuous mode [ 425.646738][T20565] syzkaller0: entered allmulticast mode [ 425.665408][T20565] : renamed from hsr0 (while UP) [ 425.696540][T20565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3895'. [ 425.741726][T20576] netlink: 'syz.4.3900': attribute type 29 has an invalid length. [ 425.928286][T20576] netlink: 'syz.4.3900': attribute type 29 has an invalid length. [ 425.963987][T20592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.183702][T20599] syzkaller1: entered promiscuous mode [ 426.197751][T20599] syzkaller1: entered allmulticast mode [ 426.261556][T20595] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3904'. [ 426.485881][T20628] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3914'. [ 426.500573][T20628] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3914'. [ 426.624434][T20633] netlink: 'syz.4.3916': attribute type 10 has an invalid length. [ 426.645577][T20633] dummy0: entered promiscuous mode [ 426.653716][T20633] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 426.851986][T20646] openvswitch: netlink: IP tunnel dst address not specified [ 426.968700][T20650] bond2: option mode: invalid value (133) [ 427.006490][T20650] bond2 (unregistering): Released all slaves [ 427.609087][T20664] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 427.637205][T20664] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 427.790397][T20705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.953346][T20718] netlink: 'syz.4.3942': attribute type 16 has an invalid length. [ 428.039852][T20718] netlink: 'syz.4.3942': attribute type 3 has an invalid length. [ 428.041348][T20721] team0: Device ip6gre1 is of different type [ 428.207701][T20729] netlink: 'syz.2.3944': attribute type 12 has an invalid length. [ 428.482849][T20746] openvswitch: netlink: Unknown nsh attribute 0 [ 428.492304][T20729] bond0: option primary_reselect: invalid value (255) [ 428.534899][T20752] netlink: 'syz.1.3950': attribute type 10 has an invalid length. [ 428.536045][T20729] bond0 (unregistering): Released all slaves [ 428.856723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.864931][ C1] lec:lec_tx_timeout: lec0 [ 428.870194][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 428.907594][T20771] __nla_validate_parse: 73 callbacks suppressed [ 428.907612][T20771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3954'. [ 429.105918][T20785] netlink: 'syz.2.3958': attribute type 10 has an invalid length. [ 429.205454][T20789] bond3: option min_links: invalid value (18446744073709551614) [ 429.227101][T20796] netlink: 'syz.2.3963': attribute type 11 has an invalid length. [ 429.229269][T20794] netlink: 'syz.3.3961': attribute type 1 has an invalid length. [ 429.265298][T20789] bond3: option min_links: allowed values 0 - 2147483647 [ 429.298477][T20801] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 429.339034][T20789] bond3 (unregistering): Released all slaves [ 429.523648][T20801] team0: Port device dummy0 added [ 429.709808][T20826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3968'. [ 429.719450][T20826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3968'. [ 429.761792][T20831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3971'. [ 429.818950][T20830] bond3 (unregistering): Released all slaves [ 429.901207][T20838] bridge3: entered promiscuous mode [ 429.912278][T20838] bridge3: entered allmulticast mode [ 430.016037][T20847] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 430.065750][T20851] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 430.579181][T20885] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3987'. [ 430.594066][T20885] gre0: entered promiscuous mode [ 430.600480][T20885] gre0: entered allmulticast mode [ 430.625553][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 430.735177][T20893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3990'. [ 430.762326][T20895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3991'. [ 430.798558][T20893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3990'. [ 430.815260][ T5895] IPVS: starting estimator thread 0... [ 430.832614][T20895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3991'. [ 430.930784][T20902] IPVS: using max 35 ests per chain, 84000 per kthread [ 430.953789][T20910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.229555][T20937] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.362090][T20946] tipc: Failed to remove unknown binding: 66,0,0/1:1294419585/1294419586 [ 431.372666][T20946] tipc: Failed to remove unknown binding: 66,0,0/1:1294419585/1294419586 [ 433.876684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.884739][ C1] lec:lec_tx_timeout: lec0 [ 433.889420][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.111108][T20922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.287741][T20963] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 434.358871][T20963] bond3: entered promiscuous mode [ 434.364263][T20963] bond3: entered allmulticast mode [ 434.371067][T20963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.514146][T20993] netlink: 'syz.0.4015': attribute type 19 has an invalid length. [ 434.569951][T20993] bond4: option lp_interval: invalid value (0) [ 434.614190][T20993] bond4: option lp_interval: allowed values 1 - 2147483647 [ 434.634040][T20993] bond4 (unregistering): Released all slaves [ 434.813482][T21005] netlink: 'syz.4.4016': attribute type 1 has an invalid length. [ 434.865967][T21006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4016'. [ 434.887892][T21005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.895298][T21000] syzkaller1: entered promiscuous mode [ 434.901258][T21000] syzkaller1: entered allmulticast mode [ 434.923514][T21009] netem: incorrect gi model size [ 434.928945][T21009] netem: change failed [ 434.975555][T21005] Bluetooth: MGMT ver 1.23 [ 434.987865][T21005] vlan2: entered allmulticast mode [ 434.993129][T21005] bond3: entered allmulticast mode [ 435.072694][T21006] vlan2: entered allmulticast mode [ 435.102017][T21019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4021'. [ 435.126041][T21019] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4021'. [ 435.135293][T21019] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4021'. [ 435.153578][T21021] syzkaller0: entered promiscuous mode [ 435.159419][T21021] syzkaller0: entered allmulticast mode [ 435.253503][T21032] netlink: 'syz.4.4025': attribute type 21 has an invalid length. [ 435.290493][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4019'. [ 435.655728][T21057] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 435.736069][T21069] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 435.885457][T21076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4039'. [ 435.901441][T21078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4040'. [ 435.909272][T21076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4039'. [ 436.002025][T21089] Cannot find add_set index 0 as target [ 436.408554][T21107] wireguard0: entered promiscuous mode [ 436.414091][T21107] wireguard0: entered allmulticast mode [ 436.440505][T21117] syzkaller0: entered promiscuous mode [ 436.449464][T21117] syzkaller0: entered allmulticast mode [ 436.909824][T21144] netlink: 'syz.2.4056': attribute type 29 has an invalid length. [ 437.004084][T21151] netlink: 'syz.3.4058': attribute type 61 has an invalid length. [ 437.076140][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4058'. [ 437.085572][T21144] xt_hashlimit: size too large, truncated to 1048576 [ 437.193792][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.200878][T21161] netlink: 'syz.2.4056': attribute type 29 has an invalid length. [ 437.204347][T21163] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4056'. [ 437.276196][T21156] ip6gretap0: entered promiscuous mode [ 437.285418][T21167] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 437.357953][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.403158][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.960944][T21149] infiniband syz2: set down [ 437.965623][T14858] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.972447][T21149] infiniband syz2: added ip6_vti0 [ 437.986129][T21149] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 437.990188][T21149] infiniband syz2: Couldn't open port 1 [ 438.061693][T21149] RDS/IB: syz2: added [ 438.066006][T21149] smc: adding ib device syz2 with port count 1 [ 438.075125][T21149] smc: ib device syz2 port 1 has no pnetid [ 438.083702][T14858] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.092395][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.334541][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.907092][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 438.915131][ C1] lec:lec_tx_timeout: lec0 [ 438.920399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.015320][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.102396][T21204] syzkaller0: entered promiscuous mode [ 439.109924][T21204] syzkaller0: entered allmulticast mode [ 439.198207][T21206] netlink: 'syz.1.4072': attribute type 17 has an invalid length. [ 439.226954][T21208] batadv_slave_1: mtu less than device minimum [ 439.430753][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.437466][T21212] IPVS: Unknown mcast interface: vcan0 [ 439.861945][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.957225][T21238] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.958627][T21234] netlink: 'syz.1.4085': attribute type 16 has an invalid length. [ 439.977258][T21234] __nla_validate_parse: 8 callbacks suppressed [ 439.977276][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4085'. [ 440.054345][T21242] netlink: 'syz.3.4087': attribute type 1 has an invalid length. [ 440.059885][T21234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4085'. [ 440.071896][T21242] netlink: 'syz.3.4087': attribute type 7 has an invalid length. [ 440.092876][T21242] netlink: 'syz.3.4087': attribute type 8 has an invalid length. [ 440.118875][T21242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4087'. [ 440.141230][T21242] netlink: 'syz.3.4087': attribute type 1 has an invalid length. [ 440.214929][T21248] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 440.277620][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 440.284347][T21248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.309343][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.309874][T21258] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 440.405531][T21248] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 440.507909][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.551841][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4092'. [ 440.642611][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.670516][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.694405][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.798286][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.809530][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 440.905613][T21149] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.937970][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 440.955208][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.066957][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.076662][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 441.326292][T21293] mac80211_hwsim hwsim49 ÿ: renamed from wlan1 (while UP) [ 441.643590][T21316] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.657938][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4112'. [ 441.774695][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'. [ 442.098117][T21338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4118'. [ 442.141582][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 442.485428][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4127'. [ 442.501137][T21367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.584515][T21373] netlink: 'syz.4.4127': attribute type 6 has an invalid length. [ 442.648314][T21373] netlink: 'syz.4.4127': attribute type 6 has an invalid length. [ 442.789348][T21386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.798650][T21386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.864811][T21384] tipc: Enabling of bearer rejected, already enabled [ 442.890386][T21392] team0: Device ip6gre1 is of different type [ 443.926707][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.934726][ C1] lec:lec_tx_timeout: lec0 [ 443.939931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 444.326954][T11215] net_ratelimit: 62 callbacks suppressed [ 444.326970][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.341211][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.456828][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.464588][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.587058][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.594845][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.709243][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.717224][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 444.826865][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.834642][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 448.947655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 448.955695][ C1] lec:lec_tx_timeout: lec0 [ 448.960301][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.376849][T11204] net_ratelimit: 80 callbacks suppressed [ 449.376869][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.390355][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.506888][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.514734][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.627022][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.634840][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.749579][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.758823][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 449.866841][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.874697][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.966844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.974878][ C1] lec:lec_tx_timeout: lec0 [ 453.979699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.396924][T11204] net_ratelimit: 80 callbacks suppressed [ 454.396945][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.410583][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 454.526864][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.534658][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 454.647760][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.655549][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 454.766857][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.775937][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 454.886852][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.894619][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.986809][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 458.994849][ C1] lec:lec_tx_timeout: lec0 [ 458.999604][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.428253][T11215] net_ratelimit: 80 callbacks suppressed [ 459.428274][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.441780][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.556899][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.564653][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.676978][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.684820][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.797062][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.804841][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 459.916796][ T5941] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.924590][ T5941] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 464.006782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.014881][ C1] lec:lec_tx_timeout: lec0 [ 464.019507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 464.436998][T11202] net_ratelimit: 80 callbacks suppressed [ 464.437019][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.451283][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 464.567076][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.574940][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 464.687296][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.695172][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 464.807125][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.815501][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 464.937510][ T5941] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.945310][ T5941] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 468.886322][T21408] syzkaller0: entered promiscuous mode [ 468.893205][T21408] syzkaller0: entered allmulticast mode [ 469.168511][T21429] 8021q: VLANs not supported on ip6_vti0 [ 469.179097][T21429] netlink: 'syz.1.4146': attribute type 4 has an invalid length. [ 469.467598][T11196] net_ratelimit: 81 callbacks suppressed [ 469.467618][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.503148][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 469.562379][T21456] __nla_validate_parse: 7 callbacks suppressed [ 469.562396][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4156'. [ 469.592734][T21458] lo: entered promiscuous mode [ 469.596713][T21456] openvswitch: netlink: Flow key attr not present in new flow. [ 469.605935][T21458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.636855][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.640628][T21459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4156'. [ 469.654829][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 469.798257][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.823753][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 469.862722][T21465] udevd[21465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 469.877943][T21465] udevd[21465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 469.956931][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.964722][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 470.066670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 470.074742][ C1] lec:lec_tx_timeout: lec0 [ 470.079697][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.486966][ T7447] net_ratelimit: 80 callbacks suppressed [ 474.486987][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.501153][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 474.616970][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.624738][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 474.737146][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.745488][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 474.857015][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.864781][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 474.977607][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.985386][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 475.828792][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 475.836869][ C1] lec:lec_tx_timeout: lec0 [ 475.841789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.507735][T11196] net_ratelimit: 80 callbacks suppressed [ 479.507755][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.521839][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.637130][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.644919][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.757277][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.765687][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.876839][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.884647][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 479.996737][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 480.004508][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 480.856701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 480.864828][ C1] lec:lec_tx_timeout: lec0 [ 480.869912][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.527013][T11202] net_ratelimit: 80 callbacks suppressed [ 484.527044][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.542077][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 484.656992][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.665114][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 484.776976][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.785790][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 484.896995][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.904873][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 485.017773][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 485.025683][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 485.876674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 485.884689][ C1] lec:lec_tx_timeout: lec0 [ 485.889355][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 489.597595][T11202] net_ratelimit: 80 callbacks suppressed [ 489.597618][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.611469][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 489.726850][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.734626][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 489.846782][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.854634][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 489.966786][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.974569][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 490.086976][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.094751][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 490.896924][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 490.904949][ C1] lec:lec_tx_timeout: lec0 [ 490.909585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 492.202378][T21488] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4162'. [ 492.214887][T21486] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 492.531099][T21510] netlink: 'syz.3.4173': attribute type 16 has an invalid length. [ 492.547975][T21510] netlink: 'syz.3.4173': attribute type 3 has an invalid length. [ 492.566107][T21510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4173'. [ 492.578031][T21510] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4173'. [ 492.594189][T21510] netlink: 'syz.3.4173': attribute type 2 has an invalid length. [ 492.659611][T21513] netlink: 'syz.2.4174': attribute type 1 has an invalid length. [ 492.733264][T21513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.780411][T21525] vlan2: entered promiscuous mode [ 492.790132][T21528] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 492.802186][T21525] bond0: entered promiscuous mode [ 492.809853][T21525] vlan2: entered allmulticast mode [ 492.824497][T21525] bond0: entered allmulticast mode [ 492.903954][T21513] bond0: (slave bridge6): making interface the new active one [ 492.915856][T21513] bridge6: entered promiscuous mode [ 492.946429][T21513] bridge6: entered allmulticast mode [ 492.953738][T21513] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 493.202416][T21548] netlink: 81 bytes leftover after parsing attributes in process `syz.3.4184'. [ 493.213627][T21553] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 493.243046][T21562] netlink: 'syz.4.4186': attribute type 1 has an invalid length. [ 493.289668][T21568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4187'. [ 493.468295][T21543] bridge4: entered allmulticast mode [ 493.522742][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4190'. [ 493.936221][T21603] syzkaller0: entered promiscuous mode [ 493.942088][T21603] syzkaller0: entered allmulticast mode [ 494.687707][T11202] net_ratelimit: 92 callbacks suppressed [ 494.687729][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.701802][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.817118][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.824965][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.937010][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.944805][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 495.057152][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 495.065224][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 495.187712][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 495.195550][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 495.916613][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 495.924691][ C1] lec:lec_tx_timeout: lec0 [ 495.929642][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 496.201542][T21554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.224861][T21616] netlink: 'syz.4.4201': attribute type 1 has an invalid length. [ 496.265546][T21616] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4201'. [ 496.330788][T21616] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4201'. [ 496.482152][T21631] netlink: 'syz.3.4206': attribute type 16 has an invalid length. [ 496.517593][T21631] netlink: 'syz.3.4206': attribute type 17 has an invalid length. [ 496.573870][T21638] netlink: 'syz.3.4206': attribute type 9 has an invalid length. [ 496.599845][T21638] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4206'. [ 496.620179][T21637] delete_channel: no stack [ 496.665654][T21638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4206'. [ 496.772118][T21646] : entered promiscuous mode [ 497.633717][T21710] __nla_validate_parse: 2 callbacks suppressed [ 497.633734][T21710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4229'. [ 497.691872][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4230'. [ 497.759814][T21718] bond2 (unregistering): Released all slaves [ 497.847302][T21724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4234'. [ 498.196309][T21759] validate_nla: 5 callbacks suppressed [ 498.196327][T21759] netlink: 'syz.4.4243': attribute type 1 has an invalid length. [ 498.238889][T21759] netlink: 'syz.4.4243': attribute type 2 has an invalid length. [ 498.250069][T21759] netlink: 'syz.4.4243': attribute type 1 has an invalid length. [ 498.578507][T21764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4245'. [ 498.624643][T21792] netlink: 'syz.0.4250': attribute type 1 has an invalid length. [ 498.646920][T21764] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4245'. [ 498.764162][T21797] 8021q: VLANs not supported on ip_vti0 [ 498.882354][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 498.893029][T21805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4255'. [ 499.001815][T21809] erspan0: entered promiscuous mode [ 499.010593][T21809] erspan0: entered allmulticast mode [ 499.143634][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4259'. [ 499.249325][T21826] netlink: 'syz.2.4262': attribute type 3 has an invalid length. [ 499.258256][T21826] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4262'. [ 499.269873][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 499.416366][T21836] netlink: 'syz.0.4265': attribute type 10 has an invalid length. [ 499.513680][T21836] team0: Device veth0_macvtap failed to register rx_handler [ 499.741086][T21856] netlink: 'syz.1.4270': attribute type 83 has an invalid length. [ 499.766927][T11202] net_ratelimit: 102 callbacks suppressed [ 499.766947][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.795788][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.917423][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.965490][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 500.107258][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.115409][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 500.155185][T21890] syzkaller0: entered promiscuous mode [ 500.164104][T21890] syzkaller0: entered allmulticast mode [ 500.191673][T21892] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 500.236754][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.246493][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 500.270250][T21900] xt_hashlimit: size too large, truncated to 1048576 [ 500.384837][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 500.946796][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 500.954890][ C1] lec:lec_tx_timeout: lec0 [ 500.959973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 501.048662][T21914] bond6 (unregistering): Released all slaves [ 502.688930][T21862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.716056][T21917] netlink: 'syz.4.4287': attribute type 11 has an invalid length. [ 502.747369][T21917] __nla_validate_parse: 10 callbacks suppressed [ 502.747387][T21917] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4287'. [ 502.884184][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4289'. [ 502.928127][T21924] vlan3: entered allmulticast mode [ 502.933287][T21924] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 503.005800][T21931] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4292'. [ 503.249151][T21956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4296'. [ 503.323891][T21960] netlink: 'syz.0.4296': attribute type 1 has an invalid length. [ 503.507048][T18285] Bluetooth: hci1: command 0x041b tx timeout [ 503.794672][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4299'. [ 503.924585][T21981] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4302'. [ 503.962557][T21981] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4302'. [ 504.227233][T22012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4307'. [ 504.381128][T22022] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4311'. [ 504.401702][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'. [ 504.442498][T22026] netlink: 'syz.1.4313': attribute type 4 has an invalid length. [ 504.487598][T22026] netlink: 'syz.1.4313': attribute type 4 has an invalid length. [ 504.856891][T11204] net_ratelimit: 101 callbacks suppressed [ 504.856909][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.881165][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 504.908421][T22047] tipc: Enabling of bearer rejected, failed to enable media [ 504.939189][T22046] netlink: 'syz.2.4319': attribute type 1 has an invalid length. [ 504.952529][T22050] ecn_mt_check6: 23 callbacks suppressed [ 504.952546][T22050] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.006054][T22050] bond2: option xmit_hash_policy: invalid value (64) [ 505.013335][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.025038][T22050] bond2 (unregistering): Released all slaves [ 505.036801][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.069404][T22054] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.077573][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.121361][T22057] netlink: 'syz.4.4323': attribute type 1 has an invalid length. [ 505.135036][T22051] tipc: Enabling of bearer rejected, failed to enable media [ 505.147580][T22035] netlink: 'syz.3.4315': attribute type 1 has an invalid length. [ 505.163262][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.186996][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.236180][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.251505][T22061] gretap2: entered promiscuous mode [ 505.285080][T22066] xt_hashlimit: size too large, truncated to 1048576 [ 505.296963][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.310327][T22061] bond6: (slave gretap2): making interface the new active one [ 505.321039][T22061] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 505.337033][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 505.363422][T22057] macvlan2: entered promiscuous mode [ 505.369023][T22057] macvlan2: entered allmulticast mode [ 505.375353][T22057] bond6: entered promiscuous mode [ 505.382518][T22057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 505.391923][T22057] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 505.410099][T22057] bond6: left promiscuous mode [ 505.457436][T22070] vlan4: entered promiscuous mode [ 505.476701][T22070] bridge0: entered promiscuous mode [ 505.585044][T22074] syzkaller0: entered promiscuous mode [ 505.598074][T22074] syzkaller0: entered allmulticast mode [ 505.645264][T22081] syzkaller0: entered promiscuous mode [ 505.651565][T22081] syzkaller0: entered allmulticast mode [ 505.695179][T22084] syzkaller0: entered promiscuous mode [ 505.730110][T22084] syzkaller0: entered allmulticast mode [ 505.792888][T22084] bond5: Invalid ad_actor_system MAC address. [ 505.799607][T22084] bond5: option ad_actor_system: invalid value (1) [ 505.808519][T22084] bond5 (unregistering): Released all slaves [ 505.893012][T22096] tipc: Started in network mode [ 505.907554][T22096] tipc: Node identity 5, cluster identity 3 [ 505.914555][T22096] tipc: Node number set to 5 [ 505.921102][T22096] tipc: Cannot configure node identity twice [ 505.966746][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 505.974922][ C1] lec:lec_tx_timeout: lec0 [ 505.979701][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 507.779844][T22128] __nla_validate_parse: 6 callbacks suppressed [ 507.779860][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4342'. [ 507.807441][T22131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4343'. [ 507.842819][T22140] netlink: 'syz.4.4345': attribute type 2 has an invalid length. [ 507.843208][T22136] netlink: 'syz.4.4345': attribute type 2 has an invalid length. [ 507.917970][T22131] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4343'. [ 507.983490][T22149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4348'. [ 508.018852][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 508.133702][T22155] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4350'. [ 508.549910][T22194] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4365'. [ 508.638599][T22198] xt_hashlimit: size too large, truncated to 1048576 [ 508.852260][T22213] x_tables: duplicate underflow at hook 1 [ 508.864249][T22205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.907312][T22205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.946227][T22215] netlink: 'syz.4.4371': attribute type 3 has an invalid length. [ 509.186168][T22226] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4376'. [ 509.534217][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 509.644675][T22254] netlink: 'syz.2.4385': attribute type 11 has an invalid length. [ 509.656109][T22254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4385'. [ 509.781495][T22255] syzkaller0: entered promiscuous mode [ 509.791156][T22255] syzkaller0: entered allmulticast mode [ 509.939749][T11196] net_ratelimit: 172 callbacks suppressed [ 509.939764][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.965171][T22264] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 509.999836][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.019903][T22264] bond6: entered promiscuous mode [ 510.027210][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.027344][T22264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.066786][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.096950][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.116649][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.137358][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.157035][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.187448][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 510.309329][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 510.395047][T22294] netlink: 'syz.1.4394': attribute type 1 has an invalid length. [ 510.503827][T22300] SET target dimension over the limit! [ 510.529501][T22300] netlink: 'syz.1.4395': attribute type 21 has an invalid length. [ 510.924849][T22313] netlink: 'syz.4.4400': attribute type 1 has an invalid length. [ 510.986619][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 510.994867][ C1] lec:lec_tx_timeout: lec0 [ 510.999513][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 511.149332][T22322] syzkaller0: entered promiscuous mode [ 511.154861][T22322] syzkaller0: entered allmulticast mode [ 511.219825][T22322] netlink: 'syz.2.4405': attribute type 13 has an invalid length. [ 511.354927][T22332] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 511.639345][T22360] netlink: 'syz.2.4411': attribute type 1 has an invalid length. [ 511.665208][T22362] pim6reg: entered allmulticast mode [ 511.819268][T22370] netlink: 'syz.3.4416': attribute type 10 has an invalid length. [ 511.871199][T22364] bond2: (slave gretap1): making interface the new active one [ 511.885250][T22364] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 511.900971][T22368] macvlan2: entered promiscuous mode [ 511.906421][T22368] macvlan2: entered allmulticast mode [ 511.913098][T22368] bond2: entered promiscuous mode [ 511.925436][T22368] gretap1: entered promiscuous mode [ 511.931686][T22368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 511.940311][T22368] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 511.957591][T22368] bond2: left promiscuous mode [ 511.962387][T22368] gretap1: left promiscuous mode [ 511.999752][T22377] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 513.790769][T22370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 513.804007][T22388] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 513.947729][T22405] netlink: 'syz.0.4424': attribute type 8 has an invalid length. [ 514.129174][T22419] __nla_validate_parse: 12 callbacks suppressed [ 514.129193][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'. [ 514.178097][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'. [ 514.206837][T22424] xt_nat: multiple ranges no longer supported [ 514.219088][T22424] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4430'. [ 514.288605][T22427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4431'. [ 514.338062][T22429] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4432'. [ 514.400169][T22437] netlink: 'syz.2.4433': attribute type 3 has an invalid length. [ 514.409286][T22437] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 514.535037][T22448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.554442][T22448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4438'. [ 514.597772][T22448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4438'. [ 514.619762][T22448] gretap0: entered promiscuous mode [ 514.629781][T22454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4440'. [ 514.640278][T22448] gretap0: left promiscuous mode [ 514.651501][T22449] ip6tnl0: Caught tx_queue_len zero misconfig [ 514.662613][T22451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4438'. [ 514.969666][T11213] net_ratelimit: 156 callbacks suppressed [ 514.969684][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.046639][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.157087][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.189681][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.227918][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.263054][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.388289][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.410764][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 515.534297][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.556936][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.777681][T22532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4465'. [ 515.940306][T22539] sctp: [Deprecated]: syz.1.4468 (pid 22539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.940306][T22539] Use struct sctp_sack_info instead [ 516.009005][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 516.017066][ C1] lec:lec_tx_timeout: lec0 [ 516.022017][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 516.812993][T22571] : entered promiscuous mode [ 517.377659][T22605] netlink: 'syz.4.4485': attribute type 3 has an invalid length. [ 518.650858][T22597] IPv6: sit1: Disabled Multicast RS [ 518.660486][T22597] sit1: entered allmulticast mode [ 518.812202][T22610] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 519.078567][T22640] netlink: 'syz.2.4497': attribute type 1 has an invalid length. [ 519.112135][T22646] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 519.165207][T22646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 519.173729][T22651] netlink: 'syz.3.4498': attribute type 10 has an invalid length. [ 519.187473][T22653] __nla_validate_parse: 9 callbacks suppressed [ 519.187491][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4499'. [ 519.228907][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.257578][T22651] bridge_slave_1: left allmulticast mode [ 519.277846][T22651] bridge_slave_1: left promiscuous mode [ 519.297570][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.330742][T22651] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 519.500775][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4506'. [ 519.542265][T22676] netlink: 'syz.0.4506': attribute type 1 has an invalid length. [ 519.543953][T22680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4509'. [ 519.612459][T22684] veth0: entered promiscuous mode [ 519.783510][T22684] team0 (unregistering): Port device team_slave_0 removed [ 519.815860][T22684] team0 (unregistering): Port device team_slave_1 removed [ 520.000929][T22683] veth0: left promiscuous mode [ 520.018346][T11213] net_ratelimit: 152 callbacks suppressed [ 520.018364][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.069687][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.226742][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.234628][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.377714][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.389294][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.423711][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4517'. [ 520.471225][T22721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4519'. [ 520.517524][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.535379][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.629371][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4522'. [ 520.645354][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4521'. [ 520.659300][T22732] openvswitch: netlink: Duplicate key (type 32). [ 520.668280][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 520.688013][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4523'. [ 520.746199][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4522'. [ 520.837922][T22749] netlink: 'syz.3.4527': attribute type 3 has an invalid length. [ 521.172363][T22774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4531'. [ 521.195835][T22775] sctp: [Deprecated]: syz.2.4532 (pid 22775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.195835][T22775] Use struct sctp_sack_info instead [ 521.351903][T22784] syzkaller0: entered allmulticast mode [ 521.411946][T22788] team_slave_0: entered promiscuous mode [ 521.417722][T22788] team_slave_1: entered promiscuous mode [ 521.428256][T22788] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 521.435951][T22788] team0: Device macvlan2 is already an upper device of the team interface [ 521.454162][T22788] team_slave_0: left promiscuous mode [ 521.459692][T22788] team_slave_1: left promiscuous mode [ 521.910868][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 521.919971][ C1] lec:lec_tx_timeout: lec0 [ 521.925036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 522.291570][T22851] nbd: socks must be embedded in a SOCK_ITEM attr [ 522.302121][T22854] netlink: 'syz.1.4560': attribute type 1 has an invalid length. [ 522.432904][T22854] bond2: entered promiscuous mode [ 522.467200][T22854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.474933][T22860] bond2: entered allmulticast mode [ 522.496400][T22863] bond2: (slave bridge5): making interface the new active one [ 522.504510][T22863] bridge5: entered promiscuous mode [ 522.510673][T22863] bridge5: entered allmulticast mode [ 522.520461][T22863] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 522.697444][T22877] bridge0: entered allmulticast mode [ 522.964960][T22902] netlink: 'syz.4.4573': attribute type 10 has an invalid length. [ 523.062793][T22905] tipc: Enabled bearer , priority 0 [ 523.091498][T22905] +: renamed from syzkaller0 [ 523.099064][T22905] tipc: Disabling bearer [ 523.546287][T22948] netlink: 'syz.3.4585': attribute type 10 has an invalid length. [ 523.572106][T22936] bond5 (unregistering): Released all slaves [ 523.577658][T22947] netlink: 'syz.0.4587': attribute type 74 has an invalid length. [ 523.630822][T22938] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 523.637288][T22948] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 523.710381][T22957] netlink: 'syz.1.4590': attribute type 10 has an invalid length. [ 523.742976][T22957] team0: Device veth1_macvtap failed to register rx_handler [ 523.923898][T22966] udevd[22966]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 523.957683][T22969] udevd[22969]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 524.165373][T22987] bridge7: entered promiscuous mode [ 524.178579][T22987] bridge7: entered allmulticast mode [ 524.223996][T22985] lo: Caught tx_queue_len zero misconfig [ 524.240109][T22992] __nla_validate_parse: 17 callbacks suppressed [ 524.240128][T22992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4601'. [ 524.381818][T22999] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4604'. [ 524.398557][T22999] netlink: 'syz.0.4604': attribute type 1 has an invalid length. [ 524.598806][T23011] syzkaller0: entered promiscuous mode [ 524.620366][T23015] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4610'. [ 524.631909][T23011] syzkaller0: entered allmulticast mode [ 524.762541][T23023] netlink: 'syz.2.4613': attribute type 12 has an invalid length. [ 524.770788][T23023] netlink: 'syz.2.4613': attribute type 29 has an invalid length. [ 524.780227][T23023] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4613'. [ 524.806049][T23023] netlink: 'syz.2.4613': attribute type 2 has an invalid length. [ 524.829259][T23023] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4613'. [ 524.903232][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4616'. [ 525.027121][T11213] net_ratelimit: 109 callbacks suppressed [ 525.027141][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.066792][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.107182][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.117496][T23036] tunl0: Caught tx_queue_len zero misconfig [ 525.127240][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.166725][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.174698][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.272969][T23040] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4618'. [ 525.297293][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.316513][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.439670][T23056] sctp: [Deprecated]: syz.1.4622 (pid 23056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.439670][T23056] Use struct sctp_sack_info instead [ 525.446914][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 525.475842][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.511296][T23058] syzkaller0: entered promiscuous mode [ 525.531040][T23058] syzkaller0: entered allmulticast mode [ 525.997941][T23101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4632'. [ 526.113268][T23108] netlink: 'syz.2.4638': attribute type 2 has an invalid length. [ 526.124433][T23108] netlink: 'syz.2.4638': attribute type 8 has an invalid length. [ 526.132861][T23108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4638'. [ 526.150870][T23109] mac80211_hwsim hwsim49 ÿ: entered promiscuous mode [ 526.161268][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 526.653517][T23130] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 526.936648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.944692][ C1] lec:lec_tx_timeout: lec0 [ 526.949999][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.111039][T23149] can: request_module (can-proto-0) failed. [ 527.539561][T23164] netlink: 'syz.0.4651': attribute type 3 has an invalid length. [ 527.548083][T23140] vlan5: entered allmulticast mode [ 527.548106][T23140] hsr0: entered allmulticast mode [ 527.548119][T23140] hsr_slave_0: entered allmulticast mode [ 527.548133][T23140] hsr_slave_1: entered allmulticast mode [ 527.572012][T23164] netlink: 'syz.0.4651': attribute type 1 has an invalid length. [ 527.580098][T23164] netlink: 'syz.0.4651': attribute type 1 has an invalid length. [ 527.606416][T23168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 527.633247][T23168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 527.821131][T23182] syz_tun: entered allmulticast mode [ 527.843790][T23180] syz_tun: left allmulticast mode [ 527.954735][T23197] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 527.985021][T23198] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 528.009717][T23196] netlink: 'syz.4.4660': attribute type 1 has an invalid length. [ 528.065800][T23196] bridge0: Device is already in use. [ 528.081887][T23196] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 528.092211][T23196] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 528.105034][T23196] bond7: (slave vcan0): making interface the new active one [ 528.117650][T23196] bond7: (slave vcan0): Enslaving as an active interface with an up link [ 528.310070][T23219] syzkaller1: entered promiscuous mode [ 528.335439][T23219] syzkaller1: entered allmulticast mode [ 528.745656][T23256] bridge0: entered allmulticast mode [ 528.918943][T23266] macsec1: entered promiscuous mode [ 528.934432][T23266] bond_slave_1: entered promiscuous mode [ 528.965431][T23266] bond_slave_1: left promiscuous mode [ 529.330832][T23260] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.373681][T23290] __nla_validate_parse: 9 callbacks suppressed [ 529.373700][T23290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4691'. [ 529.396376][T23290] block nbd3: Unsupported socket: should be TCP or UNIX. [ 529.559522][T23296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4693'. [ 529.655137][T23305] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4696'. [ 529.881420][T23316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.955809][T23322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.964685][T23320] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4700'. [ 530.121023][T11196] net_ratelimit: 123 callbacks suppressed [ 530.121043][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.157032][ T5941] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.178161][ T5941] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.211554][ T5941] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.257413][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.291183][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.319647][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.436913][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.455194][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.455610][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4706'. [ 530.533359][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4709'. [ 530.587529][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 530.681967][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4712'. [ 530.804736][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4712'. [ 530.836920][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4712'. [ 530.860891][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4712'. [ 530.967813][T23375] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 530.991816][T23373] netlink: 'syz.1.4716': attribute type 11 has an invalid length. [ 531.181820][T23388] bond5: Removing last ns target with arp_interval on [ 531.190568][T23389] @0Ù: renamed from bond_slave_1 (while UP) [ 531.281686][T23391] netlink: 'syz.4.4721': attribute type 1 has an invalid length. [ 531.303833][T23391] netlink: 'syz.4.4721': attribute type 1 has an invalid length. [ 531.384954][T23404] bridge0: entered promiscuous mode [ 531.390809][T23405] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 531.426760][T18285] Bluetooth: hci2: command 0x0405 tx timeout [ 531.535452][T23386] bridge0: left promiscuous mode [ 531.550509][T23403] netlink: 'syz.3.4725': attribute type 1 has an invalid length. [ 531.558851][T23403] netlink: 'syz.3.4725': attribute type 1 has an invalid length. [ 531.587304][T23403] netlink: 'syz.3.4725': attribute type 8 has an invalid length. [ 531.956821][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 531.964943][ C1] lec:lec_tx_timeout: lec0 [ 531.970148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 533.269665][T23410] syzkaller0: entered promiscuous mode [ 533.275189][T23410] syzkaller0: entered allmulticast mode [ 533.421375][T23418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 533.439217][T23418] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 533.439471][T23446] IPv6: Can't replace route, no match found [ 533.458787][T23418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.475070][T23418] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 535.126801][T11202] net_ratelimit: 208 callbacks suppressed [ 535.126823][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.157613][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.186478][T23456] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 535.187936][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.257046][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.272464][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.387255][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.403567][T23469] xt_bpf: check failed: parse error [ 535.422076][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.467926][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.475716][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 535.571043][T23478] netlink: 'syz.2.4741': attribute type 1 has an invalid length. [ 535.627504][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.755060][T23453] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.080029][T23513] __nla_validate_parse: 69 callbacks suppressed [ 536.080046][T23513] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4752'. [ 536.143100][T23513] nbd: must specify at least one socket [ 536.390116][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 536.447355][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 536.468764][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4757'. [ 536.500849][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 536.521373][T23528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4757'. [ 536.541602][T23530] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.4758'. [ 536.587616][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 536.608788][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4759'. [ 536.618537][T23525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4756'. [ 536.723394][T23536] netlink: 'syz.3.4761': attribute type 1 has an invalid length. [ 536.976601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 536.984670][ C1] lec:lec_tx_timeout: lec0 [ 536.989994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.258223][T23568] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 537.429229][T23572] netlink: 'syz.2.4770': attribute type 7 has an invalid length. [ 537.437745][T23572] netlink: 'syz.2.4770': attribute type 8 has an invalid length. [ 538.209660][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 539.883768][T23548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.016070][T23628] netlink: 'syz.3.4778': attribute type 21 has an invalid length. [ 540.063408][T23630] ipt_REJECT: TCP_RESET invalid for non-tcp [ 540.200025][T11202] net_ratelimit: 85 callbacks suppressed [ 540.200043][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.219799][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 540.339681][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.348226][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 540.377240][T23654] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 540.386177][T23654] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 540.403407][T23656] netlink: 'syz.0.4786': attribute type 1 has an invalid length. [ 540.441654][T23656] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.491026][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.526638][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.534413][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 540.631881][T23669] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 540.638096][T23670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.640819][T23669] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 540.654881][T23669] team0: Failed to send options change via netlink (err -105) [ 540.662741][T23669] team0: Port device batadv1 added [ 540.669742][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.681291][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 540.769684][T23674] netlink: 'syz.3.4795': attribute type 2 has an invalid length. [ 540.806697][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 541.091636][T23698] __nla_validate_parse: 51 callbacks suppressed [ 541.091654][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4804'. [ 541.251770][T23702] syzkaller1: entered promiscuous mode [ 541.289451][T23702] syzkaller1: entered allmulticast mode [ 541.299727][T23702] IPVS: ip_vs_edit_dest(): server weight less than zero [ 541.466202][T23714] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 541.478597][T23714] bond8: entered promiscuous mode [ 541.484990][T23714] bond8: entered allmulticast mode [ 541.493379][T23714] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.580820][T23728] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 541.582893][T23740] xt_hashlimit: size too large, truncated to 1048576 [ 541.593724][T23728] bond9: entered promiscuous mode [ 541.607649][T23728] bond9: entered allmulticast mode [ 541.618127][T23728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 541.762093][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4815'. [ 541.818065][T23738] bond5: Invalid ad_actor_system MAC address. [ 541.824188][T23738] bond5: option ad_actor_system: invalid value (1) [ 541.902919][T23738] bond5 (unregistering): Released all slaves [ 541.996691][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 542.004799][ C1] lec:lec_tx_timeout: lec0 [ 542.009721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 544.426777][T23724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.618199][T23792] delete_channel: no stack [ 544.630710][T23795] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4825'. [ 544.681034][T23800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4824'. [ 544.754915][T23805] netlink: 'syz.3.4826': attribute type 1 has an invalid length. [ 544.846071][T23805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.905174][T23821] sctp: [Deprecated]: syz.4.4829 (pid 23821) Use of int in max_burst socket option. [ 544.905174][T23821] Use struct sctp_assoc_value instead [ 545.261688][T11209] net_ratelimit: 99 callbacks suppressed [ 545.261707][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.306696][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.314664][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.413447][T23853] netlink: 'syz.4.4837': attribute type 1 has an invalid length. [ 545.426100][T23853] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4837'. [ 545.441182][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4837'. [ 545.450264][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.458835][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.576674][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.594534][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.718218][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.730842][T11196] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.889410][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.931342][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 545.944050][T23896] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4848'. [ 545.967183][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 545.978027][T23896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4848'. [ 546.021006][T23900] syzkaller0: entered promiscuous mode [ 546.038776][T23900] syzkaller0: entered allmulticast mode [ 546.185897][T23907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4850'. [ 546.369960][T23918] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4852'. [ 546.612811][T23938] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.4859'. [ 546.624775][T23940] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.4859'. [ 546.636515][T23935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4857'. [ 546.673256][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 546.821249][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'. [ 546.934853][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4866'. [ 546.955680][T23965] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4864'. [ 546.987208][T23961] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4866'. [ 547.147073][T23973] IPVS: persistence engine module ip_vs_pe_À not found [ 547.232790][T23982] netlink: 'syz.0.4869': attribute type 13 has an invalid length. [ 547.250400][T23982] netlink: 'syz.0.4869': attribute type 58 has an invalid length. [ 547.275210][T23973] sctp: [Deprecated]: syz.0.4869 (pid 23973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.275210][T23973] Use struct sctp_sack_info instead [ 547.826632][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 547.834724][ C1] lec:lec_tx_timeout: lec0 [ 547.839910][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 548.504110][T24064] netlink: 'syz.1.4895': attribute type 10 has an invalid length. [ 548.581108][T24064] team0: Device veth0_macvtap failed to register rx_handler [ 548.617613][T24056] tipc: Enabled bearer , priority 0 [ 548.634016][T24055] syzkaller1: entered promiscuous mode [ 548.649394][T24055] syzkaller1: entered allmulticast mode [ 548.661893][T24058] syzkaller0: entered promiscuous mode [ 548.671820][T24058] syzkaller0: entered allmulticast mode [ 548.688047][T24056] tipc: Resetting bearer [ 548.794432][T24078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 548.810468][T24078] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 548.819944][T24078] gretap1: entered promiscuous mode [ 548.825540][T24078] gretap1: entered allmulticast mode [ 548.973460][T24090] bridge0: left allmulticast mode [ 549.109462][T24049] tipc: Resetting bearer [ 549.162014][T24049] tipc: Disabling bearer [ 549.168664][T24105] netlink: 'syz.1.4908': attribute type 1 has an invalid length. [ 549.244117][T24105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.312759][T24117] x_tables: duplicate underflow at hook 1 [ 549.318629][T11202] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 549.344950][T24117] x_tables: unsorted entry at hook 2 [ 549.379631][T24122] x_tables: duplicate underflow at hook 1 [ 549.590997][T24141] x_tables: duplicate underflow at hook 2 [ 549.652508][T24148] netlink: 'syz.3.4921': attribute type 10 has an invalid length. [ 549.780369][T24157] bond10: invalid ARP target 0.0.0.0 specified for addition [ 549.788066][T24157] bond10: option arp_ip_target: invalid value (0) [ 549.808819][T24157] bond10 (unregistering): Released all slaves [ 549.989815][T24173] smc: net device team0 applied user defined pnetid SYZ2 [ 550.129485][T24183] syzkaller0: entered promiscuous mode [ 550.149294][T24183] syzkaller0: entered allmulticast mode [ 550.345574][T11202] net_ratelimit: 111 callbacks suppressed [ 550.345595][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.386815][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.395007][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.527394][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.535180][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.691412][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.733180][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.787446][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.824769][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.882469][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 551.051877][T24253] lo: entered promiscuous mode [ 551.057268][T24253] netlink: 'syz.4.4954': attribute type 2 has an invalid length. [ 551.199140][T24263] netlink: 'syz.0.4957': attribute type 17 has an invalid length. [ 551.232197][T24263] __nla_validate_parse: 15 callbacks suppressed [ 551.232216][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4957'. [ 551.256952][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'. [ 551.257229][T24263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4957'. [ 551.361983][T24275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4959'. [ 551.405652][T24273] bridge3: entered promiscuous mode [ 551.413671][T24273] bridge3: entered allmulticast mode [ 551.423462][T24273] team0: Port device bridge3 added [ 551.629465][T24295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4966'. [ 551.676910][T24293] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 551.847193][T24311] netem: unknown loss type 0 [ 551.867964][T24311] netem: change failed [ 551.872671][T24309] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4969'. [ 551.917930][T24319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'. [ 552.026445][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 552.052870][T24323] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 552.076505][T24323] netlink: 'syz.3.4973': attribute type 2 has an invalid length. [ 552.092468][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 552.113160][T24323] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 552.124490][T24323] netlink: 'syz.3.4973': attribute type 2 has an invalid length. [ 552.311373][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4980'. [ 552.311384][T24345] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 552.311398][T24345] netlink: 'syz.3.4980': attribute type 2 has an invalid length. [ 552.347060][T24342] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 552.356232][T24342] netlink: 'syz.3.4980': attribute type 2 has an invalid length. [ 552.848017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 552.856058][ C1] lec:lec_tx_timeout: lec0 [ 552.860788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.002656][T24396] macvtap0: entered allmulticast mode [ 553.012182][T24396] macvtap0: refused to change device tx_queue_len [ 553.351355][ T5826] block nbd3: Receive control failed (result -107) [ 553.675077][T24451] team_slave_0: entered promiscuous mode [ 553.680919][T24451] team_slave_1: entered promiscuous mode [ 553.699218][T24447] xt_hashlimit: invalid rate [ 553.720368][T24451] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.803224][T24456] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 553.847990][T24451] team_slave_0: left promiscuous mode [ 553.853864][T24451] team_slave_1: left promiscuous mode [ 554.096061][T24488] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 554.696212][T24524] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 555.354359][T24571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.404263][T11209] net_ratelimit: 105 callbacks suppressed [ 555.404282][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.476726][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.496737][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.523442][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.549798][T24571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.566957][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.596821][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.618320][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.656663][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.680210][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.708564][T24579] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 555.747279][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.781534][T24579] bond11 (unregistering): Released all slaves [ 555.874010][T24541] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.079059][T24616] tc_dump_action: action bad kind [ 556.085644][T24618] tipc: New replicast peer: 255.255.255.255 [ 556.097000][T24618] tipc: Enabled bearer , priority 10 [ 556.191370][T24626] validate_nla: 7 callbacks suppressed [ 556.191390][T24626] netlink: 'syz.4.5065': attribute type 1 has an invalid length. [ 556.213193][T24626] netlink: 'syz.4.5065': attribute type 3 has an invalid length. [ 556.223550][T24626] NCSI netlink: No device for ifindex 813332851 [ 556.257369][T24630] __nla_validate_parse: 26 callbacks suppressed [ 556.257389][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5067'. [ 556.287264][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5067'. [ 556.304329][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5067'. [ 556.689360][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5074'. [ 556.728086][T24659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5074'. [ 556.899224][T24669] digital: digital_start_poll: Unknown protocol [ 557.023261][T24678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5083'. [ 557.123725][T24678] bond5: entered promiscuous mode [ 557.135765][T24678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.158739][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'. [ 557.491474][T14862] tipc: Node number set to 2886997007 [ 557.510121][T24682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.533479][T24682] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 557.548871][T24682] bond5: (slave sit2): Error -95 calling set_mac_address [ 557.876798][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.882332][T24712] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 557.884890][ C1] lec:lec_tx_timeout: lec0 [ 557.899953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.929673][T24712] bond11 (unregistering): Released all slaves [ 557.994763][T24722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5093'. [ 558.016341][T24714] veth5: entered promiscuous mode [ 558.026712][T24714] veth5: entered allmulticast mode [ 558.113067][T24714] tipc: Enabled bearer , priority 0 [ 558.151306][T24723] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 558.164139][T24723] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 558.176124][T24714] tipc: Resetting bearer [ 558.215180][T24745] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5098'. [ 558.237827][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5098'. [ 558.261809][T24745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.354551][T24750] netlink: 'syz.2.5100': attribute type 6 has an invalid length. [ 558.651709][T24780] syzkaller0: entered promiscuous mode [ 558.668031][T24780] syzkaller0: entered allmulticast mode [ 558.724464][T24780] tipc: Started in network mode [ 558.738771][T24780] tipc: Node identity 3ab6ea1aef91, cluster identity 4711 [ 558.753401][T24780] tipc: Enabled bearer , priority 0 [ 558.776283][T24779] tipc: Resetting bearer [ 558.825929][T24779] tipc: Disabling bearer [ 558.843492][T24791] : entered promiscuous mode [ 559.347367][T24832] netlink: 'syz.4.5126': attribute type 13 has an invalid length. [ 559.361241][T24832] macvtap0: entered allmulticast mode [ 559.399553][T24832] macvtap0: refused to change device tx_queue_len [ 559.449107][T24840] netlink: 'syz.3.5128': attribute type 8 has an invalid length. [ 560.343556][T24905] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 560.413076][T11196] net_ratelimit: 121 callbacks suppressed [ 560.413096][T11196] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.447795][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.496877][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.513766][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.614475][T24925] netlink: 'syz.3.5153': attribute type 11 has an invalid length. [ 560.636112][T24927] netlink: 'syz.4.5156': attribute type 16 has an invalid length. [ 560.652456][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.665560][T24928] pim6reg1: entered promiscuous mode [ 560.671662][T24928] pim6reg1: entered allmulticast mode [ 560.679446][T24927] netlink: 'syz.4.5156': attribute type 17 has an invalid length. [ 560.697267][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.716707][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.742888][T24930] SET target dimension over the limit! [ 560.748530][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.770265][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.788991][T24927] lo: left promiscuous mode [ 560.805680][T24927] gre0: left promiscuous mode [ 560.810493][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.828546][T24927] gre0: left allmulticast mode [ 560.835267][T24927] erspan0: left promiscuous mode [ 560.840937][T24927] erspan0: left allmulticast mode [ 560.897613][T24938] tipc: Enabling of bearer rejected, media not registered [ 560.958009][T24944] netlink: 'syz.4.5162': attribute type 11 has an invalid length. [ 560.974587][T24944] netlink: 'syz.4.5162': attribute type 11 has an invalid length. [ 561.005804][T24947] nbd: must specify at least one socket [ 561.073257][T24951] gre1: entered promiscuous mode [ 561.103262][T24951] gre1: entered allmulticast mode [ 561.674627][T24994] netlink: 'syz.4.5178': attribute type 1 has an invalid length. [ 561.698852][T24996] netlink: 'syz.1.5179': attribute type 1 has an invalid length. [ 561.706248][T24994] __nla_validate_parse: 24 callbacks suppressed [ 561.706267][T24994] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5178'. [ 561.711932][T24996] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5179'. [ 561.815434][T25006] netlink: 'syz.0.5182': attribute type 1 has an invalid length. [ 561.825446][T25007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5182'. [ 561.839110][T25008] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5182'. [ 561.848512][T25006] netlink: 'syz.0.5182': attribute type 2 has an invalid length. [ 561.867036][T25007] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5182'. [ 562.149821][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5190'. [ 562.159062][T25035] netlink: 'syz.2.5190': attribute type 5 has an invalid length. [ 562.170481][T25035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5190'. [ 562.207923][T25032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5189'. [ 562.209118][T25035] geneve3: entered promiscuous mode [ 562.223060][T25035] geneve3: entered allmulticast mode [ 562.238795][T11213] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 562.259141][T11213] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 562.286802][T25032] vlan1: entered allmulticast mode [ 562.292174][T25032] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 562.310721][T11213] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 562.332613][T25040] x_tables: duplicate underflow at hook 4 [ 562.338746][T25035] wg2: Caught tx_queue_len zero misconfig [ 562.384131][T11213] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 562.450704][T25035] syzkaller0: entered promiscuous mode [ 562.459481][T25035] syzkaller0: entered allmulticast mode [ 562.477241][T25049] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5194'. [ 562.909509][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.917588][ C1] lec:lec_tx_timeout: lec0 [ 562.922719][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 564.281021][T25064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5196'. [ 564.873883][T25099] netlink: 'syz.4.5205': attribute type 7 has an invalid length. [ 564.908650][T25099] netlink: 'syz.4.5205': attribute type 8 has an invalid length. [ 565.039834][T25111] netlink: 'syz.0.5207': attribute type 1 has an invalid length. [ 565.438861][T11209] net_ratelimit: 157 callbacks suppressed [ 565.438880][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.464715][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.602039][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.622953][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.747593][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.765628][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.887303][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 565.895079][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 565.935823][T25147] netlink: 'syz.2.5219': attribute type 1 has an invalid length. [ 566.002799][T25155] lo: entered promiscuous mode [ 566.025062][T25155] netlink: 'syz.1.5218': attribute type 2 has an invalid length. [ 566.047626][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 566.062521][T25162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.065459][T25155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.188539][T25170] siw: device registration error -23 [ 566.758976][T25187] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.939563][T25215] __nla_validate_parse: 20 callbacks suppressed [ 566.939582][T25215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 566.991392][T25215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5234'. [ 567.087586][T25222] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5238'. [ 567.099443][T25218] xt_TCPMSS: Only works on TCP SYN packets [ 567.107752][T25223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5238'. [ 567.209912][T25228] syzkaller0: entered promiscuous mode [ 567.216711][T25228] syzkaller0: entered allmulticast mode [ 567.247300][T25228] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5239'. [ 567.371163][T25228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5239'. [ 567.559258][T25250] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5247'. [ 567.936657][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.944709][ C1] lec:lec_tx_timeout: lec0 [ 567.949424][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.075286][T25277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5255'. [ 568.183840][T25286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5254'. [ 568.281769][T25290] sctp: [Deprecated]: syz.2.5258 (pid 25290) Use of int in maxseg socket option. [ 568.281769][T25290] Use struct sctp_assoc_value instead [ 568.343053][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5260'. [ 569.071392][T25340] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 569.168364][T25344] sctp: [Deprecated]: syz.2.5277 (pid 25344) Use of int in max_burst socket option deprecated. [ 569.168364][T25344] Use struct sctp_assoc_value instead [ 569.208166][T25349] sctp: [Deprecated]: syz.2.5277 (pid 25349) Use of int in max_burst socket option deprecated. [ 569.208166][T25349] Use struct sctp_assoc_value instead [ 569.312745][T25362] validate_nla: 2 callbacks suppressed [ 569.312766][T25362] netlink: 'syz.0.5283': attribute type 1 has an invalid length. [ 570.013587][T25417] netlink: 'syz.1.5302': attribute type 1 has an invalid length. [ 570.108639][T25417] bond4: entered promiscuous mode [ 570.113799][T25417] bond4: entered allmulticast mode [ 570.120529][T25417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.165394][T25427] xt_cgroup: path and classid specified [ 570.172274][T25428] xt_cgroup: path and classid specified [ 570.195967][T25417] erspan1: entered allmulticast mode [ 570.224249][T25417] bond4: (slave erspan1): making interface the new active one [ 570.232970][T25417] erspan1: entered promiscuous mode [ 570.240284][T25417] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 570.313816][T25435] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 570.488521][T11202] net_ratelimit: 166 callbacks suppressed [ 570.488543][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.537012][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.555005][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 570.612094][T25460] syzkaller0: entered promiscuous mode [ 570.613019][T25462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.624642][T25460] syzkaller0: entered allmulticast mode [ 570.677351][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.707334][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.726868][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.734740][T25470] netlink: 'syz.2.5321': attribute type 1 has an invalid length. [ 570.746844][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.777185][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.796788][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 570.840912][T25473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.850496][T25473] bond6: (slave bond7): making interface the new active one [ 570.861316][T25473] bond6: (slave bond7): Enslaving as an active interface with an up link [ 570.885892][T25470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.993870][T25485] ip6tnl2: entered promiscuous mode [ 571.097846][T25490] bond0: Caught tx_queue_len zero misconfig [ 571.525898][T25492] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.574843][T25516] netlink: 'syz.0.5336': attribute type 1 has an invalid length. [ 571.883435][T25530] netlink: 'syz.0.5341': attribute type 4 has an invalid length. [ 571.883439][T25529] netlink: 'syz.0.5341': attribute type 4 has an invalid length. [ 572.301366][T25551] __nla_validate_parse: 17 callbacks suppressed [ 572.301385][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5348'. [ 572.917699][T25591] nbd: must specify at least one socket [ 572.956774][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.964875][ C1] lec:lec_tx_timeout: lec0 [ 572.969908][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 573.013131][T25592] bond8: option all_slaves_active: invalid value (222) [ 573.032299][T25592] bond8 (unregistering): Released all slaves [ 573.226935][T25606] netlink: 'syz.4.5367': attribute type 21 has an invalid length. [ 573.299171][T25609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 573.917212][T25655] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 573.920174][T25661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5383'. [ 573.965101][T25655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5381'. [ 574.090987][T25670] netlink: 'syz.4.5385': attribute type 1 has an invalid length. [ 574.122839][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5386'. [ 574.362174][T25687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5390'. [ 574.414185][T25698] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 574.439934][T25698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5396'. [ 574.474930][T25698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5396'. [ 574.656054][T25702] syzkaller0: entered promiscuous mode [ 574.681879][T25702] syzkaller0: entered allmulticast mode [ 574.705551][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5397'. [ 574.843561][T25725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5402'. [ 575.507597][T11213] net_ratelimit: 135 callbacks suppressed [ 575.507618][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.546902][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.570237][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.602749][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.630343][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.658092][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.676685][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.698628][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.726848][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 575.761642][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.977013][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 577.985049][ C1] lec:lec_tx_timeout: lec0 [ 577.989806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 580.537227][ T7447] net_ratelimit: 107 callbacks suppressed [ 580.537249][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.551191][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 580.667100][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.674892][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 580.787449][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.796833][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 580.906827][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 580.914608][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 581.027214][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 581.034991][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.996718][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 583.004747][ C1] lec:lec_tx_timeout: lec0 [ 583.009689][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 585.568418][T11204] net_ratelimit: 80 callbacks suppressed [ 585.568433][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.582062][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 585.696795][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.704563][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 585.818263][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.826061][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 585.937074][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.944827][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 586.057089][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 586.064930][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 588.786615][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 588.794698][ C1] lec:lec_tx_timeout: lec0 [ 588.799788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 590.597017][T11213] net_ratelimit: 80 callbacks suppressed [ 590.597038][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.610694][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.727151][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.734919][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.847050][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.854823][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 590.966727][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.974485][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 591.087133][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 591.094977][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.826653][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 593.834797][ C1] lec:lec_tx_timeout: lec0 [ 593.839564][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 595.627096][ T7447] net_ratelimit: 80 callbacks suppressed [ 595.627117][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.641050][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 595.757621][ T7447] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.765386][ T7447] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 595.877057][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.884821][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 595.996984][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 596.004799][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 596.116764][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 596.124718][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.860840][T25755] FAULT_INJECTION: forcing a failure. [ 597.860840][T25755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 597.875419][T25755] CPU: 1 UID: 0 PID: 25755 Comm: syz.2.5409 Not tainted syzkaller #0 PREEMPT(full) [ 597.875444][T25755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 597.875461][T25755] Call Trace: [ 597.875469][T25755] [ 597.875476][T25755] dump_stack_lvl+0xe8/0x150 [ 597.875503][T25755] should_fail_ex+0x412/0x560 [ 597.875528][T25755] _copy_from_user+0x2d/0xb0 [ 597.875551][T25755] ___sys_sendmsg+0x1c6/0x360 [ 597.875572][T25755] ? __lock_acquire+0x6b5/0x2cf0 [ 597.875597][T25755] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.875650][T25755] ? __fget_files+0x2a/0x420 [ 597.875668][T25755] ? __fget_files+0x3a0/0x420 [ 597.875696][T25755] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.875719][T25755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.875750][T25755] ? __pfx_ksys_write+0x10/0x10 [ 597.875784][T25755] do_syscall_64+0xe2/0xf80 [ 597.875802][T25755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.875818][T25755] ? trace_irq_disable+0x37/0x100 [ 597.875834][T25755] ? clear_bhb_loop+0x60/0xb0 [ 597.875854][T25755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.875875][T25755] RIP: 0033:0x7fd6cc59bf79 [ 597.875891][T25755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.875917][T25755] RSP: 002b:00007fd6ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.875937][T25755] RAX: ffffffffffffffda RBX: 00007fd6cc815fa0 RCX: 00007fd6cc59bf79 [ 597.875950][T25755] RDX: 0000000000048048 RSI: 0000200000000280 RDI: 0000000000000003 [ 597.875961][T25755] RBP: 00007fd6ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.875972][T25755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.875983][T25755] R13: 00007fd6cc816038 R14: 00007fd6cc815fa0 R15: 00007ffd9f587a68 [ 597.876012][T25755] [ 598.152943][T25764] xt_cgroup: xt_cgroup: no path or classid specified [ 598.339058][T25773] netlink: 'syz.2.5415': attribute type 3 has an invalid length. [ 598.719679][T25810] FAULT_INJECTION: forcing a failure. [ 598.719679][T25810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.749529][T25809] syz_tun: entered allmulticast mode [ 598.768409][T25811] sctp: [Deprecated]: syz.3.5424 (pid 25811) Use of int in maxseg socket option. [ 598.768409][T25811] Use struct sctp_assoc_value instead [ 598.770282][T25810] CPU: 1 UID: 0 PID: 25810 Comm: syz.0.5425 Not tainted syzkaller #0 PREEMPT(full) [ 598.770305][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 598.770315][T25810] Call Trace: [ 598.770322][T25810] [ 598.770329][T25810] dump_stack_lvl+0xe8/0x150 [ 598.770354][T25810] should_fail_ex+0x412/0x560 [ 598.770379][T25810] _copy_from_user+0x2d/0xb0 [ 598.770402][T25810] __copy_msghdr+0x3c5/0x5b0 [ 598.770427][T25810] ___sys_sendmsg+0x213/0x360 [ 598.770446][T25810] ? __lock_acquire+0x6b5/0x2cf0 [ 598.770472][T25810] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.770524][T25810] ? __fget_files+0x2a/0x420 [ 598.770540][T25810] ? __fget_files+0x3a0/0x420 [ 598.770567][T25810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.770590][T25810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.770619][T25810] ? __pfx_ksys_write+0x10/0x10 [ 598.770651][T25810] do_syscall_64+0xe2/0xf80 [ 598.770670][T25810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.770685][T25810] ? trace_irq_disable+0x37/0x100 [ 598.770701][T25810] ? clear_bhb_loop+0x60/0xb0 [ 598.770721][T25810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.770737][T25810] RIP: 0033:0x7f9bf619bf79 [ 598.770752][T25810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.770766][T25810] RSP: 002b:00007f9bf6f84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.770784][T25810] RAX: ffffffffffffffda RBX: 00007f9bf6415fa0 RCX: 00007f9bf619bf79 [ 598.770797][T25810] RDX: 0000000000048048 RSI: 0000200000000280 RDI: 0000000000000003 [ 598.770807][T25810] RBP: 00007f9bf6f84090 R08: 0000000000000000 R09: 0000000000000000 [ 598.770823][T25810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.770833][T25810] R13: 00007f9bf6416038 R14: 00007f9bf6415fa0 R15: 00007fffd922d008 [ 598.770861][T25810] [ 598.846589][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 598.888806][T25809] sctp: [Deprecated]: syz.3.5424 (pid 25809) Use of int in maxseg socket option. [ 598.888806][T25809] Use struct sctp_assoc_value instead [ 598.894693][ C1] lec:lec_tx_timeout: lec0 [ 598.998120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 599.021051][T25811] syz_tun: left allmulticast mode [ 599.059109][T25822] netlink: 'syz.1.5430': attribute type 29 has an invalid length. [ 599.097147][T25827] netlink: 'syz.1.5430': attribute type 29 has an invalid length. [ 599.110959][T25822] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5430'. [ 599.122638][T25822] netlink: 'syz.1.5430': attribute type 1 has an invalid length. [ 599.321781][T25827] veth5: entered promiscuous mode [ 599.411175][T25846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5433'. [ 599.424292][T25846] netlink: 'syz.0.5433': attribute type 1 has an invalid length. [ 599.464270][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'. [ 599.646044][T25859] FAULT_INJECTION: forcing a failure. [ 599.646044][T25859] name failslab, interval 1, probability 0, space 0, times 0 [ 599.662736][T25859] CPU: 0 UID: 0 PID: 25859 Comm: syz.1.5439 Not tainted syzkaller #0 PREEMPT(full) [ 599.662772][T25859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 599.662784][T25859] Call Trace: [ 599.662792][T25859] [ 599.662799][T25859] dump_stack_lvl+0xe8/0x150 [ 599.662830][T25859] should_fail_ex+0x412/0x560 [ 599.662858][T25859] should_failslab+0xa8/0x100 [ 599.662882][T25859] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 599.662907][T25859] ? __alloc_skb+0x193/0x390 [ 599.662924][T25859] ? __alloc_skb+0x1d7/0x390 [ 599.662939][T25859] ? __local_bh_enable_ip+0xd0/0x130 [ 599.662953][T25859] ? __alloc_skb+0x193/0x390 [ 599.662970][T25859] __alloc_skb+0x1d7/0x390 [ 599.662989][T25859] netlink_sendmsg+0x5d4/0xb40 [ 599.663011][T25859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.663030][T25859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.663051][T25859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.663068][T25859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.663082][T25859] ____sys_sendmsg+0xa68/0xad0 [ 599.663105][T25859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.663129][T25859] ? import_iovec+0x73/0xa0 [ 599.663151][T25859] ___sys_sendmsg+0x2a5/0x360 [ 599.663167][T25859] ? __lock_acquire+0x6b5/0x2cf0 [ 599.663187][T25859] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.663231][T25859] ? __fget_files+0x2a/0x420 [ 599.663244][T25859] ? __fget_files+0x3a0/0x420 [ 599.663266][T25859] __x64_sys_sendmsg+0x1bd/0x2a0 [ 599.663285][T25859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.663309][T25859] ? __pfx_ksys_write+0x10/0x10 [ 599.663337][T25859] do_syscall_64+0xe2/0xf80 [ 599.663352][T25859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.663365][T25859] ? trace_irq_disable+0x37/0x100 [ 599.663378][T25859] ? clear_bhb_loop+0x60/0xb0 [ 599.663393][T25859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.663406][T25859] RIP: 0033:0x7fd5dab9bf79 [ 599.663420][T25859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.663431][T25859] RSP: 002b:00007fd5dbac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.663447][T25859] RAX: ffffffffffffffda RBX: 00007fd5dae15fa0 RCX: 00007fd5dab9bf79 [ 599.663458][T25859] RDX: 0000000000048048 RSI: 0000200000000280 RDI: 0000000000000003 [ 599.663467][T25859] RBP: 00007fd5dbac5090 R08: 0000000000000000 R09: 0000000000000000 [ 599.663476][T25859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.663484][T25859] R13: 00007fd5dae16038 R14: 00007fd5dae15fa0 R15: 00007ffeb0382638 [ 599.663507][T25859] [ 599.860273][T25846] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.940286][T25840] bond11: (slave geneve2): making interface the new active one [ 599.949656][T25840] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 600.401069][T25879] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5447'. [ 600.420840][T25879] 8021q: VLANs not supported on ip_vti0 [ 600.446227][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5446'. [ 600.521373][T25883] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 600.613680][T25883] 8021q: adding VLAN 0 to HW filter on device bond7 [ 600.650988][T11204] net_ratelimit: 86 callbacks suppressed [ 600.651008][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.720914][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.760163][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 600.783442][T25894] netlink: 'syz.2.5453': attribute type 1 has an invalid length. [ 600.795572][T25893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5451'. [ 600.815576][T25894] netlink: 'syz.2.5453': attribute type 1 has an invalid length. [ 600.833489][T25894] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.5453'. [ 600.892136][T25894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5453'. [ 600.907297][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.916056][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 600.916985][T25894] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5453'. [ 600.951081][T25894] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5453'. [ 600.962752][T25901] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 600.970280][T25901] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 601.057087][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 601.075812][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.218063][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 601.246680][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 601.356722][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 601.644242][T25947] netlink: 'syz.3.5469': attribute type 39 has an invalid length. [ 601.692218][T25950] netlink: 'syz.3.5469': attribute type 39 has an invalid length. [ 602.098861][T25981] tunl0: entered promiscuous mode [ 602.225438][T25996] wg2: entered allmulticast mode [ 602.589887][T26022] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 603.231367][T26070] lo: left promiscuous mode [ 603.359808][T26070] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.367261][T26070] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.440501][T26084] FAULT_INJECTION: forcing a failure. [ 603.440501][T26084] name failslab, interval 1, probability 0, space 0, times 0 [ 603.453412][T26084] CPU: 1 UID: 0 PID: 26084 Comm: syz.0.5512 Not tainted syzkaller #0 PREEMPT(full) [ 603.453430][T26084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 603.453437][T26084] Call Trace: [ 603.453442][T26084] [ 603.453447][T26084] dump_stack_lvl+0xe8/0x150 [ 603.453465][T26084] should_fail_ex+0x412/0x560 [ 603.453480][T26084] should_failslab+0xa8/0x100 [ 603.453493][T26084] kmem_cache_alloc_noprof+0x87/0x6e0 [ 603.453508][T26084] ? __netlink_lookup+0xc6/0x8b0 [ 603.453520][T26084] ? skb_clone+0x212/0x3a0 [ 603.453536][T26084] skb_clone+0x212/0x3a0 [ 603.453552][T26084] __netlink_deliver_tap+0x404/0x850 [ 603.453568][T26084] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.453579][T26084] netlink_deliver_tap+0x19c/0x1b0 [ 603.453589][T26084] netlink_unicast+0x7e3/0x9b0 [ 603.453608][T26084] ? __pfx_netlink_unicast+0x10/0x10 [ 603.453622][T26084] ? __alloc_skb+0x193/0x390 [ 603.453634][T26084] ? netlink_sendmsg+0x650/0xb40 [ 603.453646][T26084] netlink_sendmsg+0x813/0xb40 [ 603.453661][T26084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.453673][T26084] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.453687][T26084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.453698][T26084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.453708][T26084] ____sys_sendmsg+0xa68/0xad0 [ 603.453726][T26084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.453743][T26084] ? import_iovec+0x73/0xa0 [ 603.453760][T26084] ___sys_sendmsg+0x2a5/0x360 [ 603.453772][T26084] ? __lock_acquire+0x6b5/0x2cf0 [ 603.453788][T26084] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.453819][T26084] ? __fget_files+0x2a/0x420 [ 603.453829][T26084] ? __fget_files+0x3a0/0x420 [ 603.453844][T26084] __x64_sys_sendmsg+0x1bd/0x2a0 [ 603.453858][T26084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.453876][T26084] ? __pfx_ksys_write+0x10/0x10 [ 603.453897][T26084] do_syscall_64+0xe2/0xf80 [ 603.453909][T26084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.453918][T26084] ? trace_irq_disable+0x37/0x100 [ 603.453927][T26084] ? clear_bhb_loop+0x60/0xb0 [ 603.453939][T26084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.453949][T26084] RIP: 0033:0x7f9bf619bf79 [ 603.453959][T26084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.453967][T26084] RSP: 002b:00007f9bf6f84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.453979][T26084] RAX: ffffffffffffffda RBX: 00007f9bf6415fa0 RCX: 00007f9bf619bf79 [ 603.453986][T26084] RDX: 0000000000048048 RSI: 0000200000000280 RDI: 0000000000000003 [ 603.453992][T26084] RBP: 00007f9bf6f84090 R08: 0000000000000000 R09: 0000000000000000 [ 603.454002][T26084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.454011][T26084] R13: 00007f9bf6416038 R14: 00007f9bf6415fa0 R15: 00007fffd922d008 [ 603.454038][T26084] [ 603.804318][T26070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.823022][T26070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.860298][T26077] veth0_to_bond: entered allmulticast mode [ 604.005091][T26093] validate_nla: 4 callbacks suppressed [ 604.005108][T26093] netlink: 'syz.4.5515': attribute type 1 has an invalid length. [ 604.006589][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 604.018020][T26093] netlink: 'syz.4.5515': attribute type 1 has an invalid length. [ 604.018420][ C1] lec:lec_tx_timeout: lec0 [ 604.190030][T11209] [ 604.192405][T11209] ====================================================== [ 604.193138][T26099] __nla_validate_parse: 11 callbacks suppressed [ 604.193153][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5518'. [ 604.199416][T11209] WARNING: possible circular locking dependency detected [ 604.199440][T11209] syzkaller #0 Not tainted [ 604.199448][T11209] ------------------------------------------------------ [ 604.199455][T11209] kworker/u8:15/11209 is trying to acquire lock: [ 604.199464][T11209] ffff888047b8cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 604.248259][T11209] [ 604.248259][T11209] but task is already holding lock: [ 604.255613][T11209] ffff88807e156558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 604.265445][T11209] [ 604.265445][T11209] which lock already depends on the new lock. [ 604.265445][T11209] [ 604.275833][T11209] [ 604.275833][T11209] the existing dependency chain (in reverse order) is: [ 604.284840][T11209] [ 604.284840][T11209] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 604.293095][T11209] _raw_spin_lock+0x2e/0x40 [ 604.298121][T11209] sch_direct_xmit+0x15f/0x4c0 [ 604.303405][T11209] __dev_queue_xmit+0x1538/0x3850 [ 604.309057][T11209] hsr_forward_skb+0x15a0/0x2880 [ 604.314513][T11209] send_hsr_supervision_frame+0x731/0xcb0 [ 604.320752][T11209] hsr_announce+0x1db/0x370 [ 604.325767][T11209] call_timer_fn+0x192/0x5a0 [ 604.330869][T11209] __run_timer_base+0x652/0x8b0 [ 604.336259][T11209] run_timer_softirq+0xb7/0x170 [ 604.341623][T11209] handle_softirqs+0x22a/0x7c0 [ 604.346891][T11209] do_softirq+0x76/0xd0 [ 604.351562][T11209] __local_bh_enable_ip+0xf8/0x130 [ 604.357185][T11209] dev_deactivate_many+0x720/0xd40 [ 604.362803][T11209] __dev_close_many+0x17b/0x6d0 [ 604.368160][T11209] netif_close_many+0x225/0x420 [ 604.373518][T11209] unregister_netdevice_many_notify+0xb47/0x2370 [ 604.380350][T11209] unregister_netdevice_queue+0x31f/0x360 [ 604.386595][T11209] __tun_detach+0x6d9/0x15d0 [ 604.391707][T11209] tun_chr_close+0x10a/0x1c0 [ 604.396812][T11209] __fput+0x44f/0xa70 [ 604.401326][T11209] task_work_run+0x1d9/0x270 [ 604.406447][T11209] exit_to_user_mode_loop+0xed/0x480 [ 604.412255][T11209] do_syscall_64+0x2b7/0xf80 [ 604.417366][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.423767][T11209] [ 604.423767][T11209] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 604.431487][T11209] __lock_acquire+0x15a5/0x2cf0 [ 604.436846][T11209] lock_acquire+0x106/0x330 [ 604.441856][T11209] _raw_spin_lock_bh+0x36/0x50 [ 604.447122][T11209] hsr_dev_xmit+0x237/0x360 [ 604.452137][T11209] dev_hard_start_xmit+0x2cd/0x7f0 [ 604.457758][T11209] __dev_queue_xmit+0x168f/0x3850 [ 604.463297][T11209] NF_HOOK+0x33a/0x3c0 [ 604.467873][T11209] arp_xmit+0x16c/0x270 [ 604.472535][T11209] arp_solicit+0xbe0/0xe40 [ 604.477455][T11209] __neigh_event_send+0xf05/0x14a0 [ 604.483069][T11209] neigh_resolve_output+0x198/0x750 [ 604.488774][T11209] ip_finish_output2+0xbb6/0xff0 [ 604.494220][T11209] ip_output+0x29f/0x450 [ 604.498974][T11209] iptunnel_xmit+0x59f/0xa00 [ 604.504079][T11209] ip_tunnel_xmit+0x1f74/0x2730 [ 604.509438][T11209] __gre_xmit+0x19e/0x240 [ 604.514276][T11209] erspan_xmit+0xa81/0x1670 [ 604.519319][T11209] dev_hard_start_xmit+0x2cd/0x7f0 [ 604.524952][T11209] sch_direct_xmit+0x251/0x4c0 [ 604.530224][T11209] __dev_queue_xmit+0x1538/0x3850 [ 604.535779][T11209] alb_send_lp_vid+0x348/0x550 [ 604.541054][T11209] alb_send_learning_packets+0x12c/0x300 [ 604.547197][T11209] bond_alb_monitor+0x3d5/0x17e0 [ 604.552642][T11209] process_scheduled_works+0xaec/0x17a0 [ 604.558697][T11209] worker_thread+0xda6/0x1360 [ 604.563921][T11209] kthread+0x726/0x8b0 [ 604.568492][T11209] ret_from_fork+0x51b/0xa40 [ 604.573583][T11209] ret_from_fork_asm+0x1a/0x30 [ 604.578949][T11209] [ 604.578949][T11209] other info that might help us debug this: [ 604.578949][T11209] [ 604.589156][T11209] Possible unsafe locking scenario: [ 604.589156][T11209] [ 604.596586][T11209] CPU0 CPU1 [ 604.601940][T11209] ---- ---- [ 604.607286][T11209] lock(&qdisc_xmit_lock_key#4); [ 604.612309][T11209] lock(&hsr->seqnr_lock); [ 604.619334][T11209] lock(&qdisc_xmit_lock_key#4); [ 604.626874][T11209] lock(&hsr->seqnr_lock); [ 604.631365][T11209] [ 604.631365][T11209] *** DEADLOCK *** [ 604.631365][T11209] [ 604.639489][T11209] 11 locks held by kworker/u8:15/11209: [ 604.645012][T11209] #0: ffff88801fe8c948 ((wq_completion)bond4#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 604.656061][T11209] #1: ffffc900125a7bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 604.668925][T11209] #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 604.678502][T11209] #3: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 604.688420][T11209] #4: ffff88806ab15228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 604.701025][T11209] #5: ffff88807e156558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 604.711287][T11209] #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 604.720153][T11209] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3d0/0xff0 [ 604.729793][T11209] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 604.738651][T11209] #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 604.748557][T11209] #10: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 604.757777][T11209] [ 604.757777][T11209] stack backtrace: [ 604.763646][T11209] CPU: 1 UID: 0 PID: 11209 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 604.763662][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 604.763672][T11209] Workqueue: bond4 bond_alb_monitor [ 604.763691][T11209] Call Trace: [ 604.763697][T11209] [ 604.763703][T11209] dump_stack_lvl+0xe8/0x150 [ 604.763720][T11209] print_circular_bug+0x2e1/0x300 [ 604.763735][T11209] check_noncircular+0x12e/0x150 [ 604.763750][T11209] __lock_acquire+0x15a5/0x2cf0 [ 604.763769][T11209] ? __siphash_unaligned+0x25f/0x3b0 [ 604.763784][T11209] ? __pfx_skb_network_protocol+0x10/0x10 [ 604.763802][T11209] ? __flow_hash_from_keys+0x45b/0x6e0 [ 604.763820][T11209] ? hsr_dev_xmit+0x237/0x360 [ 604.763835][T11209] lock_acquire+0x106/0x330 [ 604.763851][T11209] ? hsr_dev_xmit+0x237/0x360 [ 604.763870][T11209] ? hsr_dev_xmit+0x237/0x360 [ 604.763884][T11209] _raw_spin_lock_bh+0x36/0x50 [ 604.763896][T11209] ? hsr_dev_xmit+0x237/0x360 [ 604.763911][T11209] hsr_dev_xmit+0x237/0x360 [ 604.763926][T11209] ? hsr_dev_xmit+0x2d/0x360 [ 604.763942][T11209] dev_hard_start_xmit+0x2cd/0x7f0 [ 604.763964][T11209] __dev_queue_xmit+0x168f/0x3850 [ 604.763985][T11209] ? __dev_queue_xmit+0x274/0x3850 [ 604.764003][T11209] ? arpt_do_table+0x261/0x1ec0 [ 604.764018][T11209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.764038][T11209] ? __pfx_arpt_do_table+0x10/0x10 [ 604.764051][T11209] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 604.764077][T11209] ? NF_HOOK+0xa2/0x3c0 [ 604.764093][T11209] NF_HOOK+0x33a/0x3c0 [ 604.764109][T11209] ? __pfx_arp_xmit_finish+0x10/0x10 [ 604.764124][T11209] ? NF_HOOK+0xa2/0x3c0 [ 604.764138][T11209] ? __pfx_NF_HOOK+0x10/0x10 [ 604.764152][T11209] ? lock_acquire+0x106/0x330 [ 604.764168][T11209] ? __pfx_arp_xmit_finish+0x10/0x10 [ 604.764184][T11209] ? inet_addr_type_dev_table+0x25/0x190 [ 604.764203][T11209] arp_xmit+0x16c/0x270 [ 604.764217][T11209] ? arp_xmit+0x23/0x270 [ 604.764232][T11209] arp_solicit+0xbe0/0xe40 [ 604.764250][T11209] ? arp_solicit+0x119/0xe40 [ 604.764265][T11209] ? __pfx_arp_solicit+0x10/0x10 [ 604.764283][T11209] ? __neigh_event_send+0xe9d/0x14a0 [ 604.764297][T11209] ? __pfx_arp_solicit+0x10/0x10 [ 604.764313][T11209] __neigh_event_send+0xf05/0x14a0 [ 604.764335][T11209] neigh_resolve_output+0x198/0x750 [ 604.764351][T11209] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 604.764369][T11209] ip_finish_output2+0xbb6/0xff0 [ 604.764385][T11209] ? ip_skb_dst_mtu+0x80b/0xa50 [ 604.764398][T11209] ? ip_skb_dst_mtu+0x109/0xa50 [ 604.764413][T11209] ? ip_finish_output2+0x3d0/0xff0 [ 604.764427][T11209] ? ip_finish_output+0x33a/0x3f0 [ 604.764441][T11209] ip_output+0x29f/0x450 [ 604.764455][T11209] ? ip_output+0x5b/0x450 [ 604.764469][T11209] iptunnel_xmit+0x59f/0xa00 [ 604.764491][T11209] ip_tunnel_xmit+0x1f74/0x2730 [ 604.764515][T11209] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 604.764529][T11209] ? gre_build_header+0x31f/0xa40 [ 604.764546][T11209] ? __pfx_gre_build_header+0x10/0x10 [ 604.764561][T11209] ? pskb_expand_head+0x45e/0x1300 [ 604.764580][T11209] __gre_xmit+0x19e/0x240 [ 604.764592][T11209] ? pskb_expand_head+0xcb7/0x1300 [ 604.764609][T11209] ? __pfx___gre_xmit+0x10/0x10 [ 604.764626][T11209] erspan_xmit+0xa81/0x1670 [ 604.764641][T11209] ? __lock_acquire+0x6b5/0x2cf0 [ 604.764661][T11209] ? __pfx_erspan_xmit+0x10/0x10 [ 604.764679][T11209] dev_hard_start_xmit+0x2cd/0x7f0 [ 604.764700][T11209] sch_direct_xmit+0x251/0x4c0 [ 604.764714][T11209] ? __pfx_sch_direct_xmit+0x10/0x10 [ 604.764725][T11209] ? ret_from_fork_asm+0x1a/0x30 [ 604.764744][T11209] __dev_queue_xmit+0x1538/0x3850 [ 604.764764][T11209] ? __dev_queue_xmit+0x274/0x3850 [ 604.764784][T11209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.764803][T11209] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 604.764819][T11209] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 604.764841][T11209] ? __alloc_skb+0x27e/0x390 [ 604.764856][T11209] ? alb_send_lp_vid+0x14e/0x550 [ 604.764874][T11209] alb_send_lp_vid+0x348/0x550 [ 604.764891][T11209] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 604.764912][T11209] alb_send_learning_packets+0x12c/0x300 [ 604.764929][T11209] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 604.764944][T11209] ? bond_alb_monitor+0xf8/0x17e0 [ 604.764962][T11209] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 604.764978][T11209] bond_alb_monitor+0x3d5/0x17e0 [ 604.764995][T11209] ? bond_alb_monitor+0xf8/0x17e0 [ 604.765011][T11209] ? __pfx_bond_alb_monitor+0x10/0x10 [ 604.765026][T11209] ? process_scheduled_works+0xa0f/0x17a0 [ 604.765044][T11209] ? process_scheduled_works+0xa0f/0x17a0 [ 604.765061][T11209] process_scheduled_works+0xaec/0x17a0 [ 604.765087][T11209] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.765103][T11209] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.765118][T11209] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.765131][T11209] ? schedule+0x90/0x360 [ 604.765145][T11209] worker_thread+0xda6/0x1360 [ 604.765170][T11209] kthread+0x726/0x8b0 [ 604.765185][T11209] ? __pfx_worker_thread+0x10/0x10 [ 604.765201][T11209] ? __pfx_kthread+0x10/0x10 [ 604.765215][T11209] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.765227][T11209] ? __pfx_kthread+0x10/0x10 [ 604.765240][T11209] ret_from_fork+0x51b/0xa40 [ 604.765253][T11209] ? __pfx_ret_from_fork+0x10/0x10 [ 604.765264][T11209] ? __switch_to+0xc82/0x1410 [ 604.765281][T11209] ? __pfx_kthread+0x10/0x10 [ 604.765294][T11209] ret_from_fork_asm+0x1a/0x30 [ 604.765315][T11209] [ 605.290423][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5518'. [ 605.737072][T11209] net_ratelimit: 74 callbacks suppressed [ 605.737093][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.752544][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 605.866927][T11204] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.874703][T11204] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 605.987057][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.994903][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.106876][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.114778][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 606.226990][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 606.234763][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 610.796775][T11215] net_ratelimit: 80 callbacks suppressed [ 610.796797][T11215] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.810279][T11215] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 610.926693][T11213] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.934446][T11213] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.056649][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.064428][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.176725][T11202] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.184525][T11202] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.297126][T11209] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 611.304890][T11209] bond4: (slave ip6gretap1): failed to get link speed/duplex