last executing test programs: 2.910261047s ago: executing program 1 (id=2326): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000240)=""/169, 0x41000, 0x44, '\x00', 0x0, @fallback=0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0xd, 0x0, 0x1}, 0x10, r7, r4, 0x3, &(0x7f00000001c0), &(0x7f00000003c0)=[{0x3, 0x4, 0xb, 0x3}, {0x1, 0x3, 0x10, 0x7}, {0x3, 0x1, 0x9}], 0x10, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) 2.668624626s ago: executing program 4 (id=2331): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x0, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.456759013s ago: executing program 4 (id=2333): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000000000000500000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r2, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002340)={'team0\x00', &(0x7f00000022c0)=@ethtool_link_settings={0x4c, 0xe76e, 0xc, 0x80, 0x0, 0x9, 0x53, 0x4, 0x1, 0x4, [0x218, 0x10000, 0x2, 0x8d3c, 0x1, 0x9, 0x1, 0x486]}}) sendmmsg$sock(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept$ax25(r0, &(0x7f0000001080)={{0x3, @null}, [@netrom, @default, @netrom, @netrom, @netrom, @bcast, @netrom, @netrom]}, &(0x7f0000000140)=0x48) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000001340)={@default, @bcast, @null, 0xa, 0x1, 0x0, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r7 = socket$packet(0x11, 0x3, 0x300) unshare(0x20000400) setsockopt$packet_int(r7, 0x107, 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x51e6, 0xaade, 0x0, 0x9, 0x0, 0x7, 0x101, 0xf, 0x0, 0x6, 0x8001, 0x5, 0x40, 0x4, 0x7]}, &(0x7f0000000040)=0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x80000001, 0x7fffffff, 0xd}, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000001300)={0x0, 0x0}) nanosleep(&(0x7f0000001280)={r8, r9+10000000}, &(0x7f00000012c0)) 2.316420854s ago: executing program 3 (id=2336): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000004c0)={0x0, 0x5, "aa0ecd", 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x28, 0x0, &(0x7f00000009c0)="c1188e199f5d02ff4284860186dd3520ca84cc3e891d8c40d423c534dcd3682ac4fa12dda5b57203", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000480)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.079585165s ago: executing program 1 (id=2339): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000080)={0x57}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x89, 0x1, 0x1, 0x8f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r4, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000100)=0x3) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) 1.951106313s ago: executing program 3 (id=2342): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@null, @rose, @null, @netrom, @default, @bcast, @default, @rose]}, &(0x7f0000000200)=0x48, 0x100800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) (rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa0}, 0x1c, 0x0}}], 0x1, 0xc4) accept(r1, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x80) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000100000027bf03000000000000004367dcdd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) socket(0x11, 0x800000003, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0xc70, 0x0, 0xffffffff, 0xffffffff, 0x908, 0xffffffff, 0xba0, 0xffffffff, 0xffffffff, 0xba0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8800000, 0x1}, {0xec, 0x2}, {0x6, 0x3}, {0x80}, {0x6, 0x2}, {0x10000, 0x2}, {0xd}, {0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4}], [{0x9, 0xfffffffb}, {0x7, 0x7}, {0x2, 0x80000000}, {0x9, 0x1}, {0x799, 0x8001}, {0x0, 0x2}, {0xc2, 0x5}, {0x8, 0x1000}, {0x40, 0x9}, {0xff, 0x81}, {0x636, 0x6}], 0x6}, {[{0x8, 0x2}, {0xe000}, {0xb8b4, 0x1}, {0x3c5f9b87, 0x3}, {0x3, 0x1}, {}, {0x29b5, 0x2}, {0x54a2f77, 0x3}, {0x3, 0x3}, {0x1000, 0x2}, {0x1, 0x2}], [{0x6, 0x5}, {0x5, 0x7}, {0x2, 0x3}, {0x80000000, 0x2}, {0xee84, 0x8000}, {0x9, 0x9}, {0x3800000, 0x3}, {0x800, 0x9}, {0xfffffffa, 0x1}, {0x0, 0x2}, {0x7, 0x7}], 0x4, 0x3}, {[{0x286f, 0x1}, {0x554b, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x5}, {0x9, 0x1}, {0x6000000, 0x3}, {0x400, 0x3}, {0x9, 0x2}, {0x8001, 0x2}, {0xc5bf}], [{0x6, 0x7f}, {0x5, 0xfffffff9}, {0x7, 0x8}, {0xb, 0x3}, {0x8, 0x9}, {0x9}, {0x7}, {0x7, 0x1000}, {0xfff, 0x2e4}, {0x0, 0x400}, {0x0, 0x8}], 0xb, 0x4}, {[{0x5, 0x2}, {0x2, 0x1}, {0x6, 0x3}, {0xfffffffc, 0x1}, {0x4, 0x3}, {0x10001}, {0xca0, 0x2}, {0x10, 0x1}, {0x8, 0x1}, {0x6796, 0x3}, {0x8, 0x1}], [{0x6, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0xffff, 0x2}, {0xc, 0x5}, {0x51a3, 0x3}, {0x8, 0x5}, {0xfffffff7, 0x9}, {0xd0, 0x1}, {0xfffffff8, 0x8}, {0x7656, 0x2}], 0x7}, {[{0x2, 0x2}, {0x10001}, {0x4eb}, {0x10000, 0x3}, {0x2, 0x2}, {0x3}, {0x81}, {0x4, 0x1}, {0x10001, 0x2}, {0x9, 0x3}, {0x1, 0x2}], [{0x4}, {0x0, 0x400}, {0xd9a8, 0x7}, {0x1000, 0x8f8}, {0x3, 0x10001}, {0x3, 0x7c67}, {0x6, 0x80}, {0xfffffff9, 0x2}, {0xffff, 0x2}, {0x1000, 0x9}, {0x3, 0x2}], 0x1, 0x4}, {[{0xabb918, 0x1}, {0x3, 0x1}, {0x8, 0x2}, {0x9, 0x1}, {0x2}, {0x9, 0x1}, {0x80000000, 0x3}, {0x1, 0x2}, {0x0, 0xc49aafde8229cbf1}, {0x4, 0x1}, {0x3, 0x2}], [{0x8b, 0x9}, {0x6, 0x553}, {0x1, 0xe0}, {0x3, 0x4ad}, {0x0, 0x10001}, {0x1, 0x2}, {0xd1, 0x100}, {0x6, 0x7641}, {0x3, 0xfffffffc}, {0x2, 0x4}, {0x9, 0x2}], 0x1, 0x1}, {[{0x8015, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x37b, 0x3}, {0x5}, {0x2, 0x3}, {0x1, 0x2}, {0x7f}, {0x6, 0x2}, {0xfffffff6, 0x2}], [{0x9, 0x7}, {0x8, 0x7}, {0x6, 0x4}, {0x800, 0x80000001}, {0x0, 0x10000}, {0x2, 0x3b58}, {0x4ca7ea08, 0x8001}, {0x0, 0xa9b}, {0x1ff}, {0x5, 0x2}, {0x8, 0x4}], 0xa, 0xb}, {[{0x10001, 0x3}, {0x3}, {0xc, 0x1}, {0x7a, 0x3}, {0x6, 0x1}, {0x80000001, 0x3}, {0x3, 0x2}, {0xa}, {0x401, 0x1}, {0x9}, {0x1, 0x2}], [{0x200, 0x1}, {0x8, 0x1aaa}, {0x706, 0x9}, {0x9, 0x2}, {0x4, 0x7}, {0x5, 0x9}, {0x3}, {0x5, 0xbf789c5e}, {0x8, 0x3}, {0x7, 0x10001}, {0x1}], 0xa, 0x1}, {[{0xc2}, {0x5, 0x1}, {0x7cd72bba}, {0x8, 0x2}, {0x400}, {0x7ff, 0x3}, {0x10001}, {0xe1a}, {0x9, 0x3}, {0xfffffffc, 0x3}, {0x9}], [{0x10, 0x4}, {0x1, 0x10000}, {0xbf9, 0x6}, {0x4}, {0x101, 0x8}, {0x100, 0x4}, {0x0, 0xb6e}, {0x7f, 0x8}, {0x9, 0x7}, {0xffff, 0x92a}, {0xd, 0x2}], 0x9, 0x2}, {[{0x8, 0x3}, {0x80000001}, {0x8, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x3}, {0xc, 0x3}, {0x101, 0x2}, {0x1}], [{0x4, 0x3}, {0x0, 0x8}, {0xffffe5cb, 0x1}, {0x7f, 0xfffffff4}, {0x40, 0xffffffff}, {0x2, 0x7}, {0x7fff, 0x6}, {0x0, 0x8}, {0xffffff2e, 0x7ff}, {0x40, 0xa}, {0x3, 0x7}], 0x6, 0x2}, {[{0x1ff}, {0x5, 0x2}, {0x10001, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x1, 0x1}, {0x800, 0x3}, {0x80000001, 0x2}, {0x1ef6, 0x2}, {0x1, 0x2}, {0xba, 0x3}], [{0x18d, 0x7}, {0x0, 0x2}, {0xdf91, 0x1}, {0xe08, 0x6}, {0x4, 0x7ff}, {0xa64, 0x101}, {0x7, 0x4}, {0x401, 0x2}, {0x7ff}, {0x0, 0xd4}, {0xef}], 0x2, 0x7}]}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xcd0) 1.918589198s ago: executing program 1 (id=2343): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f00000001c0)='veth\x00', 0x492380, &(0x7f0000000200)={@align=0x2, {0x4d, 0x401, 0x1, 0x4}}, 0x9, &(0x7f0000000240), &(0x7f00000002c0)=0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000180), &(0x7f0000000380)=r4}, 0x20) 1.903300322s ago: executing program 0 (id=2344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x3c, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) 1.740203329s ago: executing program 3 (id=2345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$FITHAW(r2, 0xc0045878) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x3}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x61, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002500)={0x0, "d5f0dbfde24569448e548e59b9560abf"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000840)={0x0, 0x4, 0xe}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000c40)={0x4, 0x7, {0x1ff, @usage=0xbcf, r6, 0x5, 0xda, 0xb, 0x7, 0x0, 0x23, @usage=0x8, 0xfffffc31, 0x4, [0x1, 0x1, 0x9, 0x2, 0x3, 0xfffffffffffffffa]}, {0x9, @usage=0x1, 0x0, 0x10000, 0x4, 0xac34, 0x9, 0x10000, 0x8, @usage=0xc11, 0x2, 0x6011114, [0x7, 0xffffffffffffffff, 0x8d, 0x8000, 0x9, 0x6]}, {0x2, @struct={0x5, 0x400}, r7, 0x7, 0x3, 0x8, 0x4fc5, 0x401, 0xfb, @usage=0x200, 0x7ff, 0x8, [0xfffffffffffffffb, 0x40, 0x8, 0x9, 0x5, 0x10]}, {0xd91, 0x81, 0x9a}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r9, 0x40047452, &(0x7f00000000c0)=0x90) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="e1ab5582"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000c00100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x42f, &(0x7f00000014c0)=""/4101, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, r1, 0x37, 0x3c}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 1.691360829s ago: executing program 2 (id=2346): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 1.589841847s ago: executing program 0 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000080)=""/250, 0xfa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdbdf25017c000008000180f1a988e6100002800c00d0b9474294f8c5708929"], 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) socket$nl_generic(0x10, 0x3, 0x10) (async) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f0000000080)=""/250, 0xfa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)=ANY=[@ANYBLOB="2c0000002c00070100000000ffdbdf25017c000008000180f1a988e6100002800c00d0b9474294f8c5708929"], 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) (async) 1.536942012s ago: executing program 3 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}, 0xb529}], 0x1, 0x40000022, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) recvmmsg(r6, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2}, 0xb529}], 0x1, 0x40000022, 0x0) (async) 1.518940467s ago: executing program 2 (id=2349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x11, 0x71, 0x10, 0x33}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e3000"], 0x2c}}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x19f0, 0x1ff, {{0x26, 0x4, 0x3, 0xa, 0x98, 0x66, 0x0, 0xc0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@multicast2, 0x40}]}, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x0, [{@local, 0x81}, {@private=0xa010101, 0x10001}, {@local, 0x6}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x0, 0xa, "f39047e166526d31"}, {0x7, 0x9, "a814e4ebe01434"}, {0x5, 0x12, "631f8027a21a4ccc50c53e38278a38c2"}, {0x5, 0x3, "fc"}, {0x5, 0xe, "f35045a155af64f538355940"}, {0x6, 0x2}, {0x5, 0xd, "0cc52dd2d5513498f23d17"}, {0x0, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x3, 0x3, 0x4, [{@rand_addr=0x64010101, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x7, 0x8, 0x49, @empty, @remote, 0x1, 0x10, 0x1ff, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x11, 0x71, 0x10, 0x33}, [@call={0x85, 0x0, 0x0, 0x95}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e3000"], 0x2c}}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x19f0, 0x1ff, {{0x26, 0x4, 0x3, 0xa, 0x98, 0x66, 0x0, 0xc0, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x0, [{@multicast2, 0x40}]}, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x0, [{@local, 0x81}, {@private=0xa010101, 0x10001}, {@local, 0x6}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x0, 0xa, "f39047e166526d31"}, {0x7, 0x9, "a814e4ebe01434"}, {0x5, 0x12, "631f8027a21a4ccc50c53e38278a38c2"}, {0x5, 0x3, "fc"}, {0x5, 0xe, "f35045a155af64f538355940"}, {0x6, 0x2}, {0x5, 0xd, "0cc52dd2d5513498f23d17"}, {0x0, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x3, 0x3, 0x4, [{@rand_addr=0x64010101, 0x5}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x7, 0x8, 0x49, @empty, @remote, 0x1, 0x10, 0x1ff, 0x7}}) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async) syz_emit_ethernet(0x1a, &(0x7f0000000040)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) (async) close(0x3) (async) 1.407185184s ago: executing program 4 (id=2350): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0xa4b6, 0x3, 0x8}) r3 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp, 0x2}, 0x20) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7c, {0x2, 0x4e25, @empty}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x6, 0x7, {{0x5, 0x4, 0x1, 0x19, 0x14, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast}}}}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000000), 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) sendmsg$inet6(r2, &(0x7f0000001880)={&(0x7f0000000100)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2d}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="e84a8ee02306a9007de4c6a8664d34f7222df321726e728fc28295d43a789b5378055f2e411ccc728cea01ffbd59a2bf1aac0581abc7e2d9baf0b4a30e80134a4cb370801bb554500e5ffde65e96249491", 0x51}, {&(0x7f00000001c0)="abc8cff142cd0527f3cd5483e42c5d75f6cbd27426dbf6aaf50d65f7c6f4e7110ebae453c8c4f6e81a88c57ebc64565b2482ff229dea4aa36449edd82f16da5a048e27cbcac5afb90ea8311424bd91dbf67fb85912d643c9ddc8f6bd1ffc8c7a72fdbfd324ce266c8cf7a21254139b87f7bd0b95662420c70a4edb3bdd6df8ab810be5c89efcf95280b7f5aaead19ca414a6b5082ffbecb875f8cad9295fa952310c1ddeab42171642e083554f00455c6ef83766181ec9c47f6ece4dd3eb002dd30d3abaf6c445bd33a8fe788e", 0xcd}, {&(0x7f0000000300)="c9b170d994a00c05154389b5422e915376dfc29cdd54765847121fdd48c9a2b04451e975be79ddfa3c2945525e3e8dfb4da202ef025d4a08c7c650579b468079456ad2886f094ea0c5dce2f3712abc390f9416d20b8197e46c9974164a7f6d104795577ec163fa5fad0557eb3ecad28258a2b93a1ad74764d36cd33310c1788a02c551c929", 0x85}, {&(0x7f00000003c0)="2b83a648ec049192a420f330a07f11443441f87934fafbf77d5112c8a4b79e091395e87d1c679f4c7387779ef6e1f711fcd301e76edad9ec7d5c2c731e5fcaa34ffafab083819b25ff", 0x49}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffe0000002", @ANYRES32=r6, @ANYBLOB="000000001400000000000000290000000b000000000000000000000024000000b7028a8ce438a877bdef33fc00020000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x11f0}, 0x84) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) listen(r9, 0x50) unshare(0x6a040000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x48000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.348843006s ago: executing program 0 (id=2351): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x128}, 0x0) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) r6 = socket(0x3, 0x1, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f00000003c0)) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt(r6, 0x200000000114, 0x2715, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f14b9a02dbd7000fddbdf250d0045006f70635f"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) 1.348565672s ago: executing program 1 (id=2352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000001400)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.263229967s ago: executing program 2 (id=2353): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@loopback, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20008000}, 0x840) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf2502", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x64, r11, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001540)={'vcan0\x00', 0x100}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="c44573a05a1bac010e00000000000000c52782b32fa9c68610003f377af48291a5d61febd5f4b5308aa20c7e927a1d9cad1188650d97ee7b2621019cad3465765f7fc89e1e8fb16d7dc5859b1105d521830d2410a658d933ffd29281a8eb82f883c997088b3fe0bb5a030000000000000028d17a05c4faaa32025d23d566a7612165e343c77e2e286b13f168255949ea39709d6d6a786ab26cc27203e7ec4ad7c85555bb21a8a2c618f4603547e2890901312eb0889f5641084f413b6dd81764b4100c69d9ccf33e", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf250100000009000a005e5e402d5b000000040007800c0002000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0xb8efccfa9ea4da53, 0x0, 0x0, {0x2}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@struct={0x7, 0xa, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x2, 0x1}, {0x4, 0x4, 0x7}, {0x1, 0x4, 0x8}, {0xd, 0x2, 0x5}, {0xd, 0x4, 0x6}, {0x6, 0x2, 0x401}, {0x5, 0x3, 0xffffffff}, {0x3, 0x3, 0x4}, {0x5, 0x4, 0x3}, {0x5, 0x5, 0x401}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x3}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xd, 0x1, 0x9}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000003c0)=""/4096, 0xff, 0x1000}, 0x28) 1.08068647s ago: executing program 0 (id=2354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) unshare(0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) 1.080309236s ago: executing program 2 (id=2355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00@\b', @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x80000000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x10) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(r5, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r8, 0xc080}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGPGRP(r8, 0x8904, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) (async) sendmmsg$unix(r8, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x2404c900}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100dd747000140002800800010026e7a2dca64310f4094346e89ec5fe0943e95a750256822ad79d6c21c5202a2fc6", @ANYRESOCT=r4, @ANYBLOB="08000240cd", @ANYRES8=r2, @ANYRESDEC=r5], 0x40}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)={0xd8, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r12, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400200100000000000000000000000000020c000480040001"], 0x70}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYRESDEC=r1, @ANYBLOB="0000000b14000300070000000000000200000000fdff070014000100fc01"], 0x44}}, 0x40000d0) 848.266669ms ago: executing program 0 (id=2356): unshare(0x22020400) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe73a}, 0x1c) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x4000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0x8}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x200440c0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRESDEC=r6, @ANYRESDEC=r5, @ANYRES64=r9, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r5, 0x25, 0x0, @void}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaab6aaaaaaaaaaaaaabb810000000806100108000604000100000000000000000000012ec200000eac1414aa"], 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000780)={r8, &(0x7f0000000680)='\xff\xff', 0x80100, &(0x7f00000006c0)={@_ha_fsid={[0x9, 0x4]}, {0x7, 0x65df, 0x3, 0xfffffffffffffffd}}, 0x73c, &(0x7f0000000700), &(0x7f0000000740)=0x9}) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000100100000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x25, &(0x7f0000000b00)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018100000", @ANYRES32=r1, @ANYBLOB="03000000000075e9a7d5f83ad37c560aa5121c354b000031831000f0ffffff00000200000000000000c8c62dbc53d08b6510fa", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f00000007c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x9, 0xa9c, 0x5c38}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r1, r13, r1, 0x1, r8, r8], &(0x7f0000000900)=[{0x0, 0x4, 0x1, 0x7}, {0x3, 0x2, 0xa, 0x5}], 0x10, 0x22}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040884) 845.511152ms ago: executing program 2 (id=2357): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000d000000000067a6fe98df1701cc647d8b2b6cd4116ab102dea4e7576eaf9fdc19806a4ee9473916b6fdec42e5d354ae5d3808f373f017b489f701f60b44b74a9ae4732a2e1648ff5be1d18610b5fc36419510afc45229bdf5b1a30daef2e3a5aef3cd9d7fb457e022581546a0e500a7d719b299b9c33f6b3e2d32c33625c10b808e9fbf5912308aab2796dd97c2da7e408c20886956267820047a29bdaf4291e54bd086f8be50dbbd706d7929c94b53636cc34d5d4cb191b8111fa42d68996e4fbe6e0dbe92b51959b3ce3d"], 0x48) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000100)=0xb5, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005600080029bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="45b42441d8b924f6ac7ca7ddcbf1cf39eb0a4389ae0d60ec1b855475fca1e2715e3f2a3dc5c46d4a4b0a4839bee0ff5f6d83cb72670fbe2bd52e1678091d06774b017b976d88b08143ade51b29d454608e7f7226a7aaa91ecddb"], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 844.914126ms ago: executing program 3 (id=2358): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b2f"], 0xfce) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x83, 0x1}, 0x7}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r6, 0x0, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x1, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2a}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xbc, 0x6ce, 0x7, 0x3d29dca3, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) 804.745678ms ago: executing program 0 (id=2359): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) (async) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000002200000009", @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x33) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20480, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wg0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES8=r3], 0x14}, 0x1, 0x0, 0x0, 0x44048895}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, 0x0, 0x4008080) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r10, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) connect$rose(r10, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r2, 0x0, &(0x7f00000003c0)=""/61}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[], 0x0) 576.351726ms ago: executing program 3 (id=2360): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r2, r3, r4}, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r6, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x1, &(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000010) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @empty}, &(0x7f0000000400)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b708e6e1f75200000000f8002eae000000bfa200000000000007020000f8ffffffb70300000810b6c40020b70400000000000085000000c300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 328.847281ms ago: executing program 2 (id=2361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0xf}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000648300000000000018000000000000972000000000000000950000000000000085100000fcffffff9500000000000000b3e1c1857e155cc9deb1cd33bd981916f8a3d0c4b2772b557e7541e22813a3959da80732f064728e6a60eff40a465e3ee449628aa03f80a4e202eedc2545395f164e488233e31c05ef6194a32daf493ccf12b4b7b6a2794c0cffd970c17cc2c823726b58ccddf9182cf0171a7e1475be16f5340036fd8426a8567df65939e92023d18d96ac2166ae92e65ba03e3ba92569c48114bcf7ca072160eb66ef97ab55c63e315b21dc1d4526ba37f9e5506a9be0e55e20da08807b358aa345c95f1d2ff55703f70f68c76e3439"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 295.325045ms ago: executing program 1 (id=2362): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4083, 0x197}, {&(0x7f00000006c0)=""/107, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/76, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/7, 0x1e0}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x40010360, &(0x7f0000003700)={0x77359400}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010011a80100005800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839fda9d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 214.29985ms ago: executing program 4 (id=2363): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000600)="3b010400000000420000000000000000b66a443625ffd5b6", 0x18}], 0x1, 0x4) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f00000000c0)='GPL\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x7, 0x81]}, {0x3, 0xe, 0x7, 0x1}}, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0xf0}, 0x3, &(0x7f0000000580)=[{0x1, 0xffffffff, &(0x7f0000000200)=',\x00', &(0x7f0000000240)="e394db74961c01e8e31c944e78f303ad35d8710a7bc414e45990beacc0088ab4f2b70c5b1976cf916d71e159ad990e4ab1357c8f77a4a053b89c044f0989ed8449888825ad85a49a254f5a58bef5b1dc7ff2650e1b5a2225be6598fbe8953e1fcfd99d982d03e5450d1d2bc7eafa77de9de21b9abccb34e19020eb7201f670c17261dac69da04a68687b9483859bdaa7c2bdc445", 0x94}, {0x1, 0x8, &(0x7f0000000300)='GPL\x00', &(0x7f0000000340)="2c36c9008ab5e44a7e4a5ec88c62ffa80023267d8c1ea6ee9b0bf1069c1c9a43d6f9620dd655df15f3a771584288210a4509300b5c92cbb5d033bb55db792bba974f", 0x42, 0x30}, {0x2, 0x2cc806ca, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="a83a173421b6088b49cfa0ce1285377d73b5efd3c6849e9d887cb8e764cd12fc7a017d921ecbe7747404dc0250c302eac4c59e827f1294e8fd2c9376f397580fe51a10f854da037c0699fc6f40ee43530b8cc443204bd9db1ada4fba772aac4f899a4ac93c843a7004d0660252fadf0586647cd9593d32", 0x77, 0x8}]}) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0xfffffffb}, 0x50) (async) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 72.966597ms ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 36.270859ms ago: executing program 4 (id=2365): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @bcast, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) setsockopt(r1, 0x7, 0x10000, &(0x7f0000000000)="0d7136283b3c5fa001df529c33959f2015257c0cd4074812a4fea19f242c71d542ab3be5b31ca73eb9ecb7635367adda4562bef7281d489c860e88fbf9909d69412373434d926b1122f23471be1c0df0072b976863ef5bd7b4185fec2060d8fd8a8814252050a0beb458087a7fd4a6027e4da1f70751e2", 0x77) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000005aba"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000540)) 0s ago: executing program 1 (id=2366): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_GET_DEVICE(r2, 0x0, 0x20040014) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) (async) socket$netlink(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ba8e05d8c010094dc561a9147c9dab469739307f7f36341a8ba5b77921635a85534f741b4d61aee494953596eb9a41ea629ad4ac934bf659f8201fce3986fc7d20cee7a385ce14b102fcf8120c1dec3c66b094fb2823aa001c356cdf0499ddcb14476b40490665de56b172ec6ce7fe1f1bf83f0c447dd34cae31395c32b17acd2c597b7ea326a855fe5b53ff8f779", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xe8f0603e89bb3ac3) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x56, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x3c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x20) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 106.229369][ T7010] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 106.295661][ T7010] wg1: entered promiscuous mode [ 106.301986][ T7010] wg1: entered allmulticast mode [ 106.924830][ T7033] netlink: 'syz.0.287': attribute type 3 has an invalid length. [ 106.986054][ T7037] x_tables: duplicate underflow at hook 1 [ 107.032232][ T7038] netlink: 'syz.4.288': attribute type 2 has an invalid length. [ 107.249080][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 107.249237][ T7048] Cannot find set identified by id 0 to match [ 107.264793][ T7038] hmac(sha224: entered promiscuous mode [ 107.300985][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 107.665870][ T7057] __nla_validate_parse: 1 callbacks suppressed [ 107.665890][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'. [ 107.749727][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.286'. [ 107.798209][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 107.833396][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 109.175673][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 109.232156][ T142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.243154][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 109.265939][ T142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.287490][ T142] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.316743][ T142] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.945060][ T7125] netlink: 48 bytes leftover after parsing attributes in process `syz.3.309'. [ 110.335777][ T7183] netlink: 'syz.4.320': attribute type 3 has an invalid length. [ 110.456812][ T7188] netlink: 84 bytes leftover after parsing attributes in process `syz.2.324'. [ 110.469534][ T7188] netlink: 84 bytes leftover after parsing attributes in process `syz.2.324'. [ 110.479483][ T7188] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 110.953165][ T7210] xt_HMARK: spi-set and port-set can't be combined [ 111.058458][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 112.033349][ T7254] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.866614][ T7295] netlink: zone id is out of range [ 112.902123][ T7291] netlink: set zone limit has 4 unknown bytes [ 112.937514][ T7292] xt_CT: No such helper "pptp" [ 113.008359][ T7299] __nla_validate_parse: 1 callbacks suppressed [ 113.008376][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 113.492009][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 113.538482][ T7314] syzkaller0: entered promiscuous mode [ 113.555210][ T7314] syzkaller0: entered allmulticast mode [ 113.666532][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 113.727073][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 113.748532][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 115.819275][ T7328] macvlan3: entered promiscuous mode [ 115.824669][ T7328] macvlan3: entered allmulticast mode [ 115.830074][ T7328] veth1_to_batadv: entered allmulticast mode [ 116.018236][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.363'. [ 116.027424][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 116.129795][ T7358] hsr_slave_1 (unregistering): left promiscuous mode [ 116.315017][ T7385] syzkaller1: entered promiscuous mode [ 116.320525][ T7385] syzkaller1: entered allmulticast mode [ 116.366860][ T7385] syzkaller1: left promiscuous mode [ 116.372114][ T7385] syzkaller1: left allmulticast mode [ 132.756816][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.765685][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.771966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.696221][ T7398] netlink: 'syz.4.376': attribute type 10 has an invalid length. [ 158.714639][ T7398] team0: Device veth1_macvtap failed to register rx_handler [ 158.816202][ T7401] syzkaller0: entered allmulticast mode [ 158.962833][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 159.205029][ T7440] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.295118][ T7443] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 159.469843][ T7452] netlink: 220 bytes leftover after parsing attributes in process `syz.1.386'. [ 159.493366][ T7452] netlink: 220 bytes leftover after parsing attributes in process `syz.1.386'. [ 159.723500][ T7458] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 159.744118][ T7458] netlink: 224 bytes leftover after parsing attributes in process `syz.3.388'. [ 159.869427][ T7462] xt_hashlimit: size too large, truncated to 1048576 [ 160.282449][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 160.317203][ T7480] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 160.479485][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 160.544111][ T7486] netlink: 'syz.3.391': attribute type 7 has an invalid length. [ 160.551791][ T7486] netlink: 'syz.3.391': attribute type 8 has an invalid length. [ 160.570975][ T7486] netlink: 'syz.3.391': attribute type 2 has an invalid length. [ 160.593993][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 160.609286][ T7480] bond0: entered promiscuous mode [ 160.615103][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.648864][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.394'. [ 160.749097][ T7485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.765158][ T7485] bond0: (slave bond1): making interface the new active one [ 160.773038][ T7485] bond1: entered promiscuous mode [ 160.779466][ T7485] bond0: (slave bond1): Enslaving as an active interface with an up link [ 160.935910][ T7495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.394'. [ 161.039065][ T7495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.394'. [ 161.064840][ T7495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.394'. [ 161.315971][ T7519] netlink: 'syz.0.401': attribute type 3 has an invalid length. [ 161.701264][ T7548] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 161.754573][ T7555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.815787][ T7549] xt_CT: No such helper "snmp_trap" [ 161.905650][ T7561] netlink: 'syz.1.412': attribute type 9 has an invalid length. [ 162.240074][ T7575] ip6tnl1: entered allmulticast mode [ 162.475065][ T7570] syz.1.414 (7570) used greatest stack depth: 17472 bytes left [ 162.733907][ T7596] pim6reg1: entered promiscuous mode [ 162.739343][ T7596] pim6reg1: entered allmulticast mode [ 162.960573][ T7598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.689552][ T7629] sctp: [Deprecated]: syz.2.432 (pid 7629) Use of int in maxseg socket option. [ 163.689552][ T7629] Use struct sctp_assoc_value instead [ 163.741592][ T7629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.802330][ T7636] delete_channel: no stack [ 163.819651][ T7635] delete_channel: no stack [ 163.971370][ T7667] __nla_validate_parse: 37 callbacks suppressed [ 163.971389][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 164.005794][ T7629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.436094][ T7695] Unknown options in mask 6 [ 164.887378][ T7717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 164.940276][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'. [ 165.482995][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 165.557558][ T7731] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.447'. [ 165.777372][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 165.889150][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 165.949492][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 166.338607][ T7746] netlink: 148 bytes leftover after parsing attributes in process `syz.1.450'. [ 166.470084][ T7746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.450'. [ 166.559968][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.785929][ T7764] tipc: Started in network mode [ 166.815985][ T7764] tipc: Node identity 0a7a2d48d427, cluster identity 4711 [ 166.823395][ T7764] tipc: Enabled bearer , priority 0 [ 167.008900][ T7772] syzkaller0: entered promiscuous mode [ 167.034410][ T7772] syzkaller0: entered allmulticast mode [ 167.040666][ T7772] tipc: Resetting bearer [ 167.080686][ T7763] tipc: Resetting bearer [ 168.187962][ T7763] tipc: Disabling bearer [ 168.198090][ T7781] syzkaller0: entered promiscuous mode [ 168.203689][ T7781] syzkaller0: entered allmulticast mode [ 168.236748][ T7804] sit1: entered promiscuous mode [ 168.314535][ T7693] tipc: Node number set to 3730648392 [ 168.738779][ T7840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.948754][ T7837] xt_CT: No such helper "syz1" [ 168.988244][ T7855] validate_nla: 3 callbacks suppressed [ 168.988261][ T7855] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 169.029561][ T7858] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 169.131407][ T7866] __nla_validate_parse: 9 callbacks suppressed [ 169.131426][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'. [ 169.160139][ T7862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.480'. [ 169.180834][ T7865] Bluetooth: MGMT ver 1.23 [ 169.235824][ T7868] netlink: 'syz.3.483': attribute type 6 has an invalid length. [ 170.130664][ T7900] bond0: Unable to set up delay as MII monitoring is disabled [ 170.200582][ T7903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.493'. [ 170.540592][ T7914] bridge0: entered promiscuous mode [ 170.559125][ T7914] bridge0: port 3(macvlan2) entered blocking state [ 170.607715][ T7914] bridge0: port 3(macvlan2) entered disabled state [ 170.618272][ T7914] macvlan2: entered allmulticast mode [ 170.638269][ T7914] macvlan2: left allmulticast mode [ 170.644638][ T7914] bridge0: left promiscuous mode [ 170.724041][ T7913] syzkaller1: entered promiscuous mode [ 170.729548][ T7913] syzkaller1: entered allmulticast mode [ 170.756686][ T7913] netlink: 'syz.3.496': attribute type 13 has an invalid length. [ 170.765639][ T7913] netlink: 'syz.3.496': attribute type 17 has an invalid length. [ 170.773479][ T7913] netlink: 'syz.3.496': attribute type 27 has an invalid length. [ 171.003222][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.022036][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.035149][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.044825][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.053989][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.063698][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.073198][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 171.329167][ T7935] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 171.467599][ T7934] delete_channel: no stack [ 171.676833][ T7951] syz_tun: mtu less than device minimum [ 171.851863][ T7957] Bluetooth: MGMT ver 1.23 [ 171.868995][ T7965] x_tables: duplicate underflow at hook 3 [ 172.135701][ T7971] tipc: Started in network mode [ 172.173651][ T7971] tipc: Node identity b6b37fb6143a, cluster identity 4711 [ 172.218459][ T7971] tipc: Enabled bearer , priority 0 [ 172.579175][ T7991] Cannot find add_set index 2 as target [ 172.590450][ T7993] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 172.608542][ T7993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.799879][ T7968] tipc: Resetting bearer [ 173.250535][ T8020] dvmrp0: entered allmulticast mode [ 173.312130][ T47] tipc: Node number set to 2726920118 [ 173.320913][ T8024] xt_hashlimit: size too large, truncated to 1048576 [ 173.493236][ T8028] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003 [ 173.566958][ T7638] tipc: Resetting bearer [ 173.900689][ T8049] x_tables: duplicate underflow at hook 3 [ 174.605205][ T8068] __nla_validate_parse: 68 callbacks suppressed [ 174.605222][ T8068] netlink: 68 bytes leftover after parsing attributes in process `syz.3.540'. [ 174.744442][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 174.891620][ T8082] netlink: 216 bytes leftover after parsing attributes in process `syz.3.544'. [ 175.039835][ T8084] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 175.056271][ T8084] syzkaller1: Refused to change device type [ 175.072965][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 175.158199][ T8093] macsec1: entered promiscuous mode [ 175.163468][ T8093] geneve1: entered promiscuous mode [ 175.180232][ T8093] macsec1: entered allmulticast mode [ 175.188687][ T8093] geneve1: entered allmulticast mode [ 175.234518][ T8099] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.547'. [ 175.560577][ T8117] netlink: 216 bytes leftover after parsing attributes in process `syz.1.556'. [ 175.752418][ T8123] netlink: 84 bytes leftover after parsing attributes in process `syz.1.558'. [ 175.769350][ T8123] sctp: [Deprecated]: syz.1.558 (pid 8123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.769350][ T8123] Use struct sctp_sack_info instead [ 175.786866][ T8123] sctp: [Deprecated]: syz.1.558 (pid 8123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.786866][ T8123] Use struct sctp_sack_info instead [ 175.873027][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.559'. [ 175.988861][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 176.100975][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'. [ 176.678746][ T8167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.820328][ T8174] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 176.836452][ T8167] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 177.821453][ T8200] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 177.846376][ T8200] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 177.902163][ T8200] team0: Port device netdevsim0 added [ 178.054707][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.093220][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.107128][ T8205] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 178.116151][ T8197] netlink: 'syz.4.575': attribute type 3 has an invalid length. [ 178.136222][ T8205] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 178.146653][ T8205] bond1 (unregistering): Released all slaves [ 178.568503][ T8232] ip6erspan0: entered promiscuous mode [ 178.628463][ T29] audit: type=1804 audit(1773143811.616:2): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.584" name="/newroot/133/memory.events" dev="tmpfs" ino=696 res=1 errno=0 [ 178.708853][ T8241] tipc: Resetting bearer [ 178.845539][ T8240] tipc: Resetting bearer [ 179.259580][ T7654] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.724350][ T7639] tipc: Resetting bearer [ 179.910409][ T8315] __nla_validate_parse: 18 callbacks suppressed [ 179.910428][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 179.946043][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 179.989682][ T8317] bridge0: port 2(team0) entered blocking state [ 180.022274][ T8317] bridge0: port 2(team0) entered disabled state [ 180.054776][ T8317] team0: entered allmulticast mode [ 180.062294][ T8317] team_slave_0: entered allmulticast mode [ 180.073397][ T8317] team_slave_1: entered allmulticast mode [ 180.081598][ T8317] team0: entered promiscuous mode [ 180.087091][ T8317] team_slave_0: entered promiscuous mode [ 180.092926][ T8317] team_slave_1: entered promiscuous mode [ 180.661104][ T8360] netlink: 48 bytes leftover after parsing attributes in process `syz.1.613'. [ 180.794997][ T8363] syzkaller0: entered promiscuous mode [ 180.800658][ T8363] syzkaller0: entered allmulticast mode [ 180.833059][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'. [ 181.091230][ T8376] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 181.107141][ T8376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 181.124006][ T8376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 181.280936][ T8389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.620'. [ 181.859025][ T8401] geneve1: left allmulticast mode [ 181.885035][ T8401] geneve1: left promiscuous mode [ 182.031291][ T8414] pim6reg: entered allmulticast mode [ 182.048810][ T8414] pim6reg: left allmulticast mode [ 182.269251][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.282581][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.391403][ T8427] nbd: must specify a device to reconfigure [ 182.395865][ T8422] tipc: Resetting bearer [ 182.410373][ T7655] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.421959][ T7655] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.431226][ T7655] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.896155][ T8435] macvtap0: entered promiscuous mode [ 182.903388][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 183.045207][ T8435] macvtap0 (unregistering): left promiscuous mode [ 183.122730][ T8437] syzkaller0: entered promiscuous mode [ 183.128362][ T8437] syzkaller0: entered allmulticast mode [ 183.199007][ T8446] netlink: 'syz.1.635': attribute type 21 has an invalid length. [ 183.429429][ T8454] netlink: 104 bytes leftover after parsing attributes in process `syz.2.637'. [ 183.448053][ T8455] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 184.477608][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 185.020945][ T8446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.635'. [ 185.030798][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.635'. [ 185.058614][ T8455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.150021][ T8458] bond1: (slave veth5): Enslaving as an active interface with a down link [ 185.188477][ T8463] syzkaller0: entered promiscuous mode [ 185.204245][ T8463] syzkaller0: entered allmulticast mode [ 185.227923][ T8490] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 185.297726][ T8490] bond2: entered promiscuous mode [ 185.309721][ T8490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.338208][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.644'. [ 185.426195][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 185.435504][ T8482] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 185.473230][ T8497] netlink: 52 bytes leftover after parsing attributes in process `syz.3.644'. [ 185.561367][ T8499] erspan1: entered promiscuous mode [ 185.567047][ T8499] erspan1: entered allmulticast mode [ 185.750208][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'. [ 185.786176][ T8516] syz.0.651 uses old SIOCAX25GETINFO [ 186.167863][ T8539] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.198215][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.219322][ T8539] netlink: 'syz.0.658': attribute type 27 has an invalid length. [ 186.234046][ T8539] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 186.344599][ T7649] tipc: Resetting bearer [ 186.415905][ T8554] ipvlan2: entered promiscuous mode [ 186.875017][ T8587] xt_socket: unknown flags 0x50 [ 187.008637][ T8595] netlink: 'syz.2.671': attribute type 33 has an invalid length. [ 187.018649][ T8595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.671'. [ 187.046044][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 187.118374][ T8598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.586001][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.678'. [ 187.612614][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 188.352983][ T8648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.405632][ T8648] bond3: (slave bond4): Enslaving as an active interface with an up link [ 188.468325][ T8640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.489916][ T8654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.498821][ T8654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.520339][ T8639] gretap1: entered promiscuous mode [ 188.526607][ T8639] batman_adv: batadv0: Adding interface: gretap1 [ 188.534951][ T8639] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.560871][ T8639] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 189.347812][ T8702] syzkaller0: entered promiscuous mode [ 189.353425][ T8702] syzkaller0: entered allmulticast mode [ 190.029750][ T8734] __nla_validate_parse: 4 callbacks suppressed [ 190.029771][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'. [ 190.210338][ T8743] sctp: [Deprecated]: syz.0.714 (pid 8743) Use of int in max_burst socket option. [ 190.210338][ T8743] Use struct sctp_assoc_value instead [ 190.371333][ T8744] netlink: 'syz.2.713': attribute type 16 has an invalid length. [ 190.389554][ T8744] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.713'. [ 190.542510][ T8744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.648270][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 190.943026][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 191.153685][ T8777] ip6tnl1: entered allmulticast mode [ 191.207421][ T8779] netlink: 'syz.2.724': attribute type 39 has an invalid length. [ 191.324189][ T8789] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 191.423097][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 191.666126][ T8801] netlink: 84 bytes leftover after parsing attributes in process `syz.3.729'. [ 191.671473][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.734'. [ 191.881650][ T8822] bond2: option all_slaves_active: invalid value (13) [ 191.924591][ T8822] bond2 (unregistering): Released all slaves [ 191.966583][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.738'. [ 192.045131][ T8806] syzkaller0: entered promiscuous mode [ 192.050660][ T8806] syzkaller0: entered allmulticast mode [ 192.091322][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 192.212874][ T8844] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 192.221693][ T8844] netlink: 240 bytes leftover after parsing attributes in process `syz.0.740'. [ 192.748415][ T8869] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 193.565599][ T8848] lec:lec_atm_close: lec0: Shut down! [ 194.074017][ T47] lec:lec_start_xmit: lec0:No lecd attached [ 194.208199][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.217764][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.230220][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.282992][ T8918] netlink: 'syz.2.756': attribute type 2 has an invalid length. [ 195.227481][ T8973] xt_TCPMSS: Only works on TCP SYN packets [ 195.617910][ T8987] __nla_validate_parse: 3 callbacks suppressed [ 195.617929][ T8987] netlink: 232 bytes leftover after parsing attributes in process `syz.3.772'. [ 195.637869][ T8987] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.759579][ T8989] netlink: 216 bytes leftover after parsing attributes in process `syz.3.773'. [ 195.772521][ T8989] netlink: 'syz.3.773': attribute type 2 has an invalid length. [ 195.952034][ T8991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.966014][ T8991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.985328][ T8994] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 196.022079][ T8998] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 196.023113][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 196.041157][ T8996] netlink: 'syz.1.776': attribute type 7 has an invalid length. [ 196.049148][ T8996] netlink: 'syz.1.776': attribute type 8 has an invalid length. [ 196.066951][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 196.101356][ T8991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.116353][ T8991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.144692][ T9001] openvswitch: netlink: Message has -2 unknown bytes. [ 196.151752][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.206393][ T8991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.253806][ T8991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.288217][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 196.294343][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 196.300627][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 196.372041][ T8991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.382561][ T8991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.399702][ T9010] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.779'. [ 196.430228][ T9011] syzkaller0: entered promiscuous mode [ 196.436137][ T9011] syzkaller0: entered allmulticast mode [ 196.468116][ T9006] dvmrp12: entered allmulticast mode [ 196.501181][ T9005] dvmrp12: left allmulticast mode [ 196.569451][ T9013] vxcan3: entered promiscuous mode [ 196.650706][ T7654] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.663667][ T7654] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.687804][ T7654] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.716751][ T7654] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.752157][ T7654] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.762946][ T7654] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.784988][ T7654] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.806296][ T7654] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.993115][ T9040] netlink: 96 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.020621][ T9040] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.073170][ T9043] netlink: 48 bytes leftover after parsing attributes in process `syz.0.788'. [ 197.336915][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 197.388834][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 197.638176][ T9048] bond1: option ad_select: invalid value (34) [ 197.659998][ T9048] bond1 (unregistering): Released all slaves [ 197.733002][ T9053] delete_channel: no stack [ 197.830194][ T9064] netlink: 64 bytes leftover after parsing attributes in process `syz.3.791'. [ 197.853964][ T9063] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 197.875598][ T9063] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 197.888622][ T9064] vlan2: entered promiscuous mode [ 197.919462][ T9064] geneve1: entered promiscuous mode [ 197.952533][ T9063] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 198.188855][ T9077] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.276203][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.642336][ T9101] bridge0: port 3(syz_tun) entered blocking state [ 198.657370][ T9101] bridge0: port 3(syz_tun) entered disabled state [ 198.674174][ T9101] syz_tun: entered allmulticast mode [ 198.685854][ T9101] syz_tun: entered promiscuous mode [ 198.704746][ T9101] bridge0: port 3(syz_tun) entered blocking state [ 198.711521][ T9101] bridge0: port 3(syz_tun) entered forwarding state [ 199.343041][ T9152] netlink: 'syz.1.814': attribute type 21 has an invalid length. [ 199.351110][ T9152] netlink: 'syz.1.814': attribute type 5 has an invalid length. [ 199.803766][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 199.812260][ C1] lec:lec_tx_timeout: lec0 [ 199.817651][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.873116][ T9181] netlink: 'syz.4.819': attribute type 11 has an invalid length. [ 199.944223][ T9178] team0: Port device team_slave_0 removed [ 200.008398][ T9189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.134924][ T9197] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 200.334204][ T9204] nbd: must specify at least one socket [ 200.712655][ T9217] team_slave_0: entered promiscuous mode [ 200.718634][ T9217] team_slave_1: entered promiscuous mode [ 200.766968][ T9217] vlan2: entered promiscuous mode [ 200.778809][ T9217] team0: entered promiscuous mode [ 200.828221][ T9223] macvtap0: entered promiscuous mode [ 200.856898][ T9221] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 200.980575][ T9227] macsec0: entered allmulticast mode [ 201.016945][ T9227] veth1_macvtap: entered allmulticast mode [ 201.076471][ T9230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.086585][ T9230] bond1: entered promiscuous mode [ 201.092704][ T9230] bond1: entered allmulticast mode [ 201.100061][ T9230] team0: Port device bond1 added [ 201.199768][ T9244] netlink: 'syz.1.835': attribute type 4 has an invalid length. [ 201.547539][ T9256] __nla_validate_parse: 8 callbacks suppressed [ 201.547557][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 201.618575][ T9256] team0 (unregistering): Port device team_slave_0 removed [ 201.642901][ T9256] team0 (unregistering): Port device team_slave_1 removed [ 201.968409][ T9274] bridge0: port 3(syz_tun) entered disabled state [ 201.975196][ T9274] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.436610][ T9293] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.850'. [ 203.292538][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 203.574507][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.855'. [ 204.150210][ T9362] netlink: 2 bytes leftover after parsing attributes in process `syz.2.865'. [ 204.247211][ T9365] syzkaller0: entered promiscuous mode [ 204.252754][ T9365] syzkaller0: entered allmulticast mode [ 204.351201][ T9368] bond5 (unregistering): Released all slaves [ 204.374925][ T9381] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 204.382848][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 204.390595][ T9385] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 204.412276][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 204.421208][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 204.441685][ T9384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.871'. [ 204.457865][ T9389] netlink: 68 bytes leftover after parsing attributes in process `syz.4.871'. [ 204.592854][ T9385] bond2: entered promiscuous mode [ 204.607181][ T9385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.679239][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.696124][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.728171][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.766539][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.833802][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 204.841865][ C1] lec:lec_tx_timeout: lec0 [ 204.847098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 205.128203][ T9416] lo: entered allmulticast mode [ 205.256703][ T9420] tipc: Resetting bearer [ 205.362005][ T9422] tipc: Resetting bearer [ 205.493110][ T9437] x_tables: duplicate underflow at hook 2 [ 205.530525][ T7654] tipc: Resetting bearer [ 205.665186][ T9453] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 206.376174][ T9489] vlan3: entered allmulticast mode [ 206.382589][ T9489] bridge0: entered allmulticast mode [ 206.661008][ T9504] netlink: 'syz.1.900': attribute type 9 has an invalid length. [ 206.678346][ T9504] netlink: 'syz.1.900': attribute type 11 has an invalid length. [ 206.706378][ T9504] netlink: 'syz.1.900': attribute type 12 has an invalid length. [ 206.747846][ T9504] __nla_validate_parse: 12 callbacks suppressed [ 206.747864][ T9504] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.900'. [ 206.780085][ T9518] netlink: 'syz.2.904': attribute type 11 has an invalid length. [ 206.855080][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 207.063694][ T9527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 207.682435][ T9550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.911'. [ 207.740141][ T9550] macvlan2: entered allmulticast mode [ 207.753683][ T9550] ip6gretap0: entered allmulticast mode [ 207.783513][ T9550] ip6gretap0: left allmulticast mode [ 207.989739][ T5870] IPVS: starting estimator thread 0... [ 208.093811][ T9564] IPVS: using max 31 ests per chain, 74400 per kthread [ 208.196941][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 208.208428][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'. [ 208.658774][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 208.721450][ T9598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.923'. [ 208.731017][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 208.742436][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 208.764715][ T9598] netlink: 'syz.2.923': attribute type 309 has an invalid length. [ 208.960940][ T9602] C: renamed from team_slave_0 (while UP) [ 208.994575][ T9602] netlink: 'syz.0.924': attribute type 8 has an invalid length. [ 209.008382][ T9602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 209.613501][ T9618] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 209.694676][ T9618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.741532][ T9618] bond3: (slave dummy0): making interface the new active one [ 209.750398][ T9618] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 209.854046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.862144][ C1] lec:lec_tx_timeout: lec0 [ 209.866936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.930296][ T9631] batadv_slave_0: entered promiscuous mode [ 210.064353][ T9643] netlink: 'syz.4.935': attribute type 2 has an invalid length. [ 210.072752][ T9643] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 210.236575][ T9630] batadv_slave_0: left promiscuous mode [ 210.761291][ T9679] nbd: socks must be embedded in a SOCK_ITEM attr [ 210.776334][ T7425] block nbd64: NBD_DISCONNECT [ 211.039864][ T7425] udevd[7425]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.446921][ T9713] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 211.667890][ T9724] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 211.802244][ T9724] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 211.824601][ T9734] __nla_validate_parse: 19 callbacks suppressed [ 211.824623][ T9734] netlink: 500 bytes leftover after parsing attributes in process `syz.3.961'. [ 211.882786][ T9734] netlink: 500 bytes leftover after parsing attributes in process `syz.3.961'. [ 212.193011][ T9760] netlink: 376 bytes leftover after parsing attributes in process `syz.4.967'. [ 212.439106][ T9765] syzkaller0: left promiscuous mode [ 212.446544][ T9765] syzkaller0: left allmulticast mode [ 212.452179][ T9765] tipc: Resetting bearer [ 212.501848][ T9762] syzkaller0: entered promiscuous mode [ 212.508928][ T9762] syzkaller0: entered allmulticast mode [ 212.691910][ T9775] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 212.706322][ T9775] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 212.721100][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 212.731251][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 212.856860][ T9781] netlink: 'syz.3.972': attribute type 11 has an invalid length. [ 212.957068][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.973'. [ 213.019167][ T9787] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 213.031134][ T9788] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 213.206482][ T9790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.975'. [ 214.051240][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 214.084196][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 214.338996][ T9825] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 214.351195][ T9825] bond5 (unregistering): Released all slaves [ 214.622223][ T9840] x_tables: duplicate underflow at hook 1 [ 214.873769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.881841][ C1] lec:lec_tx_timeout: lec0 [ 214.889157][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 215.162508][ T9870] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.204489][ T9867] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 215.222349][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 215.702744][ T9880] syzkaller0: entered promiscuous mode [ 215.709503][ T9880] syzkaller0: entered allmulticast mode [ 217.208137][ T9922] xt_hashlimit: max too large, truncated to 1048576 [ 217.240212][ T9922] xt_hashlimit: overflow, try lower: 13/0 [ 217.262588][ T9927] nbd: nbd0 already in use [ 217.270618][ T9927] block nbd0: NBD_DISCONNECT [ 217.287266][ T9922] IPVS: rr: FWM 3 0x00000003 - no destination available [ 217.295187][ T9927] block nbd0: Send disconnect failed -32 [ 217.539780][ T9938] __nla_validate_parse: 1 callbacks suppressed [ 217.539799][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'. [ 217.592934][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 217.728508][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 218.294691][ T9966] vlan3: entered promiscuous mode [ 218.304393][ T9966] bond0: entered promiscuous mode [ 218.309459][ T9966] bond_slave_0: entered promiscuous mode [ 218.335956][ T9966] bond_slave_1: entered promiscuous mode [ 218.528205][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 218.663115][ T9997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1028'. [ 218.743700][ T9986] bond5: entered promiscuous mode [ 218.751748][ T9986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.969110][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 219.541526][T10040] syzkaller0: entered promiscuous mode [ 219.554436][T10040] syzkaller0: entered allmulticast mode [ 219.653199][T10050] netlink: 'syz.4.1043': attribute type 21 has an invalid length. [ 219.697333][T10050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1043'. [ 219.750732][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 219.782594][T10055] bond2: entered promiscuous mode [ 219.844238][T10055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.899392][T10062] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1047'. [ 219.908621][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.908693][ C1] lec:lec_tx_timeout: lec0 [ 219.917494][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.013920][T10062] caif0: entered allmulticast mode [ 220.027258][ T7685] IPVS: starting estimator thread 0... [ 220.133945][T10068] IPVS: using max 40 ests per chain, 96000 per kthread [ 220.273305][T10079] xt_TCPMSS: Only works on TCP SYN packets [ 220.294746][T10079] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 220.424819][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 220.987588][T10079] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.064702][T10088] bond5 (unregistering): Released all slaves [ 221.628571][T10116] syzkaller0: entered promiscuous mode [ 221.634888][T10116] syzkaller0: entered allmulticast mode [ 222.446952][T10145] netlink: 'syz.4.1066': attribute type 16 has an invalid length. [ 222.456789][T10145] netlink: 'syz.4.1066': attribute type 3 has an invalid length. [ 223.653288][T10159] syzkaller0: entered promiscuous mode [ 223.658956][T10159] syzkaller0: entered allmulticast mode [ 223.969959][T10177] bond1 (unregistering): Released all slaves [ 224.100049][T10194] __nla_validate_parse: 6 callbacks suppressed [ 224.100065][T10194] netlink: 175008 bytes leftover after parsing attributes in process `syz.4.1078'. [ 224.455526][T10184] gre0: entered promiscuous mode [ 224.461559][T10184] gre0: entered allmulticast mode [ 224.923769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.931833][ C1] lec:lec_tx_timeout: lec0 [ 224.937173][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.458678][T10244] netlink: 'syz.1.1090': attribute type 33 has an invalid length. [ 225.473602][T10244] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1090'. [ 225.581347][T10246] netlink: 'syz.0.1091': attribute type 30 has an invalid length. [ 225.631484][T10246] bond5: option arp_missed_max: invalid value (0) [ 225.638517][T10246] bond5: option arp_missed_max: allowed values 1 - 255 [ 225.650279][T10246] bond5 (unregistering): Released all slaves [ 225.688817][T10249] tipc: Enabled bearer , priority 0 [ 225.697547][T10249] syzkaller0: entered promiscuous mode [ 225.703276][T10249] syzkaller0: entered allmulticast mode [ 225.754680][T10249] tipc: Resetting bearer [ 225.774155][T10248] tipc: Resetting bearer [ 225.801658][T10248] tipc: Disabling bearer [ 225.987163][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 226.847633][T10320] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 227.026673][T10320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.115592][T10327] bond5: (slave geneve2): making interface the new active one [ 227.164838][T10327] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 227.201880][T10346] netlink: 'syz.4.1118': attribute type 4 has an invalid length. [ 227.287400][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 227.712547][T10372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1125'. [ 227.734186][T10372] unsupported nlmsg_type 40 [ 227.891516][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1126'. [ 228.163993][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 228.210819][T10388] netlink: 'syz.3.1131': attribute type 8 has an invalid length. [ 228.230180][T10390] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 228.238590][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 228.250837][T10391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.276594][T10390] bond1: entered promiscuous mode [ 228.290511][T10390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.305774][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 228.317675][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 228.455343][T10390] bond1: (slave bridge2): making interface the new active one [ 228.471839][T10399] xt_policy: output policy not valid in PREROUTING and INPUT [ 228.481895][T10390] bridge2: entered promiscuous mode [ 228.489220][T10390] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 228.493135][T10402] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 228.631513][T10406] bridge0: entered allmulticast mode [ 228.851114][T10423] xfrm1: entered allmulticast mode [ 229.051859][T10435] nbd: must specify a size in bytes for the device [ 229.109243][T10435] __nla_validate_parse: 2 callbacks suppressed [ 229.109261][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 229.133600][T10437] tipc: Started in network mode [ 229.139453][T10437] tipc: Node identity fa3cdf6d1c57, cluster identity 4711 [ 229.147734][T10437] tipc: Enabled bearer , priority 0 [ 229.204368][T10437] syzkaller0: entered promiscuous mode [ 229.212003][T10437] syzkaller0: entered allmulticast mode [ 229.239030][T10437] tipc: Resetting bearer [ 229.338013][ T7652] tipc: Resetting bearer [ 229.344718][T10436] tipc: Resetting bearer [ 229.388331][T10443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.616766][T10448] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1151'. [ 229.954069][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.962142][ C1] lec:lec_tx_timeout: lec0 [ 229.967142][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.582850][T10436] tipc: Disabling bearer [ 230.617100][T10444] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 230.622925][T10444] pim6reg1: linktype set to 805 [ 230.630915][T10446] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 230.645078][T10448] .70·: renamed from hsr0 [ 230.652542][T10448] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.678329][T10448] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.696752][T10448] .70·: entered allmulticast mode [ 230.722178][T10448] hsr_slave_0: entered allmulticast mode [ 230.742513][T10448] hsr_slave_1: entered allmulticast mode [ 230.751855][T10448] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 230.803828][ T5950] tipc: Node number set to 3865829229 [ 230.923244][T10464] netlink: 'syz.1.1156': attribute type 3 has an invalid length. [ 231.087867][T10473] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1160'. [ 231.129943][ T7658] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.144573][ T7658] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.171684][ T7658] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.207183][ T7658] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.294619][T10487] macvtap0: entered promiscuous mode [ 231.306860][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 231.309288][T10489] ipt_ECN: cannot use operation on non-tcp rule [ 231.338078][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 231.554607][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 231.580863][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 231.626315][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 231.983476][T10529] xt_l2tp: missing protocol rule (udp|l2tpip) [ 231.990777][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 232.009831][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 232.039510][T10532] gre0: left promiscuous mode [ 232.062209][T10532] gre0: left allmulticast mode [ 232.150435][T10532] bridge0: left allmulticast mode [ 232.161836][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.170049][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.178595][T10532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.476813][T10548] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 232.567973][T10552] sctp: [Deprecated]: syz.0.1184 (pid 10552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.567973][T10552] Use struct sctp_sack_info instead [ 232.747090][T10554] block nbd0: not configured, cannot reconfigure [ 233.602787][T10589] tipc: Enabled bearer , priority 0 [ 233.678595][T10589] syzkaller0: entered promiscuous mode [ 233.689506][T10589] syzkaller0: entered allmulticast mode [ 233.721073][T10596] x_tables: ip_tables: osf match: only valid for protocol 6 [ 233.975040][T10617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 234.109100][T10589] tipc: Resetting bearer [ 234.293094][T10629] __nla_validate_parse: 58 callbacks suppressed [ 234.293113][T10629] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1203'. [ 234.316321][T10629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1203'. [ 234.357002][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'. [ 234.368698][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 234.411215][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'. [ 234.509619][T10588] tipc: Resetting bearer [ 234.635294][T10588] tipc: Disabling bearer [ 234.641558][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 234.700092][T10653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1210'. [ 234.826052][T10657] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1214'. [ 234.921362][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 234.974028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.982098][ C1] lec:lec_tx_timeout: lec0 [ 234.986910][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.988934][T10670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.025683][T10672] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 235.133268][T10662] bridge6: port 1(veth0_to_bond) entered blocking state [ 235.156257][T10662] bridge6: port 1(veth0_to_bond) entered disabled state [ 235.169813][T10662] veth0_to_bond: entered allmulticast mode [ 235.201704][T10662] veth0_to_bond: entered promiscuous mode [ 235.436845][T10689] xt_l2tp: v2 tid > 0xffff: 37482740 [ 235.445884][T10687] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 235.543302][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1222'. [ 236.331203][T10712] sctp: [Deprecated]: syz.3.1229 (pid 10712) Use of int in maxseg socket option. [ 236.331203][T10712] Use struct sctp_assoc_value instead [ 236.423038][T10717] block nbd0: not configured, cannot reconfigure [ 237.291697][T10756] netlink: 'syz.3.1240': attribute type 23 has an invalid length. [ 237.482328][T10763] netlink: 'syz.1.1241': attribute type 13 has an invalid length. [ 237.490513][T10763] netlink: 'syz.1.1241': attribute type 17 has an invalid length. [ 237.553266][T10763] bridge0: left allmulticast mode [ 237.562786][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.572688][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.583133][T10763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.623915][T10762] : entered promiscuous mode [ 237.671501][ T796] IPVS: starting estimator thread 0... [ 237.763834][T10775] IPVS: using max 32 ests per chain, 76800 per kthread [ 237.815029][T10774] netlink: 'syz.1.1246': attribute type 3 has an invalid length. [ 237.823054][T10774] netlink: 'syz.1.1246': attribute type 3 has an invalid length. [ 237.910734][T10788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.961373][T10792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.094704][T10796] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 238.239153][T10796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.307248][T10796] bond2: entered allmulticast mode [ 238.419062][T10819] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 238.431576][T10817] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 238.619457][T10827] n: the hash_elasticity option has been deprecated and is always 16 [ 238.677307][T10827] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 238.757363][T10832] batadv_slave_0: entered promiscuous mode [ 238.811769][T10825] pim6reg1: entered allmulticast mode [ 239.002728][T10837] netlink: 'syz.4.1263': attribute type 3 has an invalid length. [ 239.575213][T10860] __nla_validate_parse: 153 callbacks suppressed [ 239.575235][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 239.582724][T10831] batadv_slave_0: left promiscuous mode [ 239.671852][T10860] bond2: entered promiscuous mode [ 239.697550][T10860] bond2: entered allmulticast mode [ 239.703179][T10860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.958827][T10874] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.345605][T10903] x_tables: duplicate underflow at hook 2 [ 240.357091][T10901] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 240.455400][T10907] team0 (unregistering): left allmulticast mode [ 240.468802][T10907] team_slave_0: left allmulticast mode [ 240.475116][T10907] team_slave_1: left allmulticast mode [ 240.488859][T10907] bond1: left allmulticast mode [ 240.496781][T10907] team0 (unregistering): left promiscuous mode [ 240.503077][T10907] team_slave_0: left promiscuous mode [ 240.509431][T10907] team_slave_1: left promiscuous mode [ 240.516089][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 240.519162][T10907] bond1: left promiscuous mode [ 240.530172][T10907] bridge0: port 2(team0) entered disabled state [ 240.544386][T10907] team0 (unregistering): Port device team_slave_0 removed [ 240.555820][T10907] team0 (unregistering): Port device team_slave_1 removed [ 240.570456][T10917] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 240.571967][T10907] team0 (unregistering): Port device bond1 removed [ 240.606555][T10917] bond3: entered promiscuous mode [ 240.611898][T10917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.712298][T10912] hsr_slave_1 (unregistering): left promiscuous mode [ 240.733465][T10917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.741330][T10917] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 240.751591][T10917] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 240.763366][T10917] bond3: (slave vcan1): making interface the new active one [ 240.777206][T10917] vcan1: entered promiscuous mode [ 240.784169][T10917] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 240.792834][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 240.803581][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 240.817947][T10920] netlink: 'syz.4.1287': attribute type 12 has an invalid length. [ 240.830193][T10923] syzkaller0: entered promiscuous mode [ 240.854598][T10923] syzkaller0: entered allmulticast mode [ 240.913802][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 240.921832][ C1] lec:lec_tx_timeout: lec0 [ 240.926714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 240.927903][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 240.935741][ T7659] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.950650][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 240.960214][T10920] netlink: 'syz.4.1287': attribute type 12 has an invalid length. [ 241.011046][ T7659] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.022718][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 241.032302][ T7659] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.049216][ T7659] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.409381][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 241.535238][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 241.567915][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1299'. [ 241.588616][T10968] ip6gre2: entered promiscuous mode [ 241.605886][T10968] ip6gre2: entered allmulticast mode [ 241.717101][T10968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.954265][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 242.319114][T10998] sit0: entered allmulticast mode [ 242.325238][T10998] sit0: left allmulticast mode [ 242.468763][T11004] syzkaller1: entered promiscuous mode [ 242.474813][T11004] syzkaller1: entered allmulticast mode [ 242.772126][T11015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.823462][T11015] validate_nla: 2 callbacks suppressed [ 242.823480][T11015] netlink: 'syz.2.1311': attribute type 11 has an invalid length. [ 242.870003][T11010] can: request_module (can-proto-0) failed. [ 243.085623][T11033] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 243.287197][T11041] xt_socket: unknown flags 0x50 [ 243.322934][T11041] xt_socket: unknown flags 0x50 [ 243.445902][T11050] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 243.591406][T11050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.658015][T11052] bond6: (slave geneve2): making interface the new active one [ 243.695582][T11052] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 243.729573][ T7639] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.758359][ T7639] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.802580][ T7639] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.830505][ T7639] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.980601][T11069] ip6gre2: entered promiscuous mode [ 244.014217][T11069] ip6gre2: entered allmulticast mode [ 244.532431][T11099] netlink: 'syz.0.1338': attribute type 11 has an invalid length. [ 244.646815][T11104] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 244.684247][T11104] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 244.712365][T11104] __nla_validate_parse: 13 callbacks suppressed [ 244.712382][T11104] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1341'. [ 244.754386][T11104] NCSI netlink: No device for ifindex 808464432 [ 244.794866][T11122] batadv_slave_1: entered promiscuous mode [ 245.021868][T11121] batadv_slave_1: left promiscuous mode [ 245.401790][T11157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1353'. [ 245.411502][T11159] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 245.769271][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 245.794398][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1358'. [ 245.926278][T11183] netlink: 'syz.4.1360': attribute type 3 has an invalid length. [ 245.933839][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 245.942079][ C1] lec:lec_tx_timeout: lec0 [ 245.947203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 246.172471][T11196] netlink: 'syz.3.1364': attribute type 6 has an invalid length. [ 246.185548][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 246.456923][T11209] tipc: Can't bind to reserved service type 1 [ 246.469165][T11209] netlink: 'syz.1.1368': attribute type 39 has an invalid length. [ 246.493300][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 246.529759][T11212] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.557868][T11212] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.601775][T11212] netlink: 'syz.1.1368': attribute type 5 has an invalid length. [ 246.632852][T11212] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.659992][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 246.786674][T11214] vlan2: entered allmulticast mode [ 247.057944][T11220] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 247.082910][T11220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.162654][T11222] xt_cgroup: xt_cgroup: no path or classid specified [ 247.390151][T11230] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 248.177996][T11143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.307495][T11249] vxcan2: entered allmulticast mode [ 249.371423][T11301] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.739841][T11322] vxcan3: entered promiscuous mode [ 249.779130][T11325] __nla_validate_parse: 9 callbacks suppressed [ 249.779142][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 249.797032][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.807972][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.816137][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.826386][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.830052][T11325] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.835727][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.869126][T11325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.878718][T11323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.952599][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.980660][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.006981][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.031995][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.073610][T11325] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.100823][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 250.251938][T11341] block nbd1: not configured, cannot reconfigure [ 250.293013][T11343] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 250.439097][T11353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'. [ 250.490182][T11353] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1406'. [ 250.591292][T11368] tipc: Enabling of bearer rejected, failed to enable media [ 250.750779][T11373] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1410'. [ 250.816952][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 250.953819][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 250.961891][ C1] lec:lec_tx_timeout: lec0 [ 250.966826][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.037691][T11382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1412'. [ 251.230730][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.615009][T11411] syzkaller0: entered promiscuous mode [ 251.621993][T11411] syzkaller0: entered allmulticast mode [ 252.192947][T11442] validate_nla: 1 callbacks suppressed [ 252.192965][T11442] netlink: 'syz.0.1426': attribute type 9 has an invalid length. [ 252.452337][T11454] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 252.493250][T11454] netlink: 'syz.2.1429': attribute type 2 has an invalid length. [ 252.756209][T11468] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 252.884096][T11468] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.142216][T11482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.218849][T11492] bond4 (unregistering): Released all slaves [ 253.819225][T11522] syz_tun: left allmulticast mode [ 253.826087][T11522] syz_tun: left promiscuous mode [ 253.832276][T11522] bridge0: port 3(syz_tun) entered disabled state [ 253.858962][T11522] bridge_slave_0: left allmulticast mode [ 253.865095][T11522] bridge_slave_0: left promiscuous mode [ 253.868384][T11528] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 253.880343][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.893118][T11522] bridge_slave_1: left allmulticast mode [ 253.902419][T11522] bridge_slave_1: left promiscuous mode [ 253.909826][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.927010][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.935211][T11522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.943617][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.951835][T11522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.965896][T11522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.259663][T11543] xt_l2tp: unknown flags: 51 [ 254.284328][T11544] xt_l2tp: unknown flags: 51 [ 254.444801][T11514] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.844772][T11568] netlink: 'syz.0.1453': attribute type 30 has an invalid length. [ 254.916923][T11566] tipc: Enabled bearer , priority 0 [ 254.993170][T11566] syzkaller0: entered promiscuous mode [ 254.999403][T11566] syzkaller0: entered allmulticast mode [ 255.005916][T11566] tipc: Resetting bearer [ 255.029458][T11545] __nla_validate_parse: 11 callbacks suppressed [ 255.029476][T11545] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1446'. [ 255.047328][T11565] tipc: Resetting bearer [ 255.636987][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.652119][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658733][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.984062][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 255.992176][ C1] lec:lec_tx_timeout: lec0 [ 255.997072][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 256.329914][T11565] tipc: Disabling bearer [ 256.338202][T11526] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.354837][T11572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.591817][T11584] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 256.694624][T11585] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1456'. [ 256.831695][T11592] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 257.083986][T11610] bridge0: entered allmulticast mode [ 257.127008][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.200120][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1463'. [ 257.215426][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.244810][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.261838][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.272227][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.291593][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.301247][T11613] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1462'. [ 257.332475][ T7650] tipc: Subscription rejected, illegal request [ 257.728923][T11654] netlink: 'syz.4.1472': attribute type 32 has an invalid length. [ 257.949196][T11663] netlink: 'syz.0.1476': attribute type 3 has an invalid length. [ 258.067368][T11670] IPv6: addrconf: prefix option has invalid lifetime [ 258.230105][T11663] C (unregistering): left promiscuous mode [ 258.241132][T11663] team0: Port device C removed [ 258.495246][T11701] team_slave_1: left promiscuous mode [ 258.552028][T11701] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 258.593210][T11701] team0 (unregistering): Port device team_slave_1 removed [ 258.622221][T11708] tipc: Enabled bearer , priority 0 [ 258.755392][T11719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.132539][T11740] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 259.145761][T11741] netlink: 'syz.0.1498': attribute type 33 has an invalid length. [ 260.000662][T11732] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.011773][T11732] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.057029][ T7658] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.066521][ T7658] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.096726][T11732] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.116719][T11732] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.167903][T11765] siw: device registration error -23 [ 260.175844][T11765] smc: removing ib device syz0 [ 260.203784][ T7658] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.212717][ T7658] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.313522][T11732] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.336803][T11732] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.419872][T11779] __nla_validate_parse: 35 callbacks suppressed [ 260.419892][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 260.549575][T11779] pimreg3: entered allmulticast mode [ 260.575718][T11732] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.591550][T11732] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.757478][T11793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1510'. [ 260.769296][T11793] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1510'. [ 260.800980][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 260.836247][T11795] vlan3: entered promiscuous mode [ 260.860466][T11795] team0: entered promiscuous mode [ 260.894975][T11795] team_slave_0: entered promiscuous mode [ 260.953100][T11795] team_slave_1: entered promiscuous mode [ 261.007121][ T7658] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.015773][ T7658] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.026176][T11802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 261.035405][T11789] syzkaller1: entered promiscuous mode [ 261.035429][T11789] syzkaller1: entered allmulticast mode [ 261.188158][ T7652] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.204168][ T7652] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.225252][ T7652] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.233455][ T7652] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.284367][ T7652] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.292764][ T7652] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.766640][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 261.874037][T11828] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 261.875096][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 261.881806][T11828] netlink: 'syz.2.1518': attribute type 2 has an invalid length. [ 261.908998][T11828] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1518'. [ 261.916944][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 261.962169][T11828] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 261.980070][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 262.033811][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6040 ms [ 262.041978][ C1] lec:lec_tx_timeout: lec0 [ 262.047462][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.204547][T11891] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 263.626068][T11924] nbd: illegal input index -1113835520 [ 263.639530][T11922] syzkaller1: entered promiscuous mode [ 263.652492][T11922] syzkaller1: entered allmulticast mode [ 263.666904][T11925] tipc: Resetting bearer [ 263.772835][T11925] tipc: Enabling of bearer rejected, already enabled [ 263.795335][T11925] syzkaller0: entered promiscuous mode [ 263.800853][T11925] syzkaller0: entered allmulticast mode [ 263.870827][T11921] tipc: Resetting bearer [ 263.948261][T11945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.974456][T11940] can: request_module (can-proto-4) failed. [ 264.229474][ T7659] tipc: Resetting bearer [ 264.472872][T11958] batman_adv: batadv0: Adding interface: gretap1 [ 264.479582][T11958] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.510114][T11958] batman_adv: batadv0: Interface activated: gretap1 [ 265.080799][T12004] virt_wifi0 speed is unknown, defaulting to 1000 [ 265.098764][T12007] syzkaller1: entered promiscuous mode [ 265.109079][T12007] syzkaller1: entered allmulticast mode [ 265.377350][T12023] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 265.402974][T12026] netlink: 'syz.4.1571': attribute type 4 has an invalid length. [ 265.444275][T12026] .`: renamed from bond0 [ 265.667105][T12035] __nla_validate_parse: 15 callbacks suppressed [ 265.667125][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1573'. [ 265.694098][T12035] gretap0: entered promiscuous mode [ 265.701624][T12035] gretap0: entered allmulticast mode [ 265.792009][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1576'. [ 265.923644][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 265.962166][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1577'. [ 266.054591][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 266.055131][ T7659] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.082934][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1577'. [ 266.083815][ T7659] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.137430][ T7659] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.154129][ T7659] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.292263][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1580'. [ 266.656731][T12081] : renamed from veth0_to_bond (while UP) [ 266.901369][T12091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1588'. [ 267.232843][T12115] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.332278][T12126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1597'. [ 267.794058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 267.802107][ C1] lec:lec_tx_timeout: lec0 [ 267.806888][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.936785][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 268.262367][T12180] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.554128][T12201] block nbd0: Unsupported socket: should be TCP or UNIX. [ 268.807747][T12221] sctp: [Deprecated]: syz.3.1618 (pid 12221) Use of int in max_burst socket option deprecated. [ 268.807747][T12221] Use struct sctp_assoc_value instead [ 268.832592][T12222] ip6erspan1: entered allmulticast mode [ 269.242208][T12239] netlink: 'syz.1.1624': attribute type 1 has an invalid length. [ 269.308499][T12194] delete_channel: no stack [ 269.345370][T12248] wg1: entered promiscuous mode [ 269.350368][T12248] wg1: entered allmulticast mode [ 269.400301][T12253] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 269.504767][T12262] openvswitch: netlink: IP tunnel dst address not specified [ 269.641492][T12268] tipc: Enabling of bearer rejected, failed to enable media [ 269.741153][T12266] virt_wifi0 speed is unknown, defaulting to 1000 [ 269.844003][T12280] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 269.907710][T12280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 269.960482][T12281] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 269.975316][T12281] bond4: (slave batadv1): making interface the new active one [ 270.001340][T12287] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 270.021149][T12281] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 270.172943][T12280] bond4 (unregistering): (slave batadv1): Releasing active interface [ 270.190960][T12280] bond4 (unregistering): Released all slaves [ 270.250679][T12287] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 270.306693][T12309] vlan2: entered promiscuous mode [ 270.341958][T12309] bridge0: entered promiscuous mode [ 270.491272][T12312] tipc: Enabled bearer , priority 0 [ 270.501735][T12314] 8021q: VLANs not supported on ip_vti0 [ 270.574552][T12299] syzkaller0: entered promiscuous mode [ 270.580149][T12299] syzkaller0: entered allmulticast mode [ 270.587244][T12299] tipc: Resetting bearer [ 270.609125][T12320] 0ªX¹¦À: renamed from caif0 [ 270.629485][T12320] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 270.666309][T12327] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 270.684425][T12327] __nla_validate_parse: 8 callbacks suppressed [ 270.684447][T12327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1644'. [ 270.711084][T12292] virt_wifi0 speed is unknown, defaulting to 1000 [ 270.899317][T12328] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 270.917803][T12290] tipc: Resetting bearer [ 270.943552][T12340] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 271.421317][T12351] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 272.356716][T12290] tipc: Disabling bearer [ 272.384479][ T10] tipc: Node number set to 42398193 [ 272.749940][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 272.776889][T12386] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 272.813776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.821834][ C1] lec:lec_tx_timeout: lec0 [ 272.827112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.864538][T12373] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1657'. [ 272.943936][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'. [ 272.973983][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1657'. [ 273.021493][T12392] bond0: entered promiscuous mode [ 273.036283][T12386] netlink: 'syz.2.1661': attribute type 13 has an invalid length. [ 273.044862][T12392] bond_slave_0: entered promiscuous mode [ 273.050839][T12392] bond_slave_1: entered promiscuous mode [ 273.059695][T12392] batadv0: entered promiscuous mode [ 273.066329][T12392] debugfs: 'hsr0' already exists in 'hsr' [ 273.072201][T12392] Cannot create hsr debugfs directory [ 273.092056][T12373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.135841][T12404] ieee802154 phy0 wpan0: encryption failed: -90 [ 273.252699][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.265409][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.275639][T12386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.299540][T12402] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 273.381934][T12415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1668'. [ 273.392692][T12415] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1668'. [ 273.396248][T12418] sctp: [Deprecated]: syz.2.1669 (pid 12418) Use of int in maxseg socket option. [ 273.396248][T12418] Use struct sctp_assoc_value instead [ 273.406982][T12415] netlink: 'syz.1.1668': attribute type 5 has an invalid length. [ 273.418246][T12419] sctp: [Deprecated]: syz.2.1669 (pid 12419) Use of int in maxseg socket option. [ 273.418246][T12419] Use struct sctp_assoc_value instead [ 273.439162][T12415] netlink: 'syz.1.1668': attribute type 6 has an invalid length. [ 273.448463][T12415] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1668'. [ 273.707905][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 273.712883][T12426] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.028064][T12442] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1675'. [ 275.000096][T12519] tipc: Enabled bearer , priority 0 [ 275.117451][T12519] syzkaller0: entered promiscuous mode [ 275.123089][T12519] syzkaller0: entered allmulticast mode [ 275.130690][T12524] lo speed is unknown, defaulting to 1000 [ 275.141825][T12508] tipc: Resetting bearer [ 275.160439][T12524] lo speed is unknown, defaulting to 1000 [ 275.170786][T12526] validate_nla: 1 callbacks suppressed [ 275.170804][T12526] netlink: 'syz.3.1694': attribute type 8 has an invalid length. [ 275.185403][T12524] lo speed is unknown, defaulting to 1000 [ 275.205395][T12507] tipc: Resetting bearer [ 275.252012][T12507] tipc: Disabling bearer [ 275.302983][T12526] bridge5: entered promiscuous mode [ 275.467243][T12539] tipc: Enabling of bearer rejected, failed to enable media [ 275.513349][T12524] infiniband syz0: set down [ 275.518000][T12524] infiniband syz0: added lo [ 275.525603][ T9] lo speed is unknown, defaulting to 1000 [ 275.573541][T12504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.592104][T12504] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 275.594527][T12524] RDS/IB: syz0: added [ 275.604279][T12524] smc: adding ib device syz0 with port count 1 [ 275.610639][T12524] smc: ib device syz0 port 1 has no pnetid [ 275.616922][ T9] lo speed is unknown, defaulting to 1000 [ 275.630129][T12524] lo speed is unknown, defaulting to 1000 [ 275.667097][T12504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.676911][T12504] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 275.732007][T12548] __nla_validate_parse: 4 callbacks suppressed [ 275.732030][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 275.760000][T12504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.769584][T12548] netlink: 'syz.1.1698': attribute type 30 has an invalid length. [ 275.788982][T12504] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 275.814034][T12548] netlink: 'syz.1.1698': attribute type 29 has an invalid length. [ 275.822754][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 275.837002][T12504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.842950][T12504] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 276.446643][T12524] lo speed is unknown, defaulting to 1000 [ 276.477160][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 277.224551][T12593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.366538][T12524] lo speed is unknown, defaulting to 1000 [ 277.603970][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1712'. [ 277.833782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.841814][ C1] lec:lec_tx_timeout: lec0 [ 277.846934][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.160172][T12524] lo speed is unknown, defaulting to 1000 [ 278.785251][T12524] lo speed is unknown, defaulting to 1000 [ 278.929630][T12654] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 279.662470][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 279.923658][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'. [ 280.294447][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 280.355447][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1726'. [ 280.599575][T12701] batadv_slave_0: entered promiscuous mode [ 280.608437][T12701] batadv_slave_0: entered allmulticast mode [ 280.615399][T12701] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 280.802570][T12727] netlink: 'syz.4.1730': attribute type 8 has an invalid length. [ 281.185374][T12743] netlink: 'syz.1.1733': attribute type 5 has an invalid length. [ 281.199745][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 281.616053][T12753] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 281.799830][T12768] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 281.810321][T12768] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1742'. [ 282.003601][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1745'. [ 282.063555][T12789] batadv_slave_0: entered promiscuous mode [ 282.135617][T12789] batadv_slave_0: left promiscuous mode [ 282.216226][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 282.346387][T12803] netlink: 'syz.0.1749': attribute type 12 has an invalid length. [ 282.364327][T12803] netlink: 'syz.0.1749': attribute type 29 has an invalid length. [ 282.377001][T12803] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1749'. [ 282.536039][T12815] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.537201][T12803] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 282.577018][T12815] lo speed is unknown, defaulting to 1000 [ 282.632344][T12803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1749'. [ 282.640835][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1755'. [ 282.679232][T12830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1755'. [ 282.854016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.862054][ C1] lec:lec_tx_timeout: lec0 [ 282.866722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.406655][T12854] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1762'. [ 283.456530][T12853] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 283.686415][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'. [ 283.746891][T12868] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 283.776914][T12868] netlink: 'syz.0.1767': attribute type 3 has an invalid length. [ 284.365143][T12897] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.870410][T12922] IPVS: Scheduler module ip_vs_ not found [ 284.877436][T12922] IPVS: length: 24 != 36888 [ 285.046403][T12932] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.055918][T12932] lo speed is unknown, defaulting to 1000 [ 285.878525][T12960] gretap2: entered promiscuous mode [ 286.911855][T12996] virt_wifi0 speed is unknown, defaulting to 1000 [ 286.920679][T12996] lo speed is unknown, defaulting to 1000 [ 286.947614][T12997] netlink: 'syz.1.1805': attribute type 4 has an invalid length. [ 287.335172][T13003] __nla_validate_parse: 12 callbacks suppressed [ 287.335194][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1806'. [ 287.675041][T13025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'. [ 287.801277][T13027] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 287.836561][T13027] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 287.873768][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.881841][ C1] lec:lec_tx_timeout: lec0 [ 287.886759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 287.985206][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 288.182041][T13054] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 288.211466][T13053] syzkaller0: entered promiscuous mode [ 288.217164][T13053] syzkaller0: entered allmulticast mode [ 288.223867][T13054] openvswitch: netlink: Message has 8 unknown bytes. [ 288.233881][T13051] tipc: Started in network mode [ 288.264812][T13051] tipc: Node identity 62623d2898a4, cluster identity 4711 [ 288.272428][T13051] tipc: Enabled bearer , priority 0 [ 288.423047][T13051] tipc: Resetting bearer [ 288.465407][T13051] tipc: Disabling bearer [ 288.624455][T13074] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 288.691299][T13074] batman_adv: batadv0: Interface deactivated: gretap1 [ 288.826903][ T7655] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.881611][ T7655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.893684][ T7655] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.902670][ T7655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.983255][ T7655] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.023942][ T7655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.094183][ T7637] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.168880][ T7637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.284487][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 289.519369][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 289.563076][T13132] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 289.571758][T13132] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1837'. [ 289.581664][T13132] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1837'. [ 289.594044][T13132] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1837'. [ 289.829785][T13145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.859270][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 290.000831][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1844'. [ 290.668750][T13197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 290.766216][T13187] virt_wifi0 speed is unknown, defaulting to 1000 [ 290.784884][T13187] lo speed is unknown, defaulting to 1000 [ 291.363041][T13221] gtp2: entered promiscuous mode [ 291.368254][T13221] gtp2: entered allmulticast mode [ 291.374430][T13212] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.381984][T13212] lo speed is unknown, defaulting to 1000 [ 291.517693][T13226] veth0_to_bond: entered promiscuous mode [ 291.523495][T13226] veth0_to_bond: entered allmulticast mode [ 291.531120][T13226] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 291.702951][T13228] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.914838][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.922813][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.930969][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.938908][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.946868][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.954804][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.962755][T13237] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 292.133979][T13249] x_tables: duplicate underflow at hook 2 [ 292.509774][T13263] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.576989][T13263] lo speed is unknown, defaulting to 1000 [ 292.802409][T13267] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.894025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 292.902071][ C1] lec:lec_tx_timeout: lec0 [ 292.906751][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.981248][T13281] __nla_validate_parse: 7 callbacks suppressed [ 292.981266][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 293.005119][T13289] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 293.032148][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 293.047555][T13288] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 293.049378][T13289] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1878'. [ 293.071365][T13285] vlan2: entered promiscuous mode [ 293.115018][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 293.159957][T13288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.176999][T13296] vlan2: entered promiscuous mode [ 293.191487][T13296] bond0: entered promiscuous mode [ 293.197127][T13288] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1879'. [ 293.224084][T13296] vlan2: entered allmulticast mode [ 293.229358][T13296] bond0: entered allmulticast mode [ 293.242896][T13267] lo speed is unknown, defaulting to 1000 [ 293.455115][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 294.190642][T13337] x_tables: ip_tables: osf match: only valid for protocol 6 [ 294.363031][T13348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1894'. [ 294.499259][T13355] netlink: 'syz.4.1897': attribute type 1 has an invalid length. [ 294.581686][T13355] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.927374][T13368] bond0: Caught tx_queue_len zero misconfig [ 294.947649][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 294.969832][T13366] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.001752][T13366] lo speed is unknown, defaulting to 1000 [ 295.024344][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 295.043573][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 295.212364][T13379] netlink: 'syz.1.1902': attribute type 9 has an invalid length. [ 295.230634][T13379] netlink: 'syz.1.1902': attribute type 6 has an invalid length. [ 295.628571][T13388] pim6reg: entered allmulticast mode [ 295.660021][T13394] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 295.684141][T13394] net_ratelimit: 49 callbacks suppressed [ 295.684158][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.726294][T13387] pim6reg: left allmulticast mode [ 295.927208][T13410] team0: Caught tx_queue_len zero misconfig [ 296.689840][T13449] virt_wifi0 speed is unknown, defaulting to 1000 [ 296.707845][T13449] lo speed is unknown, defaulting to 1000 [ 296.974326][T13464] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.311239][T13464] lo speed is unknown, defaulting to 1000 [ 297.381520][T13490] veth0: entered promiscuous mode [ 297.472051][T13490] veth0: left promiscuous mode [ 297.484965][T13497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.888028][T13512] vlan3: entered promiscuous mode [ 297.913760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 297.921843][ C1] lec:lec_tx_timeout: lec0 [ 297.927280][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.093443][T13518] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 298.117313][T13521] __nla_validate_parse: 5 callbacks suppressed [ 298.117330][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 298.263491][T13531] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1938'. [ 298.304497][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.396078][T13533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.438700][T13531] netlink: 'syz.3.1938': attribute type 11 has an invalid length. [ 298.446737][T13531] netlink: 'syz.3.1938': attribute type 23 has an invalid length. [ 298.454924][T13531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1938'. [ 298.510991][T13533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.536862][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 298.576657][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.613264][T13541] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 298.747379][T13542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.901522][T13545] bond3: entered promiscuous mode [ 298.907357][T13545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.307366][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 299.324360][ T7650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.420345][T13583] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1943'. [ 299.535094][T13589] Cannot find del_set index 4 as target [ 299.684844][T13596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1951'. [ 299.822038][T13598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1952'. [ 299.889852][ T5484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.929227][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 299.937815][T13600] tipc: Resetting bearer [ 299.942550][T13601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.973516][T13600] tipc: Enabling of bearer rejected, already enabled [ 300.047849][T13599] tipc: Resetting bearer [ 300.088085][T13608] netlink: 'syz.1.1955': attribute type 2 has an invalid length. [ 300.180735][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 300.271969][ T7658] tipc: Resetting bearer [ 300.357048][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.454746][T13627] x_tables: duplicate underflow at hook 4 [ 300.524286][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.600229][T13638] No such timeout policy "syz1" [ 300.834626][T13658] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 300.879407][T13658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.895302][ T5484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.908586][T13662] bridge0: entered allmulticast mode [ 300.918178][T13659] tipc: Enabled bearer , priority 0 [ 300.936631][T13659] syzkaller0: entered promiscuous mode [ 300.948183][T13659] syzkaller0: entered allmulticast mode [ 300.960092][T13659] tipc: Resetting bearer [ 301.270426][T13686] siw: device registration error -23 [ 301.483113][T13690] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.542400][T13690] lo speed is unknown, defaulting to 1000 [ 301.641109][T13655] tipc: Resetting bearer [ 301.774137][T13655] tipc: Disabling bearer [ 301.942484][T13714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.981102][T13716] syzkaller0: entered promiscuous mode [ 301.986761][T13716] syzkaller0: entered allmulticast mode [ 302.501817][T13745] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.943754][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 302.952039][ C1] lec:lec_tx_timeout: lec0 [ 302.957019][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 302.965774][T13601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.039813][T13745] lo speed is unknown, defaulting to 1000 [ 304.047466][T13753] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 304.125250][T13756] __nla_validate_parse: 10 callbacks suppressed [ 304.125273][T13756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1997'. [ 304.283041][T13778] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 304.292555][T13775] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1999'. [ 304.446944][T13790] netlink: 'syz.3.2002': attribute type 4 has an invalid length. [ 304.454368][T13789] netlink: 'syz.3.2002': attribute type 4 has an invalid length. [ 304.563664][ T5887] lo speed is unknown, defaulting to 1000 [ 304.602027][T11744] lo speed is unknown, defaulting to 1000 [ 304.608899][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 304.660673][ T5887] lo speed is unknown, defaulting to 1000 [ 304.914194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.147484][T13827] pimreg: tun_chr_ioctl cmd 1074025677 [ 305.171124][T13827] pimreg: linktype set to 780 [ 305.343167][T13833] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 305.358974][T13833] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2011'. [ 305.376244][T13836] netlink: 'syz.4.2012': attribute type 2 has an invalid length. [ 305.384696][T13833] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2011'. [ 305.393577][T13833] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 305.432791][T13833] netlink: 634 bytes leftover after parsing attributes in process `syz.0.2011'. [ 305.469827][T13841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2012'. [ 305.514096][T13843] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 305.552633][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 305.564767][T13845] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 305.572107][T13845] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 305.611899][ T5484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.659798][T13847] geneve2: entered promiscuous mode [ 305.684607][T13847] geneve2: entered allmulticast mode [ 305.702132][ T7650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.714973][ T7650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.724751][ T7650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.729453][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.733566][ T7650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.779349][T13858] pim6reg1: entered promiscuous mode [ 305.784855][T13858] pim6reg1: entered allmulticast mode [ 305.928762][T13866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.005664][T13868] syzkaller1: entered promiscuous mode [ 306.022720][T13868] syzkaller1: entered allmulticast mode [ 306.859650][T13912] netlink: 'syz.1.2032': attribute type 21 has an invalid length. [ 307.358498][T13912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2032'. [ 307.387976][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.611373][T13930] bond3: entered allmulticast mode [ 307.624124][T13930] vcan1: entered allmulticast mode [ 307.834711][T13940] netlink: 'syz.2.2039': attribute type 10 has an invalid length. [ 307.845838][T13940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.876904][T13940] batadv0: entered promiscuous mode [ 307.900897][T13942] bridge0: port 2(veth0_to_bridge) entered blocking state [ 307.914005][T13942] bridge0: port 2(veth0_to_bridge) entered disabled state [ 307.928744][T13942] veth0_to_bridge: entered allmulticast mode [ 307.946336][T13942] veth0_to_bridge: entered promiscuous mode [ 307.963759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 307.971961][ C1] lec:lec_tx_timeout: lec0 [ 307.976879][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.053350][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 308.113096][T13960] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 308.483134][T13980] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.495299][T13980] lo speed is unknown, defaulting to 1000 [ 308.780155][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.212050][T14017] xt_hashlimit: size too large, truncated to 1048576 [ 309.292389][T14021] ¾x9ÿ: renamed from bridge_slave_0 [ 309.325828][T14021] tipc: Enabled bearer , priority 0 [ 309.387857][T14021] syzkaller0: entered promiscuous mode [ 309.422808][T14021] syzkaller0: entered allmulticast mode [ 309.464842][T14016] tipc: Resetting bearer [ 309.512019][T14016] tipc: Disabling bearer [ 309.523543][T14029] __nla_validate_parse: 5 callbacks suppressed [ 309.523561][T14029] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2061'. [ 309.613304][ T5484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.646356][T14034] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 309.709290][T14036] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 309.729576][T14036] openvswitch: netlink: Message has 16 unknown bytes. [ 309.789785][T14041] netlink: 'syz.1.2064': attribute type 13 has an invalid length. [ 309.808962][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 309.941570][T14047] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.954072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.155896][T14061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.522479][T14073] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.675438][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 310.996724][T14081] vlan2: entered promiscuous mode [ 311.001932][T14081] dummy0: entered promiscuous mode [ 311.018085][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 311.019167][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.035660][T14096] ip6gretap1: entered allmulticast mode [ 311.204033][T14090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.857220][T14154] tipc: Enabled bearer , priority 0 [ 312.004146][T14154] tipc: Disabling bearer [ 312.163805][T13601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.309529][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 312.334316][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 312.343448][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'. [ 312.427990][T14191] x_tables: ip_tables: ah match: only valid for protocol 51 [ 312.435910][T14199] x_tables: ip_tables: ah match: only valid for protocol 51 [ 312.779492][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 312.997391][T14231] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 313.019644][T13852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.192726][T14234] netlink: 'syz.2.2113': attribute type 2 has an invalid length. [ 313.204195][T14234] tipc: Cannot configure node identity twice [ 313.214528][T14241] lo: Caught tx_queue_len zero misconfig [ 313.624518][ T5484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.793755][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 313.801815][ C1] lec:lec_tx_timeout: lec0 [ 313.806784][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.885758][T14268] bond5: option primary_reselect: invalid value (4) [ 313.906924][T14268] bond5 (unregistering): Released all slaves [ 314.385745][T14288] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 314.422151][T14288] bond5 (unregistering): Released all slaves [ 314.487304][T14293] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2126'. [ 314.994072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.342546][T14349] virt_wifi0 speed is unknown, defaulting to 1000 [ 315.362976][T14349] lo speed is unknown, defaulting to 1000 [ 315.883147][T14361] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2141'. [ 316.335549][T14389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2148'. [ 316.356159][T14392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.381893][T14392] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 316.412120][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 316.436540][T14394] netlink: 'syz.0.2150': attribute type 1 has an invalid length. [ 316.666428][T14413] netlink: 'syz.0.2155': attribute type 21 has an invalid length. [ 316.697116][T14413] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2155'. [ 317.076547][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.086096][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095065][T14437] netlink: 'syz.1.2161': attribute type 2 has an invalid length. [ 317.095730][ T1297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.137960][T14437] hmac(sha224: entered promiscuous mode [ 317.154921][T14438] netlink: 'syz.1.2161': attribute type 62 has an invalid length. [ 317.163211][T14437] netlink: 'syz.1.2161': attribute type 62 has an invalid length. [ 317.240191][T14439] syzkaller0: entered promiscuous mode [ 317.249874][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'. [ 317.260701][T14439] syzkaller0: entered allmulticast mode [ 317.307889][T14435] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 318.100692][T14469] x_tables: duplicate underflow at hook 2 [ 318.779469][T14465] bridge0: entered allmulticast mode [ 318.813773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.821812][ C1] lec:lec_tx_timeout: lec0 [ 318.826918][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.977384][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 319.103272][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.126870][T14493] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.156839][T14504] netlink: 'syz.0.2177': attribute type 16 has an invalid length. [ 319.217008][T14504] netlink: 'syz.0.2177': attribute type 17 has an invalid length. [ 319.257118][T14516] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2180'. [ 319.587405][T14504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.647749][T14503] virt_wifi0 speed is unknown, defaulting to 1000 [ 319.657039][T14503] lo speed is unknown, defaulting to 1000 [ 319.873631][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 320.030927][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 320.034052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.198392][T14543] netlink: 'syz.4.2184': attribute type 19 has an invalid length. [ 320.261396][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 320.314886][T14550] macvlan3: entered promiscuous mode [ 320.320907][T14550] macvlan3: entered allmulticast mode [ 320.326380][T14550] veth1_to_batadv: entered allmulticast mode [ 320.341756][T14552] sit0: entered allmulticast mode [ 320.353076][T14558] sit0: left allmulticast mode [ 323.833866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.841892][ C1] lec:lec_tx_timeout: lec0 [ 323.846600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.074136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.853803][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.861810][ C1] lec:lec_tx_timeout: lec0 [ 328.866523][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.104558][T13601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.123965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.874357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.882394][ C1] lec:lec_tx_timeout: lec0 [ 333.887123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.154084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.893976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 338.902419][ C0] lec:lec_tx_timeout: lec0 [ 338.907307][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.193971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.913978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.922003][ C1] lec:lec_tx_timeout: lec0 [ 343.927083][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.233969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.933864][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 348.941883][ C1] lec:lec_tx_timeout: lec0 [ 348.946487][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.274106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.953869][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.961889][ C1] lec:lec_tx_timeout: lec0 [ 353.966462][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.314040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.974063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.982134][ C1] lec:lec_tx_timeout: lec0 [ 358.986888][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.354237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.874024][T13601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.408237][T14602] __nla_validate_parse: 1 callbacks suppressed [ 361.408258][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 361.468399][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2202'. [ 361.487209][T14607] ipt_REJECT: TCP_RESET invalid for non-tcp [ 361.499533][T14607] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 361.532600][T14607] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 361.551786][T14607] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2203'. [ 361.577347][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 361.621777][T14615] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2206'. [ 361.815808][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2210'. [ 361.881396][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 361.912252][T14628] bond9: entered promiscuous mode [ 361.922262][T14628] 8021q: adding VLAN 0 to HW filter on device bond9 [ 361.955649][T14642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2212'. [ 361.965959][T14642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2212'. [ 361.985432][T14633] virt_wifi0 speed is unknown, defaulting to 1000 [ 361.994395][T14633] lo speed is unknown, defaulting to 1000 [ 362.126737][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 362.705303][T14688] xt_limit: Overflow, try lower: 268435456/134217728 [ 362.847470][T14698] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 362.993172][T14698] gtp0: entered promiscuous mode [ 363.005116][T14698] gtp0: entered allmulticast mode [ 363.086011][T14696] macsec0: entered promiscuous mode [ 363.093656][T14696] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 363.234784][T14723] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 363.375599][T14723] 8021q: adding VLAN 0 to HW filter on device bond7 [ 363.493503][T14723] bond7 (unregistering): Released all slaves [ 363.805594][T14725] delete_channel: no stack [ 363.918194][T14758] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 364.760311][T14803] tipc: Enabled bearer , priority 0 [ 364.769855][T14803] syzkaller0: entered promiscuous mode [ 364.787674][T14803] syzkaller0: entered allmulticast mode [ 364.865851][T14803] tipc: Resetting bearer [ 365.043781][T14802] tipc: Resetting bearer [ 365.059848][T14802] tipc: Disabling bearer [ 365.073772][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6090 ms [ 365.082042][ C1] lec:lec_tx_timeout: lec0 [ 365.086953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.124223][T14826] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 365.403929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.422655][T14857] bond10: entered promiscuous mode [ 365.434875][T14857] bond10: entered allmulticast mode [ 365.445497][T14857] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.515881][T14857] netlink: 'syz.4.2264': attribute type 4 has an invalid length. [ 365.524858][T14857] netlink: 'syz.4.2264': attribute type 4 has an invalid length. [ 365.757000][T14877] virt_wifi0 speed is unknown, defaulting to 1000 [ 365.774786][T14873] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 365.793645][T14883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.814693][T14877] lo speed is unknown, defaulting to 1000 [ 365.838258][T14888] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 365.941524][T14890] syzkaller0: entered promiscuous mode [ 365.947479][T14890] syzkaller0: entered allmulticast mode [ 366.788665][T14918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.928859][T14951] __nla_validate_parse: 22 callbacks suppressed [ 367.928880][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'. [ 367.956509][T14962] xt_l2tp: wrong L2TP version: 0 [ 367.967102][T14962] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 367.992657][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 368.139392][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2296'. [ 368.358356][T14983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2307'. [ 368.457810][T14989] netlink: 'syz.1.2308': attribute type 1 has an invalid length. [ 368.501093][T14991] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2310'. [ 368.547288][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 368.557308][T14995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.620057][T15002] netlink: 'syz.1.2312': attribute type 30 has an invalid length. [ 368.653621][T15002] netlink: 632 bytes leftover after parsing attributes in process `syz.1.2312'. [ 368.775996][T15010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2315'. [ 368.910327][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 368.922362][T15024] netlink: 'syz.2.2319': attribute type 20 has an invalid length. [ 368.930572][T15024] netlink: 'syz.2.2319': attribute type 21 has an invalid length. [ 369.015060][T15024] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 369.139550][T15040] netlink: 'syz.1.2322': attribute type 4 has an invalid length. [ 369.329649][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 369.736694][T15077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.101655][T15102] dvmrp0: entered allmulticast mode [ 370.379560][T15115] bond7: entered promiscuous mode [ 370.385236][T15115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 370.433903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.440703][T15122] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 370.463501][T15118] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 370.478994][T15115] bond7 (unregistering): Released all slaves [ 370.616463][T15118] bond6: entered promiscuous mode [ 370.637249][T15118] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.722011][T15121] bond6: (slave veth9): making interface the new active one [ 370.730682][T15121] veth9: entered promiscuous mode [ 370.737500][T15121] bond6: (slave veth9): Enslaving as an active interface with an up link [ 370.833761][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 370.841829][ C1] lec:lec_tx_timeout: lec0 [ 370.849538][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.400357][T15144] virt_wifi0 speed is unknown, defaulting to 1000 [ 371.409134][T15144] lo speed is unknown, defaulting to 1000 [ 372.279018][T15182] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 372.290957][T15182] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 372.299409][T15182] CPU: 0 UID: 0 PID: 15182 Comm: syz.0.2359 Not tainted syzkaller #0 PREEMPT(full) [ 372.308784][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.318941][T15182] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 372.324785][T15182] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 a9 44 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 372.344827][T15182] RSP: 0018:ffffc900056b78e8 EFLAGS: 00010207 [ 372.350895][T15182] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888041e65b80 [ 372.359114][T15182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880313fe640 [ 372.367097][T15182] RBP: ffff8880313fe640 R08: ffff888041e65b80 R09: 0000000000000008 [ 372.375063][T15182] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 372.383039][T15182] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000ad6f3c [ 372.391027][T15182] FS: 00007f8c511f56c0(0000) GS:ffff888125465000(0000) knlGS:0000000000000000 [ 372.399949][T15182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.406536][T15182] CR2: 00007f962fde9078 CR3: 0000000032056000 CR4: 00000000003526f0 [ 372.414517][T15182] Call Trace: [ 372.417791][T15182] [ 372.420711][T15182] ? __alloc_skb+0x4e5/0x7d0 [ 372.425353][T15182] ? skb_put+0x11b/0x210 [ 372.429622][T15182] rose_write_internal+0x1256/0x1b60 [ 372.434903][T15182] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.440160][T15182] ? __pfx_rose_write_internal+0x10/0x10 [ 372.445822][T15182] ? timer_delete+0x245/0x340 [ 372.450504][T15182] rose_release+0x25b/0x510 [ 372.455000][T15182] sock_close+0xc3/0x240 [ 372.459289][T15182] ? __pfx_sock_close+0x10/0x10 [ 372.464124][T15182] __fput+0x44f/0xa70 [ 372.468116][T15182] task_work_run+0x1d9/0x270 [ 372.472754][T15182] ? __pfx_task_work_run+0x10/0x10 [ 372.477916][T15182] ? task_work_add+0x395/0x440 [ 372.482686][T15182] ? __pfx_task_work_add+0x10/0x10 [ 372.487796][T15182] get_signal+0x11eb/0x1330 [ 372.492311][T15182] arch_do_signal_or_restart+0xbc/0x830 [ 372.497850][T15182] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.504004][T15182] exit_to_user_mode_loop+0x86/0x480 [ 372.509294][T15182] ? rcu_is_watching+0x15/0xb0 [ 372.514047][T15182] do_syscall_64+0x32d/0xf80 [ 372.518624][T15182] ? trace_irq_disable+0x3b/0x150 [ 372.523726][T15182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.529792][T15182] ? clear_bhb_loop+0x40/0x90 [ 372.534469][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.540358][T15182] RIP: 0033:0x7f8c5039c799 [ 372.544767][T15182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.564370][T15182] RSP: 002b:00007f8c511f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 372.572775][T15182] RAX: 0000000000000000 RBX: 00007f8c50616090 RCX: 00007f8c5039c799 [ 372.580731][T15182] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000b [ 372.588707][T15182] RBP: 00007f8c50432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 372.596665][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.604621][T15182] R13: 00007f8c50616128 R14: 00007f8c50616090 R15: 00007ffd70899ef8 [ 372.612848][T15182] [ 372.615867][T15182] Modules linked in: [ 372.620594][T15182] ---[ end trace 0000000000000000 ]--- [ 372.665817][T15182] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 372.671587][T15182] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 a9 44 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 372.710706][T15182] RSP: 0018:ffffc900056b78e8 EFLAGS: 00010207 [ 372.719518][T15182] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888041e65b80 [ 372.728602][T15182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880313fe640 [ 372.737303][T15182] RBP: ffff8880313fe640 R08: ffff888041e65b80 R09: 0000000000000008 [ 372.746626][T15215] bridge0: left allmulticast mode [ 372.746789][T15182] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 372.757692][T15215] wg1: left promiscuous mode [ 372.762520][T15182] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000ad6f3c [ 372.772327][T15182] FS: 00007f8c511f56c0(0000) GS:ffff888125565000(0000) knlGS:0000000000000000 [ 372.773866][T15215] wg1: left allmulticast mode [ 372.786274][T15182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.792881][T15182] CR2: 00007f7f0c1e6158 CR3: 0000000032056000 CR4: 00000000003526f0 [ 372.801193][T15182] Kernel panic - not syncing: Fatal exception [ 372.807565][T15182] Kernel Offset: disabled [ 372.811875][T15182] Rebooting in 86400 seconds..