last executing test programs: 41.01920443s ago: executing program 0 (id=3709): unshare(0x22020400) r0 = socket(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e9000000070000000100010009000000010000002f307a74a310487dcdd16069ea1fcdac067e17e48e294fee35084f9d493ba660a32944db2cfcb092600af18863d1b45e4c648b7b719e573a6e6e273be2f8d987f1fc7e34f1421f465042ebe4ca086c1b1b9f03ff6a3c38393ff10229d33b8c57e3130984b10555cc1300000000c2cb559ecaf86d9e5650b4611bc06dec51703d549ff9008e05fe1228b2fd61603d5870be742c527d46f9f0543fbeb753891e9a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250300000008000800", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x10, 0x2, 0x9}}) 41.002999315s ago: executing program 4 (id=3710): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8, 0xfffffffc}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) socket$inet(0x2, 0x2, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000632a7f5400"/20], 0x48) socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) unshare(0x24040400) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, &(0x7f0000000000), 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000700000002850000000d000000189bb3a590a62111000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80101004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x24094080) 40.781340147s ago: executing program 0 (id=3711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x200, 0x9, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004014}, 0x20040002) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0xe, &(0x7f00000005c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x3, 0x1, 0x1, 0x7, 0xfffffffffffffffe, 0x1}], &(0x7f0000000640)='GPL\x00', 0x80000000, 0x65, &(0x7f0000000680)=""/101, 0x41100, 0x4, '\x00', r12, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x7, 0xffffffc0, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1, r13, r14], 0x0, 0x10, 0x401}, 0x94) (async) r16 = accept4(0xffffffffffffffff, &(0x7f0000000980)=@hci, &(0x7f0000000a00)=0x80, 0x800) sendmsg$inet6(r16, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000a40)="8a985ad9212f172539e3dcb2fda735bf6268e3f560c35666178fd0455ca25b8dbed8357b32d18f84f5fb64e1df6a1f776b80f3bfc3ce6ef314fb96903fb9c09d5b5d48692b2f0d53179e9d3cbdb009be7eb69600078ec9b6042ef07ff8e0392d5e55f9dfe445ad290e76da0e558f85608e1738c0d139b1344c70ca8ce892772bca2539b1547fc27845f407c8ced98d2bd81f924f9cf1535972e35ed733c9b0e88c03f2504f232306cbeb2ad221bf119d6db661b7759186347f010ed5a1c972301caa17acd16bf6ae85a340907e5adca2cd2649ce5b7549b8ca1553879023f7a89970ab3c3c544afdfa84ab0a92f0cdf399853f667306ebc265415a4253150589796e2a2aefb61371784aaa07498c85b794e90450c15ed219da50089ece317452e189d0fcf90768ff89a1db684673d0d18ded724d28ac50103da0d9fce5efe75d2fa12b44ac83c5b215bcddc005b4a5b89fc395c3168c94255ba28090a1bae0f4a994b5472fe2f2290061e1333ae68c978c95a5f908465b456cf7b131d369cc9bc81464ba4b4f914061c3272c9ed86738dfcffa70501cfffd5354fc85834828435c8df79b8b11e5cdc5009ec9dcee38e880e4f8941420fb5b847c2b39822ecb616d8f8e1369b24f03eca033db864af95bc48546cfd67e25c6adada98ddd4c9c1002a2e053644c1f6784f743fa4c6319f7e95a33b841e8c8a8fecb79f5e7fe84404e045cbb33991184575dbb237e156bf5be5d75d18d4440b128f6ddcdef4d44a5abd8c433efc113bf121a900067864f22076fef5d9627edfa85ef9f1766220f2e3fdb8d0c2af2e00ffe52ba9c26c4cd7f1c22d2334f621e117a8a4472ca60d33050f99db7f32db2ce0937547d38d779435c8d8a160b86490ab9d1a73ed696744a6fc110d7ca98ca5041d1d9909cf3e0381bbbd42888b942a53cf85466e55e75c2952839259f5e70179bf190ba358d07a7f9f38efe2a54c7eafcb57f96aa151b963d79c4ddd9c14a0ad25e8b80c9078e5978a650604d1be69c73b72c1c6efd76c481fd379b4e99f76abbb57678676a78753094f27d45b8a5914ae3ce76c4fc4ca5fbdcab82db64ee9493299e9bb5f99cf1f6b0bbd24dbace918665325decf146879fd60a463c83f3c65469865c27ccf011cbf4a620a8387aded566a221245f2ee893b3ab2cb2e024e87f30f932073416a9b47f42011315b4465158950db12b4d47ee464dc1ea63d4975c25928dff5018671a554a5f16c5478c1e11d523afac295bcd2d8a831d7486d2ab9439edb1a7670138e20f39841ba907f11acdbe80845010da470080ab4e6b586119b8591b8a1614862bec4fb13384cbb91b8132741681b03baf3bbde01c7ec84cdde9b97c36ada82ce272cd233407b60284905fe996a3566edd609bafde5b485f9ae3cbf4d53655937b6e87b74e964abfb83af9c08faed40327307d8e2a866b91e9adaa64fde5cc8af470bfa2d6c07310bf6320c9805a098185c425849dbdba31ba41b9a8e64d0a0ce6a5e0c4624aa073fef664a8c3dcf2b3ac480b6dc7a0ffd51861ee853e561743c76bed147b8923b4f826e1308c7465ad113a759b259a0ca30d7c13231c200ca46318da062a14fc8d3af281db43f5c33fde88392029855aa7af123ca9ffcf31cabc8b20ab0b6f0bc14aaba010c1d6a7ddc5ee392b652aa75aabb6f4824e046d32ac7a4fe3c960e6e3a68c83baeebb660e24e3df7d63028d020e99b909ee59de3ec6c546432a263799f31cbf50f0811c693dba3d65ed854887db152d52cacfbe124206e954f2839740b301c9296a98cc7ecda00ee62865313c50727086c736a7c891265ad256158220117f57c0809423464ed14981ede193d29b3f2c2857d9d3b0d1e511406b3930715ed6b0b71faace084381f479bbcc0655e9775ece20390c87a6298ec41359eae2a38f25ebd1e451f4ee494652030f1d4c5293dbdacc7d6b1569e3882f69b62072d66a69046aa4c0e2afa9555ef9f0696514961a4ecb54c0b8e6ff31719a075ac04ad1379bd7e863e475e83e00d0f4ee3bbb7cb3d4276b8b261fc7024fe0ab7bffefb9681fd095f2b4806e64b3b761bc0c75348bd3d255d5bc5883f9a5c5f0219fd83149663349260cc849e3bbcafcd1cbd3e1cd67b7f2b9ff79763e580ef57662559995b1a3daa90612c3b137c04be5b0f90d1c54407f1ff86a1c51426bf31e4dbe82e78608787256034f0676511f61600acbfc8e6d28c005b91bf47e89a3e31763fa29c3cbae47b1106c95ef9bb398cb5529cb85ee743e4977cb394210068bbe90e337ee7cf53c34b723b8b94b7eebd48f4ef422d19d6e4564aeec1d127720dcaf735c5c35d6fff1da8e6825ed23e8dab490134f5275b0a687906eb7a99a64685c783fde2abd086d01f26cf9129add7221395775f2ef2b2a4f62fdb989f3a8e6629cad3f498c199c61956227e9ed4f897c02dd8540dc3a55cc5b748fc8b4eff7fff70fcec89595b44491a4232a2097d0b114da48366513e397e8f4ee2ad5bd1c7774f28f3d5ecf7feeb2a2a383b54f2119491ce4b5100c568062a77b97a72e8b3c7cc70b0fa78d43db499ab544f8f62ce7778cd5e0e7b6391c4a93309d88b9557cca1bed0f8a91fdc0f681e203d12bbe2d904df3928ac08ab7fac1887332f44ccc1e53361ebaf20bea85b261a74243db31006aff2524bdcd5a11f60fcece9ffc53e60e74b6f4e4bd17ad2fd9fea64abb1bdc9bb4350886d0d7ebced35e1e9546b0644732fa207ef4277b0a2a84aff04edfba475f173744ae968fb78052fd7c80024724285944e3197496b401c9a63ffa7a3d777abdb5a2827fe9c5cbdd095f26f3e507472900bee9ff22ba6e803119038e1945da23894d7cb376033e2b85e0e1a2e9b0b2309a4988ccd5e9c4e2191179992b4919fac885ef47f002834fffb53fdb8169ed79a8c48dc4e4155fdc54b3a4c0c84f9960e463e5c6d5ef5fa56597ce5e31dec01e07f47f82ff065d2d6f548c364a31d3dfc9890b74ff4f90d87a348058c242f0cd3c90d34e683182d358e3ee59e97393b53db25c283cc71d54c690015e19877277987bc01c6188472f302ea9c74f747c9c77fa9dd90b2cb97de2beadb6459f67637db9973d6cdb6a87f7e9eb707cea36a7396af5c060be1a31106e803117a8c455536bfcd24f4802fe3dd10bcff669f5c6c88a48c761b4c778e983ef6ed799ac51bca67c11e70eb2efc5e313b6073559bcdaa646796ed96308e49a757ccdf770982bf64e6f206f15d908f8021af95ea3a25bc599ebc98f73b78b007315476a93a51464e684a917eb709e883242b806a9c9b4fe91e83974dd13cb4cb29ccf96182ef698a8776af81a7f3d3649e33879152531eb8b6876ee3032eb8ccc0128da6e31af4977bd17a2d346289c4dc974a6f801da921135f5e3c92902e4206a20f4823a43808ea6c2f10c154bf37879ebee685a2ed1970ab09225d0e885ab73e23d84062e74ba935aed2f8aa8a0eb3e033831f224087091fff44e9c7c43b60ac3b208f09a44547b72c1665c75eca0809b16cee81220c60dc85f17d09e3924f2dd6a20eaaa85a1f6f73bb36ec2a49fcb098ccfb4d88d7d68e0bb6dd0850c9478fe392f7a3acfcec283985e13f8327a2fc32d0fa7dcd98dde26a0c1125589fa493f21b8e88675392fa0ca581af7857ab08dc228484896e4d04a75f5f5cfc47c1749ff30a9879dfdb3a2a7f40f2ccfdacce2a9baa27c734c1e7aa9249f601fd83394ebaaaf6ebab761523bd04a436425f74a42d537b79e9068bf9af2d2fb6777cf336120a0c66756f64a54c01ddda6a4e8baba55669d28476396229771ad1a51a958ab0c704eae5396100dbf952575bcf6a5b51c4e9039e9b9e3eac6aabe29f8ae80f4066d83f756d9c381c8a6806a9d9f7d566745a3f76d91428f162ced764ab9080e8e6663d33d2796108e47ff480074665a0697e4475ead22b0b8952c705be46a71ef4d6e70caea434a4364ba707c116234e168e42f8f2e809eca6e81786391d887826213d9abdd26299fffe46158f0b335e88072ce3d9be46843429de6f4524a3913e4efc4a8ccdffd65bbd9e37b834da3bc0a50ce176b8d05afd9a9a14ba7c45241e599cbe36d8e90822c976339d191378d067408a580f1c5f35b4ab77a6d62dde7e99c9d233a80ab0a915b2ea92fd6dc2bd49f574f8f6a28688b699043737fd3e94cff45a0b25cb0a2d5a7f7fd89236dd03e5bda16ca844140aa21f276e5d014e7cc9708f6005cb630ee460cf36d5579f5e0ff942c4cbc8dabca8ba0d4be94ff90aac6329d30824ea5611f65f036a77169bc37fadeeeb9bce176ccabbbe3b1eb60340c9fdbb99b523b613518ae5e1d9b641355df02cadf91e6bfa8717b3fc36a257bad39aa01f0e6fa3f5a21f9ffa7a6709483d9e6743c3dfa3d380853355ad41f930614c435d697d606e73cb1fede1aeeec726c2c88874cceeac76d5b79bd7d1ef6d91e909a04eb19a80b23d10fd5d3fa1ebf26aa0a0d4fa3d8b591ac79f34a1f137bad38464b4ae0eae1c468072f8a262f80806e6db075a0da56d746f32f0686b3729c0bf2375e37945b445c251d397565c04c641a5c805003f4802a9175cd1c3ff8133c6806558b840e47e9c127a64b9e6a2870b69a4f892c55bddb26cf751abb48568a77a17cab897130888f78e9662ed30e9534531ac0527c710e48e1b4e1b76b8b91eefb785106eb89a16198ce39f16df659bfa361fcfa8a2ec62f522309e70bacb8c54ba738662a4611f8962bb0c8721bcaed900613e7b6a5da020d350cd368c1017d84ca85f985397dba90616b04da64c1e7e68e2d037742201b6fce685d5c3d5770d2cab1885b447ebdad9ee60326694d1138cf599a206fb4aa9757350ef76a03d033ad4f87390d8260aedcca92e2b9481cae8f8c7dd0d517b341436f15f4284c4d6a153079bdd15b9396eb11d781890899f8e637e036a6ec21785f1e0e31a3b9f2abdfade7662e51bcc902d390479e932d2ef9b1d63b88b44b9f0f8fe73c8d63f061a5e0e45affedb102fa4ab91398e6f59f09081419b4a407626136667473c0f2e4f6ef674a79fb31b5b1f23d92815616303b2372f8626f7275809ad1f964f6b575d44f42067e9c1ba84804097b38f87552f771c307ff04a5f826d676fb104b4d3c3668334ca6db827376f244ce46afba39654052a5411c2fa5f09578a3b61d5c3921f0621b25a13db7d3e2bd3c5e073601b98a5afad7834228d219943cd16a3df7330fb4bc1a6f5c5007ecb9e7dedf3f0e2dea87908d43dc34ce6fd1a6a7ee1fb4849673ba82d3f5cd2f2fe18221b0d4993900f8e7184a1910b5e2ebf611240d84118f430407b5c1f4737edd35dbadc7424eb7627913a74506e9164f3e80e4df780ee3929aa38fe3d6c53f0f68aafb1366017f36bca0f21db889adbc561e8a1d53d69d635976dac140d7c7f6b2d88e1c7235f9e3e7740b70fed2f1eb50ceea5c6bbcbf32b9e2239619c01e05fa6a1a9105fe00a500e2a46b91c3034c5f06af99f1fd80e3f48f8e7d8f5e55a98491449e68fc89e4a45beebc36542e5dcf5f35aa338a6c2cdb47a2b5fedfe2036efc75c1bd351b7b91e254f461c0baed6af42453dd3920b4a00bcf196dd89b8caf07befb440b1bc559971c7c925ddb547ae85b630a932770c10d48d33d9fd24a35678ed4aee1870db5da9e43c4358d8b1ed991829f4bc15c3c66d6f8b8f7b8085443225ddcdeacafb3b9b14d192a81764839ace17491d5f170fb735621d17bf908879c936f048cb468b256d12745db3338b4", 0x1000}, {&(0x7f0000001a40)="967b3d0818348909c9602f465eb782048bb7d40a459753215ee6f9996bca39fb1f1c60113931d473d2", 0x29}, {&(0x7f0000001a80)="e4fc19551c92fbba6d2ec2a5a8a85b935d5b7c36e5e35ba5ed94a766db7c16e445fb4fa3fa129a989896f0dec5c4c91d458329945764d35e9f8ca46e2991c0df257665e656fc658e4aba183699b0db6765b2eb960d7822f92dfefd3c65c936256269774a4ffd27b3a5b1c740434f979cfa55fb31ac3e686b341a8ff384a2a99b29a394c94ae6cdb1de3d", 0x8a}], 0x3, &(0x7f0000001b80)=[@hopopts={{0x48, 0x29, 0x36, {0x29, 0x5, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r12}}}, @rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x1, 0x4d, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x3b29}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x170}, 0x400c0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x5c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000004) (async) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async) ioctl$FIBMAP(r16, 0x1, &(0x7f0000001f00)=0xfffffffe) (async) close(r15) setsockopt$inet6_int(r13, 0x29, 0x17, &(0x7f0000001f40)=0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f0000002000)={'ip6gre0\x00', &(0x7f0000001f80)={'syztnl2\x00', r12, 0x29, 0x1, 0x2, 0x7, 0x2ebda57ae531e2cf, @local, @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x8000, 0x1, 0x8}}) (async) shutdown(r16, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r17, 0x40047211, &(0x7f0000002040)=0x20) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002280)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002240)={&(0x7f00000020c0)={0x144, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5133}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb4, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x537a53e64e99e7b4}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x70}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6bf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xff}]}, 0x144}, 0x1, 0x0, 0x0, 0x840}, 0x4010) bind$l2tp6(r16, &(0x7f00000022c0)={0xa, 0x0, 0x80000001, @local, 0x10000, 0x4}, 0x20) 40.40513564s ago: executing program 4 (id=3714): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffa1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) 40.377212784s ago: executing program 0 (id=3715): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$sock_int(r4, 0x1, 0x1b, &(0x7f0000000480)=0x1df9, 0x4) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) mmap(&(0x7f000020a000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r5 = gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x3261e) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f0000000680)={0x1000000, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r6, 0x0, 0x0}, 0x10) unshare(0x10000000) gettid() socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 40.059621249s ago: executing program 1 (id=3718): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() (async) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x6, 0x80804, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'virt_wifi0\x00'}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'virt_wifi0\x00'}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x0, @private2, 0x9}}}, 0x32) (async) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x0, @private2, 0x9}}}, 0x32) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}]}, 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0000ff0f0000000000000100000006001b004e200000080009000000001008000a000000000006000200000000000c001600050000000000000014002000fe8000000000000000000000000000aa5b872b6a171935c73af72cdc6271e96fcdfbfc3c39c28173840be651838456c670595c6e748f9a15dca5b517fc61662a5a166723c3cf8e265d3637b577193e737ea6bb05f55ca23a7a7c6fddf2e37b24e470429320d050ff6cb8bb5ce7447a32"], 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0000ff0f0000000000000100000006001b004e200000080009000000001008000a000000000006000200000000000c001600050000000000000014002000fe8000000000000000000000000000aa5b872b6a171935c73af72cdc6271e96fcdfbfc3c39c28173840be651838456c670595c6e748f9a15dca5b517fc61662a5a166723c3cf8e265d3637b577193e737ea6bb05f55ca23a7a7c6fddf2e37b24e470429320d050ff6cb8bb5ce7447a32"], 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 39.843401601s ago: executing program 4 (id=3721): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x78, 0xfffff028}, {0x6, 0x25, 0x4, 0x207}]}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfd}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x1}]}, 0x2c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x40, 0x7, 0x9, 0x3, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x66, 0x0, 0xc0, 0x2b, 0x0, @rand_addr=0x64010101, @multicast1, {[@noop, @generic={0x7, 0xe, "9615950d40e7ff5b95dda3f3"}, @generic={0x82, 0x7, "bcabf23aef"}, @noop]}}}}}) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030100006088020024001280110018016272696467655f736c617665000000000c00058005001e0000000000140003006272696467655f736c6176160d300000"], 0x58}, 0x1, 0x0, 0x0, 0x60004095}, 0x48000) (async) getsockopt$netlink(r7, 0x10e, 0x6, &(0x7f0000000200)=""/47, &(0x7f0000000240)=0x2f) 39.591180785s ago: executing program 2 (id=3723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r1, 0x2d322000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0) 39.478284468s ago: executing program 3 (id=3724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='btrfs_find_cluster\x00', 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0xfffffffffffffea9, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x6}], 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0xd0, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x2}, {0x1, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x4, 0xed, 0xffff, 0x9, 0x0, 0x1000, 0x9, 0x9}}, {0x16, 0x2, [0x0, 0x5, 0x9, 0x6, 0x5, 0x8, 0x1, 0x1ff, 0x5c27]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf8a, 0x0, 0x2, 0xfa81, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x20, 0x3, 0x0, 0x4, 0x1, 0x0, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x2, 0x67, 0xff81]}}]}]}, 0xd0}}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x405, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x8}, {0x3, 0x3, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bd9164d3c0000008f79783594790b56cb762f65d8b6b82d37e829e39c6203cfdb0099942ccf9cee108a3676189328f2a224b9747e691ad77029444acd6ad7861fc15cacb9bb01a5006e6e1ba2184e50536fb66346824f6aa4c2bdd53458f59f99", @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a000600080211000000"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x2e) 39.46740771s ago: executing program 4 (id=3725): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010101, 0xa, 0x34, 0x14}]}, 0x38}}, 0x40400c0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, 0x0) 39.403223797s ago: executing program 2 (id=3726): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) close(0x3) 39.345526293s ago: executing program 4 (id=3727): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0xffffff00, 'pimreg\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x2, 0x25}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x3, 0x3, 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2708e9a7833fdcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) shutdown(r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f00000016c0)={0x40000001}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/20, @ANYRES16=r2, @ANYBLOB="0300"/20, @ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="0506004000000000000000bb5b6421000100000066000009", @ANYRES16=r2, @ANYRES64=r1, @ANYRES16=r4], 0x50) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x100, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x3, 0xc5, 0xe23, 0x1, 0x40000001, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0xffe6, 0x2}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000040000000f0000000000000700000000090000000000000c02000000000000000100000d00000000040000000536533be0bbec1e1135e1000000090000000200000f010000000300000003000000030000000300000003000000090000003b08000000000000120300000000000000616100"], &(0x7f0000000400)=""/21, 0x7c, 0x15, 0x1, 0x5, 0x10000}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 39.149297656s ago: executing program 2 (id=3728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 64) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) write(r3, &(0x7f00000000c0)="8f2a0a65", 0x4) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x40, 0x4) (rerun: 64) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x400005aa, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = accept4(r4, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000000)=0x80, 0x800) (async, rerun: 64) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x50, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffff000}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x42880}, 0x20000002) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) (rerun: 64) close(r8) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb0, 0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) (async, rerun: 32) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 38.895196572s ago: executing program 4 (id=3729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) unshare(0x68040200) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "2110e3f79d38d7b5", "9eaf2c5adcf0179dcd13d0384317c30e94bde94b55907fc071a1d14f7ef6a8ba", "00120104", "9a6393074f8ad299"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) shutdown(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd52) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r4, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x4, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x40, 0xde9, 0x3b5f}}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) socket(0x8, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1, 0x9040, 0x3, 0x1, 0xc000, 0x8, 0x2f, 0x1ff}}) write(r1, &(0x7f00000006c0)="91", 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0)=0xed, 0x4) 38.822497033s ago: executing program 2 (id=3730): socket(0x2a, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="f6254e74b8cd940ae5dbbca27a66ee8d18f37a5b29a537f7bb384ca3f446460873799cdd73bb83f4d4334e1e82244d2585d5e89177e6ca107a10d0105fdfcc9b04290776c17e79c386e621d122033336f7e5869f4b65159e290a6bfca0219f0b7a63cf0ca6f0569ead40d2e95e8dbc4f5429e136f2027cef94b2922390f80d990d7dda17fa345d3e52aa3e83bc61fbc34a7f4f6ed3518996c3b8fd94bc4f77b6e7bdb76858ed14e6cea3c799260dcfe2a70ead1b2c7ff09542de0ad2bd354bdf243d7978c53d0aecb87f367c2bfa81551c4fd78ec03ba99c20aa6eb3f7f2f93d1d1e7eb44023803bbd25aec7f3615b7ca72c00eb50a497f2fe560f68ef8b38a4") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001f80)=ANY=[@ANYRES16=r2], 0x13b0}], 0x1}, 0x40000) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) r5 = accept4(r3, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) (async) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000180), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async) socket(0x26, 0x803, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) 38.694316657s ago: executing program 2 (id=3731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000003c0)}], 0x2, 0x0, 0x0, 0x40004}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x5, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 38.443059808s ago: executing program 1 (id=3732): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x1, 0x3}, {0xfffffffffffffffc, 0x0, 0x1000000}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x2, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x870}}, 0x40040) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000800a20000000000a0500001693a703f50000000000003c000000090a81040000000000d0000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000b63837680073797a31000000000900010073797a0000000000c0070380bc0200800800030300f5d9802433093ccc3f498957696682000002b0070b802c0001800a0001006c696d69740000001c0002800c00b8eb00000000000000000c0001400000000000000003200001800a000100717592000000100002800c000140000000000012d01f06f15f67d3a1d00000004c42075d2cfe4f7511696d16b10000000000000000000000000000000050059e38e61af48c6cdd067bada6081340bef0ab247c74f81777d7b828df1be0321b8367d3b90ff45ddd4c858928"], 0x870}}, 0x40040) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_bond\x00', {'caif0\x00'}, 0x9}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r8, 0x1, 0x0, 0xeffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) 38.299663996s ago: executing program 0 (id=3733): listen(0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x1e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff000000000000000c000000400701089221ed53bcab5a3f4546754e3e4e8100c054fcdc8f7511857d11fa7c9eac37b89d1c7e1fb755bd54eaf222add3ef5e8ce34ae14c2aa98d30e9f7ebf24f1f"], &(0x7f0000000100)={0x1, 0x4, [0xdee, 0xbe4, 0x8, 0xf0b]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x60ff, 0x0, &(0x7f0000000000), 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.020469825s ago: executing program 0 (id=3734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000003180)=""/4116, 0x1014) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b019f86fa066c575b64dc7a6b9e13c535b4f77a7a745e413de0e7b942cbc20fdfc28910c4c39b0924dfdd3ab53ef5012b7f468cd16db00b011daebe55a0649e207137473d9b4baa2e651fc99d366e780f3f2709ff8b8f682c0001ef29d0d0239498bfba4b21ebd57185c546de5767cc394bb38e2aa88245fd6f41f91cac995d2d1c145b5a4d03a13f8f6dc29c8e9a8e79a740e3746ff5e4b7749d27ecd8d24d43a25c8415f89d63ccc71e456c0c69c6d2fc9faf3dc9b89bbe39c2b39c4babe7baf6ba2e293d07d55e927687c6b99a0badf8dd96ba9c90ab0296824fbf2026bcd56c3faebd60ce7bfd96e264c345bc76f78be3fb69332f3a750ff1e338ebd97e131744ed866f691580bf7908157fe4fe5dc1f301ee9df4324a5bfc96e3fa48c24315a71eca2d636da924f3f94bacee29e7930f9176dcb6bc0032341f4f97bff618dbc1862ce7a1a794010a841f12f2d32c78bf67e786aeb002c3ea772043bd1645d87da8f44db008da4604a28106283d0c21d905f6558449d4ee8510a901c99140432ce551aec56ec5dd4dea78c643ec3f4ffd6f3426a49792c406b8d1e507c4e75afd5819bf584f1993ef6c0f88bc08bc21e6169cae147f95572ced2d1e6f971b41f74bcd816f16bb8b32cdde61870f6c9214bfc66bbe671a8521f4adb5c59d14b5b3e641542f85aada33542ef0e788bc0cb9f97c1e5c865b64494858c11d7f9ccfe7bc6058756b92798d6c4c1c37b726ae1b6dcdea8006b30c3a656a849620cdcfa8e3cf51fad226f6a14945ea770e60aa65cd736314ac361d2406b42e23d0ffe90dd7485e8c159ac27cd59ec29814c76e338d0269ff867480d69e7494d68dd4cbffba6e54de0915de3e56153308f2cb3d53f81d528eeee8c100466e431607ff96329dc9915fa828b2293a4f9e03f41086cffe5302b9c68c739ca38bdd64645d76963a0a80d0d2fcb18ea4ef405e17030f63fde3a92884501b82183ddfab50a17bdb3237878386045a9d0a4495eba8e2ced021f34fc76d85fd854e7978bfb52b80ee6f0cca0dfef78847bd8347433f44559927553639e6f948011f2d013e2a2b1890cff11a82284d79aab555c187ef7c3b7f248618f434a4542d29b7f703f2ade1dd45aad4bfdf992994011f058f4318ab65638060fcfc69a84561696ba64d7b9f58222d41df12431881e74c70a41b5be2e5770b779902248ba5b5c07740ab2c0b5cb9fc6c7f7f45ee89ec1e5992344ec7cded5863862864117421515df64c08735b1d2580c03812dcbb4bf25c6dfd9b0f28a87a7f4d5fdb5dd179d20f941bcfd20dfce6f5aa4ec897f8bcb57db091dc1dde7dc1b830d296e729aee7ac57a3ef81b7584a93b102ca54bd031f651db7727a81d287bcd057758a6b470b0d262ceb0fb322cfb9be8c4ad3e8fe15bd65fe0429f02295b062a0c2fd4119a38a0b2b9a42adb2e7ad855379e9b510a8e90afa4b112e2d7d069917807967d7d4c459a33173864ca5f52eb0c0d6220b8a3f077084c2a1a4b0693cda65bb1e41b6e4a2a4f9cc91a6b8afe5a7d69cfd745150f462593599d5418ac73a768c61d9a969f041eb439f45cf80e22b7cb1f8f2d1f82e675a47782aa37d73328b8053f370b4796003f7ab9d3f5235ac1f065bba0bc86c57f66e40ce813a2df65536e26f7a162d6ce7a8e770060694e82257326f3b6b235b89025f0f65e57b1fce9f356d508c0a845cdbd74dd1a0c246b0d43e3ee2f09f22e04379d4aad9829ac4cb9b2b47356d1c4ea5184a64e664f9099fc5bae50e0237b3bb0e072489804b00e77773db7a21c2759b64faa265835f5251a2305a01a10f3bfd3f905b1032d66efc02f2f0533aab76274366b5008d9e711e84ac6cc06d3c7201957a9c6d62b3ad45259c844af433f17331ad6ebd673362ad79a289fa24e7f992f4e7dcf195dfefd8bc2a76907a1f7bea048aefc3b315b42042b79b31586c7c6a67255dc3b5867fa9daafead5eadc48388c23fe635d0d5c1f8172f8fff8920c685b2bfd3c4e9e556567c425b215e8f74f916e10604c700fd71e2ee01e32894ecc1ff2e79f09b974c80cf3e77b164f67e5bc5c7ce564c00d588b54c6e3c0594c29c92fb058c9275725f68f9cd93ca8953b609f546a11957680168d88b433082c764d93cab2454056db1897c97a2ad109c0b7f4fccfd748e2f9a32cf18b0bfee0531826b3d33819477bff8addb1a49190f25689240c13fd2a2b0021580d0bad26f7f9ca2285580329dd658fba93ec594c262364345af9ad8795433a59e948f95ce195c65ed15e2a31a3c71c2d9426be29a644dc9562440fc8a4e96413818bc631a917819189db338e1cf8177cf5d489e003b70d1a8b73755da2b565eff1456f9ee9dc3d8c3b3dc2c87b6138579ba4f15e9d0f13dbe2e3253b52dab9151a156f1d9024d3f8d79bc3fd71b1c797d0601dcced11ef73caca856b6dbaddec16e27097e00f5fd9f017ef41614bfb084043c451f7c60981e605e92eb2df015808303216d609e1d9826167cc58ef90a4b5211ab113e654995f9b6897894b5302edd5b3d469d01dd977eea6e71866f3b9fc1068dab8a1eac67619e8ee85b9e27a7dd485d409c70062a7a6d7c8c6574757c52a59523e425eb1877f62a2ee974a9ebccb9f145b2d47eeb4a5f994fe091eb57aacbd94c0dc372ce230b07bd3d4211dcfa461bc68379fecc739b20bca97dab74e2c01ed750fcc821e284c5112c865d7e932478a757e537a7d3f21bb823e3aafe42437e2cf974bfbf36ea06f411dea327c829d835385ec0570c2d3fdf77c51498f3a905a221b1496aced4fe43f294cf9ef3cdc8733136fb328504a2f451da4b3d7f32ba824030ec336fd740fc2d344fb00d2502cac23c445d0845b4f957705b46df02882a844194226f3713eea86cfafd63e6fe7d105cef3a2191030a47d32cf193d3d9990c54c023e38fbfe726c2dd77a555c91a3e75143909d710ee41555bbb6256ac035a81c6b743c1c57df53e0fc8ace56d09fd10d10f7c7d63dba8661c5c88ed460cc4f2917c6fc87f3382bfaaac0788c11ade6900b64fc772b7a5db2d3c260345412f15cacffc564de0becefe7c3fb52f9e7403252db215129b7a282f9c4427e6daedab2ad742bc7b6ffbd9723f8dd80197896f61c591d9f44365e4b7f593bab44c82f1a4e49808a78e75c90d2d4556b3a71a4ac9e71e07b6bdd56a542ce791de03e412dfb279eadece4ab0c95f94791158561904900f9c5ef70fb2bdf9ff131ee3bc0fea629f5bfad2a4f8c1fc9dd0eb8a67b3df1ddeaf0e3efb21ea010f30b5df8c17998be28847dea826949b28ad41da9f09e3c1a2d795c4a6d746d1b3ea75458ad6937497acc24eee66d5eebe93c40ca17829eccdb08754770f8961da57f69b7f36b6cac5f5f60880d894e9b7c623d30ea29a0056ce4a0592ce4f6ba285244b298ad06244deafde45dd82fa847353e1b13540353d78d2a365343b4121c4e913c45f1b9d23dc43fc101413fc46457d99af5c867536ec0c5bf1d7212d0b67241f5b0c2d84c09997218587c1a23baf7137b681be288fc8c550fc114dfffd643e0493e26cbc6be318e33422e8e741504925e92bbab3a4859302b1e5bf0ba302a61add05d84b8a168070d5a2ea8613c75847327c56f68fcf2b72a7b981c595a3730d3bb12eade2cce300c3cab0ddded7b3e706874a2e90957c99a8f35403cdd33f921b8b3d53a8e3d3c308e6975406b6a53781cf239bca4c9619bf39adb4f146be585e359a9913e19f3fb1720ced58d8c516f85e70e85bc8f03ddbbdca28cd816f3037ded67d9006b570c87035e4c17baf62c04db3ea4955bce1239188e5412086ae7377ec83f6f2e6d7d164fce8368edee634956e880a87a7ec522c70acd99c42429c40d8f64db61f8f0b9c8328b5dc8202886bb27d4c43413d0ca2b3f7a580e0a05d7141aa7ecdb9841fea8d7da51d02a207c9102ed17e8e831b63cf2d1f382b26d113f30d601ff58edc34253ce3b4aa2f7a3ecb6a257e59f6658da87e30d803eb48e760ff0f374d914bb4e6d72c594a9d5805984ca5a98ab86b17e7986facdba809e639b4097f63b75a6252e88cef3b85ab202b4ce007ead375c6e08677259a61477c31c2e7c52f3b0271264b85dcc1260c3d53693812108a519b730c2e0ea8512e91ea63609397a8546048f2c61f6c0e4a1ba0895525db5c481f41e9df36c12a3963c24b870b94ab57f9704789152d2816ad64ba448e476dd76ac6c7402d2a4e2cfb50247e008038b4f71628730d7f40f536512fb487bba24d5b0825bdda17bb8d58cdf74bfc11971a8f9d387b0962a1d59db67f1351611eb85b3bbf429e30c701235633fb157a9ea72f5005629cd1da83678939e97c7be765fd51309407d3f52ba7b38bf3bcafdf7e272fd41da20fca6cf70ff0c7c49839a299a4d44b5a6dee8fc4c2042fce9cceeb540f38f8b8c2c4c3c4a9ee39ac7215ad097df5fb22fa088b736ba5637088c086504d045dcf7ccced9e62c1821347c6f49446cbff08ea0ce72adb46362b22d445127941d3d1f5bed868b07af8ed3d40abb87416c5f5a18789877f496d28e8d442df635890747e42f96cff9c982d2543d4f5ae718e476d8b6db136889bd3be08dfe4481fa0054422ac9dd3bbfd7e3e6be68f1fe3a9d24da71fcba3e12679f88412834fc9a15d4ce7f94143174d08dd35289374ee68f1a7e629c221ad720a294283a543624e1174755c7fab60cba2f1dccb17cc3991a4df6e1b5c5dc6eff8fb8783f916070d160a5c50de150fcf44f9ac82322ed5550e526d4bbea18ebe7148b824300759f14e0c75a79fe39382be51a822aa711e6113dfa3e8b6c21a0e3f3b5e49d24651ba9542743746ed8123bd66ee5e2ede7ddc61bab5a45e8d71f8dfb4838bdb7b6315399632128f7770ffb0d38dec3cbae", 0xdc8}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x1c}}, 0x20000086) 37.767409606s ago: executing program 3 (id=3735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000002c0), 0x2) 37.615834353s ago: executing program 1 (id=3736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff050000"], 0x23c}}, 0x8000000) 37.498778409s ago: executing program 3 (id=3737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 37.311128581s ago: executing program 1 (id=3738): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) close(0x3) 37.262284055s ago: executing program 2 (id=3739): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x4, 0x0, 0x25dfdbfd, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x84}}, 0x2404c011) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r5, 0x333, 0x0, 0x4}, 0x14}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0xc0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) 37.221880281s ago: executing program 3 (id=3740): r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 37.070001095s ago: executing program 3 (id=3741): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x503, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x115, 0x20050}, [@IFLA_IFALIAS={0x14, 0x14, 'dvmrp1\x00'}]}, 0x34}}, 0x0) 37.053071686s ago: executing program 1 (id=3742): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000012c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x4}]}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = socket(0xa, 0x6, 0x3a) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c0001"], 0x1618}], 0x1}, 0x0) (async, rerun: 32) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x53085f905921d5c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r9 = syz_genetlink_get_family_id$ethtool(0x0, r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x3c, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x16}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, 0x0, 0x4000000) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, r11, 0x400, 0x50bd25, 0x25dfdc02, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x20040041) (rerun: 32) 36.909921746s ago: executing program 0 (id=3743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) (async, rerun: 32) r7 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 36.908843035s ago: executing program 3 (id=3744): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1f0000000000000000000000f3ff0000002c959dd705fe22f79f50f82841ff5666dba6ffb9d3f17e2f712a58ba46968361512fc5a6e9158ac70529be7e592b1c2d05592448b77754ed81884f8806609a5b5ed8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) poll(&(0x7f0000000000)=[{r0, 0xa404}, {r1, 0x21}], 0x2, 0xfffffffe) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="230029bddd00ffdbdf250e00000834002f51f8b26184d502800800084e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@remote, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000104010800000000000000feffffff00080005400000000105000100030000000800034000002fdb06000640000700000a00020000000fdc01000000e2f3ab568620ead2d7dd64f849be3bb169576f8e3d40439e821366d3eca46ae660fe506e5962e4e0dc5388836eaa5128c1df8f1ef7a7c160b9ed43a9418f49"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000100)=0x7fffffff, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0xc0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r11, 0x1, 0xffffff84, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xbef8a803735472cc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$xdp(0x2c, 0x3, 0x0) 35.925371967s ago: executing program 1 (id=3745): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x2000008}, {0x6, 0x6}]}) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000240)=0x10001) write(r6, &(0x7f00000001c0)="00ad", 0x2) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000400)=0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$inet(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 18.770647454s ago: executing program 32 (id=3729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x3) unshare(0x68040200) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "2110e3f79d38d7b5", "9eaf2c5adcf0179dcd13d0384317c30e94bde94b55907fc071a1d14f7ef6a8ba", "00120104", "9a6393074f8ad299"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) shutdown(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd52) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r4, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x4, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x40, 0xde9, 0x3b5f}}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) socket(0x8, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1, 0x9040, 0x3, 0x1, 0xc000, 0x8, 0x2f, 0x1ff}}) write(r1, &(0x7f00000006c0)="91", 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0)=0xed, 0x4) 15.862181427s ago: executing program 33 (id=3743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38) (async, rerun: 32) r7 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async) r9 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 11.890408739s ago: executing program 34 (id=3745): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x2000008}, {0x6, 0x6}]}) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000240)=0x10001) write(r6, &(0x7f00000001c0)="00ad", 0x2) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000400)=0x4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socket$inet(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 4.640729234s ago: executing program 35 (id=3739): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x84, 0x30, 0x4, 0x0, 0x25dfdbfd, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x84}}, 0x2404c011) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/65, 0x41}], 0x1}, 0x9}], 0x1, 0x122, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r5, 0x333, 0x0, 0x4}, 0x14}}, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0xc0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) 0s ago: executing program 36 (id=3744): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1f0000000000000000000000f3ff0000002c959dd705fe22f79f50f82841ff5666dba6ffb9d3f17e2f712a58ba46968361512fc5a6e9158ac70529be7e592b1c2d05592448b77754ed81884f8806609a5b5ed8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) poll(&(0x7f0000000000)=[{r0, 0xa404}, {r1, 0x21}], 0x2, 0xfffffffe) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="230029bddd00ffdbdf250e00000834002f51f8b26184d502800800084e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@remote, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874f72cf86d73d32f462e5947e4ad380feb56a29357215d78fc44", 0x33}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000104010800000000000000feffffff00080005400000000105000100030000000800034000002fdb06000640000700000a00020000000fdc01000000e2f3ab568620ead2d7dd64f849be3bb169576f8e3d40439e821366d3eca46ae660fe506e5962e4e0dc5388836eaa5128c1df8f1ef7a7c160b9ed43a9418f49"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000100)=0x7fffffff, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0xc0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r11, 0x1, 0xffffff84, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xbef8a803735472cc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.384228][T11442] RSP: 002b:00007f60b35f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.384253][T11442] RAX: ffffffffffffffda RBX: 00007f60b29e5fa0 RCX: 00007f60b278eec9 [ 317.384270][T11442] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 317.384286][T11442] RBP: 00007f60b2811f91 R08: 0000000000000000 R09: 0000000000000000 [ 317.384301][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.384315][T11442] R13: 00007f60b29e6038 R14: 00007f60b29e5fa0 R15: 00007ffe38808d28 [ 317.384356][T11442] [ 318.233188][T11452] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 318.454499][T11467] lo speed is unknown, defaulting to 1000 [ 318.532881][T11479] macvlan2: entered promiscuous mode [ 318.550879][T11479] syz_tun: entered promiscuous mode [ 318.554310][T11482] netlink: 'syz.3.1317': attribute type 9 has an invalid length. [ 318.569426][T11479] team0: Port device macvlan2 added [ 318.696976][T11473] lo speed is unknown, defaulting to 1000 [ 318.910019][T11495] lo speed is unknown, defaulting to 1000 [ 319.126959][T11514] netlink: 'syz.0.1324': attribute type 31 has an invalid length. [ 319.202408][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 319.400598][T11498] xt_l2tp: invalid flags combination: 8 [ 319.653731][T11530] syz_tun: left promiscuous mode [ 319.758644][T11530] vlan0: left promiscuous mode [ 319.782079][T11530] bond3: left promiscuous mode [ 319.818282][T11548] netlink: 'syz.0.1331': attribute type 7 has an invalid length. [ 319.826393][T11545] netlink: 'syz.4.1332': attribute type 1 has an invalid length. [ 320.060289][T11556] batadv_slave_0: entered promiscuous mode [ 320.123481][T11556] batadv_slave_0: left promiscuous mode [ 320.224401][T11562] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 320.244342][T11563] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 320.261074][T11562] netlink: 'syz.1.1337': attribute type 2 has an invalid length. [ 320.570024][T11577] lo speed is unknown, defaulting to 1000 [ 320.850455][T11580] lo speed is unknown, defaulting to 1000 [ 321.090149][T11596] bond5: entered promiscuous mode [ 321.103934][T11596] 8021q: adding VLAN 0 to HW filter on device bond5 [ 321.291079][T11607] lo speed is unknown, defaulting to 1000 [ 321.394802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.402899][ C0] lec:lec_tx_timeout: lec0 [ 321.407771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.492243][T11618] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 321.523707][T11618] __nla_validate_parse: 15 callbacks suppressed [ 321.523740][T11618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1350'. [ 322.280811][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'. [ 322.425134][T11644] bridge2: port 1(veth7) entered blocking state [ 322.431661][T11644] bridge2: port 1(veth7) entered disabled state [ 322.438284][T11644] veth7: entered allmulticast mode [ 322.446496][T11644] veth7: entered promiscuous mode [ 322.465724][T11640] vlan3: entered allmulticast mode [ 322.470919][T11640] veth1: entered allmulticast mode [ 322.480792][T11640] bridge2: port 2(vlan3) entered blocking state [ 322.487331][T11640] bridge2: port 2(vlan3) entered disabled state [ 322.498669][T11640] vlan3: entered promiscuous mode [ 322.503997][T11640] veth1: entered promiscuous mode [ 322.556839][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 322.940022][T11684] netlink: 'syz.1.1366': attribute type 13 has an invalid length. [ 322.948916][T11684] netlink: 'syz.1.1366': attribute type 17 has an invalid length. [ 323.073930][T11684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.089795][T11684] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.121132][T11684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.241352][T11688] lo speed is unknown, defaulting to 1000 [ 323.494614][T11706] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 323.512304][T11706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1370'. [ 323.772775][T11719] ûý: entered promiscuous mode [ 323.889719][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 324.310547][T11743] syzkaller1: entered promiscuous mode [ 324.326280][T11743] syzkaller1: entered allmulticast mode [ 324.354238][T11744] nbd: must specify at least one socket [ 324.360743][T11743] nbd: must specify at least one socket [ 324.370210][T11743] block nbd3: NBD_DISCONNECT [ 324.375781][T11743] block nbd3: Send disconnect failed -32 [ 324.460125][T11750] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1385'. [ 324.811986][T11765] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 324.887256][T11770] netlink: 'syz.3.1390': attribute type 10 has an invalid length. [ 324.925601][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1390'. [ 324.961068][T11770] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 325.407058][T11790] lo speed is unknown, defaulting to 1000 [ 325.412531][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 325.420453][T11787] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 325.438350][T11803] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1400'. [ 325.448950][T11787] syzkaller1: linktype set to 6 [ 325.509245][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1400'. [ 326.027135][T11824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1403'. [ 326.659563][T11837] lo speed is unknown, defaulting to 1000 [ 326.767422][T11850] tipc: Enabling of bearer rejected, failed to enable media [ 326.987688][T11865] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 326.996369][T11865] __nla_validate_parse: 2 callbacks suppressed [ 326.996389][T11865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1416'. [ 327.023876][T11858] bond4: option mode: invalid value (254) [ 327.037682][T11858] bond4 (unregistering): Released all slaves [ 327.038242][T11866] netlink: 'syz.3.1415': attribute type 10 has an invalid length. [ 327.111535][T11865] netlink: 'syz.0.1416': attribute type 32 has an invalid length. [ 327.170546][T11861] lo speed is unknown, defaulting to 1000 [ 327.194777][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 327.202894][ C0] lec:lec_tx_timeout: lec0 [ 327.209265][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.307026][T11865] lo speed is unknown, defaulting to 1000 [ 327.777213][T11890] IPv6: addrconf: prefix option has invalid lifetime [ 327.983454][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 328.332484][T11906] netlink: 'syz.0.1430': attribute type 6 has an invalid length. [ 328.425858][T11919] netlink: 4300 bytes leftover after parsing attributes in process `syz.4.1434'. [ 329.067909][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.077956][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.234219][T11952] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 329.296814][T11956] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1443'. [ 329.326215][T11950] lo speed is unknown, defaulting to 1000 [ 329.344418][T11955] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1444'. [ 329.355566][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.663501][T11952] lo speed is unknown, defaulting to 1000 [ 329.860990][T11970] delete_channel: no stack [ 330.496201][T11995] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1454'. [ 330.633560][T12003] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 330.700546][T12003] bond7: entered promiscuous mode [ 330.712636][T12003] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.840157][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 330.850278][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 330.863311][T12016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1462'. [ 330.879630][T12010] bond7: (slave bridge3): making interface the new active one [ 330.888350][T12010] bridge3: entered promiscuous mode [ 330.897418][T12010] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 331.188895][T12032] lo speed is unknown, defaulting to 1000 [ 331.364270][T12045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1469'. [ 331.515633][T12057] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 331.909564][T12059] syzkaller1: entered promiscuous mode [ 331.916560][T12059] syzkaller1: entered allmulticast mode [ 332.139408][T12086] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003 [ 332.234858][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 332.242981][ C0] lec:lec_tx_timeout: lec0 [ 332.248564][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.261236][T12097] netlink: 'syz.2.1479': attribute type 6 has an invalid length. [ 332.298692][T12098] tipc: Enabling of bearer rejected, failed to enable media [ 333.703922][T12155] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.726571][T12155] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.822612][T12155] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.833555][T12155] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.935924][T12159] netlink: 'syz.4.1500': attribute type 1 has an invalid length. [ 333.982561][T12159] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.992886][T12161] __nla_validate_parse: 1 callbacks suppressed [ 333.992907][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 334.032679][T12155] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.055658][T12155] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.130571][T12155] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.152498][T12155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.223882][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.256476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.461649][ T3522] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.489152][ T3522] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.568303][T12155] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.611542][T12155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.036376][T12197] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1510'. [ 335.238019][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'. [ 335.273000][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1513'. [ 335.366833][T12217] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 335.426894][T12217] bond9: (slave bridge4): making interface the new active one [ 335.435885][T12217] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 335.472050][T12223] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 335.526458][T12223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 335.561326][T12226] bond4: (slave ip6gretap1): making interface the new active one [ 335.571797][T12226] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 335.637082][T12223] veth5: entered promiscuous mode [ 335.650533][T12223] bond4: (slave veth5): Enslaving as an active interface with a down link [ 335.661776][T12226] erspan0: entered allmulticast mode [ 335.703766][T12231] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 335.718454][T12226] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 335.789529][T12229] bond10: (slave gretap1): making interface the new active one [ 335.799423][T12229] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 336.073435][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059319400: rx timeout, send abort [ 336.085002][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059319400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.257901][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 336.279206][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 336.414593][T12257] team0: entered promiscuous mode [ 336.443288][T12257] team0: entered allmulticast mode [ 336.591922][T12271] team0: Device ipip0 is of different type [ 336.647260][T12275] tipc: Enabled bearer , priority 0 [ 336.660358][T12271] syzkaller0: entered promiscuous mode [ 336.675504][T12271] syzkaller0: entered allmulticast mode [ 336.724638][T12271] tipc: Resetting bearer [ 336.747684][T12270] tipc: Resetting bearer [ 336.777917][T12270] tipc: Disabling bearer [ 336.970835][T12283] geneve3: entered promiscuous mode [ 336.977586][T12283] geneve3: entered allmulticast mode [ 336.987988][ T7029] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 37677 - 0 [ 336.997169][ T7029] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 45215 - 0 [ 337.039317][ T7029] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 37677 - 0 [ 337.145380][ T7029] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 45215 - 0 [ 337.175428][ T7029] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 37677 - 0 [ 337.183846][ T7029] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 45215 - 0 [ 337.221553][ T7029] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 37677 - 0 [ 337.244006][ T7029] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 45215 - 0 [ 337.255360][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 337.263498][ C0] lec:lec_tx_timeout: lec0 [ 337.269039][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.875734][T12313] lo speed is unknown, defaulting to 1000 [ 337.982561][T12321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1541'. [ 338.026847][T12316] syzkaller0: entered promiscuous mode [ 338.032510][T12316] syzkaller0: entered allmulticast mode [ 340.900415][T12378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1554'. [ 340.946117][T12378] hsr_slave_0: left promiscuous mode [ 340.957956][T12378] hsr_slave_1: left promiscuous mode [ 341.034227][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1557'. [ 341.039282][T12381] vti0: entered promiscuous mode [ 341.088436][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 341.290058][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 341.301291][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'. [ 341.311469][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 341.578911][T12399] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1559'. [ 341.903744][T12410] tipc: Enabled bearer , priority 0 [ 341.940640][T12410] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 341.957108][T12410] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 341.971589][T12410] tipc: Resetting bearer [ 342.082488][T12406] lo speed is unknown, defaulting to 1000 [ 342.285362][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 342.293500][ C0] lec:lec_tx_timeout: lec0 [ 342.298825][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.336416][T12425] vti0: left promiscuous mode [ 342.348394][T12425] bond3: left promiscuous mode [ 342.363130][T12425] bond3: left allmulticast mode [ 342.397284][T12425] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 342.406904][T12425] macsec1: left promiscuous mode [ 342.417662][T12425] macsec1: left allmulticast mode [ 342.424476][T12433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1572'. [ 342.479739][T12425] vlan2: left promiscuous mode [ 342.485762][T12425] geneve1: left promiscuous mode [ 342.504591][T12425] vlan2: left allmulticast mode [ 342.524328][T12425] geneve1: left allmulticast mode [ 342.558370][T12425] bond7: left promiscuous mode [ 342.575622][T12425] bridge3: left promiscuous mode [ 342.750927][ T7035] tipc: Resetting bearer [ 342.821205][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'. [ 343.153829][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 343.648838][T12481] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 344.241018][T12512] netlink: 'syz.2.1592': attribute type 10 has an invalid length. [ 344.393235][T12519] tipc: Enabled bearer , priority 0 [ 344.457194][T12519] tipc: Disabling bearer [ 344.506597][T12526] sctp: [Deprecated]: syz.1.1596 (pid 12526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.506597][T12526] Use struct sctp_sack_info instead [ 344.523193][T12521] lo speed is unknown, defaulting to 1000 [ 344.571921][T12527] tipc: Can't bind to reserved service type 1 [ 344.579643][T12527] netlink: 'syz.0.1597': attribute type 39 has an invalid length. [ 344.649367][T12532] netlink: 'syz.0.1597': attribute type 5 has an invalid length. [ 344.897616][T12542] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 344.990188][T12549] netlink: 'syz.3.1603': attribute type 4 has an invalid length. [ 345.082527][T12549] .`: renamed from bond0 (while UP) [ 345.108837][T12549] bond_slave_0: left promiscuous mode [ 345.115918][T12549] bond_slave_1: left promiscuous mode [ 345.123287][T12552] lo speed is unknown, defaulting to 1000 [ 345.140094][T12552] lo speed is unknown, defaulting to 1000 [ 345.169657][T12556] erspan0: left allmulticast mode [ 345.211634][T12556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.267133][T12552] lo speed is unknown, defaulting to 1000 [ 345.717620][T12552] infiniband syz0: set active [ 345.728212][ T6599] lo speed is unknown, defaulting to 1000 [ 345.736497][T12552] infiniband syz0: added lo [ 345.953809][T12571] lo speed is unknown, defaulting to 1000 [ 345.974322][T12579] __nla_validate_parse: 9 callbacks suppressed [ 345.974345][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 346.003348][T12569] lo speed is unknown, defaulting to 1000 [ 346.006223][T12552] RDS/IB: syz0: added [ 346.011386][T12571] lo speed is unknown, defaulting to 1000 [ 346.311326][T12589] Can't find ip_set type bitmap:ip [ 346.311593][T12590] Can't find ip_set type bitmap:ip [ 346.478721][T12569] lo speed is unknown, defaulting to 1000 [ 346.628401][T12613] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1616'. [ 346.661090][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 346.746583][T12607] lo speed is unknown, defaulting to 1000 [ 347.053931][T12552] lo speed is unknown, defaulting to 1000 [ 347.209672][T12624] netlink: 'syz.3.1620': attribute type 1 has an invalid length. [ 347.257239][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.268887][T12629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1620'. [ 347.315383][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 347.323520][ C0] lec:lec_tx_timeout: lec0 [ 347.328828][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.478926][T12607] lo speed is unknown, defaulting to 1000 [ 347.678480][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 347.901873][T12552] lo speed is unknown, defaulting to 1000 [ 348.214404][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1625'. [ 348.617830][T12552] lo speed is unknown, defaulting to 1000 [ 348.966998][T12674] veth1_virt_wifi: entered promiscuous mode [ 348.973200][T12674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1632'. [ 348.995423][T12674] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 349.101225][T12552] lo speed is unknown, defaulting to 1000 [ 349.269793][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 349.330455][T12687] netlink: 'syz.0.1635': attribute type 4 has an invalid length. [ 349.357008][T12687] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1635'. [ 349.609701][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1638'. [ 349.701264][T12552] lo speed is unknown, defaulting to 1000 [ 350.139369][T12702] syzkaller1: entered promiscuous mode [ 350.145591][T12702] syzkaller1: entered allmulticast mode [ 350.914111][T12717] lo speed is unknown, defaulting to 1000 [ 350.976379][T12717] lo speed is unknown, defaulting to 1000 [ 351.015957][T12722] __nla_validate_parse: 5 callbacks suppressed [ 351.015978][T12722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'. [ 351.118017][T12722] syzkaller1: entered allmulticast mode [ 351.936164][T12736] netlink: 'syz.2.1649': attribute type 16 has an invalid length. [ 351.944141][T12736] netlink: 'syz.2.1649': attribute type 17 has an invalid length. [ 352.345534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 352.353661][ C0] lec:lec_tx_timeout: lec0 [ 352.359010][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.830241][T12736] tipc: Resetting bearer [ 352.872948][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 353.212466][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1655'. [ 353.270299][T12764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1655'. [ 353.544453][ T7032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.556774][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 353.588414][ T7032] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.616446][ T7032] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.751241][ T7032] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.779690][T12774] bridge1: entered allmulticast mode [ 354.281273][T12794] lo speed is unknown, defaulting to 1000 [ 354.380897][T12794] lo speed is unknown, defaulting to 1000 [ 355.129350][T12822] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 355.246705][T12831] lo speed is unknown, defaulting to 1000 [ 355.273086][T12831] lo speed is unknown, defaulting to 1000 [ 355.540179][T12846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1675'. [ 355.806132][T12852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1677'. [ 355.866449][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1678'. [ 355.963671][T12862] sctp: [Deprecated]: syz.0.1680 (pid 12862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.963671][T12862] Use struct sctp_sack_info instead [ 356.572548][T12886] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 356.674630][T12886] bond6: entered promiscuous mode [ 356.680894][T12886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.844626][T12899] tipc: Enabled bearer , priority 0 [ 356.889290][T12902] vlan4: entered allmulticast mode [ 356.894486][T12902] bond0: entered allmulticast mode [ 357.005949][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 357.033535][T12909] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1695'. [ 357.054301][T12899] syzkaller0: entered promiscuous mode [ 357.092750][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 357.132788][T12899] syzkaller0: entered allmulticast mode [ 357.167941][T12899] tipc: Resetting bearer [ 357.301158][T12920] dummy0: entered promiscuous mode [ 357.307714][T12920] vlan2: entered promiscuous mode [ 357.375480][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 357.383613][ C0] lec:lec_tx_timeout: lec0 [ 357.389064][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 357.507511][T12904] lo speed is unknown, defaulting to 1000 [ 357.541308][T12904] lo speed is unknown, defaulting to 1000 [ 357.626381][T12898] tipc: Resetting bearer [ 357.868136][T12936] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1698'. [ 357.914069][T12936] openvswitch: netlink: Message has 4416 unknown bytes. [ 357.936023][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.398876][T12898] tipc: Disabling bearer [ 359.425992][T12941] netlink: 'syz.4.1701': attribute type 322 has an invalid length. [ 359.436086][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 359.610768][T12947] sctp: [Deprecated]: syz.2.1702 (pid 12947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.610768][T12947] Use struct sctp_sack_info instead [ 359.611900][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 359.712139][T12955] siw: device registration error -23 [ 360.161098][T12970] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 360.357588][T12978] lo speed is unknown, defaulting to 1000 [ 360.367456][T12978] lo speed is unknown, defaulting to 1000 [ 360.576078][T12977] lo speed is unknown, defaulting to 1000 [ 360.889155][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 361.377529][T12999] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1714'. [ 361.390022][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1714'. [ 361.562097][T12977] lo speed is unknown, defaulting to 1000 [ 361.711688][T13008] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1714'. [ 361.797100][T13011] netlink: 'syz.3.1715': attribute type 1 has an invalid length. [ 362.023911][T13011] bond4: entered promiscuous mode [ 362.076385][T13011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.183479][T13013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.198958][T13013] bond4: (slave bond5): making interface the new active one [ 362.207716][T13013] bond5: entered promiscuous mode [ 362.215781][T13013] bond4: (slave bond5): Enslaving as an active interface with an up link [ 362.253810][T13014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.264987][T13014] bond4: (slave bond6): Enslaving as a backup interface with an up link [ 362.352229][T13029] netlink: 'syz.4.1719': attribute type 21 has an invalid length. [ 362.405440][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 362.413571][ C0] lec:lec_tx_timeout: lec0 [ 362.419511][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 362.537077][T13037] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 362.610948][T13041] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1721'. [ 362.676975][T13037] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 363.544373][T13073] lo speed is unknown, defaulting to 1000 [ 363.560717][T13073] lo speed is unknown, defaulting to 1000 [ 363.666956][T13074] bond5: up delay (7) is not a multiple of miimon (9), value rounded to 0 ms [ 363.693424][T13078] team0: No ports can be present during mode change [ 363.716190][T13073] lo speed is unknown, defaulting to 1000 [ 363.804428][T13073] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 363.824673][T13078] bond3: left allmulticast mode [ 363.839750][T13078] bond5: left promiscuous mode [ 363.848911][T13078] bridge1: left allmulticast mode [ 363.904160][T13073] lo speed is unknown, defaulting to 1000 [ 363.961708][T13073] lo speed is unknown, defaulting to 1000 [ 364.066993][T13073] lo speed is unknown, defaulting to 1000 [ 364.083727][T13084] lo speed is unknown, defaulting to 1000 [ 364.102185][T13073] lo speed is unknown, defaulting to 1000 [ 364.111443][T13073] lo speed is unknown, defaulting to 1000 [ 364.121395][T13073] lo speed is unknown, defaulting to 1000 [ 364.138427][T13084] lo speed is unknown, defaulting to 1000 [ 364.168177][T13098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'. [ 364.205556][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1737'. [ 364.259892][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.285146][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.316554][T13104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.332263][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.354054][T13104] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1738'. [ 364.451488][T13114] netlink: 'syz.2.1742': attribute type 58 has an invalid length. [ 364.495868][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1742'. [ 364.559970][T13113] sit1: entered promiscuous mode [ 364.747687][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 365.038262][T13129] lo speed is unknown, defaulting to 1000 [ 365.137096][T13129] lo speed is unknown, defaulting to 1000 [ 365.151235][T13141] lo speed is unknown, defaulting to 1000 [ 365.313713][T13145] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 365.950120][T13129] lo speed is unknown, defaulting to 1000 [ 365.967737][T13141] lo speed is unknown, defaulting to 1000 [ 366.164405][T13163] veth6: entered allmulticast mode [ 366.311021][T13141] lo speed is unknown, defaulting to 1000 [ 366.570280][T13168] tipc: Enabled bearer , priority 0 [ 366.578545][T13166] syzkaller0: entered promiscuous mode [ 366.584439][T13166] syzkaller0: entered allmulticast mode [ 366.763028][T13165] tipc: Resetting bearer [ 366.789927][T13165] tipc: Disabling bearer [ 367.398654][T13191] netlink: 'syz.3.1759': attribute type 4 has an invalid length. [ 367.561268][T13198] openvswitch: netlink: ufid size 19 bytes exceeds the range (1, 16) [ 367.571681][T13198] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 367.679084][T13204] __nla_validate_parse: 3 callbacks suppressed [ 367.679106][T13204] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1755'. [ 368.035419][T13220] xt_l2tp: v2 tid > 0xffff: 37482740 [ 368.062314][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1769'. [ 368.394765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms [ 368.402872][ C0] lec:lec_tx_timeout: lec0 [ 368.405026][T13234] lo speed is unknown, defaulting to 1000 [ 368.408874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 368.463143][T13234] lo speed is unknown, defaulting to 1000 [ 368.489260][T13245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1776'. [ 368.590886][T13249] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 368.727322][T13254] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 368.745417][T13254] bond11 (unregistering): Released all slaves [ 368.925069][T13234] lo speed is unknown, defaulting to 1000 [ 369.001479][T13264] netlink: 'syz.0.1782': attribute type 13 has an invalid length. [ 369.015934][T13264] netlink: 'syz.0.1782': attribute type 17 has an invalid length. [ 369.051270][T13264] tunl0: left promiscuous mode [ 369.058664][T13264] tunl0: left allmulticast mode [ 369.163658][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1787'. [ 369.251187][T13284] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1783'. [ 369.301910][T13264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.344495][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 369.410719][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 369.544576][T13280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.588032][T13294] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 369.609391][ T5910] lo speed is unknown, defaulting to 1000 [ 369.639193][T13281] lo speed is unknown, defaulting to 1000 [ 369.650933][ T7028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.678536][ T7028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.758326][T13281] lo speed is unknown, defaulting to 1000 [ 369.804419][T13300] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1788'. [ 369.899220][T13306] pim6reg1: entered promiscuous mode [ 369.913293][T13306] pim6reg1: entered allmulticast mode [ 370.331830][T13318] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1793'. [ 370.333638][T13320] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1794'. [ 370.590579][T13332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.604608][T13332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 370.641568][T13332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 45215 - 0 [ 370.663500][T13281] lo speed is unknown, defaulting to 1000 [ 370.747024][T13332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.758866][T13332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 370.771528][T13332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 45215 - 0 [ 370.850389][T13332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.866193][T13332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 370.878139][T13332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 45215 - 0 [ 370.988818][T13332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.025805][T13332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 371.044364][T13332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 45215 - 0 [ 371.103384][T13346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 371.199727][T13350] tipc: Enabled bearer , priority 0 [ 371.208321][T13350] netlink: 'syz.4.1800': attribute type 11 has an invalid length. [ 371.235600][ T7036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45215 - 0 [ 371.246458][ T7036] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 37677 - 0 [ 371.256130][ T7036] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 371.285159][ T7028] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45215 - 0 [ 371.310284][ T7028] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 37677 - 0 [ 371.320232][ T7028] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 371.339376][ T7032] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45215 - 0 [ 371.352317][ T7032] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 37677 - 0 [ 371.368618][ T7032] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 371.377917][T13353] syzkaller0: entered promiscuous mode [ 371.383587][T13353] syzkaller0: entered allmulticast mode [ 371.407044][ T7036] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45215 - 0 [ 371.420554][ T7036] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 37677 - 0 [ 371.470967][ T7036] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 371.531380][T13363] tipc: Resetting bearer [ 371.624158][T13349] tipc: Resetting bearer [ 371.687602][T13349] tipc: Disabling bearer [ 372.188181][T13406] syzkaller1: entered promiscuous mode [ 372.190635][T13409] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 372.193717][T13406] syzkaller1: entered allmulticast mode [ 373.112516][T13440] lo speed is unknown, defaulting to 1000 [ 373.120821][T13440] lo speed is unknown, defaulting to 1000 [ 373.526228][T13440] lo speed is unknown, defaulting to 1000 [ 373.640255][T13461] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 373.901531][T13475] __nla_validate_parse: 11 callbacks suppressed [ 373.901553][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 374.117954][T13470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.126769][T13470] bridge0: port 1(bond7) entered blocking state [ 374.133955][T13470] bridge0: port 1(bond7) entered disabled state [ 374.141570][T13470] bond7: entered allmulticast mode [ 374.150947][T13470] bond7: entered promiscuous mode [ 374.161546][T13482] netlink: 'syz.1.1835': attribute type 3 has an invalid length. [ 374.234836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 374.242957][ C0] lec:lec_tx_timeout: lec0 [ 374.257647][T13471] lo speed is unknown, defaulting to 1000 [ 374.280436][T13471] lo speed is unknown, defaulting to 1000 [ 374.489031][T13491] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1839'. [ 374.657554][T13471] lo speed is unknown, defaulting to 1000 [ 374.670562][T13498] netlink: 'syz.3.1840': attribute type 3 has an invalid length. [ 374.699489][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 375.014255][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 375.117617][T13517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 375.334019][T13526] netlink: 'syz.2.1845': attribute type 16 has an invalid length. [ 375.362404][T13526] netlink: 'syz.2.1845': attribute type 17 has an invalid length. [ 375.401584][T13516] lo speed is unknown, defaulting to 1000 [ 375.449516][T13526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.460620][T13526] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.487752][T13526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.560219][ T5858] lo speed is unknown, defaulting to 1000 [ 375.568293][ T5858] syz2: Port: 1 Link ACTIVE [ 375.581609][T13516] lo speed is unknown, defaulting to 1000 [ 375.945842][T13547] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 375.949654][T13545] netlink: 'syz.3.1852': attribute type 2 has an invalid length. [ 375.958821][T13547] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1851'. [ 375.985937][T13545] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1852'. [ 376.144297][T13554] lo speed is unknown, defaulting to 1000 [ 376.218253][T13559] netlink: 'syz.1.1854': attribute type 23 has an invalid length. [ 376.450651][T13565] lo speed is unknown, defaulting to 1000 [ 376.531889][T13554] lo speed is unknown, defaulting to 1000 [ 376.533139][T13516] lo speed is unknown, defaulting to 1000 [ 377.107566][T13583] lo speed is unknown, defaulting to 1000 [ 377.107641][T13554] lo speed is unknown, defaulting to 1000 [ 377.122086][T13565] lo speed is unknown, defaulting to 1000 [ 377.155710][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1861'. [ 377.633814][T13583] lo speed is unknown, defaulting to 1000 [ 378.127938][T13583] lo speed is unknown, defaulting to 1000 [ 378.177858][T13565] lo speed is unknown, defaulting to 1000 [ 379.063703][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 379.092719][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 379.129682][T13640] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 379.146601][T13639] gretap0: entered promiscuous mode [ 379.162305][T13640] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1868'. [ 379.179756][T13639] gretap0: left promiscuous mode [ 379.229269][T13643] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 379.331415][T13650] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 379.346879][T13650] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 379.405688][T13654] vxcan1: entered allmulticast mode [ 379.428201][T13643] bond6: (slave gretap2): making interface the new active one [ 379.443167][T13643] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 379.456259][T13654] vxcan1: left allmulticast mode [ 379.662379][T13661] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 379.817879][T13662] bond11: (slave bridge5): making interface the new active one [ 379.827274][T13662] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 379.926014][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 379.959841][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1880'. [ 379.975707][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 380.267069][T13700] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 380.516169][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 380.578812][T13707] bond7: entered promiscuous mode [ 380.583945][T13707] bond7: entered allmulticast mode [ 380.595929][T13707] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.748624][T13726] netlink: 'syz.2.1890': attribute type 15 has an invalid length. [ 380.784855][T13729] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 380.837078][T13729] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1893'. [ 380.858734][T13730] tipc: Enabled bearer , priority 0 [ 380.893296][T13730] syzkaller0: entered promiscuous mode [ 380.904320][T13730] syzkaller0: entered allmulticast mode [ 380.974493][T13743] netlink: 'syz.2.1896': attribute type 21 has an invalid length. [ 380.985370][T13742] netlink: 'syz.2.1896': attribute type 21 has an invalid length. [ 381.021339][T13730] tipc: Resetting bearer [ 381.039129][T13742] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1896'. [ 381.053616][T13743] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1896'. [ 381.226641][T13759] tipc: Enabled bearer , priority 0 [ 381.235633][T13755] syzkaller0: entered promiscuous mode [ 381.241841][T13755] syzkaller0: entered allmulticast mode [ 381.258789][T13728] tipc: Resetting bearer [ 381.296019][T13728] tipc: Disabling bearer [ 381.341833][T13768] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 381.364687][T13754] tipc: Resetting bearer [ 381.411270][T13754] tipc: Disabling bearer [ 382.401707][T13833] lo speed is unknown, defaulting to 1000 [ 382.452059][T13833] lo speed is unknown, defaulting to 1000 [ 382.564279][T13842] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 382.648341][T13845] nbd: must specify a size in bytes for the device [ 383.400175][T13854] lo speed is unknown, defaulting to 1000 [ 383.655746][T13854] lo speed is unknown, defaulting to 1000 [ 383.655771][T13833] lo speed is unknown, defaulting to 1000 [ 383.833707][T13880] netlink: 'syz.1.1928': attribute type 3 has an invalid length. [ 383.847316][T13880] netlink: 'syz.1.1928': attribute type 3 has an invalid length. [ 384.269283][T13893] __nla_validate_parse: 5 callbacks suppressed [ 384.269304][T13893] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1925'. [ 384.325603][T13877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1925'. [ 384.445751][T13854] lo speed is unknown, defaulting to 1000 [ 384.791340][T13902] tipc: Enabled bearer , priority 0 [ 384.860345][T13902] syzkaller0: entered promiscuous mode [ 384.867568][T13902] syzkaller0: entered allmulticast mode [ 384.895966][T13902] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.931668][T13902] tipc: Resetting bearer [ 384.941456][T13901] tipc: Resetting bearer [ 384.996725][T13901] tipc: Disabling bearer [ 385.063134][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 385.233462][T13919] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1938'. [ 385.281398][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 385.617688][T13930] netlink: 'syz.0.1941': attribute type 3 has an invalid length. [ 385.649739][T13932] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1942'. [ 386.031857][T13947] lo speed is unknown, defaulting to 1000 [ 386.058021][T13947] lo speed is unknown, defaulting to 1000 [ 386.167439][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'. [ 386.358730][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 386.662908][T13982] !: renamed from dummy0 (while UP) [ 386.683177][T13947] lo speed is unknown, defaulting to 1000 [ 386.714258][T13982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1956'. [ 386.883955][T13987] lo speed is unknown, defaulting to 1000 [ 386.886156][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 387.019860][T13987] lo speed is unknown, defaulting to 1000 [ 387.019904][T13988] lo speed is unknown, defaulting to 1000 [ 387.410437][T13988] lo speed is unknown, defaulting to 1000 [ 387.659033][T14011] netlink: 'syz.3.1960': attribute type 13 has an invalid length. [ 388.044619][T13988] lo speed is unknown, defaulting to 1000 [ 388.120632][T13987] lo speed is unknown, defaulting to 1000 [ 388.127462][T14011] lo speed is unknown, defaulting to 1000 [ 388.184546][T14011] lo speed is unknown, defaulting to 1000 [ 388.455054][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 388.717888][T14011] lo speed is unknown, defaulting to 1000 [ 388.758275][T14032] lo speed is unknown, defaulting to 1000 [ 388.773965][T14034] netlink: 'syz.2.1964': attribute type 12 has an invalid length. [ 388.783924][T14034] netlink: 'syz.2.1964': attribute type 11 has an invalid length. [ 388.921649][T14032] lo speed is unknown, defaulting to 1000 [ 389.295064][T14043] netlink: 'syz.3.1967': attribute type 15 has an invalid length. [ 389.479093][T14048] __nla_validate_parse: 3 callbacks suppressed [ 389.479114][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1968'. [ 389.617640][T14032] lo speed is unknown, defaulting to 1000 [ 389.896147][T14054] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 390.101765][T14054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.218302][T14056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.226572][T14056] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 390.234917][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 390.244982][ C0] lec:lec_tx_timeout: lec0 [ 390.251805][T14056] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 390.330120][T14057] veth9: entered promiscuous mode [ 390.342421][T14057] bond8: (slave veth9): Enslaving as an active interface with a down link [ 390.544160][T14062] lo speed is unknown, defaulting to 1000 [ 390.647992][T14062] lo speed is unknown, defaulting to 1000 [ 390.917120][T14087] pimreg: left allmulticast mode [ 391.047922][T14087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.241800][T14062] lo speed is unknown, defaulting to 1000 [ 391.258163][T14088] siw: device registration error -23 [ 391.287664][T14099] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1981'. [ 391.491553][T14106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.786029][T14117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1986'. [ 391.829192][T14120] netlink: 'syz.1.1985': attribute type 74 has an invalid length. [ 391.903204][T14124] netlink: 'syz.1.1985': attribute type 4 has an invalid length. [ 391.978044][T14126] netlink: 'syz.1.1985': attribute type 4 has an invalid length. [ 393.441685][ T6592] lo speed is unknown, defaulting to 1000 [ 393.472090][ T5925] lo speed is unknown, defaulting to 1000 [ 393.625565][T14147] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1991'. [ 393.803085][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 393.822270][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 393.893586][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 393.973811][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 393.990388][T14164] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 393.998136][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.018015][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.487344][T14148] __nla_validate_parse: 63 callbacks suppressed [ 394.487368][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.508305][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.518029][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.527948][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.543393][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.553948][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.569763][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.579332][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.596522][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 394.606223][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1992'. [ 395.099426][T14190] lo speed is unknown, defaulting to 1000 [ 395.164108][T14190] lo speed is unknown, defaulting to 1000 [ 395.174456][ T51] Bluetooth: hci4: link tx timeout [ 395.180596][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 395.308014][T14215] netlink: 'syz.3.2009': attribute type 29 has an invalid length. [ 395.479034][T14209] bond0: entered promiscuous mode [ 395.489439][T14209] batadv0: entered promiscuous mode [ 395.496348][T14209] bond0: entered allmulticast mode [ 395.512525][T14209] batadv0: entered allmulticast mode [ 395.788317][T14233] netlink: 'syz.1.2015': attribute type 1 has an invalid length. [ 395.809993][T14236] netlink: 'syz.4.2016': attribute type 3 has an invalid length. [ 396.201071][T14241] dvmrp0: left allmulticast mode [ 396.227318][T14239] syzkaller1: entered promiscuous mode [ 396.235235][T14239] syzkaller1: entered allmulticast mode [ 396.242407][T14247] syz_tun: entered allmulticast mode [ 396.249797][T14190] lo speed is unknown, defaulting to 1000 [ 396.327547][T14236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.343917][T14186] lo speed is unknown, defaulting to 1000 [ 396.352077][T14186] syz1: Port: 1 Link ACTIVE [ 396.392158][T14234] syz_tun: left allmulticast mode [ 396.425438][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 396.607654][T14259] Bluetooth: MGMT ver 1.23 [ 396.872703][T14267] netlink: 'syz.1.2022': attribute type 8 has an invalid length. [ 397.173946][T14277] lo speed is unknown, defaulting to 1000 [ 397.196335][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 397.203807][T14277] lo speed is unknown, defaulting to 1000 [ 397.494602][T14277] lo speed is unknown, defaulting to 1000 [ 397.500650][ T9] lo speed is unknown, defaulting to 1000 [ 397.500698][ T9] syz0: Port: 1 Link DOWN [ 398.076455][T14315] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 398.689919][T14337] lo speed is unknown, defaulting to 1000 [ 398.703430][T14330] syzkaller1: entered allmulticast mode [ 398.761674][T14337] lo speed is unknown, defaulting to 1000 [ 399.074366][T14345] tipc: Enabled bearer , priority 0 [ 399.146421][T14345] veth0_to_team: entered promiscuous mode [ 399.152412][T14345] veth0_to_team: entered allmulticast mode [ 399.166035][T14337] lo speed is unknown, defaulting to 1000 [ 399.183022][T14345] tipc: Resetting bearer [ 399.396135][T14344] tipc: Disabling bearer [ 399.776714][T14375] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 400.272654][T14393] team0: Port device bridge0 removed [ 400.288663][T14393] bridge_slave_0: left promiscuous mode [ 400.290368][T14400] __nla_validate_parse: 293 callbacks suppressed [ 400.290392][T14400] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2056'. [ 400.294546][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.344334][T14393] bridge_slave_1: left allmulticast mode [ 400.353673][T14393] bridge_slave_1: left promiscuous mode [ 400.360047][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.380152][T14393] team0: Port device team_slave_0 removed [ 400.394064][T14393] team0: Port device team_slave_1 removed [ 400.401365][T14393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.417003][T14393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.435546][T14393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.511623][T14397] team0: Mode changed to "activebackup" [ 400.655855][T14403] lo speed is unknown, defaulting to 1000 [ 400.663823][T14403] lo speed is unknown, defaulting to 1000 [ 400.697604][T14415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2060'. [ 400.718099][T14415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2060'. [ 400.896921][T14403] lo speed is unknown, defaulting to 1000 [ 401.181700][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 401.201166][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 401.270932][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2062'. [ 401.359704][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2062'. [ 401.378247][T14439] nbd: couldn't find device at index 0 [ 401.399231][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2062'. [ 401.446452][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2062'. [ 401.457285][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2062'. [ 401.720923][T14424] syzkaller1: entered promiscuous mode [ 401.735967][T14424] syzkaller1: entered allmulticast mode [ 401.746107][ T6587] lo speed is unknown, defaulting to 1000 [ 401.752898][ T6587] syz1: Port: 1 Link DOWN [ 402.235463][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 402.243540][ C0] lec:lec_tx_timeout: lec0 [ 402.447757][T14474] tipc: Enabled bearer , priority 0 [ 402.456524][T14474] syzkaller0: entered promiscuous mode [ 402.462550][T14474] syzkaller0: entered allmulticast mode [ 402.505830][T14474] €Â: renamed from vlan0 [ 402.627996][T14474] tipc: Resetting bearer [ 402.650348][T14470] tipc: Resetting bearer [ 402.696181][T14470] tipc: Disabling bearer [ 403.031563][T14492] syzkaller1: entered promiscuous mode [ 403.072048][T14492] syzkaller1: entered allmulticast mode [ 403.757623][T14545] netlink: 'syz.3.2093': attribute type 5 has an invalid length. [ 403.776176][T14542] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 403.821861][T14542] bond6 (unregistering): Released all slaves [ 404.302038][T14574] sctp: [Deprecated]: syz.4.2098 (pid 14574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.302038][T14574] Use struct sctp_sack_info instead [ 404.321524][T14570] bridge0: entered promiscuous mode [ 404.327813][T14570] bridge0: entered allmulticast mode [ 404.411126][T14577] team0: Device ipip0 is up. Set it down before adding it as a team port [ 404.439273][T14582] sctp: [Deprecated]: syz.4.2098 (pid 14582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.439273][T14582] Use struct sctp_sack_info instead [ 404.645046][T14581] tipc: Enabling of bearer rejected, already enabled [ 404.891123][T14589] lo speed is unknown, defaulting to 1000 [ 404.929795][T14599] lo speed is unknown, defaulting to 1000 [ 404.936388][T14589] lo speed is unknown, defaulting to 1000 [ 404.954961][T14600] lo speed is unknown, defaulting to 1000 [ 405.532332][T14599] lo speed is unknown, defaulting to 1000 [ 405.533343][T14589] lo speed is unknown, defaulting to 1000 [ 405.637754][T14624] __nla_validate_parse: 148 callbacks suppressed [ 405.637776][T14624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 405.733911][T14620] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 405.761086][T14620] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 405.823820][T14631] netlink: 'syz.3.2112': attribute type 62 has an invalid length. [ 405.971620][T14636] netlink: 'syz.0.2114': attribute type 3 has an invalid length. [ 406.008685][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'. [ 406.056417][T14600] lo speed is unknown, defaulting to 1000 [ 406.228142][T14645] bond8: option updelay: invalid value (18446744072065443590) [ 406.240901][T14645] bond8: option updelay: allowed values 0 - 2147483647 [ 406.251481][T14645] bond8 (unregistering): Released all slaves [ 406.279904][T14648] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2118'. [ 406.289960][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2118'. [ 406.300082][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2118'. [ 406.379609][T14600] lo speed is unknown, defaulting to 1000 [ 406.417071][T14599] lo speed is unknown, defaulting to 1000 [ 406.719660][T14654] lo speed is unknown, defaulting to 1000 [ 406.728633][T14654] lo speed is unknown, defaulting to 1000 [ 406.996778][T14662] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 407.004567][T14662] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2122'. [ 407.025571][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 407.284370][T14670] netlink: 'syz.3.2125': attribute type 1 has an invalid length. [ 407.301164][T14654] lo speed is unknown, defaulting to 1000 [ 407.361960][T14659] netlink: 'syz.0.2119': attribute type 6 has an invalid length. [ 407.561147][T14682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.660551][T14670] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.670767][T14667] lo speed is unknown, defaulting to 1000 [ 407.705543][T14667] lo speed is unknown, defaulting to 1000 [ 407.907418][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 408.115363][T14688] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2128'. [ 408.142168][T14686] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 408.193935][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 408.404145][T14705] 0ªX¹¦À: renamed from caif0 [ 408.424251][T14705] 0ªX¹¦À: entered allmulticast mode [ 408.445443][T14705] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 408.524120][T14667] lo speed is unknown, defaulting to 1000 [ 408.542230][T14690] lo speed is unknown, defaulting to 1000 [ 408.617354][T14690] lo speed is unknown, defaulting to 1000 [ 409.606492][T14720] ip6gre0: entered allmulticast mode [ 409.618118][T14720] ip6gre0: left allmulticast mode [ 409.631729][T14720] dvmrp1: entered allmulticast mode [ 409.696714][T14690] lo speed is unknown, defaulting to 1000 [ 409.760434][T14720] lo speed is unknown, defaulting to 1000 [ 409.838719][T14720] lo speed is unknown, defaulting to 1000 [ 410.098181][T14733] "syz.3.2140" (14733) uses obsolete ecb(arc4) skcipher [ 410.358198][T14720] lo speed is unknown, defaulting to 1000 [ 411.529670][T14797] veth0_to_team: left promiscuous mode [ 411.535545][T14797] veth0_to_team: left allmulticast mode [ 411.552214][T14797] vlan4: left allmulticast mode [ 411.557992][T14797] bond0: left allmulticast mode [ 411.596383][T14797] __nla_validate_parse: 3 callbacks suppressed [ 411.596407][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'. [ 411.626364][T14797] hsr_slave_0: left promiscuous mode [ 411.639347][T14797] hsr_slave_1: left promiscuous mode [ 411.718649][T14805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2159'. [ 411.740672][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 411.750664][T14805] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 412.142532][T14824] netlink: 46 bytes leftover after parsing attributes in process `syz.3.2165'. [ 412.372449][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 412.398134][T14829] lo speed is unknown, defaulting to 1000 [ 412.419083][T14829] lo speed is unknown, defaulting to 1000 [ 412.420336][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 412.461323][T14844] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 412.489027][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 412.499078][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 412.519843][T14847] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 412.571045][T14844] netlink: 'syz.3.2168': attribute type 21 has an invalid length. [ 412.620358][T14844] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2168'. [ 412.632296][T14847] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.660266][T14844] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2168'. [ 412.760379][T14843] netlink: 'syz.4.2167': attribute type 1 has an invalid length. [ 413.085439][T14829] lo speed is unknown, defaulting to 1000 [ 413.188406][T14876] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 413.213284][T14876] wlan1: mtu less than device minimum [ 413.220475][T14876] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 414.098414][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 414.120242][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 414.136010][T14926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 414.167943][T14922] pim6reg1: entered promiscuous mode [ 414.173415][T14922] pim6reg1: entered allmulticast mode [ 414.281923][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 414.309200][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 414.341567][T14926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 414.582266][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 414.603370][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 414.649240][T14926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 414.668432][T14954] batadv0: entered promiscuous mode [ 414.721321][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 414.745485][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 414.775633][T14926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 414.857776][T14959] lo speed is unknown, defaulting to 1000 [ 414.892061][T14959] lo speed is unknown, defaulting to 1000 [ 415.033349][ T66] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45215 - 0 [ 415.070634][ T66] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 37677 - 0 [ 415.097967][ T66] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 415.170143][ T7029] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45215 - 0 [ 415.186218][ T7029] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 37677 - 0 [ 415.217505][ T7029] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 415.308901][ T7029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45215 - 0 [ 415.331267][ T7029] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 37677 - 0 [ 415.358092][ T7029] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 415.472535][T14984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.632092][ T7028] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45215 - 0 [ 415.644451][ T7028] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 37677 - 0 [ 415.653874][ T7028] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 415.668841][T14925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 415.714365][T14925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 415.732160][T14925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 415.760570][T14959] lo speed is unknown, defaulting to 1000 [ 415.805962][T14997] tipc: Resetting bearer [ 416.329103][T14925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 416.357232][T14925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 416.383258][T14925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 416.531536][T14925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 416.543862][T14925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 416.556705][T14925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 416.578722][T14999] lo speed is unknown, defaulting to 1000 [ 416.607554][T14999] lo speed is unknown, defaulting to 1000 [ 416.649434][T14925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 416.672846][T14925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 416.701345][T14925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 417.197566][T15022] lo speed is unknown, defaulting to 1000 [ 417.210454][T14999] lo speed is unknown, defaulting to 1000 [ 417.284527][T15020] lo speed is unknown, defaulting to 1000 [ 417.314117][T15022] lo speed is unknown, defaulting to 1000 [ 417.762528][T15044] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 417.771962][T15044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.856705][T15020] lo speed is unknown, defaulting to 1000 [ 418.231014][T15020] lo speed is unknown, defaulting to 1000 [ 418.239662][T15057] lo speed is unknown, defaulting to 1000 [ 418.268046][T15022] lo speed is unknown, defaulting to 1000 [ 418.299730][T15057] lo speed is unknown, defaulting to 1000 [ 418.746141][T15057] lo speed is unknown, defaulting to 1000 [ 419.050778][ T7032] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 45215 - 0 [ 419.127928][ T7032] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 37677 - 0 [ 419.150884][ T7032] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 419.409571][ T66] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 45215 - 0 [ 419.431417][ T66] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 37677 - 0 [ 419.459735][ T66] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 419.539351][T15082] lo speed is unknown, defaulting to 1000 [ 419.540776][ T66] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 45215 - 0 [ 419.563407][ T66] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 37677 - 0 [ 419.572287][ T66] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 419.588692][T15082] lo speed is unknown, defaulting to 1000 [ 419.645951][ T66] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 45215 - 0 [ 419.656567][ T66] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 37677 - 0 [ 419.665305][ T66] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 419.683543][T15090] 8021q: VLANs not supported on wg1 [ 419.702270][T15090] syzkaller1: entered promiscuous mode [ 419.713976][T15090] syzkaller1: entered allmulticast mode [ 420.018891][T15082] lo speed is unknown, defaulting to 1000 [ 420.048660][T15098] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 420.092554][T15100] __nla_validate_parse: 6 callbacks suppressed [ 420.092575][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 420.347958][T15100] lo speed is unknown, defaulting to 1000 [ 420.384517][T15100] lo speed is unknown, defaulting to 1000 [ 420.600778][T15118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2233'. [ 420.671059][T15100] lo speed is unknown, defaulting to 1000 [ 420.789584][T15121] unsupported nla_type 52263 [ 421.719126][T15156] netlink: 'syz.1.2244': attribute type 13 has an invalid length. [ 421.732161][T15156] netlink: 'syz.1.2244': attribute type 17 has an invalid length. [ 421.772538][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 421.821302][T15156] syz_tun: left promiscuous mode [ 421.834247][T15156] bond0: left promiscuous mode [ 421.841385][T15156] batadv0: left promiscuous mode [ 421.848188][T15156] bond0: left allmulticast mode [ 421.853284][T15156] batadv0: left allmulticast mode [ 421.872708][T15156] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.892209][T15156] 0ªX¹¦À: left allmulticast mode [ 421.899123][T15156] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 421.926748][ T9] lo speed is unknown, defaulting to 1000 [ 421.933761][ T9] syz0: Port: 1 Link ACTIVE [ 422.043611][T15165] lo speed is unknown, defaulting to 1000 [ 422.068208][T15160] lo speed is unknown, defaulting to 1000 [ 422.069267][T15165] lo speed is unknown, defaulting to 1000 [ 422.617065][T15198] bond0: option resend_igmp: invalid value (1793847487) [ 422.650865][T15198] bond0: option resend_igmp: allowed values 0 - 255 [ 422.660827][T15160] lo speed is unknown, defaulting to 1000 [ 422.670154][T15165] lo speed is unknown, defaulting to 1000 [ 423.096376][T15210] ip6tnl4: entered promiscuous mode [ 423.125792][T15210] ip6tnl4: entered allmulticast mode [ 423.370417][T15223] nbd: must specify an index to disconnect [ 423.419807][T15218] netlink: 'syz.2.2256': attribute type 4 has an invalid length. [ 423.616874][T15160] lo speed is unknown, defaulting to 1000 [ 423.644291][ T5819] lo speed is unknown, defaulting to 1000 [ 423.674404][ T5819] syz2: Port: 1 Link DOWN [ 424.115507][T15236] lo speed is unknown, defaulting to 1000 [ 424.147020][T15236] lo speed is unknown, defaulting to 1000 [ 424.181403][T15247] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 424.226215][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 424.276457][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2268'. [ 424.358503][T15247] nbd: must specify an index to disconnect [ 424.379550][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 424.415503][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 424.461590][T15236] lo speed is unknown, defaulting to 1000 [ 424.602981][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2271'. [ 424.679210][T15267] tipc: Enabled bearer , priority 0 [ 424.791102][T15267] syzkaller0: entered promiscuous mode [ 424.799111][T15267] syzkaller0: entered allmulticast mode [ 424.885496][T15267] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 424.954389][T15275] tipc: Resetting bearer [ 425.312858][T15296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.372670][T15294] delete_channel: no stack [ 425.414024][T15299] netlink: 'syz.4.2280': attribute type 66 has an invalid length. [ 425.487463][T15302] rdma_op ffff8880411c51f0 conn xmit_rdma 0000000000000000 [ 425.677452][ T5858] tipc: Node number set to 1094739348 [ 425.738076][T15319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2286'. [ 426.358942][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'. [ 426.728033][T15355] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 426.899919][T15355] bond6: (slave bridge2): making interface the new active one [ 426.909552][T15355] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 426.966213][T15370] nftables ruleset with unbound chain [ 427.146307][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 427.161747][T15367] macvlan2: entered promiscuous mode [ 427.170435][T15367] macvlan2: entered allmulticast mode [ 427.180419][T15367] bond6: entered promiscuous mode [ 427.186272][T15367] bridge2: entered promiscuous mode [ 427.196116][T15367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 427.206403][T15367] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 427.224191][T15367] bond6: left promiscuous mode [ 427.229187][T15367] bridge2: left promiscuous mode [ 427.270933][T15379] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 427.308912][T15379] team1: entered promiscuous mode [ 427.314656][T15379] team1: entered allmulticast mode [ 427.326581][T15381] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 427.345521][ T7028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.375118][ T7028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.461205][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 427.524190][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 427.740314][T15399] netlink: 'syz.1.2305': attribute type 2 has an invalid length. [ 427.794462][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2307'. [ 427.805916][T15410] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2304'. [ 427.846726][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2307'. [ 427.883512][T15401] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2304'. [ 427.919446][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2307'. [ 428.278295][T15439] sctp: [Deprecated]: syz.3.2317 (pid 15439) Use of int in max_burst socket option. [ 428.278295][T15439] Use struct sctp_assoc_value instead [ 428.296223][T15439] sctp: [Deprecated]: syz.3.2317 (pid 15439) Use of int in max_burst socket option. [ 428.296223][T15439] Use struct sctp_assoc_value instead [ 429.304941][ T30] audit: type=1800 audit(1759663012.130:2): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2324" name="cgroup.controllers" dev="tmpfs" ino=2421 res=0 errno=0 [ 429.339365][T15493] lo speed is unknown, defaulting to 1000 [ 429.382808][T15493] lo speed is unknown, defaulting to 1000 [ 429.776108][T15512] netlink: 'syz.2.2335': attribute type 2 has an invalid length. [ 430.311322][T15536] bridge7: entered allmulticast mode [ 430.595877][T15493] lo speed is unknown, defaulting to 1000 [ 430.706497][T15496] ip6tnl3: entered promiscuous mode [ 430.726783][T15496] ip6tnl3: entered allmulticast mode [ 430.750324][T15496] team0: Device ip6tnl3 is of different type [ 431.061324][T15570] __nla_validate_parse: 5 callbacks suppressed [ 431.061342][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 431.111354][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 431.390857][T15594] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2358'. [ 432.006814][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 432.081757][T15626] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 432.097919][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 432.110856][T15626] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2367'. [ 432.127530][T15629] netlink: 'syz.0.2368': attribute type 11 has an invalid length. [ 432.136365][T15630] netlink: 'syz.0.2368': attribute type 11 has an invalid length. [ 432.144397][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 432.166247][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 432.290818][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2370'. [ 432.334235][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 432.346895][T15645] tipc: Invalid UDP bearer configuration [ 432.346952][T15645] tipc: Enabling of bearer rejected, failed to enable media [ 433.071396][T15666] netlink: 'syz.4.2376': attribute type 14 has an invalid length. [ 433.090332][T15666] netlink: 'syz.4.2376': attribute type 11 has an invalid length. [ 433.540077][T15685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.826842][T15709] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 433.913225][T15708] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.944311][T15708] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 433.958731][T15708] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 434.030989][T15704] lo speed is unknown, defaulting to 1000 [ 434.064609][T15704] lo speed is unknown, defaulting to 1000 [ 434.228177][T15723] sctp: [Deprecated]: syz.2.2393 (pid 15723) Use of int in maxseg socket option. [ 434.228177][T15723] Use struct sctp_assoc_value instead [ 434.556680][T15728] lo speed is unknown, defaulting to 1000 [ 434.565137][T15704] lo speed is unknown, defaulting to 1000 [ 434.632335][T15728] lo speed is unknown, defaulting to 1000 [ 435.743481][T15728] lo speed is unknown, defaulting to 1000 [ 436.674603][T15825] __nla_validate_parse: 9 callbacks suppressed [ 436.674623][T15825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2413'. [ 437.561239][T15852] lo speed is unknown, defaulting to 1000 [ 437.622307][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 437.652253][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 437.691152][T15852] lo speed is unknown, defaulting to 1000 [ 438.682928][T15885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2428'. [ 438.705688][T15852] lo speed is unknown, defaulting to 1000 [ 438.922845][T15895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.169033][T15908] 8021q: adding VLAN 0 to HW filter on device bond13 [ 439.322837][T15915] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2432'. [ 439.334641][T15915] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 439.352763][T15915] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2432'. [ 439.374058][T15916] veth7: left allmulticast mode [ 439.375605][T15915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2432'. [ 439.399191][T15916] veth7: left promiscuous mode [ 439.404639][T15916] bridge2: port 1(veth7) entered disabled state [ 439.469721][T15916] vlan3: left allmulticast mode [ 439.476843][T15916] veth1: left allmulticast mode [ 439.482141][T15916] vlan3: left promiscuous mode [ 439.487498][T15916] veth1: left promiscuous mode [ 439.499747][T15916] bridge2: port 2(vlan3) entered disabled state [ 439.534189][T15916] bond7: (slave bridge3): Releasing backup interface [ 439.559124][T15916] bond9: (slave bridge4): Releasing active interface [ 439.572710][T15916] bond10: (slave gretap1): Releasing active interface [ 439.586654][T15916] bond11: (slave bridge5): Releasing active interface [ 440.012918][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 440.154150][T15944] syzkaller0: entered promiscuous mode [ 440.160262][T15944] syzkaller0: entered allmulticast mode [ 440.395991][T15959] dvmrp8: entered allmulticast mode [ 440.464165][T15959] dvmrp8: left allmulticast mode [ 440.871584][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'. [ 440.959987][T15979] bridge0: port 1(erspan0) entered blocking state [ 440.967236][T15979] bridge0: port 1(erspan0) entered disabled state [ 440.976007][T15979] erspan0: entered allmulticast mode [ 440.983389][T15979] erspan0: entered promiscuous mode [ 440.995943][T15989] ip6gre3: entered allmulticast mode [ 442.563287][T15983] erspan0: left allmulticast mode [ 442.568550][T15983] erspan0: left promiscuous mode [ 442.573727][T15983] bridge0: port 1(erspan0) entered disabled state [ 443.162612][T16032] netlink: 'syz.3.2464': attribute type 13 has an invalid length. [ 443.303184][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.314903][T16032] netlink: 'syz.3.2464': attribute type 13 has an invalid length. [ 443.333326][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.346220][T16038] netlink: 'syz.2.2466': attribute type 13 has an invalid length. [ 443.346677][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.375836][T16038] netlink: 'syz.2.2466': attribute type 17 has an invalid length. [ 443.386081][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.432746][T16037] lo speed is unknown, defaulting to 1000 [ 443.600065][T16038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.658817][T16038] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.722590][T16038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.771865][T16053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.828376][ T6600] lo speed is unknown, defaulting to 1000 [ 443.835534][ T6600] syz2: Port: 1 Link ACTIVE [ 443.841840][T16037] lo speed is unknown, defaulting to 1000 [ 443.993705][T16040] lo speed is unknown, defaulting to 1000 [ 444.057658][T16055] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 444.121101][T16040] lo speed is unknown, defaulting to 1000 [ 444.121202][T16037] lo speed is unknown, defaulting to 1000 [ 444.568178][T16070] netlink: 'syz.1.2473': attribute type 1 has an invalid length. [ 444.595445][T16040] lo speed is unknown, defaulting to 1000 [ 445.492101][T16074] lo speed is unknown, defaulting to 1000 [ 445.502631][T16076] lo speed is unknown, defaulting to 1000 [ 445.516278][T16074] lo speed is unknown, defaulting to 1000 [ 445.668336][T16085] netlink: 464 bytes leftover after parsing attributes in process `syz.4.2479'. [ 445.696004][T16085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2479'. [ 446.014274][T16094] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 446.087883][T16097] tipc: Enabling of bearer rejected, failed to enable media [ 446.097446][T16096] tipc: Enabling of bearer rejected, failed to enable media [ 446.139084][T16096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2483'. [ 446.281930][T16074] lo speed is unknown, defaulting to 1000 [ 446.281981][T16076] lo speed is unknown, defaulting to 1000 [ 446.402455][T16114] : entered promiscuous mode [ 446.485756][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 446.508609][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2488'. [ 446.722417][T16076] lo speed is unknown, defaulting to 1000 [ 447.476097][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2496'. [ 447.514157][T16146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2496'. [ 447.732915][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2500'. [ 447.756393][T16151] netlink: 'syz.3.2499': attribute type 41 has an invalid length. [ 447.786956][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 448.028336][T16161] lo speed is unknown, defaulting to 1000 [ 448.077865][T16173] bridge6: entered promiscuous mode [ 448.086156][T16173] bridge6: entered allmulticast mode [ 448.098018][T16173] team0: Port device bridge6 added [ 448.116208][T16161] lo speed is unknown, defaulting to 1000 [ 448.336449][T16180] pim6reg1: entered promiscuous mode [ 448.363535][T16180] pim6reg1: entered allmulticast mode [ 448.423055][T16183] tipc: Enabled bearer , priority 0 [ 448.445898][T16183] syzkaller0: entered promiscuous mode [ 448.461817][T16183] syzkaller0: entered allmulticast mode [ 448.497796][T16183] syzkaller0: mtu less than device minimum [ 448.515502][T16182] tipc: Resetting bearer [ 448.570680][T16182] tipc: Disabling bearer [ 448.703937][T16201] tipc: Enabled bearer , priority 10 [ 448.734385][T16161] lo speed is unknown, defaulting to 1000 [ 448.950151][T16213] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2515'. [ 449.247806][T16221] syz_tun: entered allmulticast mode [ 449.490537][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2524'. [ 449.495827][T16237] lo speed is unknown, defaulting to 1000 [ 449.548337][T16237] lo speed is unknown, defaulting to 1000 [ 449.929214][T16220] syz_tun: left allmulticast mode [ 450.486920][T16237] lo speed is unknown, defaulting to 1000 [ 450.626569][T16274] FAULT_INJECTION: forcing a failure. [ 450.626569][T16274] name failslab, interval 1, probability 0, space 0, times 0 [ 450.690795][T16274] CPU: 1 UID: 0 PID: 16274 Comm: syz.3.2531 Not tainted syzkaller #0 PREEMPT(full) [ 450.690826][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.690845][T16274] Call Trace: [ 450.690854][T16274] [ 450.690864][T16274] dump_stack_lvl+0x189/0x250 [ 450.690896][T16274] ? __pfx____ratelimit+0x10/0x10 [ 450.690932][T16274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.690959][T16274] ? __pfx__printk+0x10/0x10 [ 450.690994][T16274] ? __pfx___might_resched+0x10/0x10 [ 450.691018][T16274] ? fs_reclaim_acquire+0x7d/0x100 [ 450.691055][T16274] should_fail_ex+0x414/0x560 [ 450.691093][T16274] should_failslab+0xa8/0x100 [ 450.691125][T16274] __kmalloc_noprof+0xcb/0x4f0 [ 450.691158][T16274] ? tomoyo_encode+0x28b/0x550 [ 450.691195][T16274] tomoyo_encode+0x28b/0x550 [ 450.691235][T16274] tomoyo_realpath_from_path+0x58d/0x5d0 [ 450.691270][T16274] ? tomoyo_domain+0xd9/0x130 [ 450.691310][T16274] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 450.691338][T16274] tomoyo_path_number_perm+0x1e8/0x5a0 [ 450.691369][T16274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.691417][T16274] ? __lock_acquire+0xab9/0xd20 [ 450.691461][T16274] ? __fget_files+0x2a/0x420 [ 450.691495][T16274] ? __fget_files+0x2a/0x420 [ 450.691523][T16274] ? __fget_files+0x3a0/0x420 [ 450.691551][T16274] ? __fget_files+0x2a/0x420 [ 450.691584][T16274] security_file_ioctl+0xcb/0x2d0 [ 450.691612][T16274] __se_sys_ioctl+0x47/0x170 [ 450.691638][T16274] do_syscall_64+0xfa/0x3b0 [ 450.691658][T16274] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.691691][T16274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.691713][T16274] ? clear_bhb_loop+0x60/0xb0 [ 450.691740][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.691761][T16274] RIP: 0033:0x7fc9c2b8eec9 [ 450.691780][T16274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.691800][T16274] RSP: 002b:00007fc9c3a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.691823][T16274] RAX: ffffffffffffffda RBX: 00007fc9c2de5fa0 RCX: 00007fc9c2b8eec9 [ 450.691840][T16274] RDX: 0000200000000180 RSI: 0000000000008940 RDI: 0000000000000003 [ 450.691855][T16274] RBP: 00007fc9c3a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 450.691868][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.691880][T16274] R13: 00007fc9c2de6038 R14: 00007fc9c2de5fa0 R15: 00007ffd5f2d9d98 [ 450.691917][T16274] [ 450.691939][T16274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 450.833701][T16281] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 451.013164][T16287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2534'. [ 451.450460][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.831066][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2545'. [ 452.234861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 452.242947][ C0] lec:lec_tx_timeout: lec0 [ 452.367020][T16356] tap0: tun_chr_ioctl cmd 1074025677 [ 452.376478][T16356] tap0: linktype set to 825 [ 452.388311][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'. [ 452.639619][T16369] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 453.142539][T16392] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2562'. [ 453.625397][T16414] syz.0.2566 uses old SIOCAX25GETINFO [ 454.036032][T16432] tipc: Enabling of bearer rejected, already enabled [ 454.077138][T16436] netlink: 'syz.2.2572': attribute type 13 has an invalid length. [ 454.116968][T16436] netlink: 'syz.2.2572': attribute type 17 has an invalid length. [ 454.172475][T16436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.256874][T16443] : renamed from bond_slave_0 [ 454.330610][T16442] lo speed is unknown, defaulting to 1000 [ 454.347951][T16442] lo speed is unknown, defaulting to 1000 [ 454.397393][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 454.415601][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 454.435722][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 454.649736][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2576'. [ 454.692061][T16452] tipc: Enabling of bearer rejected, media not registered [ 454.975403][T16458] FAULT_INJECTION: forcing a failure. [ 454.975403][T16458] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 454.997429][T16458] CPU: 1 UID: 0 PID: 16458 Comm: syz.3.2578 Not tainted syzkaller #0 PREEMPT(full) [ 454.997463][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.997478][T16458] Call Trace: [ 454.997487][T16458] [ 454.997497][T16458] dump_stack_lvl+0x189/0x250 [ 454.997532][T16458] ? __pfx____ratelimit+0x10/0x10 [ 454.997570][T16458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.997599][T16458] ? __pfx__printk+0x10/0x10 [ 454.997636][T16458] ? fs_reclaim_acquire+0x7d/0x100 [ 454.997680][T16458] should_fail_ex+0x414/0x560 [ 454.997719][T16458] prepare_alloc_pages+0x213/0x610 [ 454.997763][T16458] __alloc_frozen_pages_noprof+0x123/0x370 [ 454.997798][T16458] ? look_up_lock_class+0x74/0x170 [ 454.997823][T16458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 454.997868][T16458] ? policy_nodemask+0x27c/0x720 [ 454.997904][T16458] alloc_pages_mpol+0x232/0x4a0 [ 454.997942][T16458] folio_alloc_mpol_noprof+0x39/0x70 [ 454.997987][T16458] shmem_alloc_and_add_folio+0x447/0xf60 [ 454.998020][T16458] ? filemap_get_entry+0xad/0x2f0 [ 454.998053][T16458] ? filemap_get_entry+0xad/0x2f0 [ 454.998083][T16458] ? filemap_get_entry+0xad/0x2f0 [ 454.998122][T16458] ? shmem_huge_global_enabled+0x174/0x3a0 [ 454.998147][T16458] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 454.998182][T16458] ? shmem_allowable_huge_orders+0x414/0x420 [ 454.998216][T16458] shmem_get_folio_gfp+0x59d/0x1660 [ 454.998267][T16458] shmem_fault+0x179/0x390 [ 454.998308][T16458] __do_fault+0x135/0x390 [ 454.998343][T16458] __handle_mm_fault+0x1847/0x5440 [ 454.998391][T16458] ? __pfx___handle_mm_fault+0x10/0x10 [ 454.998444][T16458] ? find_vma+0xe7/0x160 [ 454.998470][T16458] ? __pfx_find_vma+0x10/0x10 [ 454.998493][T16458] ? br_ioctl_stub+0x797/0xc80 [ 454.998529][T16458] handle_mm_fault+0x40a/0x8e0 [ 454.998571][T16458] do_user_addr_fault+0x764/0x1380 [ 454.998616][T16458] exc_page_fault+0x76/0xf0 [ 454.998656][T16458] asm_exc_page_fault+0x26/0x30 [ 454.998678][T16458] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 454.998709][T16458] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 0e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 454.998729][T16458] RSP: 0018:ffffc9001c4dfba8 EFLAGS: 00050246 [ 454.998750][T16458] RAX: 0000006b0000004c RBX: 0000000000000008 RCX: 0000000000000008 [ 454.998765][T16458] RDX: 0000000000000000 RSI: ffff8880299a87c0 RDI: 00002000000015c0 [ 454.998781][T16458] RBP: ffffc9001c4dfdb0 R08: ffff8880299a87c7 R09: 1ffff110053350f8 [ 454.998798][T16458] R10: dffffc0000000000 R11: ffffed10053350f9 R12: 00002000000015c8 [ 454.998815][T16458] R13: 00007ffffffff000 R14: ffff8880299a87c0 R15: 00002000000015c0 [ 454.998855][T16458] _copy_to_user+0x8a/0xb0 [ 454.998886][T16458] br_ioctl_stub+0xb65/0xc80 [ 454.998919][T16458] ? br_ioctl_stub+0x7bc/0xc80 [ 454.998973][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 454.999003][T16458] ? preempt_schedule_irq+0xde/0x150 [ 454.999038][T16458] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 454.999083][T16458] ? irqentry_exit+0x74/0x90 [ 454.999111][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 454.999145][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 454.999177][T16458] ? sock_ioctl+0x4c5/0x790 [ 454.999216][T16458] ? __pfx_br_ioctl_stub+0x10/0x10 [ 454.999246][T16458] sock_ioctl+0x4d8/0x790 [ 454.999280][T16458] ? __pfx_sock_ioctl+0x10/0x10 [ 454.999313][T16458] ? __fget_files+0x2a/0x420 [ 454.999342][T16458] ? __fget_files+0x3a0/0x420 [ 454.999372][T16458] ? __fget_files+0x2a/0x420 [ 454.999407][T16458] ? bpf_lsm_file_ioctl+0x9/0x20 [ 454.999431][T16458] ? __pfx_sock_ioctl+0x10/0x10 [ 454.999463][T16458] __se_sys_ioctl+0xfc/0x170 [ 454.999491][T16458] do_syscall_64+0xfa/0x3b0 [ 454.999513][T16458] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.999548][T16458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.999572][T16458] ? clear_bhb_loop+0x60/0xb0 [ 454.999600][T16458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.999622][T16458] RIP: 0033:0x7fc9c2b8eec9 [ 454.999641][T16458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.999661][T16458] RSP: 002b:00007fc9c3a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.999683][T16458] RAX: ffffffffffffffda RBX: 00007fc9c2de5fa0 RCX: 00007fc9c2b8eec9 [ 454.999700][T16458] RDX: 0000200000000180 RSI: 0000000000008940 RDI: 0000000000000003 [ 454.999715][T16458] RBP: 00007fc9c3a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 454.999729][T16458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.999742][T16458] R13: 00007fc9c2de6038 R14: 00007fc9c2de5fa0 R15: 00007ffd5f2d9d98 [ 454.999792][T16458] [ 455.003120][T16442] lo speed is unknown, defaulting to 1000 [ 455.543950][T16475] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2581'. [ 455.583018][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'. [ 455.978423][T16502] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 456.046571][T16504] __nla_validate_parse: 5 callbacks suppressed [ 456.046592][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2593'. [ 456.067538][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 456.116574][T16511] netlink: 'syz.3.2595': attribute type 5 has an invalid length. [ 456.369705][T16514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.557314][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.572222][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.599612][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.619412][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.638308][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.657969][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.679228][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 456.691647][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 457.193417][T16546] lo speed is unknown, defaulting to 1000 [ 457.231047][T16546] lo speed is unknown, defaulting to 1000 [ 457.368123][T16554] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 457.378026][T16552] lo speed is unknown, defaulting to 1000 [ 457.535917][T16546] lo speed is unknown, defaulting to 1000 [ 457.535917][T16552] lo speed is unknown, defaulting to 1000 [ 457.652593][T16558] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 457.909688][T16561] bond14: (slave bridge7): making interface the new active one [ 457.946158][T16561] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 457.961377][T16552] lo speed is unknown, defaulting to 1000 [ 459.168866][T16595] netlink: 'syz.1.2619': attribute type 13 has an invalid length. [ 459.199668][T16595] netlink: 'syz.1.2619': attribute type 17 has an invalid length. [ 459.235653][T16595] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 459.572890][T16619] lo speed is unknown, defaulting to 1000 [ 459.592022][T16614] gretap1: entered allmulticast mode [ 459.608341][T16619] lo speed is unknown, defaulting to 1000 [ 459.918538][T16619] lo speed is unknown, defaulting to 1000 [ 460.384262][T16634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.470196][T16645] .`: (slave bond_slave_0): Error -28 calling ndo_bpf [ 460.521199][T16651] bond_slave_0: entered promiscuous mode [ 460.527343][T16651] bond_slave_1: entered promiscuous mode [ 460.540229][T16651] 8021q: adding VLAN 0 to HW filter on device .` [ 460.568747][T16651] .`: (slave bond_slave_0): Error -28 calling ndo_bpf [ 460.578570][T16651] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 460.602932][T16659] tipc: Enabling of bearer rejected, already enabled [ 460.696884][T16663] tipc: Resetting bearer [ 460.747860][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 460.807501][T16673] lo speed is unknown, defaulting to 1000 [ 460.817603][T16673] lo speed is unknown, defaulting to 1000 [ 461.017850][T16685] tipc: MTU too low for tipc bearer [ 461.058479][T16688] __nla_validate_parse: 30 callbacks suppressed [ 461.058500][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 461.269110][T16688] tipc: Resetting bearer [ 461.346014][T16697] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2641'. [ 461.357329][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 461.389561][T16688] syzkaller0: left promiscuous mode [ 461.410379][T16697] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2641'. [ 461.425643][T16688] syzkaller0: left allmulticast mode [ 461.477179][T16688] bridge6: left promiscuous mode [ 461.486666][T16688] bridge6: left allmulticast mode [ 461.812899][T16673] lo speed is unknown, defaulting to 1000 [ 461.857780][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2646'. [ 462.210889][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 462.279299][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 462.386058][T16728] netlink: 'syz.4.2650': attribute type 1 has an invalid length. [ 462.413085][T16728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2650'. [ 462.566274][T16731] tipc: New replicast peer: 255.255.255.255 [ 462.572923][T16731] tipc: Enabled bearer , priority 10 [ 462.932808][T16742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.147397][T16747] tipc: Enabled bearer , priority 0 [ 463.158497][T16747] syzkaller0: entered promiscuous mode [ 463.164030][T16747] syzkaller0: entered allmulticast mode [ 463.213842][T16747] tipc: Resetting bearer [ 463.231726][T16746] tipc: Resetting bearer [ 463.242215][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'. [ 463.285998][T16746] tipc: Disabling bearer [ 463.294646][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 464.159049][T16771] lo speed is unknown, defaulting to 1000 [ 464.202712][T16771] lo speed is unknown, defaulting to 1000 [ 464.949339][T16793] bond0: (slave batadv0): Releasing backup interface [ 465.372594][T16772] sctp: [Deprecated]: syz.3.2662 (pid 16772) Use of int in max_burst socket option deprecated. [ 465.372594][T16772] Use struct sctp_assoc_value instead [ 465.429691][T16771] lo speed is unknown, defaulting to 1000 [ 465.478756][T16817] netlink: 'syz.1.2672': attribute type 11 has an invalid length. [ 465.756018][T16822] macsec2: entered promiscuous mode [ 466.234792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 466.242989][ C0] lec:lec_tx_timeout: lec0 [ 466.244471][T16836] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 466.417951][T16842] bond15: (slave vcan1): The slave device specified does not support setting the MAC address [ 466.428572][T16842] bond15: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 466.457442][T16842] bond15: (slave vcan1): making interface the new active one [ 466.502076][T16842] bond15: (slave vcan1): Enslaving as an active interface with an up link [ 466.623017][T16852] lo speed is unknown, defaulting to 1000 [ 466.658372][T16852] lo speed is unknown, defaulting to 1000 [ 466.686240][T16855] __nla_validate_parse: 8 callbacks suppressed [ 466.686264][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 467.095854][T16852] lo speed is unknown, defaulting to 1000 [ 467.493015][T16874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2688'. [ 467.935508][T16893] lo speed is unknown, defaulting to 1000 [ 467.953704][T16893] lo speed is unknown, defaulting to 1000 [ 468.155452][T16902] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 468.219067][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 468.241457][T16902] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 468.276301][T16905] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 468.557301][T16893] lo speed is unknown, defaulting to 1000 [ 468.610091][T16920] netlink: 'syz.2.2698': attribute type 10 has an invalid length. [ 468.704978][T16925] netlink: 'syz.1.2700': attribute type 3 has an invalid length. [ 468.712836][T16925] netlink: 'syz.1.2700': attribute type 1 has an invalid length. [ 468.747102][T16925] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2700'. [ 469.242669][T16949] macsec0: entered promiscuous mode [ 469.256128][T16949] team0: entered promiscuous mode [ 469.266562][T16949] team_slave_0: entered promiscuous mode [ 469.285481][T16949] team_slave_1: entered promiscuous mode [ 469.302857][T16949] team0: Device macsec0 is already an upper device of the team interface [ 469.340845][T16949] team0: left promiscuous mode [ 469.348763][T16949] team_slave_0: left promiscuous mode [ 469.358419][T16949] team_slave_1: left promiscuous mode [ 469.492980][T16963] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 469.573900][T16952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2707'. [ 469.631433][T16956] lo speed is unknown, defaulting to 1000 [ 469.640593][T16956] lo speed is unknown, defaulting to 1000 [ 469.962308][T16987] tipc: Enabling of bearer rejected, already enabled [ 469.971613][T16956] lo speed is unknown, defaulting to 1000 [ 469.992415][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2717'. [ 470.021398][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2717'. [ 470.057309][T16991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2716'. [ 470.086431][T16990] veth1: entered promiscuous mode [ 470.111728][T16990] veth1: left promiscuous mode [ 470.422738][T17000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 470.553973][T16996] lo speed is unknown, defaulting to 1000 [ 470.593983][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 470.651450][T16996] lo speed is unknown, defaulting to 1000 [ 471.000829][T17008] lo speed is unknown, defaulting to 1000 [ 471.384086][T16996] lo speed is unknown, defaulting to 1000 [ 471.384086][T17008] lo speed is unknown, defaulting to 1000 [ 471.837864][T17008] lo speed is unknown, defaulting to 1000 [ 471.903572][T17046] __nla_validate_parse: 1 callbacks suppressed [ 471.903593][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2731'. [ 472.089987][T17051] lo speed is unknown, defaulting to 1000 [ 472.106949][T17055] netlink: 'syz.4.2733': attribute type 4 has an invalid length. [ 472.123891][T17055] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2733'. [ 472.286710][T17051] lo speed is unknown, defaulting to 1000 [ 472.549887][T17067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2736'. [ 472.697718][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 472.721772][T17051] lo speed is unknown, defaulting to 1000 [ 472.721794][ T7029] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.731291][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 472.746188][ T7029] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.777871][ T7029] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.797904][ T7029] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.022417][T17076] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2739'. [ 473.393211][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2741'. [ 473.403372][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2741'. [ 473.666874][T17092] IPVS: Unknown mcast interface: netpci0 [ 473.730552][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 474.030938][T17107] dvmrp0: entered allmulticast mode [ 474.267924][T17126] netlink: 'syz.0.2752': attribute type 30 has an invalid length. [ 474.303822][T17118] lo speed is unknown, defaulting to 1000 [ 474.422871][T17118] lo speed is unknown, defaulting to 1000 [ 474.455731][T17134] IPVS: Unknown mcast interface: veth0_t¸á.·È8l [ 474.557418][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'. [ 474.899539][T17151] hsr0: entered allmulticast mode [ 474.925916][T17151] hsr_slave_0: entered allmulticast mode [ 474.931881][T17118] lo speed is unknown, defaulting to 1000 [ 474.975128][T17152] hsr_slave_0: left promiscuous mode [ 475.034178][T17152] hsr0 (unregistering): left allmulticast mode [ 475.613371][T17173] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 475.785532][T17175] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 475.828853][T17175] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 475.899014][T17173] vlan2: entered allmulticast mode [ 476.152014][T17203] sock: sock_timestamping_bind_phc: sock not bind to device [ 476.269074][T17209] FAULT_INJECTION: forcing a failure. [ 476.269074][T17209] name failslab, interval 1, probability 0, space 0, times 0 [ 476.282913][T17209] CPU: 1 UID: 0 PID: 17209 Comm: syz.2.2775 Not tainted syzkaller #0 PREEMPT(full) [ 476.282944][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.282958][T17209] Call Trace: [ 476.282966][T17209] [ 476.282975][T17209] dump_stack_lvl+0x189/0x250 [ 476.283007][T17209] ? __pfx____ratelimit+0x10/0x10 [ 476.283040][T17209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.283066][T17209] ? __pfx__printk+0x10/0x10 [ 476.283096][T17209] ? nfnetlink_rcv+0x282/0x2590 [ 476.283129][T17209] ? ____sys_sendmsg+0x505/0x830 [ 476.283153][T17209] ? __x64_sys_sendmsg+0x19b/0x260 [ 476.283190][T17209] should_fail_ex+0x414/0x560 [ 476.283228][T17209] should_failslab+0xa8/0x100 [ 476.283274][T17209] kmem_cache_alloc_noprof+0x73/0x3c0 [ 476.283300][T17209] ? skb_clone+0x212/0x3a0 [ 476.283334][T17209] skb_clone+0x212/0x3a0 [ 476.283368][T17209] __netlink_deliver_tap+0x404/0x850 [ 476.283406][T17209] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.283432][T17209] netlink_deliver_tap+0x19c/0x1b0 [ 476.283459][T17209] netlink_sendskb+0x68/0x140 [ 476.283495][T17209] netlink_unicast+0x397/0x9e0 [ 476.283525][T17209] ? __asan_memcpy+0x40/0x70 [ 476.283568][T17209] ? __pfx_netlink_unicast+0x10/0x10 [ 476.283616][T17209] netlink_rcv_skb+0x28c/0x470 [ 476.283641][T17209] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 476.283685][T17209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.283722][T17209] ? bpf_lsm_capable+0x9/0x20 [ 476.283748][T17209] ? security_capable+0x7e/0x2e0 [ 476.283789][T17209] nfnetlink_rcv+0x282/0x2590 [ 476.283827][T17209] ? __dev_queue_xmit+0x27b/0x3b50 [ 476.283858][T17209] ? __dev_queue_xmit+0x1d79/0x3b50 [ 476.283900][T17209] ? __dev_queue_xmit+0x27b/0x3b50 [ 476.283945][T17209] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 476.283979][T17209] ? __pfx___dev_queue_xmit+0x10/0x10 [ 476.284026][T17209] ? ref_tracker_free+0x63a/0x7d0 [ 476.284060][T17209] ? __asan_memcpy+0x40/0x70 [ 476.284082][T17209] ? __pfx_ref_tracker_free+0x10/0x10 [ 476.284136][T17209] ? skb_clone+0x246/0x3a0 [ 476.284169][T17209] ? __netlink_deliver_tap+0x807/0x850 [ 476.284192][T17209] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.284224][T17209] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.284258][T17209] netlink_unicast+0x82c/0x9e0 [ 476.284305][T17209] ? __pfx_netlink_unicast+0x10/0x10 [ 476.284342][T17209] ? netlink_sendmsg+0x642/0xb30 [ 476.284365][T17209] ? skb_put+0x11b/0x210 [ 476.284393][T17209] netlink_sendmsg+0x805/0xb30 [ 476.284430][T17209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.284459][T17209] ? aa_sock_msg_perm+0xf1/0x1d0 [ 476.284493][T17209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.284528][T17209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.284584][T17209] __sock_sendmsg+0x21c/0x270 [ 476.284622][T17209] ____sys_sendmsg+0x505/0x830 [ 476.284662][T17209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.284699][T17209] ? import_iovec+0x74/0xa0 [ 476.284731][T17209] ___sys_sendmsg+0x21f/0x2a0 [ 476.284761][T17209] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.284833][T17209] ? __fget_files+0x2a/0x420 [ 476.284863][T17209] ? __fget_files+0x3a0/0x420 [ 476.284907][T17209] __x64_sys_sendmsg+0x19b/0x260 [ 476.284938][T17209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.284979][T17209] ? __pfx_ksys_write+0x10/0x10 [ 476.285013][T17209] ? do_syscall_64+0xbe/0x3b0 [ 476.285042][T17209] do_syscall_64+0xfa/0x3b0 [ 476.285066][T17209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.285088][T17209] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.285112][T17209] ? clear_bhb_loop+0x60/0xb0 [ 476.285140][T17209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.285162][T17209] RIP: 0033:0x7f60b278eec9 [ 476.285183][T17209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.285203][T17209] RSP: 002b:00007f60b35f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.285228][T17209] RAX: ffffffffffffffda RBX: 00007f60b29e5fa0 RCX: 00007f60b278eec9 [ 476.285245][T17209] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 476.285259][T17209] RBP: 00007f60b35f1090 R08: 0000000000000000 R09: 0000000000000000 [ 476.285274][T17209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.285287][T17209] R13: 00007f60b29e6038 R14: 00007f60b29e5fa0 R15: 00007ffe38808d28 [ 476.285322][T17209] [ 477.291757][T17248] __nla_validate_parse: 2 callbacks suppressed [ 477.291777][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2785'. [ 477.502575][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 478.146136][T17309] syzkaller1: entered promiscuous mode [ 478.162990][T17309] syzkaller1: entered allmulticast mode [ 481.595453][T17339] syzkaller1: entered promiscuous mode [ 481.601018][T17339] syzkaller1: entered allmulticast mode [ 481.728647][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 481.763519][T17355] netlink: 'syz.1.2814': attribute type 13 has an invalid length. [ 481.784871][T17355] netlink: 'syz.1.2814': attribute type 17 has an invalid length. [ 481.867856][T17349] lo speed is unknown, defaulting to 1000 [ 481.914458][T17355] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 481.955599][T17347] xfrm0: entered promiscuous mode [ 481.960797][T17347] xfrm0: entered allmulticast mode [ 481.985489][T17349] lo speed is unknown, defaulting to 1000 [ 482.081491][T17360] lo speed is unknown, defaulting to 1000 [ 482.139014][T17365] lo speed is unknown, defaulting to 1000 [ 482.483154][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.748226][T17349] lo speed is unknown, defaulting to 1000 [ 482.748460][T17360] lo speed is unknown, defaulting to 1000 [ 483.166610][T17392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2825'. [ 483.174090][T17360] lo speed is unknown, defaulting to 1000 [ 483.209654][T17365] lo speed is unknown, defaulting to 1000 [ 483.685568][T17365] lo speed is unknown, defaulting to 1000 [ 483.702189][T17402] netlink: 'syz.0.2827': attribute type 13 has an invalid length. [ 483.710309][T17402] netlink: 'syz.0.2827': attribute type 17 has an invalid length. [ 483.798862][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.814421][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.839556][T17402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.003148][T17410] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2829'. [ 484.286580][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2831'. [ 484.531955][T17424] netlink: 'syz.0.2832': attribute type 74 has an invalid length. [ 484.578447][T17424] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 484.615700][T17424] netlink: 'syz.0.2832': attribute type 4 has an invalid length. [ 484.953609][T17439] lo speed is unknown, defaulting to 1000 [ 484.969231][T17439] lo speed is unknown, defaulting to 1000 [ 485.211076][T17448] lo speed is unknown, defaulting to 1000 [ 485.340746][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 485.418803][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 485.475850][T17462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2843'. [ 485.520027][T17448] lo speed is unknown, defaulting to 1000 [ 485.531285][T17439] lo speed is unknown, defaulting to 1000 [ 486.239933][T17486] netlink: 'syz.3.2848': attribute type 2 has an invalid length. [ 486.316845][T17448] lo speed is unknown, defaulting to 1000 [ 487.021001][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2855'. [ 487.158691][T17520] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.2857'. [ 487.177141][T17520] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 487.210827][T17520] sctp: [Deprecated]: syz.0.2857 (pid 17520) Use of int in max_burst socket option. [ 487.210827][T17520] Use struct sctp_assoc_value instead [ 487.335770][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 487.348013][T17529] netlink: 'syz.4.2859': attribute type 1 has an invalid length. [ 487.378078][T17520] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2857'. [ 487.545691][T17520] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 487.608840][T17520] bond0 (unregistering): Released all slaves [ 487.689876][T17531] bond16: (slave geneve2): making interface the new active one [ 487.701640][T17531] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 487.713232][ T7029] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.722316][ T7029] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.779762][ T7029] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.805762][ T7029] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.915946][T17544] bond7: left allmulticast mode [ 487.920881][T17544] bond7: left promiscuous mode [ 487.956478][T17544] bridge0: port 1(bond7) entered disabled state [ 488.090115][T17564] netlink: 'syz.4.2865': attribute type 13 has an invalid length. [ 488.137510][T17564] netlink: 'syz.4.2865': attribute type 17 has an invalid length. [ 488.179759][T17561] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 488.327173][T17573] blkio.reset_stats is deprecated [ 488.349988][T17566] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 488.390176][T17575] __nla_validate_parse: 4 callbacks suppressed [ 488.390199][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 488.542797][T17564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.563698][ T6583] lo speed is unknown, defaulting to 1000 [ 488.595033][ T6583] syz1: Port: 1 Link ACTIVE [ 488.657893][T17582] syzkaller1: entered promiscuous mode [ 488.676024][T17582] syzkaller1: entered allmulticast mode [ 488.697246][T17583] can: request_module (can-proto-5) failed. [ 488.717126][T17588] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2873'. [ 488.897793][T17590] lo speed is unknown, defaulting to 1000 [ 488.905991][T17590] lo speed is unknown, defaulting to 1000 [ 488.993447][T17607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2878'. [ 489.217652][T17631] ip6gre1: entered allmulticast mode [ 489.269073][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2883'. [ 489.549244][T17590] lo speed is unknown, defaulting to 1000 [ 489.592783][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2887'. [ 489.849308][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 489.943117][T17658] lo speed is unknown, defaulting to 1000 [ 489.958163][T17658] lo speed is unknown, defaulting to 1000 [ 490.070432][T17656] lo speed is unknown, defaulting to 1000 [ 490.290389][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'. [ 490.573091][T17681] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 [ 490.737994][T17656] lo speed is unknown, defaulting to 1000 [ 490.744641][T17658] lo speed is unknown, defaulting to 1000 [ 490.746519][T17689] lo speed is unknown, defaulting to 1000 [ 490.762471][T17691] netlink: 'syz.1.2899': attribute type 9 has an invalid length. [ 490.785100][T17691] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2899'. [ 491.132978][T17689] lo speed is unknown, defaulting to 1000 [ 491.154501][T17705] netlink: 'syz.1.2903': attribute type 2 has an invalid length. [ 491.163410][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 491.386169][T17656] lo speed is unknown, defaulting to 1000 [ 491.424408][T17689] lo speed is unknown, defaulting to 1000 [ 492.223731][T17724] lo speed is unknown, defaulting to 1000 [ 492.256789][T17726] gretap0: entered promiscuous mode [ 492.279172][T17726] gretap0: left promiscuous mode [ 492.310284][T17724] lo speed is unknown, defaulting to 1000 [ 492.347887][T17729] gretap0: entered promiscuous mode [ 492.358434][T17730] netlink: 'syz.4.2906': attribute type 4 has an invalid length. [ 492.409135][T17732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2909'. [ 492.425754][T17729] gretap0: left promiscuous mode [ 492.552475][T14186] lo speed is unknown, defaulting to 1000 [ 492.575781][T14186] syz1: Port: 1 Link DOWN [ 492.723797][T17724] lo speed is unknown, defaulting to 1000 [ 492.851502][T17738] erspan0: entered promiscuous mode [ 492.861566][T17738] gretap0: entered promiscuous mode [ 492.868786][T17738] debugfs: 'hsr0' already exists in 'hsr' [ 492.874644][T17738] Cannot create hsr debugfs directory [ 492.882559][T17728] lo speed is unknown, defaulting to 1000 [ 492.944068][T17728] lo speed is unknown, defaulting to 1000 [ 493.495640][T17728] lo speed is unknown, defaulting to 1000 [ 493.820618][T17775] netlink: del zone limit has 8 unknown bytes [ 493.973229][T17769] lo speed is unknown, defaulting to 1000 [ 494.024951][T17769] lo speed is unknown, defaulting to 1000 [ 494.642004][T17769] lo speed is unknown, defaulting to 1000 [ 494.658483][T17786] rdma_rxe: rxe_newlink: failed to add lo [ 494.979556][T17799] netlink: 'syz.3.2929': attribute type 1 has an invalid length. [ 495.366425][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.381325][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.398564][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.407067][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.416042][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.467090][T17812] bond9: (slave bridge0): making interface the new active one [ 495.475632][T17812] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 495.632711][T17813] lo speed is unknown, defaulting to 1000 [ 495.662757][T17813] lo speed is unknown, defaulting to 1000 [ 495.989128][T17827] __nla_validate_parse: 4 callbacks suppressed [ 495.989150][T17827] netlink: 824 bytes leftover after parsing attributes in process `syz.3.2932'. [ 496.118383][T17830] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 496.257175][T17813] lo speed is unknown, defaulting to 1000 [ 496.406699][T17837] lo speed is unknown, defaulting to 1000 [ 496.445369][T17837] lo speed is unknown, defaulting to 1000 [ 496.632826][T17849] netlink: 'syz.2.2937': attribute type 74 has an invalid length. [ 496.739344][T17845] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 496.768982][ T6594] lo speed is unknown, defaulting to 1000 [ 496.776336][T17845] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 496.784406][ T6594] syz2: Port: 1 Link DOWN [ 496.800551][T14186] lo speed is unknown, defaulting to 1000 [ 496.807313][T14186] syz2: Port: 1 Link ACTIVE [ 496.824540][T17837] lo speed is unknown, defaulting to 1000 [ 496.949561][T17813] chnl_net:caif_netlink_parms(): no params data found [ 497.076643][T17859] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 497.314435][T17866] nft_compat: unsupported protocol 0 [ 497.539957][ T5850] Bluetooth: hci5: command tx timeout [ 497.656593][T17872] lo speed is unknown, defaulting to 1000 [ 497.665857][T17813] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.683719][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.701540][T17813] bridge_slave_0: entered allmulticast mode [ 497.713090][T17813] bridge_slave_0: entered promiscuous mode [ 497.723768][T17872] lo speed is unknown, defaulting to 1000 [ 497.732404][T17813] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.772044][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.785924][T17813] bridge_slave_1: entered allmulticast mode [ 497.798162][T17813] bridge_slave_1: entered promiscuous mode [ 497.895480][T17813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.928033][T17813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.342129][T17813] team0: Port device team_slave_0 added [ 498.371782][T17813] team0: Port device team_slave_1 added [ 498.652298][T17911] netlink: 'syz.1.2949': attribute type 74 has an invalid length. [ 498.736519][T17913] netlink: 'syz.1.2949': attribute type 4 has an invalid length. [ 498.776798][T17872] lo speed is unknown, defaulting to 1000 [ 498.816143][T17915] netlink: 'syz.1.2949': attribute type 4 has an invalid length. [ 498.842718][T17813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.850297][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.878304][T17813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.890227][T17908] tipc: Resetting bearer [ 498.925746][ T6594] lo speed is unknown, defaulting to 1000 [ 498.941541][T17813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.962172][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.013638][T17813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.046630][ T5858] lo speed is unknown, defaulting to 1000 [ 499.460014][T17813] hsr_slave_0: entered promiscuous mode [ 499.517424][T17813] hsr_slave_1: entered promiscuous mode [ 499.524189][T17813] debugfs: 'hsr0' already exists in 'hsr' [ 499.537688][T17813] Cannot create hsr debugfs directory [ 499.595017][ T5850] Bluetooth: hci5: command tx timeout [ 499.722831][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2960'. [ 499.784186][T17945] syzkaller0: entered promiscuous mode [ 499.790532][T17945] syzkaller0: entered allmulticast mode [ 499.911086][T17950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 500.068307][T17957] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2964'. [ 500.090243][T17813] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.219307][T17813] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.399739][T17813] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.546853][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 500.602325][T17987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.609734][T17987] IPv6: NLM_F_CREATE should be set when creating new route [ 500.621988][T17813] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.808465][T17994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.815858][T17994] IPv6: NLM_F_CREATE should be set when creating new route [ 501.058972][T17813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.102781][T17813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.204434][T17813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.331234][T17813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.675728][ T5850] Bluetooth: hci5: command tx timeout [ 501.697368][T17813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.722439][T17813] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.753809][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.761034][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.789533][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.796846][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.838141][T18028] openvswitch: netlink: IP tunnel attribute has 17 unknown bytes. [ 501.974198][T18029] netlink: 'syz.0.2976': attribute type 12 has an invalid length. [ 502.163579][T18038] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 502.234188][T18038] 8021q: adding VLAN 0 to HW filter on device bond13 [ 502.300013][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.430480][T18043] lo speed is unknown, defaulting to 1000 [ 502.455885][T18043] lo speed is unknown, defaulting to 1000 [ 502.461976][T18047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2980'. [ 502.476560][T18047] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 502.505182][T18047] netlink: 'syz.1.2980': attribute type 15 has an invalid length. [ 503.043709][T17813] veth0_vlan: entered promiscuous mode [ 503.070538][T18043] lo speed is unknown, defaulting to 1000 [ 503.086520][T17813] veth1_vlan: entered promiscuous mode [ 503.092188][T18056] siw: device registration error -23 [ 503.562901][T18077] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2986'. [ 503.617733][T17813] veth0_macvtap: entered promiscuous mode [ 503.632137][T17813] veth1_macvtap: entered promiscuous mode [ 503.707633][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.752135][T17813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.761060][ T5850] Bluetooth: hci5: command tx timeout [ 503.798153][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.857301][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.870463][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.922062][T18080] lo speed is unknown, defaulting to 1000 [ 504.023884][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.061177][T18080] lo speed is unknown, defaulting to 1000 [ 504.266349][T18087] netlink: 'syz.1.2988': attribute type 49 has an invalid length. [ 504.339235][T18086] lo speed is unknown, defaulting to 1000 [ 504.339341][T18084] netlink: 'syz.1.2988': attribute type 29 has an invalid length. [ 504.401607][ T7029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.410756][T18084] netlink: 'syz.1.2988': attribute type 29 has an invalid length. [ 504.419728][ T7029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.506520][ T7031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.515881][ T7031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.796458][T18086] lo speed is unknown, defaulting to 1000 [ 504.828946][T18080] lo speed is unknown, defaulting to 1000 [ 505.016577][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2990'. [ 505.656532][T18086] lo speed is unknown, defaulting to 1000 [ 505.906619][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.918358][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.928244][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.944838][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.953358][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.151229][T18097] lo speed is unknown, defaulting to 1000 [ 506.307769][T18097] lo speed is unknown, defaulting to 1000 [ 506.354468][T18101] veth1_to_bond: entered allmulticast mode [ 506.411473][T18101] veth1_to_bond: left allmulticast mode [ 506.668862][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2993'. [ 506.778493][T18097] lo speed is unknown, defaulting to 1000 [ 506.909977][T18116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2995'. [ 506.954909][T18116] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2995'. [ 507.239324][T18126] netlink: 'syz.4.2998': attribute type 74 has an invalid length. [ 507.277103][T18126] netlink: 'syz.4.2998': attribute type 4 has an invalid length. [ 507.329366][T18133] netlink: 'syz.4.2998': attribute type 4 has an invalid length. [ 507.396945][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'. [ 507.414181][T18135] netem: change failed [ 507.561651][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'. [ 507.606514][T18150] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3005'. [ 507.617374][T18143] syz.4.3003: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 507.636637][T18143] CPU: 1 UID: 0 PID: 18143 Comm: syz.4.3003 Not tainted syzkaller #0 PREEMPT(full) [ 507.636669][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.636681][T18143] Call Trace: [ 507.636690][T18143] [ 507.636698][T18143] dump_stack_lvl+0x189/0x250 [ 507.636730][T18143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.636755][T18143] ? __pfx__printk+0x10/0x10 [ 507.636784][T18143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 507.636810][T18143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 507.636841][T18143] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 507.636869][T18143] warn_alloc+0x214/0x310 [ 507.636897][T18143] ? stack_depot_save_flags+0x40/0x860 [ 507.636927][T18143] ? __pfx_warn_alloc+0x10/0x10 [ 507.636954][T18143] ? kasan_save_track+0x4f/0x80 [ 507.636976][T18143] ? xskq_create+0x56/0x170 [ 507.637004][T18143] ? xsk_init_queue+0xb0/0x110 [ 507.637029][T18143] ? xsk_setsockopt+0x4dc/0x8d0 [ 507.637052][T18143] ? do_sock_setsockopt+0x179/0x1b0 [ 507.637072][T18143] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 507.637091][T18143] ? do_syscall_64+0xfa/0x3b0 [ 507.637108][T18143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.637137][T18143] __vmalloc_node_range_noprof+0x125/0x12f0 [ 507.637197][T18143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.637230][T18143] ? __kasan_kmalloc+0x93/0xb0 [ 507.637255][T18143] vmalloc_user_noprof+0xad/0xf0 [ 507.637280][T18143] ? xskq_create+0xbf/0x170 [ 507.637309][T18143] xskq_create+0xbf/0x170 [ 507.637342][T18143] xsk_init_queue+0xb0/0x110 [ 507.637374][T18143] xsk_setsockopt+0x4dc/0x8d0 [ 507.637404][T18143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 507.637432][T18143] ? __pfx_aa_sk_perm+0x10/0x10 [ 507.637462][T18143] ? aa_sock_opt_perm+0xff/0x1b0 [ 507.637494][T18143] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 507.637523][T18143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 507.637552][T18143] do_sock_setsockopt+0x179/0x1b0 [ 507.637590][T18143] __x64_sys_setsockopt+0x13f/0x1b0 [ 507.637618][T18143] do_syscall_64+0xfa/0x3b0 [ 507.637637][T18143] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.637667][T18143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.637687][T18143] ? clear_bhb_loop+0x60/0xb0 [ 507.637711][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.637729][T18143] RIP: 0033:0x7f5f4758eec9 [ 507.637748][T18143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.637772][T18143] RSP: 002b:00007f5f484c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 507.637794][T18143] RAX: ffffffffffffffda RBX: 00007f5f477e5fa0 RCX: 00007f5f4758eec9 [ 507.637809][T18143] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 507.637821][T18143] RBP: 00007f5f47611f91 R08: 0000000000000004 R09: 0000000000000000 [ 507.637834][T18143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.637846][T18143] R13: 00007f5f477e6038 R14: 00007f5f477e5fa0 R15: 00007ffe32b17758 [ 507.637877][T18143] [ 507.637897][T18143] Mem-Info: [ 507.929708][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 507.953535][T18143] active_anon:6484 inactive_anon:0 isolated_anon:0 [ 507.953535][T18143] active_file:3286 inactive_file:40038 isolated_file:0 [ 507.953535][T18143] unevictable:768 dirty:60 writeback:0 [ 507.953535][T18143] slab_reclaimable:12942 slab_unreclaimable:172661 [ 507.953535][T18143] mapped:31299 shmem:1359 pagetables:1221 [ 507.953535][T18143] sec_pagetables:0 bounce:0 [ 507.953535][T18143] kernel_misc_reclaimable:0 [ 507.953535][T18143] free:1235896 free_pcp:26930 free_cma:0 [ 508.013081][T18143] Node 0 active_anon:25836kB inactive_anon:0kB active_file:13144kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125296kB dirty:240kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14968kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.038786][ T5850] Bluetooth: hci1: command tx timeout [ 508.060600][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 508.071253][T18143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.094879][T18166] netlink: 'syz.0.3007': attribute type 5 has an invalid length. [ 508.110582][T18143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.135490][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 508.141007][T18143] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 508.157809][T18143] Node 0 DMA32 free:1034728kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25688kB inactive_anon:0kB active_file:13144kB inactive_file:159636kB unevictable:1536kB writepending:240kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:89488kB local_pcp:58712kB free_cma:0kB [ 508.191747][T18143] lowmem_reserve[]: 0 0 0 0 0 [ 508.197706][T18143] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 508.227618][T18143] lowmem_reserve[]: 0 0 0 0 0 [ 508.232886][T18143] Node 1 Normal free:3891092kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18736kB local_pcp:6448kB free_cma:0kB [ 508.267629][T18143] lowmem_reserve[]: 0 0 0 0 0 [ 508.272461][T18143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.285906][T18143] Node 0 DMA32: 1200*4kB (UME) 563*8kB (UME) 335*16kB (UME) 200*32kB (UM) 115*64kB (UM) 34*128kB (UME) 18*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 7*2048kB (UME) 237*4096kB (UM) = 1034248kB [ 508.305813][T18143] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 508.319265][T18143] Node 1 Normal: 165*4kB (UE) 50*8kB (UME) 41*16kB (UME) 109*32kB (UME) 35*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3891092kB [ 508.338815][T18143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.349835][T18143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.360145][T18143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.370593][T18143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.380921][T18143] 44696 total pagecache pages [ 508.386447][T18143] 0 pages in swap cache [ 508.390662][T18143] Free swap = 124996kB [ 508.395860][T18143] Total swap = 124996kB [ 508.400400][T18143] 2097051 pages RAM [ 508.415568][T18143] 0 pages HighMem/MovableOnly [ 508.420384][T18143] 423781 pages reserved [ 508.424586][T18143] 0 pages cma reserved [ 508.511531][T18174] lo speed is unknown, defaulting to 1000 [ 508.525986][T18097] chnl_net:caif_netlink_parms(): no params data found [ 508.565358][T18174] lo speed is unknown, defaulting to 1000 [ 508.687503][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'. [ 508.721935][T18176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3009'. [ 508.788515][T18181] netlink: 1876 bytes leftover after parsing attributes in process `syz.4.3010'. [ 508.887586][T18174] lo speed is unknown, defaulting to 1000 [ 509.105585][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.106500][T18190] netlink: 'syz.1.3012': attribute type 74 has an invalid length. [ 509.113590][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.129593][T18097] bridge_slave_0: entered allmulticast mode [ 509.138646][T18097] bridge_slave_0: entered promiscuous mode [ 509.149333][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.158269][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.166874][T18097] bridge_slave_1: entered allmulticast mode [ 509.176499][T18097] bridge_slave_1: entered promiscuous mode [ 509.184164][T18185] lo speed is unknown, defaulting to 1000 [ 509.210530][T18190] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 509.225874][T18185] lo speed is unknown, defaulting to 1000 [ 509.237350][T18097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.273908][T18194] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 509.315733][T18198] netlink: 'syz.0.3014': attribute type 21 has an invalid length. [ 509.328540][T18198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3014'. [ 509.537375][T18097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.632114][T18097] team0: Port device team_slave_0 added [ 509.652564][ T6583] lo speed is unknown, defaulting to 1000 [ 509.662846][T18097] team0: Port device team_slave_1 added [ 509.720312][ T6583] lo speed is unknown, defaulting to 1000 [ 509.730991][T18206] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3015'. [ 509.822258][T18097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.837995][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.894845][T18097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.923707][T18185] lo speed is unknown, defaulting to 1000 [ 509.962827][T18097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.977420][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.033343][T18211] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3016'. [ 510.053919][T18097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.085960][ T5850] Bluetooth: hci1: command tx timeout [ 510.309289][T18217] dvmrp8: entered allmulticast mode [ 510.337321][T18097] hsr_slave_0: entered promiscuous mode [ 510.355419][T18097] hsr_slave_1: entered promiscuous mode [ 510.362387][T18097] debugfs: 'hsr0' already exists in 'hsr' [ 510.368676][T18097] Cannot create hsr debugfs directory [ 510.493074][T18218] lo speed is unknown, defaulting to 1000 [ 510.538788][T18218] lo speed is unknown, defaulting to 1000 [ 511.042907][T18097] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.078002][T18097] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 511.108491][T18097] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 511.124323][T18097] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 511.220160][T18218] lo speed is unknown, defaulting to 1000 [ 511.230586][T18215] dvmrp8: left allmulticast mode [ 511.287323][T18250] macsec1: entered promiscuous mode [ 511.292705][T18250] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 511.313883][T18250] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 511.382733][T18097] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.393755][T18097] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 511.404074][T18097] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 511.415603][T18097] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 511.474158][T18244] lo speed is unknown, defaulting to 1000 [ 511.482927][T18097] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.494013][T18097] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 511.504347][T18097] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 511.515851][T18097] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 511.537702][T18244] lo speed is unknown, defaulting to 1000 [ 511.598159][T18097] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.610568][T18097] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45215 - 0 [ 511.633165][T18097] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37677 - 0 [ 511.653970][T18097] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 511.877536][T18244] lo speed is unknown, defaulting to 1000 [ 511.954511][T18261] lo speed is unknown, defaulting to 1000 [ 512.063294][T18261] lo speed is unknown, defaulting to 1000 [ 512.113500][T18266] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 512.155742][ T5850] Bluetooth: hci1: command tx timeout [ 512.248304][T18266] 8021q: adding VLAN 0 to HW filter on device bond10 [ 512.275489][T18097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 512.364497][T18268] bond10: (slave ip6gretap1): making interface the new active one [ 512.386644][T18268] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 512.447127][T18270] veth7: entered promiscuous mode [ 512.467900][T18270] bond10: (slave veth7): Enslaving as an active interface with a down link [ 512.498893][T18266] erspan0: entered allmulticast mode [ 512.542344][T18097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.579086][T18097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.626373][T18097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.754588][T18284] netlink: 'syz.2.3033': attribute type 7 has an invalid length. [ 512.776893][T18284] netlink: 'syz.2.3033': attribute type 3 has an invalid length. [ 512.785276][T18261] lo speed is unknown, defaulting to 1000 [ 512.791623][T18284] __nla_validate_parse: 3 callbacks suppressed [ 512.791640][T18284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3033'. [ 513.205054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 513.213270][ C0] lec:lec_tx_timeout: lec0 [ 513.299071][T18097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.377778][T18097] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.440743][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.448016][ T7029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.484582][T18302] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3039'. [ 513.502300][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.509585][ T7029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.634557][T18309] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 513.650646][T18309] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 513.663019][T18309] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 513.712729][T18313] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 513.867681][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3043'. [ 514.062798][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3044'. [ 514.231811][T18097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.247120][ T5850] Bluetooth: hci1: command tx timeout [ 514.266485][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 514.276940][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3048'. [ 514.297545][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 514.307283][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 514.322336][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 514.343602][T18334] veth13: entered promiscuous mode [ 514.356554][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 514.528758][T18338] team0 (unregistering): Port device team_slave_0 removed [ 514.530042][T18344] netlink: 'syz.1.3051': attribute type 39 has an invalid length. [ 514.551361][T18338] team0 (unregistering): Port device team_slave_1 removed [ 514.711227][T18097] veth0_vlan: entered promiscuous mode [ 514.778075][T18097] veth1_vlan: entered promiscuous mode [ 514.913528][T18356] lo speed is unknown, defaulting to 1000 [ 514.961795][T18097] veth0_macvtap: entered promiscuous mode [ 514.983713][T18097] veth1_macvtap: entered promiscuous mode [ 515.006512][T18356] lo speed is unknown, defaulting to 1000 [ 515.133369][T18097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.203810][T18097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.272667][ T7035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.330165][ T7035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.358097][ T7035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.400469][ T7035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.437262][T18374] tc_dump_action: action bad kind [ 515.683476][ T7036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.706800][ T7036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.839068][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.865090][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.175529][T18356] lo speed is unknown, defaulting to 1000 [ 516.340912][T18402] bridge0: entered promiscuous mode [ 516.359710][T18402] macsec1: entered allmulticast mode [ 516.378393][T18402] bridge0: entered allmulticast mode [ 516.427691][T18402] bridge0: port 3(macsec1) entered blocking state [ 516.439591][T18402] bridge0: port 3(macsec1) entered disabled state [ 516.544153][T18402] bridge0: left allmulticast mode [ 516.571814][T18402] bridge0: left promiscuous mode [ 517.011678][T18418] sctp: [Deprecated]: syz.4.3066 (pid 18418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.011678][T18418] Use struct sctp_sack_info instead [ 517.230386][ T5839] team0: Port device macvlan2 removed [ 517.359384][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 517.372952][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 517.382805][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 517.398811][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 517.410162][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.543423][T18430] lo speed is unknown, defaulting to 1000 [ 517.554108][T18430] lo speed is unknown, defaulting to 1000 [ 517.888468][T18450] tipc: Started in network mode [ 517.893523][T18450] tipc: Node identity 12217d066a91, cluster identity 4711 [ 517.901026][T18450] tipc: Enabled bearer , priority 0 [ 517.915047][T18450] syzkaller0: entered promiscuous mode [ 517.920592][T18450] syzkaller0: entered allmulticast mode [ 518.016455][T18430] lo speed is unknown, defaulting to 1000 [ 518.490719][T18465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.517964][T18470] netlink: 'syz.0.3076': attribute type 74 has an invalid length. [ 518.578181][T18468] netlink: 'syz.0.3076': attribute type 4 has an invalid length. [ 518.590788][T18430] chnl_net:caif_netlink_parms(): no params data found [ 519.015141][ T5924] tipc: Node number set to 2024832262 [ 519.173885][T18465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.216554][T18448] tipc: Resetting bearer [ 519.269981][T18448] tipc: Disabling bearer [ 519.374219][T18465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.526195][ T51] Bluetooth: hci0: command tx timeout [ 519.573076][T18465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.763343][T18500] __nla_validate_parse: 9 callbacks suppressed [ 519.763364][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 519.804269][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.822927][T18430] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.846265][T18430] bridge_slave_0: entered allmulticast mode [ 519.865610][T18430] bridge_slave_0: entered promiscuous mode [ 519.960593][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.970805][T18430] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.980757][T18430] bridge_slave_1: entered allmulticast mode [ 520.042356][T18430] bridge_slave_1: entered promiscuous mode [ 520.066174][T18503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.111463][T18503] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.278395][T18430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.303005][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.323006][T18511] can: request_module (can-proto-0) failed. [ 520.359885][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.382544][T18430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.467251][ T3522] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.354173][T18526] dvmrp0: entered allmulticast mode [ 521.406718][T18430] team0: Port device team_slave_0 added [ 521.429052][ T7035] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.467546][T18430] team0: Port device team_slave_1 added [ 521.572532][T18549] netlink: 'syz.0.3088': attribute type 74 has an invalid length. [ 521.597302][ T51] Bluetooth: hci0: command tx timeout [ 521.658917][T18559] netlink: 'syz.0.3088': attribute type 4 has an invalid length. [ 521.686162][T18430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.703913][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.763962][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 521.773779][T18430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.853803][T18569] netlink: 'syz.3.3092': attribute type 3 has an invalid length. [ 521.870837][T18430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.913846][T18430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.997879][T18430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.023874][T18558] tipc: Enabled bearer , priority 0 [ 522.036320][T18563] syzkaller0: entered promiscuous mode [ 522.051963][T18563] syzkaller0: entered allmulticast mode [ 522.133413][T18558] tipc: Resetting bearer [ 522.159313][T18557] tipc: Resetting bearer [ 522.275855][T18557] tipc: Disabling bearer [ 522.401115][T18430] hsr_slave_0: entered promiscuous mode [ 522.408210][T18593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3098'. [ 522.423832][T18430] hsr_slave_1: entered promiscuous mode [ 522.441964][T18430] debugfs: 'hsr0' already exists in 'hsr' [ 522.457831][T18430] Cannot create hsr debugfs directory [ 522.764257][T18602] geneve2: entered promiscuous mode [ 522.771710][T18602] geneve2: entered allmulticast mode [ 522.816651][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 34927 - 0 [ 522.839084][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 48941 - 0 [ 522.863335][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 34927 - 0 [ 522.883006][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 48941 - 0 [ 522.943680][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 34927 - 0 [ 522.965579][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 48941 - 0 [ 522.998191][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 34927 - 0 [ 523.013384][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 48941 - 0 [ 523.339488][T18632] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3106'. [ 523.488528][T18632] erspan0: entered promiscuous mode [ 523.682031][ T51] Bluetooth: hci0: command tx timeout [ 524.306091][T18430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.344582][T18430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 524.407326][T18430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 524.561237][T18430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 524.568436][T18677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3111'. [ 524.584066][T18674] tipc: Bearer : already 2 bearers with priority 10 [ 524.599680][T18674] tipc: Bearer : trying with adjusted priority [ 524.617137][T18674] tipc: Enabled bearer , priority 9 [ 524.640671][T18678] netlink: 'syz.3.3116': attribute type 1 has an invalid length. [ 524.740578][T18690] pim6reg1: entered promiscuous mode [ 524.752300][T18690] pim6reg1: entered allmulticast mode [ 524.974053][T18430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.059050][T18430] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.076609][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.083816][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.117955][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.125291][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.310409][T18715] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 525.399593][T18719] netlink: 'syz.2.3124': attribute type 3 has an invalid length. [ 525.758316][ T51] Bluetooth: hci0: command tx timeout [ 525.802845][ T5847] cgroup: fork rejected by pids controller in /syz0 [ 525.983565][T18430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.394338][T18430] veth0_vlan: entered promiscuous mode [ 526.413877][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 526.549306][T18430] veth1_vlan: entered promiscuous mode [ 526.642029][T18430] veth0_macvtap: entered promiscuous mode [ 526.662142][T18430] veth1_macvtap: entered promiscuous mode [ 526.714181][T18430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.743744][T18430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.777548][ T7029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.806788][ T7029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.825986][ T7029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.842703][ T7029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.097681][T18776] vlan2: entered promiscuous mode [ 527.102795][T18776] macvtap0: entered promiscuous mode [ 527.173101][T18778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3134'. [ 527.232223][T18774] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 527.246421][T18774] CPU: 0 UID: 0 PID: 18774 Comm: syz.2.3132 Not tainted syzkaller #0 PREEMPT(full) [ 527.246475][T18774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.246495][T18774] Call Trace: [ 527.246511][T18774] [ 527.246522][T18774] dump_stack_lvl+0x189/0x250 [ 527.246560][T18774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.246590][T18774] ? __pfx__printk+0x10/0x10 [ 527.246631][T18774] ? kernfs_path_from_node+0x2f/0x290 [ 527.246655][T18774] ? kernfs_path_from_node+0x250/0x290 [ 527.246676][T18774] ? kernfs_path_from_node+0x2f/0x290 [ 527.246703][T18774] sysfs_warn_dup+0x8e/0xa0 [ 527.246740][T18774] sysfs_do_create_link_sd+0xc0/0x110 [ 527.246765][T18774] device_add_class_symlinks+0x1cf/0x240 [ 527.246803][T18774] device_add+0x475/0xb50 [ 527.246839][T18774] wiphy_register+0x1c81/0x2aa0 [ 527.246887][T18774] ? __pfx_wiphy_register+0x10/0x10 [ 527.246913][T18774] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 527.246956][T18774] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 527.247003][T18774] ieee80211_register_hw+0x3473/0x40d0 [ 527.247057][T18774] ? ieee80211_register_hw+0x14b1/0x40d0 [ 527.247103][T18774] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 527.247136][T18774] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 527.247176][T18774] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 527.247211][T18774] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 527.247255][T18774] ? __hrtimer_setup+0x187/0x210 [ 527.247278][T18774] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 527.247312][T18774] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 527.247374][T18774] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 527.247398][T18774] ? trace_kmalloc+0x1f/0xd0 [ 527.247421][T18774] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 527.247455][T18774] ? kstrndup+0xbf/0x160 [ 527.247502][T18774] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 527.247535][T18774] ? __pfx___nla_validate_parse+0x10/0x10 [ 527.247576][T18774] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.247615][T18774] ? __nla_parse+0x40/0x60 [ 527.247640][T18774] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 527.247682][T18774] genl_family_rcv_msg_doit+0x212/0x300 [ 527.247723][T18774] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 527.247771][T18774] ? bpf_lsm_capable+0x9/0x20 [ 527.247796][T18774] ? security_capable+0x7e/0x2e0 [ 527.247834][T18774] genl_rcv_msg+0x60e/0x790 [ 527.247873][T18774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.247902][T18774] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 527.247945][T18774] netlink_rcv_skb+0x208/0x470 [ 527.247966][T18774] ? __lock_acquire+0xab9/0xd20 [ 527.247995][T18774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.248028][T18774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.248075][T18774] ? down_read+0x1ad/0x2e0 [ 527.248103][T18774] genl_rcv+0x28/0x40 [ 527.248130][T18774] netlink_unicast+0x82c/0x9e0 [ 527.248176][T18774] ? __pfx_netlink_unicast+0x10/0x10 [ 527.248215][T18774] ? netlink_sendmsg+0x642/0xb30 [ 527.248236][T18774] ? skb_put+0x11b/0x210 [ 527.248266][T18774] netlink_sendmsg+0x805/0xb30 [ 527.248302][T18774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.248331][T18774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 527.248365][T18774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.248400][T18774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.248431][T18774] __sock_sendmsg+0x21c/0x270 [ 527.248469][T18774] ____sys_sendmsg+0x505/0x830 [ 527.248505][T18774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.248544][T18774] ? import_iovec+0x74/0xa0 [ 527.248575][T18774] ___sys_sendmsg+0x21f/0x2a0 [ 527.248605][T18774] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.248679][T18774] ? __fget_files+0x2a/0x420 [ 527.248708][T18774] ? __fget_files+0x3a0/0x420 [ 527.248746][T18774] __x64_sys_sendmsg+0x19b/0x260 [ 527.248777][T18774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.248818][T18774] ? rcu_is_watching+0x15/0xb0 [ 527.248848][T18774] ? do_syscall_64+0xbe/0x3b0 [ 527.248876][T18774] do_syscall_64+0xfa/0x3b0 [ 527.248897][T18774] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.248932][T18774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.248955][T18774] ? clear_bhb_loop+0x60/0xb0 [ 527.248991][T18774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.249013][T18774] RIP: 0033:0x7f60b278eec9 [ 527.249034][T18774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.249054][T18774] RSP: 002b:00007f60b35f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.249079][T18774] RAX: ffffffffffffffda RBX: 00007f60b29e5fa0 RCX: 00007f60b278eec9 [ 527.249096][T18774] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 527.249111][T18774] RBP: 00007f60b2811f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.249124][T18774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.249137][T18774] R13: 00007f60b29e6038 R14: 00007f60b29e5fa0 R15: 00007ffe38808d28 [ 527.249175][T18774] [ 527.770058][ T7032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.782124][T18777] netlink: 'syz.2.3132': attribute type 1 has an invalid length. [ 527.831979][T18777] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3132'. [ 527.873081][ T7032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.986333][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.026296][T18794] netlink: 'syz.4.3136': attribute type 2 has an invalid length. [ 528.035596][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.057364][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 528.401340][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.413315][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.423766][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.438730][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.450234][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.525747][T18811] lo speed is unknown, defaulting to 1000 [ 528.531802][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 528.536816][T18811] lo speed is unknown, defaulting to 1000 [ 528.856101][T18821] lo speed is unknown, defaulting to 1000 [ 528.934492][T18829] lo speed is unknown, defaulting to 1000 [ 529.061197][T18821] lo speed is unknown, defaulting to 1000 [ 529.069134][T18811] lo speed is unknown, defaulting to 1000 [ 529.184552][T18838] netlink: 'syz.4.3145': attribute type 3 has an invalid length. [ 529.992243][T18829] lo speed is unknown, defaulting to 1000 [ 530.017764][T18821] lo speed is unknown, defaulting to 1000 [ 530.111274][T18811] chnl_net:caif_netlink_parms(): no params data found [ 530.476074][ T51] Bluetooth: hci2: command tx timeout [ 530.784933][T18811] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.796831][T18811] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.809129][T18811] bridge_slave_0: entered allmulticast mode [ 530.822958][T18811] bridge_slave_0: entered promiscuous mode [ 530.833186][T18829] lo speed is unknown, defaulting to 1000 [ 530.834113][T18811] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.848599][T18811] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.896035][T18811] bridge_slave_1: entered allmulticast mode [ 530.904185][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 530.932011][T18811] bridge_slave_1: entered promiscuous mode [ 531.144419][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 531.177678][T18811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.234195][T18811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.320272][T18811] team0: Port device team_slave_0 added [ 531.368923][T18811] team0: Port device team_slave_1 added [ 531.471897][T18881] netlink: 'syz.1.3155': attribute type 1 has an invalid length. [ 531.502053][T18811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.521418][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.588065][T18811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.662692][T18811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.677962][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.730583][T18811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.767671][T18881] erspan0: entered allmulticast mode [ 531.973291][T18811] hsr_slave_0: entered promiscuous mode [ 531.997588][T18811] hsr_slave_1: entered promiscuous mode [ 532.010491][T18811] debugfs: 'hsr0' already exists in 'hsr' [ 532.027612][T18811] Cannot create hsr debugfs directory [ 532.326918][T18908] netlink: 'syz.3.3161': attribute type 74 has an invalid length. [ 532.348276][T18908] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 532.418107][T18914] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 532.556632][ T51] Bluetooth: hci2: command tx timeout [ 532.783693][T18923] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 533.128946][T18811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.145491][T18811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.205523][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.213672][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.402485][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.421107][T18941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.581828][T18811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.608206][ T7035] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.633285][ T7035] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.651027][ T7029] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.663936][ T7029] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.673859][T18811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.714979][T18958] netlink: 'syz.4.3172': attribute type 4 has an invalid length. [ 533.728264][T18958] netlink: 'syz.4.3172': attribute type 4 has an invalid length. [ 534.020526][T18811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.082777][T18811] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.130903][T18981] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 534.167382][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.174675][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.194240][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.201705][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.204330][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 534.221238][T18988] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 534.231736][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 534.240983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 534.241020][ C0] lec:lec_tx_timeout: lec0 [ 534.344706][T18981] sch_fq: defrate 0 ignored. [ 534.531616][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3181'. [ 534.576615][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 534.629436][T19004] bridge_slave_1: left allmulticast mode [ 534.629805][T19010] netlink: 'syz.2.3184': attribute type 4 has an invalid length. [ 534.636647][T19004] bridge_slave_1: left promiscuous mode [ 534.645011][ T51] Bluetooth: hci2: command tx timeout [ 534.660744][T19004] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.677846][T19004] bridge_slave_0: left allmulticast mode [ 534.686770][T19016] netlink: 'syz.2.3184': attribute type 4 has an invalid length. [ 534.713624][T19004] bridge_slave_0: left promiscuous mode [ 534.722143][T19004] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.048471][ T6594] lo speed is unknown, defaulting to 1000 [ 535.065375][ T5924] lo speed is unknown, defaulting to 1000 [ 535.118203][T18811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.140085][T19025] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3185'. [ 535.174613][T19027] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3186'. [ 535.178195][T19009] lo speed is unknown, defaulting to 1000 [ 535.210709][T19027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3186'. [ 535.227396][T19009] lo speed is unknown, defaulting to 1000 [ 535.237355][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'. [ 535.266830][T19014] lo speed is unknown, defaulting to 1000 [ 535.427838][T18811] veth0_vlan: entered promiscuous mode [ 535.505472][T19037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3188'. [ 535.528267][T18811] veth1_vlan: entered promiscuous mode [ 535.633655][T18811] veth0_macvtap: entered promiscuous mode [ 535.668514][T18811] veth1_macvtap: entered promiscuous mode [ 535.758989][T18811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.786534][T18811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.823254][ T7036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.868319][ T7036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.894554][ T7036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.927765][T19049] netlink: 'syz.2.3191': attribute type 3 has an invalid length. [ 535.953784][ T7036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.970029][T19049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3191'. [ 536.110235][T19009] lo speed is unknown, defaulting to 1000 [ 536.114759][T19014] lo speed is unknown, defaulting to 1000 [ 536.172927][T19051] lo speed is unknown, defaulting to 1000 [ 536.214530][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.249044][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.440937][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.449504][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.714987][ T51] Bluetooth: hci2: command tx timeout [ 536.865439][T19061] lo speed is unknown, defaulting to 1000 [ 537.051040][T19051] lo speed is unknown, defaulting to 1000 [ 537.438693][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.453307][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.466433][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.475991][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.489294][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 537.666561][T19051] lo speed is unknown, defaulting to 1000 [ 537.761498][T19065] lo speed is unknown, defaulting to 1000 [ 537.788161][T19014] lo speed is unknown, defaulting to 1000 [ 537.806847][T19061] lo speed is unknown, defaulting to 1000 [ 537.884393][T19068] geneve2: entered promiscuous mode [ 538.383951][T19086] syzkaller1: entered promiscuous mode [ 538.390152][T19086] syzkaller1: entered allmulticast mode [ 538.476517][T19065] lo speed is unknown, defaulting to 1000 [ 538.549999][T19089] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 538.569437][T19089] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 538.726947][T19061] lo speed is unknown, defaulting to 1000 [ 538.779928][T19065] lo speed is unknown, defaulting to 1000 [ 539.595615][ T5850] Bluetooth: hci3: command tx timeout [ 539.700946][ T6584] IPVS: starting estimator thread 0... [ 539.735786][T19112] IPVS: set_ctl: invalid protocol: 134 10.1.1.2:20001 [ 539.836386][T19113] IPVS: using max 29 ests per chain, 69600 per kthread [ 539.858495][ T7031] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 539.876815][T19065] chnl_net:caif_netlink_parms(): no params data found [ 540.284346][T19065] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.299933][T19065] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.307520][T19065] bridge_slave_0: entered allmulticast mode [ 540.329245][T19065] bridge_slave_0: entered promiscuous mode [ 540.360891][T19065] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.368995][T19065] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.378048][T19065] bridge_slave_1: entered allmulticast mode [ 540.386232][T19065] bridge_slave_1: entered promiscuous mode [ 540.469952][T19140] syzkaller1: entered promiscuous mode [ 540.478322][T19140] syzkaller1: entered allmulticast mode [ 540.573050][T19065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.597556][T19065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.676647][T19065] team0: Port device team_slave_0 added [ 540.701359][T19065] team0: Port device team_slave_1 added [ 540.978196][T19065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.986040][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.014125][T19065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.036241][T19065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.043277][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.071900][T19065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.110769][T19164] lo speed is unknown, defaulting to 1000 [ 541.123440][T19164] lo speed is unknown, defaulting to 1000 [ 541.249519][T19167] __nla_validate_parse: 1 callbacks suppressed [ 541.249544][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 541.260166][T19065] hsr_slave_0: entered promiscuous mode [ 541.274252][T19065] hsr_slave_1: entered promiscuous mode [ 541.287925][T19065] debugfs: 'hsr0' already exists in 'hsr' [ 541.307679][T19065] Cannot create hsr debugfs directory [ 541.498920][T19164] lo speed is unknown, defaulting to 1000 [ 541.677671][ T5850] Bluetooth: hci3: command tx timeout [ 541.867155][T19193] netlink: 'syz.1.3225': attribute type 4 has an invalid length. [ 541.918718][T19195] netlink: 'syz.1.3225': attribute type 4 has an invalid length. [ 541.953843][T19178] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 542.091610][T19194] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 542.145052][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3224'. [ 542.176242][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'. [ 542.269679][T19065] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.285752][T19065] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34927 - 0 [ 542.299475][T19065] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 48941 - 0 [ 542.311422][T19206] Bluetooth: MGMT ver 1.23 [ 542.545328][T19205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.600821][T19207] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 542.669321][T19065] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.706240][T19065] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34927 - 0 [ 542.735662][T19065] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 48941 - 0 [ 542.828660][T19065] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.871331][T19065] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34927 - 0 [ 542.888978][T19065] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 48941 - 0 [ 542.933208][T19233] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.941026][T19233] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.953359][T19233] bridge0: entered allmulticast mode [ 542.992408][T19065] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.016041][T19065] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34927 - 0 [ 543.037932][T19244] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 543.048005][T19065] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 48941 - 0 [ 543.103388][T19244] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 543.293566][T19253] bridge_slave_1: left allmulticast mode [ 543.320313][T19253] bridge_slave_1: left promiscuous mode [ 543.350119][T19253] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.423163][T19253] bridge_slave_0: left allmulticast mode [ 543.451609][T19253] bridge_slave_0: left promiscuous mode [ 543.476732][T19253] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.627164][T19264] macvlan2: entered promiscuous mode [ 543.632599][T19264] macvlan2: entered allmulticast mode [ 543.765292][ T51] Bluetooth: hci3: command tx timeout [ 543.766915][T19065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.788924][T19276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 543.829788][T19277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3245'. [ 543.842919][T19276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 543.861892][T19065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.921931][T19065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.965835][T19065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.993031][T19283] netlink: 'syz.3.3248': attribute type 4 has an invalid length. [ 544.036086][T19281] tipc: New replicast peer: 255.255.255.255 [ 544.042444][T19283] netlink: 'syz.3.3248': attribute type 4 has an invalid length. [ 544.042960][T19281] tipc: Enabled bearer , priority 10 [ 544.378807][T19065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.437978][T19065] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.487100][ T7035] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.494412][ T7035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.542449][ T7035] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.549704][ T7035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.723622][T19324] netlink: 'syz.1.3260': attribute type 4 has an invalid length. [ 544.737214][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3259'. [ 544.756673][T19324] netlink: 'syz.1.3260': attribute type 4 has an invalid length. [ 544.767599][T19323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3259'. [ 545.016358][T19333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3262'. [ 545.021868][T19065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.157138][T19065] veth0_vlan: entered promiscuous mode [ 545.176726][T19065] veth1_vlan: entered promiscuous mode [ 545.253951][T19065] veth0_macvtap: entered promiscuous mode [ 545.288769][T19065] veth1_macvtap: entered promiscuous mode [ 545.398651][T19065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.440524][T19065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.513312][T19348] rdma_rxe: rxe_newlink: failed to add lo [ 545.601441][T19348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.619182][ T7036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.641425][ T7036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.731428][ T7036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.742337][ T7036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.813732][T19358] dummy0: entered promiscuous mode [ 545.827480][T19357] dummy0: left promiscuous mode [ 545.835397][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 545.908402][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068f44800: rx timeout, send abort [ 545.958759][T19368] netlink: 'syz.0.3270': attribute type 4 has an invalid length. [ 546.053032][T19366] tipc: Started in network mode [ 546.073230][T19366] tipc: Node identity ba1883765ab1, cluster identity 4711 [ 546.083516][T19366] tipc: Enabled bearer , priority 0 [ 546.106051][T19369] syzkaller0: entered promiscuous mode [ 546.111673][T19369] syzkaller0: entered allmulticast mode [ 546.139345][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.152701][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.232491][T19381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 546.268065][T19366] tipc: Resetting bearer [ 546.282297][ T7036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.309193][T19365] tipc: Resetting bearer [ 546.322966][ T7036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.355635][T19365] tipc: Disabling bearer [ 546.417058][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068f44800: abort rx timeout. Force session deactivation [ 546.707134][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3195'. [ 546.781049][T19390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.896163][T19394] lo speed is unknown, defaulting to 1000 [ 546.903770][T19394] lo speed is unknown, defaulting to 1000 [ 547.386104][T19394] lo speed is unknown, defaulting to 1000 [ 547.730090][T19428] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3287'. [ 547.918730][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 547.968694][T19440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3289'. [ 548.013417][T19441] tipc: Enabled bearer , priority 0 [ 548.043007][T19443] nbd: must specify at least one socket [ 548.060174][T19442] syzkaller0: entered promiscuous mode [ 548.070603][T19442] syzkaller0: entered allmulticast mode [ 548.224973][T19441] tipc: Resetting bearer [ 548.302896][T19441] tipc: Disabling bearer [ 548.648708][T19465] lo speed is unknown, defaulting to 1000 [ 548.656733][T19465] lo speed is unknown, defaulting to 1000 [ 549.413056][T19465] lo speed is unknown, defaulting to 1000 [ 549.544247][T19484] validate_nla: 3 callbacks suppressed [ 549.544268][T19484] netlink: 'syz.3.3300': attribute type 25 has an invalid length. [ 549.680322][T19487] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 549.691247][T19487] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3302'. [ 549.702013][T19487] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 549.712818][T19487] netlink: 'syz.1.3302': attribute type 2 has an invalid length. [ 549.768887][T19489] tipc: Started in network mode [ 549.780254][T19489] tipc: Node identity 46080d545ffb, cluster identity 4711 [ 549.858819][T19489] tipc: Enabled bearer , priority 0 [ 549.893841][T19494] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3305'. [ 549.932646][T19494] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3305'. [ 549.955545][T19494] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3305'. [ 549.967206][T19492] syzkaller0: entered promiscuous mode [ 549.972916][T19492] syzkaller0: entered allmulticast mode [ 550.037741][T19489] tipc: Resetting bearer [ 550.052056][T19488] tipc: Resetting bearer [ 550.116419][T19488] tipc: Disabling bearer [ 550.433409][T19501] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 550.453427][T19501] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3308'. [ 550.552668][T19501] ip6tnl1: entered promiscuous mode [ 550.566087][T19503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3310'. [ 550.591125][T19505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3309'. [ 550.737246][T19510] netlink: 'syz.1.3306': attribute type 9 has an invalid length. [ 550.779158][T19510] netlink: 'syz.1.3306': attribute type 6 has an invalid length. [ 551.449962][T19521] netlink: 'syz.1.3314': attribute type 1 has an invalid length. [ 551.538813][T19521] bond2: entered promiscuous mode [ 551.547935][T19521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.620699][T19521] bond2: (slave bridge1): making interface the new active one [ 551.648581][T19521] bridge1: entered promiscuous mode [ 551.678490][T19521] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 551.987305][T19535] bond2: Removing last ns target with arp_interval on [ 552.093118][T19546] netlink: 'syz.3.3320': attribute type 10 has an invalid length. [ 552.137607][T19546] __nla_validate_parse: 2 callbacks suppressed [ 552.137631][T19546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3320'. [ 552.231809][T19543] bond1: option lacp_active: invalid value (7) [ 552.245905][T19543] bond1 (unregistering): Released all slaves [ 552.283068][T19546] dummy0: entered promiscuous mode [ 552.290599][T19546] bridge0: port 3(dummy0) entered blocking state [ 552.326919][T19546] bridge0: port 3(dummy0) entered disabled state [ 552.346030][T19546] dummy0: entered allmulticast mode [ 552.369045][T19546] bridge0: port 3(dummy0) entered blocking state [ 552.375661][T19546] bridge0: port 3(dummy0) entered forwarding state [ 552.706998][T19570] 8021q: VLANs not supported on caif0 [ 553.029892][T19591] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 553.041004][T19591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3330'. [ 553.236809][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'. [ 553.270717][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3333'. [ 553.326167][T19607] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3332'. [ 553.345260][T19628] bridge1: entered allmulticast mode [ 553.401178][T19639] batadv2: entered promiscuous mode [ 553.414067][T19639] batadv2: entered allmulticast mode [ 553.557163][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3336'. [ 553.588491][T19645] netlink: 'syz.3.3336': attribute type 10 has an invalid length. [ 553.614410][T19645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.648925][T19645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.674466][T19645] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 553.977824][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 554.005605][T19650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3337'. [ 554.016329][T19660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3339'. [ 554.032097][T19650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 554.350030][T19645] lo speed is unknown, defaulting to 1000 [ 554.358876][T19677] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 554.371460][T19645] lo speed is unknown, defaulting to 1000 [ 554.809526][T19701] validate_nla: 1 callbacks suppressed [ 554.809549][T19701] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 554.899462][T19701] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 554.975760][T19701] team0: Failed to send options change via netlink (err -105) [ 555.005465][T19701] team0: Port device netdevsim0 added [ 555.054319][T19645] lo speed is unknown, defaulting to 1000 [ 555.594370][T19715] bridge2: entered promiscuous mode [ 555.600361][T19715] bridge2: entered allmulticast mode [ 555.665883][T19715] team0: Port device bridge2 added [ 556.220922][T19734] netlink: 'syz.4.3361': attribute type 4 has an invalid length. [ 556.236654][T19632] wlan0: Trigger new scan to find an IBSS to join [ 556.288352][T19742] netlink: 'syz.4.3361': attribute type 4 has an invalid length. [ 556.567185][T19757] bridge0: entered promiscuous mode [ 557.028063][T19776] tipc: Started in network mode [ 557.033213][T19776] tipc: Node identity 02b9b7f9feae, cluster identity 4711 [ 557.041990][T19776] tipc: Enabled bearer , priority 0 [ 557.055576][T19776] syzkaller0: entered promiscuous mode [ 557.061118][T19776] syzkaller0: entered allmulticast mode [ 557.112723][T19776] tipc: Resetting bearer [ 557.163354][T19775] tipc: Resetting bearer [ 557.188683][T19775] tipc: Disabling bearer [ 557.223497][T19782] lo speed is unknown, defaulting to 1000 [ 557.231360][T19782] lo speed is unknown, defaulting to 1000 [ 557.287716][T19785] bond0: (slave rose0): Error: Device can not be enslaved while up [ 557.550834][T19797] __nla_validate_parse: 5 callbacks suppressed [ 557.550856][T19797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 557.572006][T19797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3378'. [ 558.018875][T19782] lo speed is unknown, defaulting to 1000 [ 558.328208][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3385'. [ 558.733788][T19831] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3386'. [ 559.172613][T19834] lo speed is unknown, defaulting to 1000 [ 559.195598][T19631] wlan0: Trigger new scan to find an IBSS to join [ 559.285241][T19834] lo speed is unknown, defaulting to 1000 [ 560.026769][T19843] lo speed is unknown, defaulting to 1000 [ 560.034608][T19837] lo speed is unknown, defaulting to 1000 [ 560.036788][T19834] lo speed is unknown, defaulting to 1000 [ 560.069119][T19843] lo speed is unknown, defaulting to 1000 [ 560.398696][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 560.511004][T19873] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 560.521423][T19873] netlink: 'syz.1.3400': attribute type 2 has an invalid length. [ 560.554508][T19837] lo speed is unknown, defaulting to 1000 [ 560.562294][T19843] lo speed is unknown, defaulting to 1000 [ 560.869242][T19884] netlink: 'syz.2.3403': attribute type 10 has an invalid length. [ 561.029495][T19837] lo speed is unknown, defaulting to 1000 [ 561.133820][T19892] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3406'. [ 561.389022][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 561.406924][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 561.418907][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 561.453452][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 561.501767][T19907] netlink: 'syz.1.3411': attribute type 18 has an invalid length. [ 561.510875][T19906] netlink: 'syz.1.3411': attribute type 18 has an invalid length. [ 561.963618][T19917] syz.2.3415 (19917) used obsolete PPPIOCDETACH ioctl [ 562.116642][T19920] 8021q: VLANs not supported on ip6tnl0 [ 562.162397][T19623] wlan0: Trigger new scan to find an IBSS to join [ 562.642685][T19942] lo speed is unknown, defaulting to 1000 [ 562.687422][T19942] lo speed is unknown, defaulting to 1000 [ 562.804290][T19958] lo speed is unknown, defaulting to 1000 [ 562.868403][T19960] netlink: 'syz.0.3424': attribute type 4 has an invalid length. [ 563.161441][T19632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.190775][T19974] __nla_validate_parse: 4 callbacks suppressed [ 563.190799][T19974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3432'. [ 563.335937][T19958] lo speed is unknown, defaulting to 1000 [ 563.360469][T19942] lo speed is unknown, defaulting to 1000 [ 563.843589][T19958] lo speed is unknown, defaulting to 1000 [ 564.551889][ T51] block nbd1: Receive control failed (result -32) [ 564.805327][T20008] sctp: [Deprecated]: syz.2.3442 (pid 20008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.805327][T20008] Use struct sctp_sack_info instead [ 565.301758][T20027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3448'. [ 565.452641][T20042] lo speed is unknown, defaulting to 1000 [ 565.461749][T20042] lo speed is unknown, defaulting to 1000 [ 565.991722][T20042] lo speed is unknown, defaulting to 1000 [ 566.045190][T20027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.669647][T20075] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3461'. [ 566.978245][T20083] lo speed is unknown, defaulting to 1000 [ 567.009002][T20092] netlink: 'syz.3.3462': attribute type 10 has an invalid length. [ 567.016326][T20085] lo speed is unknown, defaulting to 1000 [ 567.017612][T20092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3462'. [ 567.052309][T20092] batman_adv: batadv0: Adding interface: virt_wifi0 [ 567.102572][T20092] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.162047][T20092] batman_adv: batadv0: Interface activated: virt_wifi0 [ 567.231007][T20083] lo speed is unknown, defaulting to 1000 [ 567.521466][T20107] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 567.530157][T20107] netlink: 'syz.4.3468': attribute type 6 has an invalid length. [ 567.539115][T20107] netlink: 'syz.4.3468': attribute type 3 has an invalid length. [ 567.565124][T20109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.696717][T20115] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3471'. [ 567.702532][T20113] lo speed is unknown, defaulting to 1000 [ 567.715598][T20109] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3469'. [ 567.788425][T20085] lo speed is unknown, defaulting to 1000 [ 567.808993][T20083] lo speed is unknown, defaulting to 1000 [ 567.878131][T20122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 567.970108][T20122] erspan0: left promiscuous mode [ 568.043805][T20122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.052819][T20122] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 568.252379][T20130] lo speed is unknown, defaulting to 1000 [ 568.267846][T20129] lo speed is unknown, defaulting to 1000 [ 568.278795][T20133] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3475'. [ 568.377050][T20113] lo speed is unknown, defaulting to 1000 [ 568.446170][T20136] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.3476'. [ 568.447524][T20137] netlink: 1372 bytes leftover after parsing attributes in process `syz.4.3476'. [ 568.687075][T20130] lo speed is unknown, defaulting to 1000 [ 569.091266][T20129] lo speed is unknown, defaulting to 1000 [ 569.333076][T20129] lo speed is unknown, defaulting to 1000 [ 569.353964][T20141] lo speed is unknown, defaulting to 1000 [ 569.361777][T20130] lo speed is unknown, defaulting to 1000 [ 569.373415][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 569.531712][T20085] lo speed is unknown, defaulting to 1000 [ 569.531745][T20141] lo speed is unknown, defaulting to 1000 [ 569.620518][T20113] lo speed is unknown, defaulting to 1000 [ 569.896314][T20141] lo speed is unknown, defaulting to 1000 [ 570.901655][T20154] vlan0: entered promiscuous mode [ 571.359523][T20164] syzkaller0: entered promiscuous mode [ 571.375528][T20164] syzkaller0: entered allmulticast mode [ 571.421316][T20168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3486'. [ 571.438301][T20168] netlink: 'syz.2.3486': attribute type 7 has an invalid length. [ 571.447742][T20168] netlink: 'syz.2.3486': attribute type 8 has an invalid length. [ 571.460010][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 571.706880][T20179] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3489'. [ 571.887953][T20182] Bluetooth: MGMT ver 1.23 [ 571.899893][T20182] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 571.920788][T20186] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 572.092306][T20191] netlink: 'syz.2.3493': attribute type 96 has an invalid length. [ 572.175826][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 572.193681][T20198] lo speed is unknown, defaulting to 1000 [ 572.224389][T20198] lo speed is unknown, defaulting to 1000 [ 572.225809][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.333767][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 572.374483][T20193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.453944][T20214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3499'. [ 572.486715][T20193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.501116][T20193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.733157][T20223] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3501'. [ 572.753285][T20198] lo speed is unknown, defaulting to 1000 [ 572.836730][T20226] lo: entered promiscuous mode [ 572.856826][T20226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.355723][T20248] netlink: 'syz.0.3508': attribute type 1 has an invalid length. [ 573.586219][T20248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.747316][T20259] bond1: (slave ip6erspan0): making interface the new active one [ 573.760565][T20259] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 573.851516][T20271] lo speed is unknown, defaulting to 1000 [ 573.889482][T20271] lo speed is unknown, defaulting to 1000 [ 573.993959][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 574.087419][T20279] lo speed is unknown, defaulting to 1000 [ 574.160850][T20290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3519'. [ 574.178062][T20290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3519'. [ 574.230120][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3519'. [ 574.253365][T20279] lo speed is unknown, defaulting to 1000 [ 574.262620][T20271] lo speed is unknown, defaulting to 1000 [ 574.371454][T20297] lo speed is unknown, defaulting to 1000 [ 574.385341][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 574.393465][ C0] lec:lec_tx_timeout: lec0 [ 574.496553][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'. [ 574.607297][T20279] lo speed is unknown, defaulting to 1000 [ 574.688923][T20311] netlink: 'syz.3.3522': attribute type 32 has an invalid length. [ 574.737207][T20311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3522'. [ 574.762581][T20297] lo speed is unknown, defaulting to 1000 [ 575.273807][T20297] lo speed is unknown, defaulting to 1000 [ 575.293842][T20320] lo speed is unknown, defaulting to 1000 [ 575.336744][T20320] lo speed is unknown, defaulting to 1000 [ 575.813167][T20338] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 575.905576][T20336] bridge0: port 3(erspan0) entered blocking state [ 575.912311][T20336] bridge0: port 3(erspan0) entered disabled state [ 575.928843][T20336] erspan0: entered allmulticast mode [ 575.938158][T20336] erspan0: left allmulticast mode [ 577.129643][T20320] lo speed is unknown, defaulting to 1000 [ 577.570400][T19633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.599500][T19633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.104344][T20359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3529'. [ 578.129658][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3529'. [ 578.513070][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'. [ 578.538373][T20377] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 578.567211][T20377] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 578.998141][T20403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3542'. [ 579.016340][T20409] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.3543'. [ 579.073092][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 579.158575][T20417] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 579.159043][T19629] bond0: (slave bond_slave_0): interface is now down [ 579.222067][T19629] bond0: (slave bond_slave_1): interface is now down [ 579.229798][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 579.286711][T19623] bond0: (slave bond_slave_0): interface is now down [ 579.293637][T19623] bond0: (slave bond_slave_1): interface is now down [ 579.356746][T19629] bond0: (slave bond_slave_0): interface is now down [ 579.367241][T19629] bond0: (slave bond_slave_1): interface is now down [ 579.398001][T19631] bond0: (slave bond_slave_0): interface is now down [ 579.454750][T19631] bond0: (slave bond_slave_1): interface is now down [ 579.485554][T19632] bond0: (slave bond_slave_0): interface is now down [ 579.505158][T19632] bond0: (slave bond_slave_1): interface is now down [ 579.565537][T19632] bond0: (slave bond_slave_0): interface is now down [ 579.572309][T19632] bond0: (slave bond_slave_1): interface is now down [ 579.636278][T19631] bond0: (slave bond_slave_0): interface is now down [ 579.647922][T19631] bond0: (slave bond_slave_1): interface is now down [ 579.688308][T19633] bond0: (slave bond_slave_0): interface is now down [ 579.691106][T20442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 579.707159][T19633] bond0: (slave bond_slave_1): interface is now down [ 579.725736][T19633] bond0: (slave bond_slave_0): interface is now down [ 579.736589][T19633] bond0: (slave bond_slave_1): interface is now down [ 579.788148][T19632] bond0: (slave bond_slave_0): interface is now down [ 579.793442][T20448] netlink: 'syz.1.3552': attribute type 5 has an invalid length. [ 579.798021][T19632] bond0: (slave bond_slave_1): interface is now down [ 579.825642][T19623] bond0: (slave bond_slave_0): interface is now down [ 579.835521][T19623] bond0: (slave bond_slave_1): interface is now down [ 579.855941][T19623] bond0: (slave bond_slave_0): interface is now down [ 579.863768][T19623] bond0: (slave bond_slave_1): interface is now down [ 579.898033][T19632] bond0: (slave bond_slave_0): interface is now down [ 579.909751][T19632] bond0: (slave bond_slave_1): interface is now down [ 579.951907][T19632] bond0: (slave bond_slave_0): interface is now down [ 579.960655][T19632] bond0: (slave bond_slave_1): interface is now down [ 579.986175][T19623] bond0: (slave bond_slave_0): interface is now down [ 579.996579][T19623] bond0: (slave bond_slave_1): interface is now down [ 580.020371][T19623] bond0: (slave bond_slave_0): interface is now down [ 580.030679][T19623] bond0: (slave bond_slave_1): interface is now down [ 580.060423][T20442] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 580.076446][T19631] bond0: (slave bond_slave_0): interface is now down [ 580.083195][T19631] bond0: (slave bond_slave_1): interface is now down [ 580.128513][T19631] bond0: now running without any active interface! [ 580.150268][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3550'. [ 580.181201][T20456] netlink: 'syz.0.3553': attribute type 3 has an invalid length. [ 580.195332][T20459] netlink: 'syz.2.3555': attribute type 2 has an invalid length. [ 580.243865][T20456] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3553'. [ 580.478311][T20475] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3556'. [ 580.592375][T20484] geneve2: entered promiscuous mode [ 580.794342][T20491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 580.801112][T20491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 580.811389][T20486] syz_tun: entered allmulticast mode [ 580.851532][T20487] syz_tun: left allmulticast mode [ 581.068287][T20496] lo speed is unknown, defaulting to 1000 [ 581.170582][T20496] lo speed is unknown, defaulting to 1000 [ 581.223890][T20495] lo speed is unknown, defaulting to 1000 [ 581.367309][T20511] vlan3: entered allmulticast mode [ 581.372497][T20511] bridge_slave_0: entered allmulticast mode [ 581.577164][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3571'. [ 581.676642][T20525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3573'. [ 581.878589][T20495] lo speed is unknown, defaulting to 1000 [ 581.886550][T20496] lo speed is unknown, defaulting to 1000 [ 582.168556][T20552] netlink: 'syz.0.3577': attribute type 4 has an invalid length. [ 582.228251][T20555] netlink: 'syz.0.3577': attribute type 4 has an invalid length. [ 582.602990][T20495] lo speed is unknown, defaulting to 1000 [ 582.699407][T20562] lo speed is unknown, defaulting to 1000 [ 583.070562][T20562] lo speed is unknown, defaulting to 1000 [ 583.085425][T20549] lo speed is unknown, defaulting to 1000 [ 583.616176][T20549] lo speed is unknown, defaulting to 1000 [ 583.956147][T20562] lo speed is unknown, defaulting to 1000 [ 584.002344][T20549] lo speed is unknown, defaulting to 1000 [ 584.531714][T20582] bond2 (unregistering): Released all slaves [ 584.794238][T20585] __nla_validate_parse: 4 callbacks suppressed [ 584.794260][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 585.810172][T20601] bond0: (slave rose0): Error: Device can not be enslaved while up [ 585.819465][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3590'. [ 585.838669][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3590'. [ 585.897198][T20604] netlink: 'syz.1.3592': attribute type 4 has an invalid length. [ 585.944332][T20603] netlink: 'syz.1.3592': attribute type 4 has an invalid length. [ 586.251889][T20623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3597'. [ 586.285595][T20623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3597'. [ 587.148018][T20649] netlink: 'syz.3.3606': attribute type 4 has an invalid length. [ 587.164447][T20649] netlink: 'syz.3.3606': attribute type 4 has an invalid length. [ 587.246411][T20652] syzkaller1: entered promiscuous mode [ 587.252081][T20652] syzkaller1: entered allmulticast mode [ 587.431648][T20664] 8021q: VLANs not supported on ipvlan1 [ 587.540245][T20669] tipc: Enabled bearer , priority 10 [ 587.621533][T20673] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 587.625239][T20678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'. [ 587.689051][T20677] bond1: invalid ARP target 0.0.0.0 specified for addition [ 587.707259][T20677] bond1: option arp_ip_target: invalid value (0) [ 587.828234][T20677] bond1 (unregistering): Released all slaves [ 588.186278][T20693] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 588.226177][T20693] netlink: 'syz.1.3619': attribute type 4 has an invalid length. [ 588.387725][T20698] lo speed is unknown, defaulting to 1000 [ 588.452359][T20703] lo speed is unknown, defaulting to 1000 [ 588.476461][T20698] lo speed is unknown, defaulting to 1000 [ 588.653502][T20722] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 588.665267][ T6594] tipc: Node number set to 3769205622 [ 589.016019][T20738] netlink: 'syz.4.3631': attribute type 10 has an invalid length. [ 589.033625][T20738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3631'. [ 589.117979][T20738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3631'. [ 589.149365][T20698] lo speed is unknown, defaulting to 1000 [ 589.153467][T20703] lo speed is unknown, defaulting to 1000 [ 589.497664][T20752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3635'. [ 589.632125][T20757] netlink: 'syz.2.3634': attribute type 4 has an invalid length. [ 589.682903][T20762] netlink: 'syz.2.3634': attribute type 4 has an invalid length. [ 589.807016][T20703] lo speed is unknown, defaulting to 1000 [ 589.877308][T20769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3638'. [ 589.904601][T20771] macsec1: entered promiscuous mode [ 589.924871][T20771] macsec1: entered allmulticast mode [ 589.953702][T20769] 8021q: VLANs not supported on ipvlan1 [ 590.273117][T20782] vxcan3: entered allmulticast mode [ 590.609361][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 590.898982][T20803] netlink: 'syz.0.3648': attribute type 4 has an invalid length. [ 590.948441][T20806] netlink: 'syz.0.3648': attribute type 4 has an invalid length. [ 591.380402][T20816] netlink: 'syz.0.3653': attribute type 1 has an invalid length. [ 591.570413][T20816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.595894][ T5850] Bluetooth: hci3: command 0x0419 tx timeout [ 591.620590][T20825] bond2: entered promiscuous mode [ 591.638315][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 591.897710][T20831] syzkaller1: entered promiscuous mode [ 591.903305][T20831] syzkaller1: entered allmulticast mode [ 592.163625][T20848] syzkaller1: entered promiscuous mode [ 592.178302][T20848] syzkaller1: entered allmulticast mode [ 592.250157][T20840] lo speed is unknown, defaulting to 1000 [ 592.299771][T20854] syzkaller0: entered promiscuous mode [ 592.306692][T20854] syzkaller0: entered allmulticast mode [ 592.337035][T20840] lo speed is unknown, defaulting to 1000 [ 592.356850][T20858] netlink: 'syz.1.3663': attribute type 4 has an invalid length. [ 592.417031][T20858] netlink: 'syz.1.3663': attribute type 4 has an invalid length. [ 593.162809][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'. [ 594.839510][T20840] lo speed is unknown, defaulting to 1000 [ 594.841247][T20892] tipc: Enabled bearer , priority 0 [ 594.853592][T20898] netlink: 'syz.3.3672': attribute type 1 has an invalid length. [ 594.874809][T20898] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3672'. [ 594.896219][T20898] netlink: 'syz.3.3672': attribute type 2 has an invalid length. [ 594.900355][T20893] syzkaller0: entered promiscuous mode [ 594.910701][T20898] netlink: 'syz.3.3672': attribute type 1 has an invalid length. [ 594.919932][T20893] syzkaller0: entered allmulticast mode [ 595.032733][T20893] tipc: Resetting bearer [ 595.087963][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3675'. [ 596.744234][T20893] tipc: Disabling bearer [ 596.755438][T20908] veth0: entered promiscuous mode [ 596.827117][T20908] veth0: left promiscuous mode [ 596.853377][T20905] lo speed is unknown, defaulting to 1000 [ 596.877126][T20918] netlink: 'syz.4.3676': attribute type 4 has an invalid length. [ 596.884026][T20905] lo speed is unknown, defaulting to 1000 [ 596.908148][T20918] netlink: 'syz.4.3676': attribute type 4 has an invalid length. [ 597.051068][T20927] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 597.066484][T20927] netlink: 'syz.4.3678': attribute type 3 has an invalid length. [ 597.074264][T20927] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3678'. [ 597.194696][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 597.202802][ C0] lec:lec_tx_timeout: lec0 [ 597.273299][T20933] !: renamed from dummy0 (while UP) [ 597.311740][T20933] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3681'. [ 597.314887][T20905] lo speed is unknown, defaulting to 1000 [ 597.340760][T20931] netlink: 'syz.1.3680': attribute type 10 has an invalid length. [ 597.580131][T20935] lo speed is unknown, defaulting to 1000 [ 597.588130][T20935] lo speed is unknown, defaulting to 1000 [ 597.807156][T20941] netlink: 'syz.0.3682': attribute type 4 has an invalid length. [ 598.007148][T20950] netlink: 'syz.0.3684': attribute type 1 has an invalid length. [ 598.034516][T20951] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 598.128019][T20947] bond0: (slave bond_slave_0): Releasing backup interface [ 598.163429][T20947] bond0: (slave bond_slave_1): Releasing backup interface [ 598.189145][T20956] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 598.207527][T20947] team0: Port device team_slave_0 removed [ 598.268070][T20947] team0: Port device team_slave_1 removed [ 598.296818][T20947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.304455][T20947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.322221][T20947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.330432][T20947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.344096][T20947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.400075][T20956] mac80211_hwsim hwsim45 wlan1: left allmulticast mode [ 598.401220][T20935] lo speed is unknown, defaulting to 1000 [ 598.420641][T20956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.441239][T20956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 598.692047][T20965] pim6reg: entered allmulticast mode [ 598.996468][T20975] tipc: Enabled bearer , priority 0 [ 599.005283][T20975] syzkaller0: entered promiscuous mode [ 599.010802][T20975] syzkaller0: entered allmulticast mode [ 599.032910][T20977] netlink: 'syz.3.3689': attribute type 4 has an invalid length. [ 599.043216][T20975] tipc: Resetting bearer [ 599.063755][T20974] tipc: Resetting bearer [ 599.066923][T20977] netlink: 'syz.3.3689': attribute type 4 has an invalid length. [ 599.090512][T20974] tipc: Disabling bearer [ 599.260674][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3692'. [ 599.481264][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3693'. [ 599.750160][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3697'. [ 600.092883][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 600.107352][T21030] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3702'. [ 600.117758][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 600.433080][T21043] lo speed is unknown, defaulting to 1000 [ 600.442015][T21043] lo speed is unknown, defaulting to 1000 [ 600.779545][T21043] lo speed is unknown, defaulting to 1000 [ 600.875899][ T51] Bluetooth: hci0: command tx timeout [ 601.162917][T21063] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 601.586848][T21075] netlink: 'syz.2.3713': attribute type 11 has an invalid length. [ 601.657184][T21077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3714'. [ 601.799848][T21079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.058191][T21094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.096748][T21083] lo speed is unknown, defaulting to 1000 [ 602.155289][T21102] bond1: option ad_select: invalid value (34) [ 602.163188][T21107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3721'. [ 602.167554][T21102] bond1 (unregistering): Released all slaves [ 602.199519][T21083] lo speed is unknown, defaulting to 1000 [ 602.260577][T21094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.542936][T21094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.592850][T21083] lo speed is unknown, defaulting to 1000 [ 602.602051][T21121] validate_nla: 9 callbacks suppressed [ 602.602072][T21121] netlink: 'syz.2.3726': attribute type 4 has an invalid length. [ 602.654867][T21121] netlink: 'syz.2.3726': attribute type 4 has an invalid length. [ 602.683132][T21124] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3724'. [ 602.686451][T21094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.747286][T21119] xfrm0: entered promiscuous mode [ 602.752379][T21119] xfrm0: entered allmulticast mode [ 602.906181][T21119] lo speed is unknown, defaulting to 1000 [ 602.945930][T21119] lo speed is unknown, defaulting to 1000 [ 603.169747][T21137] : renamed from bond_slave_0 [ 603.180924][T21136] lo speed is unknown, defaulting to 1000 [ 603.256917][T19633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.279684][T19633] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.333684][T21145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'. [ 603.344338][T19633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.411785][T21137] lo speed is unknown, defaulting to 1000 [ 603.485694][T19629] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.557052][T21136] lo speed is unknown, defaulting to 1000 [ 603.574039][T21119] lo speed is unknown, defaulting to 1000 [ 603.626818][T21149] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 604.278409][T21145] netlink: 'syz.2.3731': attribute type 6 has an invalid length. [ 604.363379][T21136] lo speed is unknown, defaulting to 1000 [ 604.368424][T21137] lo speed is unknown, defaulting to 1000 [ 604.459929][T21164] netlink: 'syz.1.3736': attribute type 1 has an invalid length. [ 604.471504][T21164] netlink: 'syz.1.3736': attribute type 11 has an invalid length. [ 604.481656][T21164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3736'. [ 604.712161][T21171] netlink: 'syz.1.3738': attribute type 4 has an invalid length. [ 615.454421][T21137] lo speed is unknown, defaulting to 1000 [ 622.693916][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 630.963328][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 633.533727][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 636.242900][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 636.253706][ C0] lec:lec_tx_timeout: lec0 [ 643.142462][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 645.562712][T21193] lo speed is unknown, defaulting to 1000 [ 653.582597][T21193] lo speed is unknown, defaulting to 1000 [ 655.493139][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 658.592496][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 661.198646][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 661.209540][ C0] lec:lec_tx_timeout: lec0 [ 692.294154][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 692.554065][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.842891][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 693.132321][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 694.103563][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 694.763111][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.310676][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 697.322605][ C0] lec:lec_tx_timeout: lec0 [ 700.034277][ T51] Bluetooth: hci4: command tx timeout [ 702.104329][ T51] Bluetooth: hci4: command tx timeout [ 704.182353][ T51] Bluetooth: hci4: command tx timeout [ 706.251923][ T51] Bluetooth: hci4: command tx timeout [ 710.953088][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.153239][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.642692][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.743938][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.562962][T21202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.783678][T21202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.094026][T21202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.694243][T21202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.693192][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 716.459454][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.761784][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 719.123743][ T51] Bluetooth: hci0: command tx timeout [ 719.173407][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 719.373482][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 719.783592][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 720.173389][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 721.032256][T19067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 721.223111][T19067] Bluetooth: hci0: command tx timeout [ 722.644228][ T5850] Bluetooth: hci1: command tx timeout [ 723.300109][T19067] Bluetooth: hci0: command tx timeout [ 724.733906][T19067] Bluetooth: hci1: command tx timeout [ 725.201219][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 725.212176][ C0] lec:lec_tx_timeout: lec0 [ 725.424004][T19067] Bluetooth: hci0: command tx timeout [ 726.803417][T19067] Bluetooth: hci1: command tx timeout [ 728.914305][T19067] Bluetooth: hci1: command tx timeout [ 729.281967][T19067] Bluetooth: hci3: command tx timeout [ 731.403376][T19067] Bluetooth: hci3: command tx timeout [ 733.453194][T19067] Bluetooth: hci3: command tx timeout [ 735.544030][T19067] Bluetooth: hci3: command tx timeout [ 753.333400][T21193] lo speed is unknown, defaulting to 1000 [ 753.883167][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 759.201087][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 759.211898][ C0] lec:lec_tx_timeout: lec0 [ 760.973730][T21208] lo speed is unknown, defaulting to 1000 [ 782.044007][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 782.214045][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 782.293265][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 782.454321][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 782.503827][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 782.663641][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 783.784169][T21231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 784.863881][T21231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 785.162810][T21202] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 785.854293][T21202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 787.012134][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 787.212957][T21231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 787.462393][T21202] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 787.722315][T21202] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 788.343576][T21202] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 788.862388][T21202] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 791.662214][T21238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.854123][T21238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 792.023817][T21238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 792.239780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 792.250767][ C0] lec:lec_tx_timeout: lec0 [ 792.743288][T21238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 793.122172][T21238] Bluetooth: hci7: command tx timeout [ 793.154397][ T51] Bluetooth: hci8: command tx timeout [ 793.163260][T21231] Bluetooth: hci6: command tx timeout [ 793.282263][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 793.713963][T21208] lo speed is unknown, defaulting to 1000 [ 795.213114][ T51] Bluetooth: hci7: command tx timeout [ 795.243253][ T51] Bluetooth: hci6: command tx timeout [ 795.301824][ T51] Bluetooth: hci8: command tx timeout [ 797.283742][ T51] Bluetooth: hci7: command tx timeout [ 797.363441][ T51] Bluetooth: hci8: command tx timeout [ 797.382604][T21202] Bluetooth: hci6: command tx timeout [ 797.961799][T21202] Bluetooth: hci0: command tx timeout [ 799.363751][T21202] Bluetooth: hci7: command tx timeout [ 799.444212][T21202] Bluetooth: hci8: command tx timeout [ 799.464055][T21202] Bluetooth: hci6: command tx timeout [ 800.099419][ T51] Bluetooth: hci0: command tx timeout [ 802.182790][ T51] Bluetooth: hci0: command tx timeout [ 803.863364][T21202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 803.943656][T21202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.112356][T21202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.254368][T21202] Bluetooth: hci0: command tx timeout [ 804.833164][T21231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.432324][T21231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.332021][T21231] Bluetooth: hci1: command tx timeout [ 810.412296][T21231] Bluetooth: hci1: command tx timeout [ 812.483216][T21231] Bluetooth: hci1: command tx timeout [ 814.582434][T21231] Bluetooth: hci1: command tx timeout [ 815.234041][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 820.249171][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 820.261168][ C0] lec:lec_tx_timeout: lec0 [ 822.332807][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 841.992725][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.193110][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.444493][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 843.393408][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 843.873908][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 847.614175][T21231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 847.904070][T21231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 847.924012][T21231] Bluetooth: hci3: command tx timeout [ 848.253647][T21202] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 849.422255][T21202] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 850.013606][T21202] Bluetooth: hci3: command tx timeout [ 850.713262][T21202] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 851.024397][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 851.423956][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 851.553030][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 851.923562][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 852.130867][ T51] Bluetooth: hci3: command tx timeout [ 852.903141][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 853.673129][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 854.254162][T21202] Bluetooth: hci3: command tx timeout [ 854.776426][ T51] Bluetooth: hci9: command tx timeout [ 856.240650][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 856.251454][ C0] lec:lec_tx_timeout: lec0 [ 856.833542][ T51] Bluetooth: hci9: command tx timeout [ 857.052857][ T51] Bluetooth: hci7: command tx timeout [ 858.913929][T21202] Bluetooth: hci9: command tx timeout [ 859.123748][T21231] Bluetooth: hci7: command tx timeout [ 860.794028][T21231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 861.064204][T21231] Bluetooth: hci9: command tx timeout [ 861.093691][T21231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 861.213389][T21231] Bluetooth: hci7: command tx timeout [ 861.342501][T21202] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 861.981943][T21231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 862.403659][T21231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 863.303970][ T51] Bluetooth: hci7: command tx timeout [ 865.764115][ T51] Bluetooth: hci8: command tx timeout [ 866.644463][T19633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.493311][T21231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.892229][T21231] Bluetooth: hci8: command tx timeout [ 868.191951][T21231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 868.363301][T21231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 868.963166][T21231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 869.353711][T21231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 869.733291][T21208] lo speed is unknown, defaulting to 1000 [ 869.932018][T21231] Bluetooth: hci8: command tx timeout [ 872.024214][T21231] Bluetooth: hci8: command tx timeout [ 873.283984][T21231] Bluetooth: hci0: command tx timeout [ 875.363855][T21231] Bluetooth: hci0: command tx timeout [ 875.654396][T21225] lo speed is unknown, defaulting to 1000 [ 876.644060][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 877.002712][T21225] lo speed is unknown, defaulting to 1000 [ 877.463842][T21231] Bluetooth: hci0: command tx timeout [ 879.532300][T21231] Bluetooth: hci0: command tx timeout [ 882.240138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 882.251254][ C0] lec:lec_tx_timeout: lec0 [ 894.372884][T19633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.363191][T21254] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 914.422830][T21254] CPU: 0 UID: 0 PID: 21254 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 914.422863][T21254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 914.422878][T21254] Call Trace: [ 914.422887][T21254] [ 914.422897][T21254] dump_stack_lvl+0x189/0x250 [ 914.422938][T21254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 914.422967][T21254] ? __pfx__printk+0x10/0x10 [ 914.423001][T21254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 914.423032][T21254] ? cpuset_print_current_mems_allowed+0x1f/0x360