last executing test programs: 4.055342819s ago: executing program 3 (id=3317): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x400000, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d0f9"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FIOCLEX(r3, 0x5451) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x6bb}, &(0x7f0000000180)=0x10) 3.923660735s ago: executing program 3 (id=3318): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x60}}, 0x8000) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680)) sendto(r2, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.910659762s ago: executing program 2 (id=3319): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000001980)=""/220, 0xdc}, {&(0x7f0000000680)=""/193, 0xc1}], 0x5}}], 0x1, 0x40010122, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003500)={0x2c, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f6acc4539192325dc5190000000000000700000a54000000060a0b04000000000000000002000000280004802400018008000100717565756500000014000280060001400800000006000240000000000900010073797a300000000009000200737941dea6b1ba848cd07135c6d57a32000000081400000011000100"], 0x7c}}, 0x40) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001700)=""/96, 0x60}], 0x3}, 0x2000) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 3.168090172s ago: executing program 1 (id=3324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.005873869s ago: executing program 4 (id=3325): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.949811747s ago: executing program 2 (id=3326): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="50002f800c000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000000700000000002e30615f95"], 0x0, 0x2b, 0x0, 0x5, 0x4}, 0x28) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ffff5ca0ffffff7f59e684f96acaba974735c01d4ddcc3c80385c5173aca9f7f00a89a5cae36623e997e100dd14bca457579b528a52aa8263579cff14eafa1113f537f74762fb0d5a97d5014ea7dd1bee4ae042c1de9be437bce7a29badc6ea8e8f11612de79b9143fad94d12a4d30b5c5c88c172e46f8", @ANYRES16=r14, @ANYBLOB="000129bd7000ffdbdf25060000001400050000000000000000000000000000000000080002000700000006000b000100000014000600ff02000000000000000000000000000108000700ac1414aa08000c00030000000800020005000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, r10, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x46}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 2.618451343s ago: executing program 4 (id=3327): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2.442423441s ago: executing program 2 (id=3328): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES32=r0, @ANYRES32=r3], 0x44}}, 0x2000800) 2.282888176s ago: executing program 4 (id=3329): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.166921004s ago: executing program 1 (id=3330): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddffff00000000880d"], 0xfdef) 2.049664413s ago: executing program 2 (id=3331): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x36) 1.816806062s ago: executing program 4 (id=3332): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x8040600) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1.737656098s ago: executing program 1 (id=3333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{0x0}], 0x1}, 0x4) 1.652235038s ago: executing program 1 (id=3334): unshare(0x6020400) poll(0x0, 0x0, 0x9) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) 1.641368953s ago: executing program 2 (id=3335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x6a9}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000005, 0x800, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009000000071b0102f3f24de5449"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2005}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(r10, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000010"], 0x30, 0x80}, 0x4000080) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 1.609999561s ago: executing program 4 (id=3336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xc83417c22f980b3c}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 1.592677085s ago: executing program 0 (id=3337): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.521511649s ago: executing program 1 (id=3338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="50002f800c000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000000700000000002e30615f95"], 0x0, 0x2b, 0x0, 0x5, 0x4}, 0x28) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ffff5ca0ffffff7f59e684f96acaba974735c01d4ddcc3c80385c5173aca9f7f00a89a5cae36623e997e100dd14bca457579b528a52aa8263579cff14eafa1113f537f74762fb0d5a97d5014ea7dd1bee4ae042c1de9be437bce7a29badc6ea8e8f11612de79b9143fad94d12a4d30b5c5c88c172e46f8", @ANYRES16=r14, @ANYBLOB="000129bd7000ffdbdf25060000001400050000000000000000000000000000000000080002000700000006000b000100000014000600ff02000000000000000000000000000108000700ac1414aa08000c00030000000800020005000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, r10, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x46}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 1.411430157s ago: executing program 3 (id=3339): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) connect$inet(r2, 0x0, 0x0) 1.312172013s ago: executing program 4 (id=3340): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x60}}, 0x8000) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680)) sendto(r2, &(0x7f0000000740), 0x0, 0x4008044, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.195708143s ago: executing program 3 (id=3341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.143758999s ago: executing program 1 (id=3342): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty}}, {{@in6=@mcast1}}}, &(0x7f0000000080)=0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 668.816441ms ago: executing program 2 (id=3343): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x61d9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 563.075401ms ago: executing program 3 (id=3344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{0x0}], 0x1}, 0x4) 544.0782ms ago: executing program 0 (id=3345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) close(0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xc0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x100, @void}}}}}}}, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x40000}, 0x2891) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 351.002658ms ago: executing program 3 (id=3346): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 350.474226ms ago: executing program 0 (id=3347): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty}}, {{@in6=@mcast1}}}, &(0x7f0000000080)=0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 199.877037ms ago: executing program 0 (id=3348): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e1f}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e24}]}}]}, 0x54}}, 0x24004010) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 74.119403ms ago: executing program 0 (id=3349): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 0s ago: executing program 0 (id=3350): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x0, 0xfffffff0, @private1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="06d14dad91515bc88e7941335c6609d36aa2d6a821cd25a5bfdc4b5ba81d41ea69e78a7d167734e25327a369f32067b93d52896c5fca22e1551d0790fe70c16e9e7d102df54bee5ed77a29daecee01baf049291eb2e1e503f4d80c19e8098470cd7f28b09915e0082aa9b9454c3a8f49cacfa0df4e013d34deb61bf2a12815338fa0da", 0x83}, {&(0x7f0000000300)="8d2b639d693f5717bf7540f701c7478aaa4b7f4a16e45ce8b452016098a2591e1952324f3fa26e8fce5e9754bc52e36bf9e9a80db262aa0a2eb97dc7a755cf0e5b96b0fbf15131c254d04f00168043e86c6cad729a33063d95de15f368dc83baeb7f6905ba5b05e576a3317f72478133ae794a7d5f44d71a2f2899cc3b1fa7c1fa1bf3c815233b301bb4c779432912bea7f9a37b11e4a83cd177e32bfa", 0x9d}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x128}}], 0x2, 0x0) r6 = accept4(r5, 0x0, &(0x7f0000000640), 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) recvmsg$kcm(r6, &(0x7f0000001a40)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/74, 0x4a}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000001880)=""/173, 0xad}, {&(0x7f0000001940)=""/63, 0x3f}], 0x6, &(0x7f0000001a00)=""/5, 0x5}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000600)=@default_ap_ssid, 0x6, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) bind$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 303] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 317.181582][T11831] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 318.383821][ T5163] block nbd4: Possible stuck request ffff888026c18000: control (read@0,1024B). Runtime 90 seconds [ 318.394635][ T5163] block nbd4: Possible stuck request ffff888026c18200: control (read@1024,1024B). Runtime 90 seconds [ 318.406577][ T5163] block nbd4: Possible stuck request ffff888026c18400: control (read@2048,1024B). Runtime 90 seconds [ 318.417707][ T5163] block nbd4: Possible stuck request ffff888026c18600: control (read@3072,1024B). Runtime 90 seconds [ 318.617645][T11821] lo speed is unknown, defaulting to 1000 [ 318.942092][T11830] lo speed is unknown, defaulting to 1000 [ 319.697762][T11849] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 320.065554][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 320.900689][T11889] tipc: Enabled bearer , priority 0 [ 320.917773][T11883] lo speed is unknown, defaulting to 1000 [ 320.953311][T11890] syzkaller0: MTU too low for tipc bearer [ 320.973574][T11890] tipc: Disabling bearer [ 321.307407][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 321.409890][T11896] batman_adv: batadv0: Adding interface: ipvlan2 [ 321.423549][T11896] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.481278][T11896] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 322.010260][T11919] lo speed is unknown, defaulting to 1000 [ 322.155815][T11922] tipc: Enabled bearer , priority 0 [ 322.164293][T11922] syzkaller0: entered promiscuous mode [ 322.170163][T11922] syzkaller0: entered allmulticast mode [ 322.200081][T11922] tipc: Resetting bearer [ 322.212154][T11921] tipc: Resetting bearer [ 322.254908][T11921] tipc: Disabling bearer [ 322.783540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 322.791647][ C1] lec:lec_tx_timeout: lec0 [ 322.839840][T11938] tipc: Enabled bearer , priority 0 [ 322.858123][T11939] netlink: 'syz.4.1546': attribute type 11 has an invalid length. [ 322.867084][T11939] netlink: 'syz.4.1546': attribute type 23 has an invalid length. [ 322.883525][T11939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1546'. [ 322.912308][T11938] syzkaller0: MTU too low for tipc bearer [ 322.955065][T11938] tipc: Disabling bearer [ 323.552335][T11946] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 323.592009][T11946] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 323.609521][T11946] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 324.046022][T11967] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1551'. [ 324.396113][T11966] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.723968][T11966] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.918241][T11966] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.965738][T11975] lo speed is unknown, defaulting to 1000 [ 325.139763][T11966] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.360205][T11981] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1556'. [ 325.379658][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 325.392844][T11983] rdma_rxe: rxe_newlink: failed to add gre0 [ 325.412228][T11985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.433879][ T1678] lo speed is unknown, defaulting to 1000 [ 325.439661][ T1678] syz0: Port: 1 Link ACTIVE [ 325.455775][ T6182] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.511522][T11986] lo speed is unknown, defaulting to 1000 [ 325.575777][ T1678] lo speed is unknown, defaulting to 1000 [ 325.581608][ T1135] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.643433][ T1135] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.688936][ T6171] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.704858][T11985] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 325.891422][T11996] lo speed is unknown, defaulting to 1000 [ 326.307762][T12007] tipc: Enabling of bearer rejected, failed to enable media [ 326.972954][T12020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1564'. [ 326.982168][T12020] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 327.129841][T12024] nbd: nbd1 already in use [ 327.151430][T12024] block nbd1: NBD_DISCONNECT [ 327.156754][T12024] block nbd1: Send disconnect failed -32 [ 327.671509][T12039] syzkaller0: entered promiscuous mode [ 327.679139][T12039] syzkaller0: entered allmulticast mode [ 327.798658][T12041] syzkaller0: entered promiscuous mode [ 327.807784][T12041] syzkaller0: entered allmulticast mode [ 328.554444][T12060] vlan3: entered promiscuous mode [ 328.574583][T12060] bridge0: entered promiscuous mode [ 328.599394][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 328.630786][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 328.758041][ T1112] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.758224][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'. [ 328.775787][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 328.788176][ T1112] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.798899][ T1112] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.815926][ T1112] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.879219][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'. [ 328.950296][T12064] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1577'. [ 329.295945][T12076] syzkaller0: entered promiscuous mode [ 329.301479][T12076] syzkaller0: entered allmulticast mode [ 329.317720][T12068] netlink: 'syz.0.1579': attribute type 13 has an invalid length. [ 329.389121][T12068] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 329.569210][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 329.601123][T12088] tipc: Enabled bearer , priority 0 [ 329.637344][T12088] tipc: Resetting bearer [ 329.684352][T12084] tipc: Disabling bearer [ 329.707570][T12091] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 329.949680][T12100] lo speed is unknown, defaulting to 1000 [ 330.381165][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 331.091111][T12129] geneve2: entered promiscuous mode [ 331.113592][ T1112] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.133570][ T1112] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.141826][ T1112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.189627][ T1112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.264272][T12131] gre0: entered promiscuous mode [ 331.269286][T12131] gre0: entered allmulticast mode [ 331.325000][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 331.476682][T12139] syzkaller0: entered promiscuous mode [ 331.506740][T12139] syzkaller0: entered allmulticast mode [ 331.621097][T12142] tipc: Enabled bearer , priority 0 [ 331.645550][T12142] tipc: Resetting bearer [ 331.680648][T12141] tipc: Disabling bearer [ 331.738892][ T30] audit: type=1107 audit(1774410191.419:4): pid=12145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 331.766780][T12147] syzkaller0: entered promiscuous mode [ 331.783317][T12147] syzkaller0: entered allmulticast mode [ 331.944052][T12147] bond0: entered promiscuous mode [ 332.015343][T12147] bond0: left promiscuous mode [ 332.167553][T12163] __nla_validate_parse: 1 callbacks suppressed [ 332.167574][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 332.746857][T12180] netlink: 'syz.3.1607': attribute type 2 has an invalid length. [ 332.767862][T12180] : entered promiscuous mode [ 332.805593][T12175] lo speed is unknown, defaulting to 1000 [ 333.215460][T12180] lo speed is unknown, defaulting to 1000 [ 333.438758][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1611'. [ 333.564829][T12195] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1612'. [ 333.631596][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 333.846140][T12203] vlan4: entered allmulticast mode [ 333.851473][T12203] bridge4: entered allmulticast mode [ 333.945632][T12206] tc_dump_action: action bad kind [ 334.086339][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 334.126590][T12190] netlink: 'syz.2.1610': attribute type 5 has an invalid length. [ 334.145291][T12214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1615'. [ 334.296468][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1617'. [ 334.392309][T12221] netlink: 'syz.4.1618': attribute type 3 has an invalid length. [ 334.448592][T12223] tipc: Enabled bearer , priority 0 [ 334.474015][T12220] syzkaller0: entered promiscuous mode [ 334.488135][T12220] syzkaller0: entered allmulticast mode [ 334.497405][T12221] nbd: nbd4 already in use [ 334.502432][T12221] block nbd4: NBD_DISCONNECT [ 334.512760][T12221] block nbd4: Send disconnect failed -32 [ 334.521089][T12223] syzkaller0: entered promiscuous mode [ 334.527002][T12223] syzkaller0: entered allmulticast mode [ 334.535257][T12221] block nbd4: shutting down sockets [ 334.584955][ C0] blk_print_req_error: 286 callbacks suppressed [ 334.584977][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.600982][ C0] buffer_io_error: 286 callbacks suppressed [ 334.601002][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.619700][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.629285][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.637160][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.646697][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 334.654548][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.664092][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 334.673617][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.725928][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.743640][ T5848] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.753909][ T5848] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.775894][ T5848] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.786261][ T5848] Buffer I/O error on dev nbd4, logical block 2, async page read [ 334.794405][ T5848] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.813665][ T5848] Buffer I/O error on dev nbd4, logical block 3, async page read [ 334.821734][ T5848] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.831965][ T5848] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.840206][ T5848] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.856554][ T5848] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.874443][ T5848] ldm_validate_partition_table(): Disk read failed. [ 334.881827][ T5848] Dev nbd4: unable to read RDB block 0 [ 334.889083][ T5848] nbd4: unable to read partition table [ 334.906100][ T5848] ldm_validate_partition_table(): Disk read failed. [ 334.913435][ T5848] Dev nbd4: unable to read RDB block 0 [ 334.920221][ T5848] nbd4: unable to read partition table [ 334.949046][T12232] tipc: Resetting bearer [ 334.964595][T12233] tipc: Resetting bearer [ 335.001499][T12233] tipc: Disabling bearer [ 335.207372][T12241] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 335.457629][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 335.495482][T12256] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1626'. [ 335.654064][T12266] netlink: 'syz.3.1627': attribute type 7 has an invalid length. [ 335.680861][T12266] rdma_rxe: rxe_newlink: failed to add lo [ 335.961533][T12273] tipc: Enabled bearer , priority 0 [ 336.016441][T12278] syzkaller0: entered promiscuous mode [ 336.046689][T12278] syzkaller0: entered allmulticast mode [ 336.113133][T12272] tipc: Resetting bearer [ 336.214590][T12272] tipc: Disabling bearer [ 336.235191][T12277] tipc: Enabled bearer , priority 0 [ 336.260750][T12279] syzkaller0: MTU too low for tipc bearer [ 336.284209][T12279] tipc: Disabling bearer [ 336.496801][T12281] lo speed is unknown, defaulting to 1000 [ 336.602482][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 336.717899][T12301] tipc: Enabling of bearer rejected, already enabled [ 337.188672][T12319] lo speed is unknown, defaulting to 1000 [ 337.230145][ T7407] lec:lec_start_xmit: lec0:No lecd attached [ 337.281326][T12324] sctp: [Deprecated]: syz.2.1642 (pid 12324) Use of int in maxseg socket option. [ 337.281326][T12324] Use struct sctp_assoc_value instead [ 337.381441][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'. [ 337.551688][T12323] lo speed is unknown, defaulting to 1000 [ 337.669487][T12328] tipc: Enabled bearer , priority 0 [ 337.677008][T12328] syzkaller0: entered promiscuous mode [ 337.702431][T12328] syzkaller0: entered allmulticast mode [ 337.753310][T12327] tipc: Resetting bearer [ 337.807687][T12327] tipc: Disabling bearer [ 337.936235][T12331] gre0: left promiscuous mode [ 337.941050][T12331] gre0: left allmulticast mode [ 338.095954][T12343] xt_cgroup: invalid path, errno=-2 [ 338.121513][T12340] tipc: Failed to remove unknown binding: 66,0,0/2666681735:2477045422/2477045424 [ 338.132673][T12340] tipc: Failed to remove unknown binding: 66,0,0/2666681735:2477045422/2477045424 [ 338.248182][T12334] tipc: Enabled bearer , priority 0 [ 338.277717][T12337] syzkaller0: MTU too low for tipc bearer [ 338.304055][T12337] tipc: Disabling bearer [ 338.713859][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 338.934597][T12358] lo speed is unknown, defaulting to 1000 [ 339.144384][T12378] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 339.286657][T12382] wg1: entered promiscuous mode [ 339.291583][T12382] wg1: entered allmulticast mode [ 339.481301][T12376] lo speed is unknown, defaulting to 1000 [ 339.778827][T12395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1656'. [ 339.967857][T12386] lo speed is unknown, defaulting to 1000 [ 340.064048][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 340.119590][T12399] vlan2: entered promiscuous mode [ 340.147249][T12399] batadv0: entered promiscuous mode [ 340.902901][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 341.510208][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 341.527009][T12438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.577025][T12438] bond0: (slave rose0): Enslaving as an active interface with an up link [ 341.743144][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 341.806932][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 341.952133][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 342.000029][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 342.334545][T12475] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1671'. [ 342.757807][T12479] lo speed is unknown, defaulting to 1000 [ 342.763974][T12479] lo speed is unknown, defaulting to 1000 [ 342.783571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 342.791630][ C1] lec:lec_tx_timeout: lec0 [ 342.866328][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 342.886695][T12479] lo speed is unknown, defaulting to 1000 [ 342.894474][T12490] Bluetooth: MGMT ver 1.23 [ 342.908294][T12479] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.229638][T12479] lo speed is unknown, defaulting to 1000 [ 343.257588][T12479] lo speed is unknown, defaulting to 1000 [ 343.285693][T12479] lo speed is unknown, defaulting to 1000 [ 343.294123][T12479] lo speed is unknown, defaulting to 1000 [ 343.336075][T12479] lo speed is unknown, defaulting to 1000 [ 343.614354][T12517] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.692142][T12517] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.992212][T12533] tipc: Enabled bearer , priority 0 [ 344.025787][T12533] syzkaller0: MTU too low for tipc bearer [ 344.031652][T12533] tipc: Disabling bearer [ 344.128247][T12540] netlink: 'syz.4.1685': attribute type 6 has an invalid length. [ 344.376339][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.393132][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.403278][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.421047][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.803733][T12576] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1703'. [ 344.881864][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'. [ 344.988281][T12586] lo speed is unknown, defaulting to 1000 [ 345.004453][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 346.220968][T12586] lo speed is unknown, defaulting to 1000 [ 346.478682][T12615] netlink: 'syz.4.1699': attribute type 142 has an invalid length. [ 346.911138][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 346.946862][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 346.986362][T12635] tipc: Enabled bearer , priority 0 [ 347.010052][T12622] syzkaller0: entered promiscuous mode [ 347.030854][T12622] syzkaller0: entered allmulticast mode [ 347.063686][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 347.083014][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 347.114838][T12622] tipc: Resetting bearer [ 347.122338][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 347.135822][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1705'. [ 347.154357][T12622] tipc: Resetting bearer [ 347.176933][T12609] lec:lec_atm_close: lec0: Shut down! [ 347.187674][T12622] tipc: Disabling bearer [ 347.556142][T12654] lo speed is unknown, defaulting to 1000 [ 348.553942][T12653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.613006][T12654] lo speed is unknown, defaulting to 1000 [ 348.676298][T12672] tipc: Enabled bearer , priority 0 [ 348.920832][T12694] __nla_validate_parse: 1 callbacks suppressed [ 348.920854][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 348.949398][T12695] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1718'. [ 349.198255][T12701] tipc: Enabled bearer , priority 0 [ 349.220612][T12701] syzkaller0: entered promiscuous mode [ 349.227216][T12701] syzkaller0: entered allmulticast mode [ 349.414568][T12706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1720'. [ 349.455224][T12701] tipc: Resetting bearer [ 349.461575][T12705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1722'. [ 349.486923][T12705] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1722'. [ 349.516864][T12715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.566965][T12713] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.582456][T12721] ip6gre2: entered promiscuous mode [ 349.589703][T12721] ip6gre2: entered allmulticast mode [ 349.603920][T12721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.613163][T12700] tipc: Resetting bearer [ 349.632656][T12700] tipc: Disabling bearer [ 349.661436][ T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.672934][ T48] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.682904][T12713] netlink: 'syz.1.1724': attribute type 4 has an invalid length. [ 349.713797][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 349.900935][T12724] tipc: Enabled bearer , priority 0 [ 349.935142][T12723] tipc: Disabling bearer [ 350.385688][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.623812][ T796] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 350.742122][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 350.798356][T12764] syzkaller0: entered promiscuous mode [ 350.818784][T12764] syzkaller0: entered allmulticast mode [ 350.910496][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1739'. [ 350.971896][T12774] hsr_slave_0: left promiscuous mode [ 351.005479][T12774] hsr_slave_1: left promiscuous mode [ 351.085602][T12776] netlink: 'syz.1.1740': attribute type 142 has an invalid length. [ 351.286242][T12784] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1743'. [ 351.306652][T12784] siw: device registration error -23 [ 351.308966][T12783] tipc: Enabling of bearer rejected, failed to enable media [ 351.370970][T12788] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1744'. [ 351.437198][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1746'. [ 351.451023][T12791] nbd: must specify a device to reconfigure [ 351.474316][T12792] tipc: Enabling of bearer rejected, already enabled [ 351.514591][T12792] syzkaller0: mtu less than device minimum [ 351.882895][T12812] lo speed is unknown, defaulting to 1000 [ 352.163036][T12812] lo speed is unknown, defaulting to 1000 [ 352.783521][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 352.791618][ C1] lec:lec_tx_timeout: lec0 [ 352.907565][T12832] tipc: Enabling of bearer rejected, failed to enable media [ 353.006907][T12842] tipc: Enabling of bearer rejected, already enabled [ 353.021277][T12842] syzkaller0: mtu less than device minimum [ 353.343735][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.696450][T12863] lo speed is unknown, defaulting to 1000 [ 353.935349][T12877] __nla_validate_parse: 4 callbacks suppressed [ 353.935385][T12877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1768'. [ 354.137867][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 354.171872][T12883] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1771'. [ 354.298430][T12888] tipc: Enabling of bearer rejected, failed to enable media [ 354.377170][T12891] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1773'. [ 354.478485][T12863] lo speed is unknown, defaulting to 1000 [ 354.622960][T12904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1777'. [ 355.043222][T12926] tipc: Enabled bearer , priority 0 [ 355.062963][T12926] syzkaller0: entered promiscuous mode [ 355.069175][T12926] syzkaller0: entered allmulticast mode [ 355.169299][T12926] tipc: Resetting bearer [ 355.278970][T12925] tipc: Resetting bearer [ 355.304189][T12925] tipc: Disabling bearer [ 355.587943][T12942] tipc: Enabling of bearer rejected, failed to enable media [ 355.682506][T12945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 355.696103][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1786'. [ 356.094943][T12963] lo speed is unknown, defaulting to 1000 [ 356.110478][T12965] netlink: 'syz.0.1791': attribute type 1 has an invalid length. [ 356.188099][T12965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.267486][T12965] xt_CT: No such helper "syz1" [ 356.330579][T12971] tipc: Enabling of bearer rejected, already enabled [ 356.355120][T12973] bond0: entered promiscuous mode [ 356.360469][T12973] batadv_slave_0: entered promiscuous mode [ 356.368654][T12973] bond0: left promiscuous mode [ 356.374199][T12973] batadv_slave_0: left promiscuous mode [ 356.387294][T12971] syzkaller0: mtu less than device minimum [ 356.513065][T12963] lo speed is unknown, defaulting to 1000 [ 356.740151][T12980] tipc: Enabled bearer , priority 0 [ 356.748762][T12980] syzkaller0: entered promiscuous mode [ 356.768295][T12980] syzkaller0: entered allmulticast mode [ 356.811179][T12980] tipc: Resetting bearer [ 356.834188][T12979] tipc: Resetting bearer [ 356.877408][T12979] tipc: Disabling bearer [ 356.990412][T12988] tipc: Enabling of bearer rejected, failed to enable media [ 357.111849][T12987] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 357.136712][T12987] xt_hashlimit: size too large, truncated to 1048576 [ 357.143576][T12987] xt_hashlimit: max too large, truncated to 1048576 [ 357.196839][T12992] lo speed is unknown, defaulting to 1000 [ 357.636871][T13009] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 357.674258][T12992] lo speed is unknown, defaulting to 1000 [ 357.840476][T13019] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1804'. [ 358.019096][T13008] lo speed is unknown, defaulting to 1000 [ 358.146915][T13028] tipc: Enabled bearer , priority 0 [ 358.155688][T13028] syzkaller0: entered promiscuous mode [ 358.161301][T13028] syzkaller0: entered allmulticast mode [ 358.232003][T13028] tipc: Resetting bearer [ 358.258149][T13028] tipc: Resetting bearer [ 358.299532][T13028] tipc: Disabling bearer [ 358.681486][T13016] lo speed is unknown, defaulting to 1000 [ 358.941178][T13008] lo speed is unknown, defaulting to 1000 [ 358.947687][T13041] lo speed is unknown, defaulting to 1000 [ 358.978252][T13016] lo speed is unknown, defaulting to 1000 [ 359.354948][T13041] lo speed is unknown, defaulting to 1000 [ 359.630818][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 359.812472][T13051] tipc: Enabling of bearer rejected, failed to enable media [ 360.130950][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 360.140282][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1813'. [ 360.254948][T13068] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1815'. [ 360.340851][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 360.798403][T13083] tipc: Enabled bearer , priority 0 [ 360.811491][T13082] tipc: Disabling bearer [ 361.012721][T13085] lo speed is unknown, defaulting to 1000 [ 361.021495][T13090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'. [ 361.159456][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 361.209953][T13094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.263652][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 361.697185][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 361.773923][T13112] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1828'. [ 361.783149][T13112] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1828'. [ 362.128063][T13085] lo speed is unknown, defaulting to 1000 [ 362.587713][T13145] netlink: 'syz.3.1834': attribute type 3 has an invalid length. [ 362.642410][T13145] nbd: nbd3 already in use [ 362.650118][T13145] block nbd3: NBD_DISCONNECT [ 362.675618][T13145] block nbd3: Send disconnect failed -110 [ 362.698962][T13145] block nbd3: shutting down sockets [ 362.869538][T13152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.904139][T13152] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.922659][T13152] batman_adv: batadv0: Interface activated: dummy0 [ 362.961918][T13152] batadv0: mtu less than device minimum [ 362.972227][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.984522][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 362.996355][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.008180][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.020003][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.031823][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.043681][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.055535][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.067382][T13152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 363.103258][ T1678] lo speed is unknown, defaulting to 1000 [ 363.115523][ T1678] syz2: Port: 1 Link ACTIVE [ 363.601297][T13172] lo speed is unknown, defaulting to 1000 [ 363.858835][T13190] netlink: 'syz.4.1841': attribute type 21 has an invalid length. [ 363.885618][T13190] netlink: 'syz.4.1841': attribute type 4 has an invalid length. [ 363.917481][T13190] netlink: 'syz.4.1841': attribute type 5 has an invalid length. [ 364.405916][T13172] lo speed is unknown, defaulting to 1000 [ 364.434502][T13209] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 364.498979][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.511071][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.628836][T13218] netlink: 'syz.0.1848': attribute type 7 has an invalid length. [ 364.647623][T13215] tipc: Enabled bearer , priority 0 [ 364.670579][T13214] tipc: Disabling bearer [ 364.743917][T13211] lo speed is unknown, defaulting to 1000 [ 364.920233][ T6182] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.945758][T13229] __nla_validate_parse: 19 callbacks suppressed [ 364.945779][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 364.961225][ T6182] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.984249][ T6182] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.022043][ T6182] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.561722][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 366.591494][T13253] lo speed is unknown, defaulting to 1000 [ 366.598391][T13211] lo speed is unknown, defaulting to 1000 [ 366.657629][T13248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.767969][T13262] bond7: option mode: invalid value (254) [ 366.802260][T13262] bond7 (unregistering): Released all slaves [ 366.893613][T13268] syz.0.1856 (13268) used obsolete PPPIOCDETACH ioctl [ 367.005437][T13253] lo speed is unknown, defaulting to 1000 [ 367.561938][T13281] tipc: Enabled bearer , priority 0 [ 367.577630][T13280] tipc: Disabling bearer [ 367.592302][T13284] x_tables: duplicate underflow at hook 3 [ 367.679412][T13285] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1861'. [ 368.100388][T13298] netlink: 'syz.0.1863': attribute type 13 has an invalid length. [ 368.365987][ T6182] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.374687][ T6182] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.390403][ T6182] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.426432][ T6182] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.669790][T13308] lo speed is unknown, defaulting to 1000 [ 369.032045][T13308] lo speed is unknown, defaulting to 1000 [ 369.098593][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.180091][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.189526][T13325] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.198693][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.208277][T13325] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.218068][T13325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 369.402776][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 369.892795][T13306] lec:lec_atm_close: lec0: Shut down! [ 369.893681][T13333] lo speed is unknown, defaulting to 1000 [ 369.968066][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.044765][T13340] net_ratelimit: 11 callbacks suppressed [ 370.044779][T13340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.274777][T13345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1875'. [ 370.573032][T13351] tipc: Enabled bearer , priority 0 [ 370.644418][T13354] syzkaller0: entered promiscuous mode [ 370.657080][T13354] syzkaller0: entered allmulticast mode [ 370.686837][T13342] tipc: Resetting bearer [ 370.726054][T13342] tipc: Disabling bearer [ 370.756168][T13366] tipc: Enabled bearer , priority 0 [ 370.776045][T13364] syzkaller0: entered promiscuous mode [ 370.781573][T13364] syzkaller0: entered allmulticast mode [ 370.796775][T13364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1879'. [ 370.825372][T13364] tipc: Resetting bearer [ 370.845757][T13361] tipc: Resetting bearer [ 370.874481][T13361] tipc: Disabling bearer [ 370.958023][T13333] lo speed is unknown, defaulting to 1000 [ 371.095791][T13371] netlink: 'syz.1.1881': attribute type 4 has an invalid length. [ 371.650789][T13386] lo speed is unknown, defaulting to 1000 [ 371.711660][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 371.734708][T13384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.751111][T13384] netlink: 'syz.4.1885': attribute type 4 has an invalid length. [ 371.988466][T13386] lo speed is unknown, defaulting to 1000 [ 372.675033][T13409] batman_adv: batadv0: Interface deactivated: dummy0 [ 372.876858][T13408] tipc: Enabled bearer , priority 0 [ 372.993591][T13415] syzkaller0: entered promiscuous mode [ 372.999420][T13415] syzkaller0: entered allmulticast mode [ 373.006565][ T5888] lo speed is unknown, defaulting to 1000 [ 373.015452][ T5888] syz2: Port: 1 Link DOWN [ 373.105242][T13422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1890'. [ 373.146126][ T1135] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.156864][ T1135] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.182154][ T1135] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.201920][ T1135] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.214176][T13406] tipc: Resetting bearer [ 373.232575][T13406] tipc: Disabling bearer [ 373.374992][ T1135] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.392719][ T1135] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.498960][ T1135] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.538995][ T1135] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.776081][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 373.809254][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 374.853579][ T30] audit: type=1800 audit(1774410234.529:5): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1898" name="cgroup.controllers" dev="tmpfs" ino=1826 res=0 errno=0 [ 374.893502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 374.901608][ C1] lec:lec_tx_timeout: lec0 [ 375.040811][T13480] bond1: left promiscuous mode [ 375.048249][T13480] bridge2: left promiscuous mode [ 375.069847][T13480] vlan2: left allmulticast mode [ 375.099694][T13480] bond1: left allmulticast mode [ 375.114978][T13480] bridge2: left allmulticast mode [ 375.131691][T13480] bond2: left promiscuous mode [ 375.145816][T13480] bridge3: left promiscuous mode [ 375.160229][T13480] ipvlan2: left allmulticast mode [ 375.169506][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 375.175116][T13480] bond2: left allmulticast mode [ 375.191183][T13480] bridge3: left allmulticast mode [ 375.211402][T13480] bond4: left promiscuous mode [ 375.224102][T13480] bond4: left allmulticast mode [ 375.238343][T13480] vlan3: left promiscuous mode [ 375.248843][T13480] bridge0: left promiscuous mode [ 375.290818][T13480] vlan4: left allmulticast mode [ 375.303921][T13480] bridge4: left allmulticast mode [ 375.323359][T13501] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1907'. [ 375.360685][T10475] lo speed is unknown, defaulting to 1000 [ 375.368825][T10475] syz0: Port: 1 Link DOWN [ 375.506439][T10475] lo speed is unknown, defaulting to 1000 [ 375.524508][T13488] lo speed is unknown, defaulting to 1000 [ 375.701233][T13501] syzkaller0: entered promiscuous mode [ 375.715367][T13501] syzkaller0: entered allmulticast mode [ 375.736741][T13509] tipc: Enabling of bearer rejected, already enabled [ 375.784695][T13509] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 375.803640][T13509] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 375.812069][T13509] tipc: Resetting bearer [ 375.875522][T13515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 377.099445][T13511] tipc: Enabled bearer , priority 0 [ 377.116063][T13516] syzkaller0: entered promiscuous mode [ 377.121686][T13516] syzkaller0: entered allmulticast mode [ 377.149911][T13488] lo speed is unknown, defaulting to 1000 [ 377.175819][T13520] tipc: Resetting bearer [ 377.211694][T13526] tipc: Resetting bearer [ 377.229242][T13528] tipc: Resetting bearer [ 377.245826][T13528] tipc: Disabling bearer [ 377.265196][ T6171] tipc: Resetting bearer [ 377.405160][T13540] netlink: 'syz.3.1913': attribute type 13 has an invalid length. [ 377.413040][T13540] netlink: 'syz.3.1913': attribute type 17 has an invalid length. [ 377.579573][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 377.706327][T13540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.725037][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.745884][T13540] batman_adv: batadv0: Interface activated: dummy0 [ 377.758729][T13540] batadv0: mtu less than device minimum [ 377.766428][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.778332][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.790162][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.802072][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.813944][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.825616][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.837422][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.849233][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.861008][T13540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 377.976210][T13551] netlink: 'syz.1.1916': attribute type 3 has an invalid length. [ 378.031562][ T5888] lo speed is unknown, defaulting to 1000 [ 378.040794][T13537] tipc: Resetting bearer [ 378.056885][ T5888] syz2: Port: 1 Link ACTIVE [ 378.106917][T13551] block nbd1: NBD_DISCONNECT [ 378.274320][T13551] siw: device registration error -23 [ 378.401991][T13551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.556679][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 378.760408][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 378.806875][T13593] tipc: Enabled bearer , priority 0 [ 378.844080][T13593] syzkaller0: entered promiscuous mode [ 378.867066][T13593] syzkaller0: entered allmulticast mode [ 378.897678][T13602] tipc: Can't bind to reserved service type 1 [ 378.905081][T13602] netlink: 'syz.3.1925': attribute type 39 has an invalid length. [ 378.973710][T13607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1925'. [ 379.008630][T13607] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1925'. [ 379.041494][T13607] netlink: 'syz.3.1925': attribute type 5 has an invalid length. [ 379.080074][T13607] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1925'. [ 379.237824][T13608] lo speed is unknown, defaulting to 1000 [ 379.245735][T13612] tipc: Resetting bearer [ 379.352003][T13592] tipc: Resetting bearer [ 379.401959][T13592] tipc: Disabling bearer [ 379.617477][T13608] lo speed is unknown, defaulting to 1000 [ 379.634802][T13627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1927'. [ 379.725339][T13627] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 379.750628][T13627] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1927'. [ 379.802697][T13629] macsec2: entered promiscuous mode [ 379.813500][T13629] bridge0: entered promiscuous mode [ 379.907982][T13637] lo speed is unknown, defaulting to 1000 [ 380.043588][T13642] netlink: 'syz.2.1930': attribute type 3 has an invalid length. [ 380.085314][T13633] lo: Caught tx_queue_len zero misconfig [ 380.115736][T13642] block nbd2: NBD_DISCONNECT [ 380.130855][T13642] block nbd2: Send disconnect failed -32 [ 380.142221][T13642] block nbd2: shutting down sockets [ 380.205422][T13649] bond0: (slave rose0): Releasing backup interface [ 380.287615][T13642] dvmrp1: left allmulticast mode [ 380.292709][T13642] lo: left allmulticast mode [ 380.468562][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.477778][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.499359][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1931'. [ 380.644707][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1932'. [ 380.660866][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 380.674167][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 380.686435][T13662] syzkaller0: entered promiscuous mode [ 380.691950][T13662] syzkaller0: entered allmulticast mode [ 380.728105][T13637] lo speed is unknown, defaulting to 1000 [ 381.620711][T13687] syzkaller0: entered promiscuous mode [ 381.637109][T13687] syzkaller0: entered allmulticast mode [ 381.748179][T13693] netlink: 'syz.1.1938': attribute type 3 has an invalid length. [ 381.925917][T13700] block nbd1: NBD_DISCONNECT [ 382.072144][T13707] siw: device registration error -23 [ 382.505314][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 382.515600][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 382.688274][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 383.319685][T13707] net_ratelimit: 14 callbacks suppressed [ 383.319694][T13707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.689282][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 383.711046][T13733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 383.825617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 383.833744][ C1] lec:lec_tx_timeout: lec0 [ 383.934333][T13740] geneve1: Caught tx_queue_len zero misconfig [ 384.269403][T13766] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.319783][T13760] lo speed is unknown, defaulting to 1000 [ 384.361562][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.377183][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 384.408071][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.456518][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.581753][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.613888][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.643637][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.674159][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.713810][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.722617][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.994502][T13781] netlink: 'syz.2.1953': attribute type 3 has an invalid length. [ 385.032519][T13781] block nbd2: NBD_DISCONNECT [ 385.196704][T13787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.226201][T13787] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.533181][T13771] lo speed is unknown, defaulting to 1000 [ 385.548571][T13760] lo speed is unknown, defaulting to 1000 [ 386.014999][T13771] lo speed is unknown, defaulting to 1000 [ 386.021857][T13781] siw: device registration error -23 [ 386.727494][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 386.809642][T13831] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 386.894788][T13831] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1960'. [ 388.144562][T13848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.151014][T13848] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 388.242124][T13848] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.248818][T13848] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 388.271360][T13848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.296322][T13848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 388.317174][T13862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1964'. [ 388.336923][T13862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1964'. [ 388.353253][T13848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.368596][T13848] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 388.387514][T13862] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 388.395454][T13862] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1964'. [ 388.404915][T13862] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1964'. [ 388.423724][T13862] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1964'. [ 388.495041][T13868] lo speed is unknown, defaulting to 1000 [ 388.734762][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1966'. [ 388.761478][T13870] geneve2: entered promiscuous mode [ 388.839194][ T6188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.867580][ T6188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.894898][ T6188] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 388.920370][ T6188] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 389.052371][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1969'. [ 389.152203][T13879] netlink: 'syz.4.1968': attribute type 13 has an invalid length. [ 389.267305][T13885] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.307225][T13879] net_ratelimit: 28 callbacks suppressed [ 389.307248][T13879] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 389.550838][T13868] lo speed is unknown, defaulting to 1000 [ 389.602094][T13892] IPv6: Can't replace route, no match found [ 389.983294][T13898] xt_ecn: cannot match TCP bits for non-tcp packets [ 390.256882][T13902] lo speed is unknown, defaulting to 1000 [ 390.527697][T13902] lo speed is unknown, defaulting to 1000 [ 390.760119][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1977'. [ 391.447593][T13922] lo speed is unknown, defaulting to 1000 [ 392.047250][T13935] __nla_validate_parse: 1 callbacks suppressed [ 392.047274][T13935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1981'. [ 392.204998][T13940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.228274][T13940] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 392.272856][T13940] bond0: (slave sit0): Error -95 calling set_mac_address [ 392.396665][T13941] lo speed is unknown, defaulting to 1000 [ 392.420700][T13922] lo speed is unknown, defaulting to 1000 [ 392.454052][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 392.477272][T13940] netlink: zone id is out of range [ 392.805653][T13957] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 392.833898][T13957] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 392.956748][T13941] lo speed is unknown, defaulting to 1000 [ 392.964828][T13957] lo speed is unknown, defaulting to 1000 [ 393.703352][T13958] lo speed is unknown, defaulting to 1000 [ 393.844565][T13971] tipc: Enabled bearer , priority 0 [ 393.864885][T13971] syzkaller0: entered promiscuous mode [ 393.870422][T13971] syzkaller0: entered allmulticast mode [ 393.957160][T13971] tipc: Resetting bearer [ 393.979541][T13971] tipc: Resetting bearer [ 393.998657][T13971] tipc: Disabling bearer [ 394.244549][T13973] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 394.254510][T13957] lo speed is unknown, defaulting to 1000 [ 394.353657][T13958] lo speed is unknown, defaulting to 1000 [ 394.759184][T13977] netlink: 'syz.4.1993': attribute type 13 has an invalid length. [ 394.774415][T13977] netlink: 'syz.4.1993': attribute type 17 has an invalid length. [ 395.077339][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.091909][T13977] 0ªX¹¦À: left allmulticast mode [ 395.097760][T13977] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 395.482334][T13982] tipc: Enabled bearer , priority 0 [ 395.499163][T13982] syzkaller0: entered promiscuous mode [ 395.506633][T13982] syzkaller0: entered allmulticast mode [ 395.550357][T13982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1994'. [ 395.612699][T13980] tipc: Resetting bearer [ 395.644833][T13980] tipc: Disabling bearer [ 395.661278][T13985] netlink: 'syz.3.1996': attribute type 4 has an invalid length. [ 395.703405][T13985] IPv6: NLM_F_REPLACE set, but no existing node found! [ 395.711981][ T796] lo speed is unknown, defaulting to 1000 [ 395.725372][ T796] syz2: Port: 1 Link DOWN [ 395.755157][ T6171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.770218][ T6171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.265882][T14005] tipc: Enabled bearer , priority 0 [ 396.383613][T14005] syzkaller0: entered promiscuous mode [ 396.391124][T14005] syzkaller0: entered allmulticast mode [ 396.427355][T14005] tipc: Resetting bearer [ 396.491554][T14005] tipc: Resetting bearer [ 396.521246][T14005] tipc: Disabling bearer [ 396.548165][T14012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.555112][T14012] syzkaller1: linktype set to 825 [ 396.567541][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'. [ 396.693384][T14014] lo speed is unknown, defaulting to 1000 [ 397.383191][T14014] lo speed is unknown, defaulting to 1000 [ 397.523310][T14041] netlink: 'syz.4.2013': attribute type 4 has an invalid length. [ 397.780897][T14049] tipc: Enabled bearer , priority 0 [ 397.794769][T14049] syzkaller0: entered promiscuous mode [ 397.810540][T14049] syzkaller0: entered allmulticast mode [ 397.830996][T14045] lo speed is unknown, defaulting to 1000 [ 397.888834][T14049] tipc: Resetting bearer [ 397.957955][T14049] tipc: Resetting bearer [ 398.169499][T14049] tipc: Disabling bearer [ 398.234042][T14045] lo speed is unknown, defaulting to 1000 [ 398.247555][T14052] lo speed is unknown, defaulting to 1000 [ 398.499515][T14069] wg1: entered promiscuous mode [ 398.508129][T14069] wg1: entered allmulticast mode [ 399.095966][T14048] lo speed is unknown, defaulting to 1000 [ 399.419908][T14052] lo speed is unknown, defaulting to 1000 [ 399.458375][T14048] lo speed is unknown, defaulting to 1000 [ 400.057035][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2027'. [ 400.129490][T14112] tipc: Enabled bearer , priority 0 [ 400.180267][T14112] syzkaller0: entered promiscuous mode [ 400.193932][T14112] syzkaller0: entered allmulticast mode [ 400.237372][T14112] tipc: Resetting bearer [ 400.272710][T14112] tipc: Disabling bearer [ 400.345491][T14116] netlink: 'syz.3.2030': attribute type 21 has an invalid length. [ 400.355535][ T7407] lec:lec_start_xmit: lec0:No lecd attached [ 400.393692][T14116] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2030'. [ 400.414075][T14116] netlink: 'syz.3.2030': attribute type 4 has an invalid length. [ 400.442194][T14116] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2030'. [ 400.548655][T14118] netlink: 'syz.3.2030': attribute type 1 has an invalid length. [ 400.573608][T14118] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2030'. [ 400.730203][T14128] xt_hashlimit: size too large, truncated to 1048576 [ 401.472181][T14116] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 401.692183][T14137] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2033'. [ 402.300409][T14173] tipc: Enabled bearer , priority 0 [ 402.321950][T14173] syzkaller0: entered promiscuous mode [ 402.340966][T14173] syzkaller0: entered allmulticast mode [ 402.476986][T14173] tipc: Resetting bearer [ 402.530824][T14173] tipc: Disabling bearer [ 402.667827][T14178] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 402.678982][T14176] netlink: 'syz.3.2042': attribute type 11 has an invalid length. [ 402.710464][T14178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.748785][T14176] netlink: 'syz.3.2042': attribute type 23 has an invalid length. [ 402.762305][T14176] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2042'. [ 402.778629][T14178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 402.796739][T14178] bond7: (slave batadv1): making interface the new active one [ 402.817392][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 402.852466][T14178] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 402.889532][T14180] bond7 (unregistering): (slave batadv1): Releasing active interface [ 402.906343][T14180] bond7 (unregistering): Released all slaves [ 403.008869][T14185] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2044'. [ 403.197674][T14191] lo speed is unknown, defaulting to 1000 [ 403.204450][T14188] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 403.224304][T14188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.232691][T14188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.260382][T14188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.402138][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 403.494334][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'. [ 403.564068][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.617217][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.643669][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.668655][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.721069][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.743854][T14213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.752278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.935604][T14191] lo speed is unknown, defaulting to 1000 [ 403.935622][T14209] lo speed is unknown, defaulting to 1000 [ 404.308918][T14209] lo speed is unknown, defaulting to 1000 [ 404.801158][T14232] tipc: Enabling of bearer rejected, already enabled [ 405.023406][T14240] tipc: Failed to remove unknown binding: 66,0,0/2666681735:567556231/567556233 [ 405.054799][T14240] tipc: Failed to remove unknown binding: 66,0,0/2666681735:567556231/567556232 [ 405.075381][T14240] tipc: Failed to remove unknown binding: 66,0,0/2666681735:567556231/567556233 [ 405.120962][T14240] tipc: Failed to remove unknown binding: 66,0,0/2666681735:567556231/567556232 [ 405.172416][T14242] __nla_validate_parse: 2 callbacks suppressed [ 405.172436][T14242] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2056'. [ 405.571033][T14259] netlink: 'syz.4.2060': attribute type 11 has an invalid length. [ 405.633561][T14259] netlink: 'syz.4.2060': attribute type 23 has an invalid length. [ 405.661859][T14259] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2060'. [ 405.823489][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5470 ms [ 405.831587][ C1] lec:lec_tx_timeout: lec0 [ 406.352302][T14274] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 406.380869][T14280] lo speed is unknown, defaulting to 1000 [ 407.368252][T14280] lo speed is unknown, defaulting to 1000 [ 407.428040][T14313] lo speed is unknown, defaulting to 1000 [ 407.637644][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 407.721550][T14313] lo speed is unknown, defaulting to 1000 [ 408.449169][T14343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2073'. [ 409.985762][T14379] lo speed is unknown, defaulting to 1000 [ 410.402441][T14379] lo speed is unknown, defaulting to 1000 [ 410.870257][T14395] netlink: 'syz.3.2084': attribute type 89 has an invalid length. [ 411.878496][T14407] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 411.888846][T14408] syzkaller0: entered promiscuous mode [ 411.894438][T14408] syzkaller0: entered allmulticast mode [ 411.916739][T14401] netlink: 'syz.4.2086': attribute type 4 has an invalid length. [ 412.987581][T14429] netlink: 'syz.4.2092': attribute type 5 has an invalid length. [ 413.215416][T14435] lo speed is unknown, defaulting to 1000 [ 413.315300][T14452] netlink: 'syz.0.2093': attribute type 16 has an invalid length. [ 413.355478][T14452] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2093'. [ 413.386294][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'. [ 413.570133][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 413.590150][T14456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2093'. [ 413.804848][T14452] dummy0: Caught tx_queue_len zero misconfig [ 413.826358][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 413.851032][T14435] lo speed is unknown, defaulting to 1000 [ 414.141634][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 414.199986][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 414.228756][T14477] tipc: Enabling of bearer rejected, failed to enable media [ 414.334796][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 414.346643][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 414.363556][T14472] lo speed is unknown, defaulting to 1000 [ 414.375446][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 414.821207][T14489] xt_policy: neither incoming nor outgoing policy selected [ 414.960544][T14472] lo speed is unknown, defaulting to 1000 [ 415.111980][T14494] netlink: 'syz.2.2101': attribute type 2 has an invalid length. [ 415.144684][T14494] netlink: 'syz.2.2101': attribute type 2 has an invalid length. [ 415.368356][T14499] lo speed is unknown, defaulting to 1000 [ 415.808026][T14499] lo speed is unknown, defaulting to 1000 [ 417.441563][T14542] tipc: Enabled bearer , priority 0 [ 417.570234][T14535] syzkaller1: entered promiscuous mode [ 417.595657][T14535] syzkaller1: entered allmulticast mode [ 417.674271][T14547] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 418.309700][T14555] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 418.705523][T14559] bond4: entered promiscuous mode [ 418.731596][T14572] tipc: Enabling of bearer rejected, already enabled [ 418.762247][T14566] syzkaller0: entered promiscuous mode [ 418.769730][T14566] syzkaller0: entered allmulticast mode [ 418.792898][T14566] netem: change failed [ 418.822462][T14566] tipc: Resetting bearer [ 418.849035][T14566] tipc: Resetting bearer [ 418.935808][T14577] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 418.984036][T14577] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 419.026874][T14578] SET target dimension over the limit! [ 419.276306][T14581] xt_hashlimit: size too large, truncated to 1048576 [ 419.346839][T14584] tipc: Enabled bearer , priority 0 [ 419.657433][T14583] tipc: Disabling bearer [ 419.839977][ T6171] tipc: Resetting bearer [ 420.340375][T14603] net_ratelimit: 36 callbacks suppressed [ 420.340396][T14603] openvswitch: netlink: Actions may not be safe on all matching packets [ 420.476723][T14606] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 420.667555][T14614] tipc: Enabling of bearer rejected, already enabled [ 420.904593][T14618] gretap1: entered promiscuous mode [ 421.007562][T14618] batman_adv: batadv0: Adding interface: gretap1 [ 421.079675][T14618] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 421.174133][T14618] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 421.248818][T14624] __nla_validate_parse: 6 callbacks suppressed [ 421.248841][T14624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2132'. [ 421.465251][T14632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.524992][T14622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 421.551621][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 421.580506][T14622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 421.644012][T14622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 422.297319][T14650] tipc: Enabled bearer , priority 0 [ 422.313388][T14649] tipc: Disabling bearer [ 423.076723][T14669] lec:lec_atm_close: lec0: Shut down! [ 423.263011][T14683] tipc: Enabled bearer , priority 0 [ 423.282423][T14683] syzkaller0: entered promiscuous mode [ 423.288704][T14683] syzkaller0: entered allmulticast mode [ 423.301126][T14683] tipc: Resetting bearer [ 423.310645][T14683] tipc: Resetting bearer [ 423.327496][T14683] tipc: Disabling bearer [ 423.889548][T14695] lo speed is unknown, defaulting to 1000 [ 424.274847][T14695] lo speed is unknown, defaulting to 1000 [ 424.386346][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2149'. [ 425.096891][T14710] tipc: Enabling of bearer rejected, already enabled [ 425.302436][T14716] tipc: Resetting bearer [ 425.319953][T14716] tipc: Enabling of bearer rejected, already enabled [ 425.355402][T14716] netem: change failed [ 425.369914][T14716] tipc: Resetting bearer [ 425.772065][T14739] tipc: Enabling of bearer rejected, already enabled [ 425.821291][T14737] netlink: 'syz.1.2154': attribute type 7 has an invalid length. [ 425.838561][T14737] netlink: 'syz.1.2154': attribute type 5 has an invalid length. [ 425.847686][T14737] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2154'. [ 425.954616][T14743] bridge0: left promiscuous mode [ 426.077858][T14751] lo speed is unknown, defaulting to 1000 [ 426.145276][T14755] tipc: Resetting bearer [ 426.247231][T14756] xt_CT: No such helper "syz1" [ 426.638041][T14773] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2160'. [ 426.701441][T14776] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2160'. [ 426.733251][T14776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.767798][T14776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.791334][T14776] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 426.802416][T14776] bond0 (unregistering): Released all slaves [ 426.847010][T14751] lo speed is unknown, defaulting to 1000 [ 426.891286][T14773] rdma_rxe: rxe_newlink: failed to add bond0 [ 426.948907][T14779] netlink: 'syz.0.2161': attribute type 39 has an invalid length. [ 427.043699][T14783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2161'. [ 427.067408][T14783] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2161'. [ 427.110617][T14783] netlink: 'syz.0.2161': attribute type 5 has an invalid length. [ 427.153834][T14783] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2161'. [ 427.266127][T14787] vlan5: entered allmulticast mode [ 427.270802][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 427.294671][T14787] bridge_slave_0: entered allmulticast mode [ 427.714629][T14798] syzkaller0: entered promiscuous mode [ 427.734834][T14798] syzkaller0: entered allmulticast mode [ 427.872767][T14790] tipc: Resetting bearer [ 427.885684][T14790] tipc: Resetting bearer [ 428.048255][ T5903] lo speed is unknown, defaulting to 1000 [ 428.150680][T14817] tipc: Enabled bearer , priority 0 [ 428.295650][T14815] tipc: Disabling bearer [ 428.449766][T14829] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 428.469448][T14828] openvswitch: netlink: Actions may not be safe on all matching packets [ 428.785644][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 428.793780][ C1] lec:lec_tx_timeout: lec0 [ 429.154959][T14849] tipc: Enabled bearer , priority 0 [ 429.192439][T14849] syzkaller0: entered promiscuous mode [ 429.199865][T14849] syzkaller0: entered allmulticast mode [ 429.227471][T14849] tipc: Resetting bearer [ 429.241423][T14849] tipc: Resetting bearer [ 429.292109][T14849] tipc: Disabling bearer [ 429.616580][T14869] netlink: 'syz.2.2174': attribute type 2 has an invalid length. [ 429.637057][T14869] netlink: 'syz.2.2174': attribute type 2 has an invalid length. [ 429.789518][T14869] siw: device registration error -23 [ 429.907661][T14872] syzkaller0: entered promiscuous mode [ 429.952355][T14872] syzkaller0: entered allmulticast mode [ 430.204044][T14884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2175'. [ 430.379522][T14888] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2176'. [ 430.659036][T14897] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 431.909882][T14746] Set syz1 is full, maxelem 65536 reached [ 432.090581][T14916] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.186303][T14926] netlink: 'syz.3.2180': attribute type 3 has an invalid length. [ 433.253339][T14926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.303962][ T5833] lo speed is unknown, defaulting to 1000 [ 433.309762][ T5833] syz2: Port: 1 Link ACTIVE [ 433.315098][T14932] tipc: Enabled bearer , priority 0 [ 433.341969][T14929] syzkaller0: entered promiscuous mode [ 433.363569][T14929] syzkaller0: entered allmulticast mode [ 433.388635][T14929] tipc: Resetting bearer [ 433.411988][T14929] tipc: Resetting bearer [ 433.454408][T14929] tipc: Disabling bearer [ 433.544791][T14936] lo speed is unknown, defaulting to 1000 [ 433.795649][T14936] lo speed is unknown, defaulting to 1000 [ 434.085367][T14950] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2187'. [ 434.294681][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 434.405974][T14957] syzkaller0: entered promiscuous mode [ 434.443557][T14957] syzkaller0: entered allmulticast mode [ 434.573831][T14960] lo speed is unknown, defaulting to 1000 [ 434.739240][T14967] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.056994][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 435.179773][T14980] tipc: Enabled bearer , priority 0 [ 435.205399][T14975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.214113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.231750][T14975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.240712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.263731][T14975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.275868][T14984] syzkaller0: entered promiscuous mode [ 435.281377][T14984] syzkaller0: entered allmulticast mode [ 435.298671][T14980] tipc: Resetting bearer [ 435.309535][T14975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.318372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.349233][T14975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.357799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.389708][T14980] tipc: Resetting bearer [ 435.424197][T14980] tipc: Disabling bearer [ 435.600566][T14960] lo speed is unknown, defaulting to 1000 [ 435.600991][T14981] lo speed is unknown, defaulting to 1000 [ 435.936353][T14997] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2199'. [ 435.959695][T14997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2199'. [ 436.419559][T15002] tipc: Enabled bearer , priority 0 [ 436.428799][T15002] syzkaller0: MTU too low for tipc bearer [ 436.436489][T15002] tipc: Disabling bearer [ 436.446754][T14981] lo speed is unknown, defaulting to 1000 [ 436.739299][T15005] syzkaller0: entered promiscuous mode [ 436.753512][T15005] syzkaller0: entered allmulticast mode [ 437.284329][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 438.372950][T15033] batman_adv: batadv0: Interface deactivated: dummy0 [ 438.398641][T15033] tipc: Resetting bearer [ 438.574153][ T5903] lo speed is unknown, defaulting to 1000 [ 438.594926][T15032] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 438.604724][ T5903] syz2: Port: 1 Link DOWN [ 438.633690][T15032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 438.643317][T15032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 439.582522][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 439.689530][T15070] tipc: Enabled bearer , priority 0 [ 439.714491][T15070] syzkaller0: MTU too low for tipc bearer [ 439.727036][T15070] tipc: Disabling bearer [ 439.913269][T15077] tipc: Enabled bearer , priority 0 [ 439.921009][T15077] syzkaller0: entered promiscuous mode [ 439.927033][T15077] syzkaller0: entered allmulticast mode [ 439.951155][T15077] tipc: Resetting bearer [ 439.960879][T15077] tipc: Resetting bearer [ 439.988311][ T1303] net_ratelimit: 318 callbacks suppressed [ 439.988339][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.005703][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 440.011753][ T1303] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 440.021425][T15077] tipc: Disabling bearer [ 440.408477][T15086] netlink: 'syz.3.2224': attribute type 13 has an invalid length. [ 440.420931][T15086] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2224'. [ 440.632210][T15096] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2227'. [ 440.734737][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2227'. [ 440.856274][T15101] tipc: Enabled bearer , priority 0 [ 440.875254][T15101] syzkaller0: MTU too low for tipc bearer [ 440.881029][T15101] tipc: Disabling bearer [ 440.901614][T15105] block nbd1: Unsupported socket: should be TCP or UNIX. [ 440.964977][T15108] tipc: Enabling of bearer rejected, already enabled [ 440.974717][T15108] tipc: Resetting bearer [ 441.418567][T15123] netlink: 'syz.3.2237': attribute type 13 has an invalid length. [ 441.434568][T15123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2237'. [ 441.511336][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2235'. [ 441.546112][T15129] lo speed is unknown, defaulting to 1000 [ 441.594702][T15131] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 441.622659][T15125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.638859][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 441.661217][T15128] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2235'. [ 441.662032][T15125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.692713][T15122] wg1: left promiscuous mode [ 441.697637][T15122] wg1: left allmulticast mode [ 441.726744][T15122] macsec2: left promiscuous mode [ 441.751130][T15125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.075784][T15129] lo speed is unknown, defaulting to 1000 [ 442.187390][T15143] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2241'. [ 442.259312][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.321197][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.525961][T15152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2241'. [ 442.666977][T15154] syzkaller0: mtu less than device minimum [ 442.696848][T15161] syzkaller0: entered promiscuous mode [ 442.702382][T15161] syzkaller0: entered allmulticast mode [ 442.767609][T15165] tipc: Enabled bearer , priority 0 [ 442.793365][T15165] syzkaller0: entered promiscuous mode [ 442.810546][T15165] syzkaller0: entered allmulticast mode [ 442.939840][T15164] tipc: Resetting bearer [ 442.962747][T15179] netlink: 'syz.1.2248': attribute type 13 has an invalid length. [ 443.084524][T15164] tipc: Disabling bearer [ 443.575677][T15211] lo speed is unknown, defaulting to 1000 [ 443.585521][T15213] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 444.558395][T15211] lo speed is unknown, defaulting to 1000 [ 445.073503][T15255] __nla_validate_parse: 3 callbacks suppressed [ 445.073525][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2259'. [ 445.103541][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 445.111579][ C1] lec:lec_tx_timeout: lec0 [ 445.230002][T15276] tipc: Enabled bearer , priority 0 [ 445.245751][T15276] syzkaller0: entered promiscuous mode [ 445.274797][T15276] syzkaller0: entered allmulticast mode [ 445.391664][T15276] tipc: Resetting bearer [ 445.485161][T15275] tipc: Resetting bearer [ 445.549862][T15275] tipc: Disabling bearer [ 445.921428][T15304] lo speed is unknown, defaulting to 1000 [ 446.339257][T15309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2270'. [ 446.589535][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 446.609724][T15339] netlink: 'syz.2.2275': attribute type 4 has an invalid length. [ 446.828792][T15343] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 446.862446][T15343] bond8 (unregistering): Released all slaves [ 447.010487][T15335] lo speed is unknown, defaulting to 1000 [ 447.034959][T15304] lo speed is unknown, defaulting to 1000 [ 447.661217][T15374] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 447.670315][T15374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.706159][T15374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.730897][T15374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.349143][T15335] lo speed is unknown, defaulting to 1000 [ 448.393917][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.402274][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.502408][T15378] lo speed is unknown, defaulting to 1000 [ 448.509175][T15412] tipc: Resetting bearer [ 448.523641][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2285'. [ 449.650860][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2293'. [ 449.672137][T15464] netlink: 'syz.1.2295': attribute type 4 has an invalid length. [ 449.704070][T15378] lo speed is unknown, defaulting to 1000 [ 450.120692][T15467] lo speed is unknown, defaulting to 1000 [ 450.551916][T15491] netem: change failed [ 450.738233][T15467] lo speed is unknown, defaulting to 1000 [ 451.647469][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2307'. [ 451.803258][T15507] lec:lec_atm_close: lec0: Shut down! [ 452.072437][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 452.889925][T15585] No such timeout policy "syz1" [ 453.024477][T15590] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.2332'. [ 453.156804][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'. [ 453.437874][T15604] lo speed is unknown, defaulting to 1000 [ 453.813558][T15604] lo speed is unknown, defaulting to 1000 [ 454.034218][T15625] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2346'. [ 454.082041][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2349'. [ 454.344240][T15644] tipc: Enabling of bearer rejected, failed to enable media [ 454.414450][T15643] tipc: Resetting bearer [ 454.698069][T15660] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2361'. [ 454.921898][ T6180] tipc: Resetting bearer [ 454.990730][T15667] lo speed is unknown, defaulting to 1000 [ 455.198877][T15681] tipc: Enabling of bearer rejected, already enabled [ 455.542839][T15667] lo speed is unknown, defaulting to 1000 [ 455.865456][T15703] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2375'. [ 456.061972][T15686] lec:lec_atm_close: lec0: Shut down! [ 456.358191][T15715] tipc: Enabled bearer , priority 0 [ 456.437263][T15714] tipc: Disabling bearer [ 456.520626][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 456.652337][T15732] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2387'. [ 456.851400][T15736] lo speed is unknown, defaulting to 1000 [ 457.285808][T15755] tipc: Enabled bearer , priority 0 [ 457.302819][T15736] lo speed is unknown, defaulting to 1000 [ 457.322257][T15754] tipc: Disabling bearer [ 457.330547][T15759] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2399'. [ 457.832485][T15765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2401'. [ 458.247206][T15772] lec0: mtu less than device minimum [ 458.258523][T15772] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 458.280649][T15769] lec:lec_atm_close: lec0: Shut down! [ 458.518393][T15804] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.2412'. [ 458.539005][T15806] tipc: Enabled bearer , priority 0 [ 458.564499][T15805] tipc: Disabling bearer [ 458.847150][T15816] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 458.867699][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.884350][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.892746][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.912889][T15819] lo speed is unknown, defaulting to 1000 [ 459.012245][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.073822][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.111125][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.143713][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.152082][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.185489][T15816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.378255][T15844] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.2428'. [ 459.603963][T15846] tipc: Enabled bearer , priority 0 [ 459.626853][T15845] tipc: Disabling bearer [ 459.677032][T15819] lo speed is unknown, defaulting to 1000 [ 460.052417][T15869] pim6reg: entered allmulticast mode [ 460.464828][T15884] syzkaller0: entered promiscuous mode [ 460.490204][T15884] syzkaller0: entered allmulticast mode [ 460.541101][T15889] tipc: Enabling of bearer rejected, already enabled [ 461.790366][T15911] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 462.174678][T15901] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 462.205016][T15901] lec:lec_atm_close: lec0: Shut down! [ 462.472498][T15925] tipc: Enabled bearer , priority 0 [ 462.541044][T15924] tipc: Disabling bearer [ 462.974323][T15938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2461'. [ 463.170878][T15959] bridge_slave_1: default FDB implementation only supports local addresses [ 463.302373][T15966] team0: Port device syz_tun added [ 463.338567][T15967] xt_policy: too many policy elements [ 463.392041][T15971] tipc: Enabled bearer , priority 0 [ 463.499517][T15970] tipc: Disabling bearer [ 464.106936][T15990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2482'. [ 464.216940][T16019] net_ratelimit: 28 callbacks suppressed [ 464.216959][T16019] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 464.362032][T16025] Bluetooth: MGMT ver 1.23 [ 464.583056][T16038] ip6_vti0: Caught tx_queue_len zero misconfig [ 465.353682][T16078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2507'. [ 465.389348][T16049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2508'. [ 465.564877][T16090] syzkaller0: entered promiscuous mode [ 465.570407][T16090] syzkaller0: entered allmulticast mode [ 465.821610][T16108] tipc: Enabling of bearer rejected, failed to enable media [ 466.547588][T16151] bridge8: entered promiscuous mode [ 466.601510][T16140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2526'. [ 466.745196][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2531'. [ 466.816453][T16162] syzkaller0: entered promiscuous mode [ 466.836199][T16162] syzkaller0: entered allmulticast mode [ 467.030746][T16173] tipc: Enabled bearer , priority 0 [ 467.052034][T16167] tipc: Resetting bearer [ 467.115201][T16167] tipc: Disabling bearer [ 467.194743][T16186] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.306310][T16182] lo speed is unknown, defaulting to 1000 [ 467.325885][T16188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2539'. [ 467.366770][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2539'. [ 467.480751][T16198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2543'. [ 467.598362][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2543'. [ 467.823457][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms [ 467.831552][ C1] lec:lec_tx_timeout: lec0 [ 467.836241][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.968427][T16217] netlink: 'syz.2.2550': attribute type 2 has an invalid length. [ 467.983819][T16182] lo speed is unknown, defaulting to 1000 [ 468.101497][T16219] netem: change failed [ 468.115641][T16221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'. [ 468.296550][T16226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2554'. [ 468.343882][T16226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2554'. [ 468.861242][T16251] syzkaller0: entered promiscuous mode [ 468.868498][T16251] syzkaller0: entered allmulticast mode [ 469.041351][T16265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2568'. [ 469.426492][T16281] tipc: Resetting bearer [ 469.435451][T16281] tipc: Enabling of bearer rejected, already enabled [ 469.458891][T16281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2577'. [ 469.468832][T16283] syzkaller0: entered promiscuous mode [ 469.474584][T16283] syzkaller0: entered allmulticast mode [ 469.490038][T16280] tipc: Resetting bearer [ 470.115183][ T6180] tipc: Resetting bearer [ 470.261492][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'. [ 470.734681][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 471.267362][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 471.328121][T16361] syzkaller0: entered promiscuous mode [ 471.339908][T16361] syzkaller0: entered allmulticast mode [ 472.843446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 472.851561][ C1] lec:lec_tx_timeout: lec0 [ 473.192599][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 473.241919][T16405] tun0: tun_chr_ioctl cmd 1074025677 [ 473.254049][T16405] tun0: linktype set to 776 [ 473.276903][T16399] syzkaller0: entered promiscuous mode [ 473.282427][T16399] syzkaller0: entered allmulticast mode [ 473.355710][T16410] netlink: 'syz.0.2624': attribute type 4 has an invalid length. [ 473.715069][T16424] tipc: Resetting bearer [ 473.968186][T16442] netlink: 'syz.4.2636': attribute type 14 has an invalid length. [ 474.195355][T16448] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 474.228101][T16449] syzkaller0: entered promiscuous mode [ 474.246332][T16449] syzkaller0: entered allmulticast mode [ 474.822811][T16480] pimreg: tun_chr_ioctl cmd 1074025677 [ 474.838177][T16480] pimreg: linktype set to 774 [ 474.916380][T16485] netlink: 'syz.2.2652': attribute type 4 has an invalid length. [ 474.980836][T16490] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2654'. [ 475.053185][T16493] netlink: 'syz.4.2657': attribute type 4 has an invalid length. [ 475.087898][T16497] tipc: Resetting bearer [ 475.111003][T16497] netem: change failed [ 475.117423][T16495] tipc: Resetting bearer [ 475.784783][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2671'. [ 476.148281][ T1135] tipc: Resetting bearer [ 476.191700][T16551] netlink: 'syz.4.2680': attribute type 4 has an invalid length. [ 476.482304][T16565] tipc: Enabling of bearer rejected, failed to enable media [ 477.117870][T16603] tipc: Resetting bearer [ 477.202212][T16603] tipc: Resetting bearer [ 477.486191][T16618] tipc: Enabling of bearer rejected, already enabled [ 477.697129][T16625] syzkaller1: entered promiscuous mode [ 477.702664][T16625] syzkaller1: entered allmulticast mode [ 478.001253][T16643] netem: change failed [ 478.039557][T16646] tipc: Enabling of bearer rejected, failed to enable media [ 478.323383][ T1135] tipc: Resetting bearer [ 478.577060][T16676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2723'. [ 478.719883][T16682] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.763520][T16685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2726'. [ 478.893731][T16690] batadv_slave_1: entered promiscuous mode [ 478.907646][T16689] batadv_slave_1: left promiscuous mode [ 479.186923][ T6188] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.206212][ T6188] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.214987][ T6188] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.252379][T16705] tipc: Enabled bearer , priority 0 [ 479.271185][ T6188] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 479.299066][T16705] tipc: Resetting bearer [ 479.339131][T16704] tipc: Disabling bearer [ 479.695035][T16726] netlink: 'syz.1.2743': attribute type 4 has an invalid length. [ 479.726425][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 479.738615][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2745'. [ 479.792427][T16733] syzkaller0: entered promiscuous mode [ 479.798573][T16733] syzkaller0: entered allmulticast mode [ 479.873008][T16735] tipc: Enabled bearer , priority 0 [ 479.886021][T16735] tipc: Resetting bearer [ 479.924186][T16734] tipc: Disabling bearer [ 480.320734][T16759] syzkaller1: entered promiscuous mode [ 480.326728][T16759] syzkaller1: entered allmulticast mode [ 480.516029][T16769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2760'. [ 480.661303][T16771] tipc: Enabled bearer , priority 0 [ 480.672806][T16771] tipc: Resetting bearer [ 480.699881][T16770] tipc: Disabling bearer [ 480.850968][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 481.216405][T16806] netlink: 'syz.2.2773': attribute type 4 has an invalid length. [ 481.855454][T16829] veth1_to_batadv: entered promiscuous mode [ 481.861658][T16829] veth1_to_batadv: entered allmulticast mode [ 482.216026][T16841] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 482.231088][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.246273][T16845] syzkaller0: entered promiscuous mode [ 482.251833][T16845] syzkaller0: entered allmulticast mode [ 482.273900][T16847] lo speed is unknown, defaulting to 1000 [ 482.281369][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.294837][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.402823][T16856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2793'. [ 482.513697][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.574026][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.582323][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.639469][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.699290][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.730692][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.150373][T16847] lo speed is unknown, defaulting to 1000 [ 483.163463][T16881] netlink: 'syz.0.2801': attribute type 4 has an invalid length. [ 484.021090][T16918] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2815'. [ 484.142108][T16918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2815'. [ 484.292229][T16930] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2819'. [ 484.482245][T16940] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 484.521599][T16935] lo speed is unknown, defaulting to 1000 [ 484.704878][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2824'. [ 484.867192][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 484.898379][T16957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2828'. [ 485.039848][T16957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2828'. [ 485.092275][T16964] team_slave_1: Caught tx_queue_len zero misconfig [ 485.191805][T16935] lo speed is unknown, defaulting to 1000 [ 485.545231][T16976] team_slave_1: Caught tx_queue_len zero misconfig [ 485.600063][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 485.640452][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 485.853877][T16994] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 485.902811][T16994] netlink: 'syz.3.2842': attribute type 2 has an invalid length. [ 485.924563][T16994] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2842'. [ 486.707789][T17035] bridge6: entered promiscuous mode [ 486.713031][T17035] bridge6: entered allmulticast mode [ 486.722263][T17035] team0: Port device bridge6 added [ 487.004414][T17049] xt_hashlimit: size too large, truncated to 1048576 [ 487.023910][T17045] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 487.042299][T17045] net_ratelimit: 24 callbacks suppressed [ 487.042317][T17045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.065859][T17048] lo speed is unknown, defaulting to 1000 [ 487.085699][T17045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.108186][T17045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.142050][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.190359][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.210930][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.258304][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.313786][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.324210][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.332613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.656246][T17048] lo speed is unknown, defaulting to 1000 [ 487.971091][T17087] netlink: 'syz.3.2879': attribute type 4 has an invalid length. [ 488.429100][T17098] syzkaller0: entered promiscuous mode [ 488.437246][T17098] syzkaller0: entered allmulticast mode [ 488.507040][T17100] syzkaller0: entered promiscuous mode [ 488.512571][T17100] syzkaller0: entered allmulticast mode [ 488.611635][T17102] pim6reg: entered allmulticast mode [ 488.620948][T17102] pim6reg: left allmulticast mode [ 489.062231][T17128] syzkaller0: entered promiscuous mode [ 489.081162][T17128] syzkaller0: entered allmulticast mode [ 489.116282][T17124] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 489.220211][T17133] lo speed is unknown, defaulting to 1000 [ 489.481418][T17133] lo speed is unknown, defaulting to 1000 [ 489.510738][T17144] __nla_validate_parse: 5 callbacks suppressed [ 489.510759][T17144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2898'. [ 489.824625][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2898'. [ 490.012096][T17164] netlink: 'syz.1.2902': attribute type 4 has an invalid length. [ 490.530035][T17181] syzkaller0: entered promiscuous mode [ 490.547283][T17181] syzkaller0: entered allmulticast mode [ 490.831547][T17197] lo speed is unknown, defaulting to 1000 [ 490.842040][T17202] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 491.120524][T17197] lo speed is unknown, defaulting to 1000 [ 493.430886][T17183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.943679][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 494.186171][T17254] tipc: Enabling of bearer rejected, failed to enable media [ 494.253327][T17256] lo speed is unknown, defaulting to 1000 [ 494.278927][T17259] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 494.313324][T17252] net_ratelimit: 35 callbacks suppressed [ 494.313343][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.340459][T17261] tipc: Resetting bearer [ 494.351217][T17261] netem: change failed [ 494.359550][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.371400][T17261] tipc: Resetting bearer [ 494.406688][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.417612][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.429190][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.438008][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.446588][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.455419][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.465561][T17259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.473982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.563197][T17265] netlink: 'syz.1.2935': attribute type 11 has an invalid length. [ 494.591239][T17265] netlink: 'syz.1.2935': attribute type 23 has an invalid length. [ 494.613228][T17265] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2935'. [ 494.654221][ T6182] tipc: Resetting bearer [ 494.850448][T17256] lo speed is unknown, defaulting to 1000 [ 495.156660][T17286] tipc: Enabling of bearer rejected, failed to enable media [ 495.230082][T17277] lec:lec_atm_close: lec0: Shut down! [ 495.492020][T17294] veth0_virt_wifi: entered allmulticast mode [ 496.079142][T17323] netlink: 'syz.1.2959': attribute type 11 has an invalid length. [ 496.088730][T17323] netlink: 'syz.1.2959': attribute type 23 has an invalid length. [ 496.097970][T17323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2959'. [ 496.228141][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2960'. [ 496.664406][T17353] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 496.701090][T17355] tipc: Enabling of bearer rejected, failed to enable media [ 497.170504][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 497.537110][T17393] netlink: 'syz.3.2985': attribute type 11 has an invalid length. [ 497.545190][T17393] netlink: 'syz.3.2985': attribute type 23 has an invalid length. [ 497.553117][T17393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2985'. [ 497.879205][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'. [ 498.075560][T17412] lo speed is unknown, defaulting to 1000 [ 498.102488][T17415] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 498.628377][T17412] lo speed is unknown, defaulting to 1000 [ 498.915283][T17450] lo speed is unknown, defaulting to 1000 [ 498.938040][ T6182] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 499.074133][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 499.151869][T17455] lo speed is unknown, defaulting to 1000 [ 499.156220][T17450] lo speed is unknown, defaulting to 1000 [ 499.650844][T17444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.746898][T17455] lo speed is unknown, defaulting to 1000 [ 499.921958][T17469] syzkaller0: entered promiscuous mode [ 499.940000][T17469] syzkaller0: entered allmulticast mode [ 499.989047][T17470] netlink: 'syz.0.3006': attribute type 11 has an invalid length. [ 499.997453][T17470] netlink: 'syz.0.3006': attribute type 23 has an invalid length. [ 500.005836][T17470] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3006'. [ 500.491014][T17481] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 500.512095][T17481] net_ratelimit: 36 callbacks suppressed [ 500.512114][T17481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.529146][T17481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.537731][T17481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.580551][T17483] lo speed is unknown, defaulting to 1000 [ 500.753262][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.772065][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.783455][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5560 ms [ 500.791502][ C1] lec:lec_tx_timeout: lec0 [ 500.840403][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.864463][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.884541][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.937047][T17489] lec:lec_atm_close: lec0: Shut down! [ 500.952486][T17493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.961071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.000290][T17500] syzkaller0: entered promiscuous mode [ 501.009835][T17500] syzkaller0: entered allmulticast mode [ 501.201832][T17507] netlink: 'syz.0.3017': attribute type 4 has an invalid length. [ 501.349635][T17510] lo speed is unknown, defaulting to 1000 [ 501.374475][T17483] lo speed is unknown, defaulting to 1000 [ 501.813101][T17510] lo speed is unknown, defaulting to 1000 [ 502.083960][T17537] tipc: Resetting bearer [ 503.015882][T17543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.175807][T17573] netlink: 'syz.1.3037': attribute type 4 has an invalid length. [ 503.188557][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 503.208681][T17575] netlink: 'syz.3.3038': attribute type 12 has an invalid length. [ 503.225305][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 503.235129][T17575] netlink: 'syz.3.3038': attribute type 12 has an invalid length. [ 503.251604][T17579] netlink: 'syz.2.3040': attribute type 12 has an invalid length. [ 503.271568][T17577] syzkaller0: entered promiscuous mode [ 503.302194][T17577] syzkaller0: entered allmulticast mode [ 503.538527][T17592] syzkaller0: entered promiscuous mode [ 503.553735][T17592] syzkaller0: entered allmulticast mode [ 503.704367][T17597] syzkaller1: entered promiscuous mode [ 503.710087][T17597] syzkaller1: entered allmulticast mode [ 503.929753][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 504.033229][T17600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.040568][T17600] IPv6: NLM_F_CREATE should be set when creating new route [ 504.576995][T17624] netem: change failed [ 504.919154][T17639] syzkaller1: entered promiscuous mode [ 504.933628][T17639] syzkaller1: entered allmulticast mode [ 505.129436][T17644] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 505.200184][T17650] lo speed is unknown, defaulting to 1000 [ 505.272725][T17661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3066'. [ 505.573549][ C0] net_ratelimit: 53 callbacks suppressed [ 505.573572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.589241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.813568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.822273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.875930][T17663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.943444][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 505.951515][ C1] lec:lec_tx_timeout: lec0 [ 505.956561][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.173065][T17650] lo speed is unknown, defaulting to 1000 [ 506.847691][T17721] netlink: 'syz.2.3087': attribute type 4 has an invalid length. [ 507.001267][T17725] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.3090'. [ 507.081472][T17728] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 507.473634][T17733] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3092'. [ 507.591462][T17714] lec:lec_atm_close: lec0: Shut down! [ 507.638911][T17737] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 507.646887][T17737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.667184][T17737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.670509][T17739] lo speed is unknown, defaulting to 1000 [ 507.709602][T17737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.964985][T17751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.013021][T17751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.346086][T17739] lo speed is unknown, defaulting to 1000 [ 508.423724][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 508.555781][T17765] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.3101'. [ 509.043797][T17776] netlink: 'syz.3.3105': attribute type 4 has an invalid length. [ 509.655839][T17780] lec:lec_atm_close: lec0: Shut down! [ 510.775959][T17831] syzkaller0: entered promiscuous mode [ 510.781473][T17831] syzkaller0: entered allmulticast mode [ 511.005596][T17833] lo speed is unknown, defaulting to 1000 [ 511.153933][T17833] lo speed is unknown, defaulting to 1000 [ 512.141367][T17782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.573757][T17867] lo: Caught tx_queue_len zero misconfig [ 512.591113][T17857] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 512.624413][T17857] net_ratelimit: 27 callbacks suppressed [ 512.624433][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.654805][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 512.659421][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.693543][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 512.702540][T17860] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 512.716328][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.739719][T17862] lo speed is unknown, defaulting to 1000 [ 512.752536][T17860] iwpm_mapping_info_cb: Unable to parse nlmsg [ 512.964199][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.981605][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.002632][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.022766][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.052620][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.064634][T17857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.073083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.173629][T17888] tipc: Resetting bearer [ 513.184609][T17888] netem: change failed [ 513.197150][T17888] tipc: Resetting bearer [ 513.277934][T17862] lo speed is unknown, defaulting to 1000 [ 513.278663][T17869] lo speed is unknown, defaulting to 1000 [ 513.633211][ T6188] tipc: Resetting bearer [ 513.650569][T17868] lo speed is unknown, defaulting to 1000 [ 513.650603][T17869] lo speed is unknown, defaulting to 1000 [ 513.965464][T17905] netlink: 'syz.3.3143': attribute type 3 has an invalid length. [ 514.028105][T17900] syzkaller1: entered promiscuous mode [ 514.035550][T17900] syzkaller1: entered allmulticast mode [ 514.175443][T17868] lo speed is unknown, defaulting to 1000 [ 514.783446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5130 ms [ 514.791530][ C1] lec:lec_tx_timeout: lec0 [ 514.911733][T17926] lo speed is unknown, defaulting to 1000 [ 515.382099][T17926] lo speed is unknown, defaulting to 1000 [ 515.382122][T17937] lo speed is unknown, defaulting to 1000 [ 515.587060][T17950] netlink: 'syz.2.3157': attribute type 10 has an invalid length. [ 515.596383][T17950] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3157'. [ 515.607516][T17952] netlink: 'syz.3.3158': attribute type 4 has an invalid length. [ 515.848917][T17937] lo speed is unknown, defaulting to 1000 [ 515.873018][T17961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3160'. [ 516.175522][T17963] tipc: Enabled bearer , priority 0 [ 516.182622][T17964] syzkaller0: entered promiscuous mode [ 516.192540][T17964] syzkaller0: entered allmulticast mode [ 516.216009][T17966] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 516.224981][T17963] tipc: Resetting bearer [ 516.242853][T17962] tipc: Resetting bearer [ 516.289305][T17962] tipc: Disabling bearer [ 516.399574][T17966] 8021q: VLANs not supported on gre0 [ 516.407216][T17968] lo speed is unknown, defaulting to 1000 [ 516.841961][T17983] lo speed is unknown, defaulting to 1000 [ 516.841997][T17968] lo speed is unknown, defaulting to 1000 [ 517.385404][T17983] lo speed is unknown, defaulting to 1000 [ 517.868262][T18006] tipc: Enabled bearer , priority 0 [ 517.876145][T18006] syzkaller0: entered promiscuous mode [ 517.881835][T18006] syzkaller0: entered allmulticast mode [ 517.926583][T18006] tipc: Resetting bearer [ 517.953778][T18005] tipc: Resetting bearer [ 517.981038][T18005] tipc: Disabling bearer [ 518.096043][T18012] netlink: 'syz.1.3174': attribute type 4 has an invalid length. [ 518.131527][T18014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.175746][T18014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.440623][T18020] lo speed is unknown, defaulting to 1000 [ 518.448759][T18024] net_ratelimit: 54 callbacks suppressed [ 518.448773][T18024] openvswitch: netlink: Actions may not be safe on all matching packets [ 518.618892][T18020] lo speed is unknown, defaulting to 1000 [ 518.775095][T18028] syzkaller1: entered promiscuous mode [ 518.780932][T18028] syzkaller1: entered allmulticast mode [ 519.097229][T18033] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 519.115488][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.167845][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.206174][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.292919][T18037] lo speed is unknown, defaulting to 1000 [ 519.304485][T18033] 8021q: VLANs not supported on gre0 [ 519.312516][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.385883][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.407773][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.439714][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.457692][T18047] tipc: Enabling of bearer rejected, already enabled [ 519.489896][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.524266][T18033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.728105][T18037] lo speed is unknown, defaulting to 1000 [ 520.093088][T18070] lo speed is unknown, defaulting to 1000 [ 520.356173][T18082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 520.599698][T18070] lo speed is unknown, defaulting to 1000 [ 520.704530][T18096] netlink: 'syz.2.3193': attribute type 4 has an invalid length. [ 521.333173][T18117] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 521.475187][T18115] lo speed is unknown, defaulting to 1000 [ 521.549110][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 521.825355][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 521.842597][T18131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 521.920688][T18115] lo speed is unknown, defaulting to 1000 [ 521.982728][T18136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3206'. [ 522.279095][T18140] syzkaller0: entered promiscuous mode [ 522.284911][T18140] syzkaller0: entered allmulticast mode [ 522.658678][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'. [ 523.880260][T18168] lo speed is unknown, defaulting to 1000 [ 524.161739][T18183] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3219'. [ 524.511956][T18187] syzkaller1: entered promiscuous mode [ 524.535371][T18187] syzkaller1: entered allmulticast mode [ 524.552422][T18192] syz.4.3223 uses old SIOCAX25GETINFO [ 524.701814][T18194] net_ratelimit: 23 callbacks suppressed [ 524.701836][T18194] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 524.733880][T18168] lo speed is unknown, defaulting to 1000 [ 525.027243][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 525.226293][T18209] lo speed is unknown, defaulting to 1000 [ 525.598000][T18235] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3232'. [ 525.827385][T18209] lo speed is unknown, defaulting to 1000 [ 526.440708][T18252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3236'. [ 526.640479][T18261] tipc: Enabled bearer , priority 0 [ 526.789413][T18261] syzkaller0: entered promiscuous mode [ 526.801363][T18277] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3243'. [ 526.816920][T18261] syzkaller0: entered allmulticast mode [ 526.836227][T18261] tipc: Resetting bearer [ 526.975998][T18260] tipc: Resetting bearer [ 528.513898][T18260] tipc: Disabling bearer [ 528.650847][T18302] tipc: Enabling of bearer rejected, already enabled [ 528.792823][T18306] syzkaller1: entered promiscuous mode [ 528.811216][T18306] syzkaller1: entered allmulticast mode [ 528.879708][T18313] tipc: Enabling of bearer rejected, failed to enable media [ 528.891104][T18313] syzkaller0: entered promiscuous mode [ 528.897659][T18313] syzkaller0: entered allmulticast mode [ 529.166137][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 529.235324][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 529.321645][T18336] netlink: 'syz.2.3259': attribute type 4 has an invalid length. [ 529.405623][T18338] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3260'. [ 529.456027][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 529.544053][T18338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3260'. [ 529.832053][T18356] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 529.847484][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.863926][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.885159][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.914214][ T7407] lec:lec_start_xmit: lec0:No lecd attached [ 529.973559][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3267'. [ 530.077942][T18356] 8021q: VLANs not supported on gre0 [ 530.094655][T18360] lo speed is unknown, defaulting to 1000 [ 530.106151][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.131595][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.184725][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.193061][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.294734][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.313235][T18356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.321738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.543509][T18360] lo speed is unknown, defaulting to 1000 [ 531.221655][T18394] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3274'. [ 531.396898][T18397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3274'. [ 531.950020][T18407] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 531.989053][T18411] lo speed is unknown, defaulting to 1000 [ 532.031655][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 532.041166][T18390] lec:lec_atm_close: lec0: Shut down! [ 532.105213][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 532.367914][T18411] lo speed is unknown, defaulting to 1000 [ 532.474769][T18424] syzkaller0: entered promiscuous mode [ 532.493493][T18424] syzkaller0: entered allmulticast mode [ 532.578263][T18431] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.3285'. [ 533.280595][T18456] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 533.522301][T18458] lo speed is unknown, defaulting to 1000 [ 533.556807][T18471] tipc: Enabling of bearer rejected, failed to enable media [ 533.747966][T18472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3293'. [ 533.881063][T18458] lo speed is unknown, defaulting to 1000 [ 533.959945][T18480] syzkaller1: entered promiscuous mode [ 534.013613][T18480] syzkaller1: entered allmulticast mode [ 534.151400][T18487] syzkaller0: entered promiscuous mode [ 534.157158][T18487] syzkaller0: entered allmulticast mode [ 534.167370][T18486] lo speed is unknown, defaulting to 1000 [ 534.315568][T18494] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 534.495701][T18489] lo speed is unknown, defaulting to 1000 [ 534.724814][T18489] lo speed is unknown, defaulting to 1000 [ 534.744048][T18486] lo speed is unknown, defaulting to 1000 [ 534.751786][T18497] lo speed is unknown, defaulting to 1000 [ 534.873640][ C1] net_ratelimit: 95 callbacks suppressed [ 534.873661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.887926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.904430][ T6182] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 535.055967][T18499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.175576][T18497] lo speed is unknown, defaulting to 1000 [ 535.317842][T18521] syzkaller0: mtu less than device minimum [ 536.062071][T18523] bond8: entered promiscuous mode [ 536.105139][T18527] openvswitch: netlink: Actions may not be safe on all matching packets [ 536.133199][T18529] tipc: Resetting bearer [ 536.956583][T18528] tipc: Resetting bearer [ 537.163884][ T6171] tipc: Resetting bearer [ 537.772523][T18512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.823460][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 537.831556][ C1] lec:lec_tx_timeout: lec0 [ 537.967678][T18541] netem: change failed [ 538.102288][T18547] lo speed is unknown, defaulting to 1000 [ 538.312318][T18563] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 538.512091][T18562] lo speed is unknown, defaulting to 1000 [ 538.518207][T18570] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 538.525691][T18547] lo speed is unknown, defaulting to 1000 [ 538.538350][T18569] openvswitch: netlink: Actions may not be safe on all matching packets [ 538.804598][T18574] tipc: Enabling of bearer rejected, failed to enable media [ 538.857281][T18565] lo speed is unknown, defaulting to 1000 [ 538.991410][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 539.091150][T18580] syzkaller0: entered promiscuous mode [ 539.115297][T18580] syzkaller0: entered allmulticast mode [ 539.167692][T18562] lo speed is unknown, defaulting to 1000 [ 539.246821][T18565] lo speed is unknown, defaulting to 1000 [ 539.434704][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 539.537145][T18590] vlan0: entered promiscuous mode [ 539.550626][T18591] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3326'. [ 539.705302][T18597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3326'. [ 540.158073][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3329'. [ 540.602024][T18632] tipc: Resetting bearer [ 540.924839][T18644] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3338'. [ 541.075149][T18644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3338'. [ 541.327158][T18650] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 541.336572][T18660] netlink: 'syz.3.3341': attribute type 1 has an invalid length. [ 541.513106][T18664] 8021q: adding VLAN 0 to HW filter on device bond9 [ 541.551891][T18664] bond8: (slave bond9): making interface the new active one [ 541.560066][T18664] bond8: (slave bond9): Enslaving as an active interface with an up link [ 541.582012][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 541.647737][T18654] lo speed is unknown, defaulting to 1000 [ 541.668901][T18660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.881572][T18668] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 541.976686][T18678] netlink: 'syz.3.3346': attribute type 11 has an invalid length. [ 541.989650][T18678] netlink: 'syz.3.3346': attribute type 23 has an invalid length. [ 541.997927][T18678] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3346'. [ 542.111801][T18657] lo speed is unknown, defaulting to 1000 [ 542.111801][T18654] lo speed is unknown, defaulting to 1000 [ 542.383614][ C1] ================================================================== [ 542.391791][ C1] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x1aa/0x560 [ 542.400035][ C1] Read of size 8 at addr ffff888059be0020 by task syz-executor/5838 [ 542.408043][ C1] [ 542.410454][ C1] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 542.410483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.410508][ C1] Call Trace: [ 542.410558][ C1] [ 542.410568][ C1] dump_stack_lvl+0xe8/0x150 [ 542.410700][ C1] print_report+0xba/0x230 [ 542.410734][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 542.410784][ C1] kasan_report+0x117/0x150 [ 542.410841][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 542.410867][ C1] rose_t0timer_expiry+0x1aa/0x560 [ 542.410891][ C1] call_timer_fn+0x192/0x640 [ 542.410947][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 542.410968][ C1] ? call_timer_fn+0xd4/0x640 [ 542.410995][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 542.411030][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.411113][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 542.411136][ C1] __run_timer_base+0x652/0x8b0 [ 542.411162][ C1] ? ktime_get+0x45/0x200 [ 542.411191][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 542.411221][ C1] ? sched_clock_cpu+0x74/0x440 [ 542.411271][ C1] run_timer_softirq+0xb7/0x170 [ 542.411304][ C1] handle_softirqs+0x22a/0x870 [ 542.411358][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 542.411404][ C1] __irq_exit_rcu+0x5f/0x150 [ 542.411433][ C1] irq_exit_rcu+0x9/0x30 [ 542.411461][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 542.411517][ C1] [ 542.411531][ C1] [ 542.411541][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.411598][ C1] RIP: 0010:finish_task_switch+0x245/0x920 [ 542.411639][ C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 05 27 1d 0a e8 80 7f 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 542.411659][ C1] RSP: 0018:ffffc90003987958 EFLAGS: 00000202 [ 542.411718][ C1] RAX: 00000000002c78f1 RBX: 0000000000000000 RCX: 0000000080000001 [ 542.411741][ C1] RDX: 0000000000000000 RSI: ffffffff8df23a17 RDI: ffffffff8c27c180 [ 542.411766][ C1] RBP: ffffc900039879b0 R08: ffffffff90114ab7 R09: 1ffffffff2022956 [ 542.411790][ C1] R10: dffffc0000000000 R11: fffffbfff2022957 R12: ffff888054785b80 [ 542.411808][ C1] R13: dffffc0000000000 R14: ffff888032560000 R15: ffff8880b873b918 [ 542.411842][ C1] ? finish_task_switch+0x240/0x920 [ 542.411873][ C1] __schedule+0x15e5/0x52d0 [ 542.411935][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 542.411998][ C1] ? timerqueue_add+0x1d0/0x200 [ 542.412077][ C1] ? __pfx___schedule+0x10/0x10 [ 542.412107][ C1] ? schedule+0x90/0x360 [ 542.412131][ C1] schedule+0x164/0x360 [ 542.412160][ C1] do_nanosleep+0x1c2/0x620 [ 542.412203][ C1] ? do_nanosleep+0x80/0x620 [ 542.412237][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 542.412279][ C1] ? __hrtimer_setup+0x181/0x200 [ 542.412309][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 542.412366][ C1] hrtimer_nanosleep+0x188/0x390 [ 542.412409][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 542.412443][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 542.412477][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 542.412511][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 542.412547][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 542.412586][ C1] do_syscall_64+0x14d/0xf80 [ 542.412612][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.412635][ C1] ? clear_bhb_loop+0x40/0x90 [ 542.412661][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.412684][ C1] RIP: 0033:0x7faf0055cfce [ 542.412709][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 542.412730][ C1] RSP: 002b:00007ffccfbbd778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 542.412752][ C1] RAX: ffffffffffffffda RBX: 000055557459e500 RCX: 00007faf0055cfce [ 542.412769][ C1] RDX: 00007ffccfbbd7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.412783][ C1] RBP: 00007ffccfbbd83c R08: 0000000000000000 R09: 0000000000000000 [ 542.412798][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 542.412811][ C1] R13: 00000000000927c0 R14: 00000000000844af R15: 00007ffccfbbd890 [ 542.412838][ C1] [ 542.412846][ C1] [ 542.575560][T18670] lo speed is unknown, defaulting to 1000 [ 542.584641][ C1] Allocated by task 12874: [ 542.584728][ C1] kasan_save_track+0x3e/0x80 [ 542.584757][ C1] __kasan_kmalloc+0x93/0xb0 [ 542.584780][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 542.584811][ C1] rose_add_node+0x23c/0xf00 [ 542.584832][ C1] rose_rt_ioctl+0xd35/0x12a0 [ 542.584851][ C1] rose_ioctl+0x3fb/0x8f0 [ 542.857710][ C1] sock_do_ioctl+0x101/0x320 [ 542.862432][ C1] sock_ioctl+0x5c6/0x7f0 [ 542.866790][ C1] __se_sys_ioctl+0xfc/0x170 [ 542.871406][ C1] do_syscall_64+0x14d/0xf80 [ 542.876035][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.881939][ C1] [ 542.884267][ C1] Freed by task 3: [ 542.888002][ C1] kasan_save_track+0x3e/0x80 [ 542.892700][ C1] kasan_save_free_info+0x46/0x50 [ 542.897745][ C1] __kasan_slab_free+0x5c/0x80 [ 542.902528][ C1] kfree+0x1c1/0x630 [ 542.906434][ C1] rose_timer_expiry+0x4cb/0x600 [ 542.911391][ C1] call_timer_fn+0x192/0x640 [ 542.915999][ C1] __run_timer_base+0x652/0x8b0 [ 542.920870][ C1] run_timer_softirq+0xb7/0x170 [ 542.925734][ C1] handle_softirqs+0x22a/0x870 [ 542.930546][ C1] __irq_exit_rcu+0x5f/0x150 [ 542.935154][ C1] irq_exit_rcu+0x9/0x30 [ 542.939431][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 542.945079][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 542.951080][ C1] [ 542.953432][ C1] The buggy address belongs to the object at ffff888059be0000 [ 542.953432][ C1] which belongs to the cache kmalloc-512 of size 512 [ 542.967508][ C1] The buggy address is located 32 bytes inside of [ 542.967508][ C1] freed 512-byte region [ffff888059be0000, ffff888059be0200) [ 542.981239][ C1] [ 542.983578][ C1] The buggy address belongs to the physical page: [ 542.990024][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59be0 [ 542.998805][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 543.007319][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 543.014884][ C1] page_type: f5(slab) [ 543.018904][ C1] raw: 00fff00000000040 ffff88813fea8c80 dead000000000100 dead000000000122 [ 543.027520][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 543.036124][ C1] head: 00fff00000000040 ffff88813fea8c80 dead000000000100 dead000000000122 [ 543.044811][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 543.053498][ C1] head: 00fff00000000002 ffffea000166f801 00000000ffffffff 00000000ffffffff [ 543.062177][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 543.070878][ C1] page dumped because: kasan: bad access detected [ 543.077304][ C1] page_owner tracks the page as allocated [ 543.083022][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1112, tgid 1112 (kworker/u8:8), ts 206791960539, free_ts 109666467830 [ 543.104048][ C1] post_alloc_hook+0x231/0x280 [ 543.108851][ C1] get_page_from_freelist+0x24dc/0x2580 [ 543.114412][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 543.120236][ C1] allocate_slab+0x77/0x660 [ 543.124760][ C1] refill_objects+0x331/0x3c0 [ 543.129451][ C1] __pcs_replace_empty_main+0x2e6/0x730 [ 543.135014][ C1] __kmalloc_cache_noprof+0x392/0x660 [ 543.140427][ C1] batadv_forw_packet_alloc+0x1e9/0x390 [ 543.146081][ C1] batadv_iv_ogm_queue_add+0x955/0xe80 [ 543.151592][ C1] batadv_iv_ogm_schedule+0xb5c/0xf50 [ 543.156980][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c8/0x7e0 [ 543.164022][ C1] process_scheduled_works+0xb6e/0x18c0 [ 543.169584][ C1] worker_thread+0xa53/0xfc0 [ 543.174188][ C1] kthread+0x388/0x470 [ 543.178272][ C1] ret_from_fork+0x51e/0xb90 [ 543.182904][ C1] ret_from_fork_asm+0x1a/0x30 [ 543.187693][ C1] page last free pid 5816 tgid 5816 stack trace: [ 543.194025][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 543.199164][ C1] __slab_free+0x263/0x2b0 [ 543.203596][ C1] qlist_free_all+0x97/0x100 [ 543.208215][ C1] kasan_quarantine_reduce+0x148/0x160 [ 543.213688][ C1] __kasan_slab_alloc+0x22/0x80 [ 543.218549][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 543.224019][ C1] jbd2__journal_start+0x145/0x5b0 [ 543.229171][ C1] __ext4_journal_start_sb+0x203/0x620 [ 543.234658][ C1] ext4_dirty_inode+0x93/0x110 [ 543.239443][ C1] __mark_inode_dirty+0x3a4/0x1470 [ 543.244579][ C1] file_update_time_flags+0x3ee/0x4a0 [ 543.249967][ C1] ext4_page_mkwrite+0x219/0x11a0 [ 543.255008][ C1] do_page_mkwrite+0x14d/0x310 [ 543.259797][ C1] do_wp_page+0x1a4b/0x5a00 [ 543.264323][ C1] handle_mm_fault+0x1520/0x3310 [ 543.269285][ C1] do_user_addr_fault+0xa73/0x1340 [ 543.274418][ C1] [ 543.276760][ C1] Memory state around the buggy address: [ 543.282448][ C1] ffff888059bdff00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 543.290621][ C1] ffff888059bdff80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 543.298709][ C1] >ffff888059be0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 543.306788][ C1] ^ [ 543.311919][ C1] ffff888059be0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 543.319994][ C1] ffff888059be0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 543.328065][ C1] ================================================================== [ 543.336319][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 543.343558][ C1] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 543.353077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.363186][ C1] Call Trace: [ 543.366503][ C1] [ 543.369388][ C1] vpanic+0x56c/0xa60 [ 543.373412][ C1] ? __pfx_vpanic+0x10/0x10 [ 543.377950][ C1] ? irqentry_exit+0x59e/0x620 [ 543.382758][ C1] panic+0xc5/0xd0 [ 543.386522][ C1] ? __pfx_panic+0x10/0x10 [ 543.390985][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 543.396323][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 543.401638][ C1] check_panic_on_warn+0x89/0xb0 [ 543.406649][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 543.411963][ C1] end_report+0x73/0x180 [ 543.416241][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 543.421562][ C1] kasan_report+0x128/0x150 [ 543.426105][ C1] ? rose_t0timer_expiry+0x1aa/0x560 [ 543.431423][ C1] rose_t0timer_expiry+0x1aa/0x560 [ 543.436563][ C1] call_timer_fn+0x192/0x640 [ 543.441195][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 543.446855][ C1] ? call_timer_fn+0xd4/0x640 [ 543.451569][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 543.456727][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.461962][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 543.467622][ C1] __run_timer_base+0x652/0x8b0 [ 543.472511][ C1] ? ktime_get+0x45/0x200 [ 543.476879][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 543.482291][ C1] ? sched_clock_cpu+0x74/0x440 [ 543.487192][ C1] run_timer_softirq+0xb7/0x170 [ 543.492087][ C1] handle_softirqs+0x22a/0x870 [ 543.496897][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 543.501701][ C1] __irq_exit_rcu+0x5f/0x150 [ 543.506336][ C1] irq_exit_rcu+0x9/0x30 [ 543.510624][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 543.516288][ C1] [ 543.519252][ C1] [ 543.522209][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.528219][ C1] RIP: 0010:finish_task_switch+0x245/0x920 [ 543.534062][ C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 05 27 1d 0a e8 80 7f 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 543.553697][ C1] RSP: 0018:ffffc90003987958 EFLAGS: 00000202 [ 543.559797][ C1] RAX: 00000000002c78f1 RBX: 0000000000000000 RCX: 0000000080000001 [ 543.567787][ C1] RDX: 0000000000000000 RSI: ffffffff8df23a17 RDI: ffffffff8c27c180 [ 543.575786][ C1] RBP: ffffc900039879b0 R08: ffffffff90114ab7 R09: 1ffffffff2022956 [ 543.583787][ C1] R10: dffffc0000000000 R11: fffffbfff2022957 R12: ffff888054785b80 [ 543.591792][ C1] R13: dffffc0000000000 R14: ffff888032560000 R15: ffff8880b873b918 [ 543.599802][ C1] ? finish_task_switch+0x240/0x920 [ 543.605042][ C1] __schedule+0x15e5/0x52d0 [ 543.609585][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 543.614568][ C1] ? timerqueue_add+0x1d0/0x200 [ 543.619459][ C1] ? __pfx___schedule+0x10/0x10 [ 543.624354][ C1] ? schedule+0x90/0x360 [ 543.628632][ C1] schedule+0x164/0x360 [ 543.632821][ C1] do_nanosleep+0x1c2/0x620 [ 543.637372][ C1] ? do_nanosleep+0x80/0x620 [ 543.642023][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 543.647089][ C1] ? __hrtimer_setup+0x181/0x200 [ 543.652068][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 543.657313][ C1] hrtimer_nanosleep+0x188/0x390 [ 543.662301][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 543.667810][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 543.673055][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 543.678293][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 543.683916][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 543.690031][ C1] do_syscall_64+0x14d/0xf80 [ 543.694669][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.700765][ C1] ? clear_bhb_loop+0x40/0x90 [ 543.705483][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.711412][ C1] RIP: 0033:0x7faf0055cfce [ 543.715861][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 543.735496][ C1] RSP: 002b:00007ffccfbbd778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 543.743955][ C1] RAX: ffffffffffffffda RBX: 000055557459e500 RCX: 00007faf0055cfce [ 543.751963][ C1] RDX: 00007ffccfbbd7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.760000][ C1] RBP: 00007ffccfbbd83c R08: 0000000000000000 R09: 0000000000000000 [ 543.768010][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 543.776019][ C1] R13: 00000000000927c0 R14: 00000000000844af R15: 00007ffccfbbd890 [ 543.784033][ C1] [ 543.787698][ C1] Kernel Offset: disabled [ 543.792029][ C1] Rebooting in 86400 seconds..